3f3d52dee208c90d27b8a5339ddcf6d52862dbdfef5f1741234512937db2c4e1

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2063-May-12 13:59:07
Detected languages English - United States
Debug artifacts urlmon.pdb
CompanyName Microsoft Corporation
FileDescription OLE32 Extensions for Win32
FileVersion 11.00.19041.6926 (WinBuild.160101.0800)
InternalName UrlMon.dll
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename UrlMon.dll
ProductName Internet Explorer
ProductVersion 11.00.19041.6926

Plugin Output

Suspicious Strings found in the binary may indicate undesirable behavior: Contains references to system / monitoring tools:
  • RunDLL32.exe
  • rundll32.exe
Contains references to internet browsers:
  • IEXPLORE.EXE
  • iexplore.exe
May have dropper capabilities:
  • CurrentVersion\Run
Accesses the WMI:
  • ROOT\cimv2
Contains domain names:
  • go.microsoft.com
  • http://go.microsoft.com
  • http://go.microsoft.com/fwlink/?LinkId
  • http://purl.org
  • http://www.w3.org
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#
  • https://go.microsoft.com
  • https://go.microsoft.com/fwlink/?LinkId
  • microsoft.com
  • windowsupdate.com
  • www.w3.org
Suspicious The PE is possibly packed. Unusual section name found: .isoapis
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryExW
  • LoadLibraryExA
  • GetProcAddress
  • LoadLibraryA
  • LoadLibraryW
Can access the registry:
  • RegCloseKey
  • RegOpenKeyExW
  • RegOpenKeyExA
  • RegQueryInfoKeyA
  • RegCreateKeyExA
  • RegGetValueA
  • RegQueryValueExA
  • RegQueryValueExW
  • RegSetValueExA
  • RegEnumValueW
  • RegEnumKeyExA
  • RegGetValueW
  • RegDeleteValueA
  • RegSetValueExW
  • RegDeleteKeyExA
  • RegEnumValueA
  • RegCreateKeyExW
  • SHRegDeleteEmptyUSKeyW
  • SHRegDeleteUSValueW
  • SHRegOpenUSKeyW
  • SHRegCreateUSKeyW
  • SHRegQueryInfoUSKeyW
  • SHRegWriteUSValueW
  • SHRegEnumUSValueW
  • SHRegEnumUSKeyW
  • SHRegCloseUSKey
  • SHRegQueryUSValueW
  • SHRegGetBoolUSValueA
  • SHRegGetUSValueW
  • SHRegGetUSValueA
Possibly launches other programs:
  • CreateProcessA
Can create temporary files:
  • CreateFileW
  • CreateFileA
  • GetTempPathA
  • GetTempPathW
Has Internet access capabilities:
  • InternetTimeToSystemTimeA
  • InternetTimeFromSystemTimeA
  • InternetTimeFromSystemTimeW
Functions related to the privilege level:
  • OpenProcessToken
  • DuplicateToken
  • CheckTokenMembership
Enumerates local disk drives:
  • GetDriveTypeA
  • GetDriveTypeW
Safe VirusTotal score: 0/69 (Scanned on 2026-05-06 21:23:15) All the AVs think this file is safe.

Hashes

MD5 d0d2a497bdf4ad1eedba9da0c21a9b06
SHA1 c8571e5ec750ca841e36f08ec55fbed289a151ec
SHA256 3f3d52dee208c90d27b8a5339ddcf6d52862dbdfef5f1741234512937db2c4e1
SHA3 5aac021656810d8be8d4ef7abb25494419af7111a0f7205ca2b679dd00007173
SSDeep 49152:tXPv4brSVbSU7dU55ruRKjv7S47uqsM5H:tXzXRNP
Imports Hash 34fcb94203459277dd0e237b0207203f

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xf0

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 8
TimeDateStamp 2063-May-12 13:59:07
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x13a400
SizeOfInitializedData 0xb1200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000081C20 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x180000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion A.0
ImageVersion A.0
SubsystemVersion A.0
Win32VersionValue 0
SizeOfImage 0x1f2000
SizeOfHeaders 0x400
Checksum 0x1e2948
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x40000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 c8d8d69962e6e1d4a7619aa22799448c
SHA1 48a84b1905a4d7097e92ddd2edd85044e022009a
SHA256 9464e8a8305cd4e1d71e04625b39f1ee31a35e4dffbe49d01cd2c32a85aae67e
SHA3 908f5dd330f22403e68b01cc55a3cdbf194ffbb973468845c66dded745ebacb7
VirtualSize 0x13a248
VirtualAddress 0x1000
SizeOfRawData 0x13a400
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.2755

.rdata

MD5 9a8b78c1cf3853f94e262a6b546856bb
SHA1 b6cb47573dc31ac754f5b6953baaa17087af7e59
SHA256 e5784f16c9515079dcf6139c5a74502c1ff9c9a017ab908090c97e001f763de2
SHA3 932d5e6aad9b414e9a6e362405344c86e32371188356ba981a45b2b7dd40250f
VirtualSize 0x41016
VirtualAddress 0x13c000
SizeOfRawData 0x41200
PointerToRawData 0x13a800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.20819

.data

MD5 994d7db0ba1561bbdec362b8cae6d121
SHA1 1e52230dc672d2852b844f93a9e0bce714701ffd
SHA256 beda91bbb67287a48051bc499b0213a065bedaeef006da1bddc1ddf422971993
SHA3 660a3e95eb8f5541397120d604ac94e11dfe2b18c556f7055129ef2232d17f2f
VirtualSize 0xc6f5
VirtualAddress 0x17e000
SizeOfRawData 0x1a00
PointerToRawData 0x17ba00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.55988

.pdata

MD5 9e6382bdea6165b5d804eaf4e2c69493
SHA1 ade739d98f39e71345556604f977c1066291a785
SHA256 b234f503060f005d16ce16465201d050cf1e4abd3d6dc4ddceba492bd23fbf46
SHA3 a98abb7f7662cd73424fe401cd8058be8400595e5de2339af3780aedc2afcdfe
VirtualSize 0xf138
VirtualAddress 0x18b000
SizeOfRawData 0xf200
PointerToRawData 0x17d400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.12255

.didat

MD5 b36c5d0ca35f1a7dade79b8f7cd9e0e1
SHA1 c0d4b1684f0d69b03e670d9fad665ad3905d39cb
SHA256 3e148ce8d20f384396a94f940a755f40304e88c7fd4d0ce97ef387a35b1fd78c
SHA3 a17581db69307b2fdbc92eab9ce34444535739b102faed10fbd464962cf8d4ec
VirtualSize 0xa70
VirtualAddress 0x19b000
SizeOfRawData 0xc00
PointerToRawData 0x18c600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.10397

.isoapis

MD5 bf619eac0cdf3f68d496ea9344137e8b
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59
VirtualSize 0x160
VirtualAddress 0x19c000
SizeOfRawData 0x200
PointerToRawData 0x18d200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 35c788b4495ae7f65b9ab5bae379152e
SHA1 b089688b752a0a5214583411aef126b8b061eae2
SHA256 18acbaac018148401edf2a438bf913817b5b026900821169ef1ca06a04f3cd77
SHA3 55420ef64ff73b3db1388c264c3f1bde0e79cd6fab524e6413fdf2e81635ff6a
VirtualSize 0x51138
VirtualAddress 0x19d000
SizeOfRawData 0x51200
PointerToRawData 0x18d400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.07219

.reloc

MD5 48b11475f2b0f542d6a5b02fb33b5ba6
SHA1 88450a88664767672ea32917009c229a73970040
SHA256 31e44dca061ade76323eef1062763073bff0450f62ed1eb40ef08e4f2ff3c32c
SHA3 4fecba3cdb2b571121bb8e6d7f24f84cc4a63cb02fc410a9ae197e92be55eaf8
VirtualSize 0x2598
VirtualAddress 0x1ef000
SizeOfRawData 0x2600
PointerToRawData 0x1de600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.43095

Imports

msvcrt.dll toupper
wcstol
strstr
strncmp
wcsnlen
_wcslwr_s
towlower
__CxxFrameHandler3
strchr
_snwprintf_s
_scwprintf
wcsncpy_s
_errno
strnlen
realloc
bsearch
_wtol
_wcsnicmp
_i64tow_s
_wfopen
memcpy_s
_wtoi
fgets
_ui64tow_s
memmove_s
swprintf_s
_ultow_s
isalpha
wcsncmp
swscanf_s
_wcsicmp
strcmp
_onexit
memcmp
_purecall
memcpy
__dllonexit
wcsrchr
_unlock
_lock
memmove
memset
__C_specific_handler
_itow_s
rand_s
wcstok_s
wcstoul
_initterm
malloc
free
wcschr
fclose
_amsg_exit
_XcptFilter
_vsnprintf
wcsstr
_snwscanf_s
wcscat_s
wcscpy_s
_vsnwprintf
wcscmp
iertutil.dll #701
IsStringProperty
IsDWORDProperty
#901
GetPropertyName
#25
GetPropertyFromName
GetPortFromUrlScheme
#791
GetIUriPriv2
IntlPercentEncodeNormalize
GetIUriPriv
CreateUriWithFragment
#44
CreateIUriBuilder
CreateUriPriv
CreateUriFromMultiByteString
#656
#675
#665
#651
#655
#657
#667
#650
#670
#664
#398
#50
#793
#681
#700
#795
#854
#466
#134
#282
#281
#820
#71
#68
#64
#61
#88
#706
#796
#683
#86
#76
#81
#74
#79
#85
#690
#916
#58
#209
#32
#200
#201
#54
#150
#158
#159
#151
CreateUri
#56
#49
#903
#902
GetIDNSettingsForIE
PrivateCoInternetCanonicalizeIUri
PrivateCoInternetParseIUri
PrivateCoInternetCombineIUri
FastMimeLookupKnownType
FastMimeSetIsMimeFilterEnabled
#70
#63
#20
FastMimeGetIsMimeFilterEnabled
CreateStringHashN
#230
#16
#45
#205
#42
#43
UriFromHostAndScheme
#143
#135
#140
#141
#142
#913
#810
IsDriveAndNotIPv6
#172
IUriBuilderInternalCreateDomain
#708
#166
#855
#35
#870
#682
#89
#57
#702
#17
#96
#325
#173
#62
#72
#594
#597
#654
#652
#658
#672
api-ms-win-core-synch-l1-1-0.dll CreateEventExW
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
SetEvent
CreateMutexExW
WaitForSingleObject
CreateMutexW
InitializeCriticalSection
CreateSemaphoreExW
ReleaseMutex
CreateMutexA
AcquireSRWLockExclusive
InitializeCriticalSectionEx
ReleaseSRWLockExclusive
DeleteCriticalSection
CreateEventW
WaitForSingleObjectEx
OpenMutexW
OpenSemaphoreW
ReleaseSemaphore
InitializeSRWLock
AcquireSRWLockShared
ReleaseSRWLockShared
api-ms-win-core-shlwapi-legacy-l1-1-0.dll PathIsRootW
PathGetDriveNumberW
PathIsUNCW
PathRemoveFileSpecW
PathStripToRootW
PathFileExistsA
PathIsRelativeW
PathFileExistsW
PathIsPrefixW
PathUnquoteSpacesW
PathRemoveExtensionW
PathFindExtensionA
PathFindFileNameW
PathIsPrefixA
PathIsUNCServerShareW
PathFindExtensionW
PathIsUNCServerW
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll StrCmpCA
StrCmpNCA
StrDupW
StrStrW
StrToInt64ExW
StrChrNW
StrChrA
StrStrA
StrCmpNCW
StrCmpNICW
QISearch
StrCmpW
StrCmpNW
StrCmpNA
StrCmpNICA
StrCmpNIW
StrChrIW
StrStrIA
StrToIntW
StrToIntA
StrTrimW
StrCmpICA
StrCmpIW
StrToIntExW
StrDupA
StrRChrW
StrStrIW
StrChrW
StrCmpNIA
StrCmpCW
StrCmpICW
api-ms-win-core-libraryloader-l1-2-0.dll FindResourceExW
LoadLibraryExW
GetModuleHandleExW
SizeofResource
LockResource
GetModuleHandleA
GetModuleHandleW
LoadResource
GetModuleFileNameA
FreeLibrary
GetModuleFileNameW
LoadLibraryExA
LoadStringW
FindStringOrdinal
LoadStringA
GetProcAddress
api-ms-win-eventing-provider-l1-1-0.dll EventProviderEnabled
EventSetInformation
EventWriteEx
EventRegister
EventUnregister
EventWriteTransfer
api-ms-win-core-string-l1-1-0.dll WideCharToMultiByte
CompareStringW
MultiByteToWideChar
CompareStringOrdinal
api-ms-win-core-registry-l1-1-0.dll RegCloseKey
RegOpenKeyExW
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegGetValueA
RegQueryValueExA
RegQueryValueExW
RegSetValueExA
RegEnumValueW
RegEnumKeyExA
RegGetValueW
RegDeleteValueA
RegSetValueExW
RegDeleteKeyExA
RegEnumValueA
RegCreateKeyExW
api-ms-win-core-string-obsolete-l1-1-0.dll lstrcmpW
lstrcmpA
api-ms-win-core-processthreads-l1-1-0.dll TerminateProcess
OpenThreadToken
TerminateThread
ExitThread
TlsFree
GetExitCodeProcess
GetCurrentProcess
TlsAlloc
CreateProcessA
TlsSetValue
CreateThread
OpenProcessToken
GetCurrentThread
GetExitCodeThread
GetCurrentThreadId
GetCurrentProcessId
TlsGetValue
api-ms-win-core-heap-l1-1-0.dll HeapFree
HeapAlloc
GetProcessHeap
api-ms-win-core-debug-l1-1-0.dll DebugBreak
OutputDebugStringW
IsDebuggerPresent
api-ms-win-core-stringansi-l1-1-0.dll CharUpperBuffA
CharLowerA
CharPrevA
CharNextA
api-ms-win-core-synch-l1-2-0.dll InitOnceComplete
Sleep
InitOnceExecuteOnce
SleepConditionVariableSRW
InitOnceBeginInitialize
WakeAllConditionVariable
api-ms-win-core-rtlsupport-l1-1-0.dll RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
api-ms-win-core-errorhandling-l1-1-0.dll UnhandledExceptionFilter
SetLastError
RaiseException
GetLastError
SetUnhandledExceptionFilter
api-ms-win-core-profile-l1-1-0.dll QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0.dll GetWindowsDirectoryA
GetSystemDirectoryA
GetTickCount
GetSystemInfo
GetLocalTime
GetComputerNameExW
GetVersionExA
GetSystemTimeAsFileTime
GetSystemTime
GetTickCount64
api-ms-win-core-localization-l1-2-0.dll GetLocaleInfoA
IdnToUnicode
GetSystemDefaultLCID
GetUserGeoID
GetThreadLocale
GetUserDefaultLCID
GetCPInfo
IsDBCSLeadByte
FormatMessageW
IdnToAscii
FormatMessageA
GetACP
IsValidCodePage
api-ms-win-core-handle-l1-1-0.dll DuplicateHandle
CloseHandle
api-ms-win-core-path-l1-1-0.dll PathCchAddBackslash
PathCchAppend
PathCchCanonicalize
PathCchCombineEx
PathCchRemoveBackslash
PathCchRemoveFileSpec
api-ms-win-core-string-l2-1-0.dll CharPrevW
CharNextW
CharLowerBuffW
CharLowerW
api-ms-win-core-heap-l2-1-0.dll LocalFree
GlobalAlloc
LocalAlloc
GlobalFree
api-ms-win-core-libraryloader-l1-2-1.dll LoadLibraryA
LoadLibraryW
api-ms-win-core-util-l1-1-0.dll DecodePointer
EncodePointer
api-ms-win-core-file-l1-1-0.dll CreateFileW
GetFileInformationByHandle
GetFileSizeEx
DeleteFileA
GetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
GetFullPathNameW
FindFirstFileA
SetFilePointer
WriteFile
ReadFile
SetFileAttributesA
CreateFileA
GetLongPathNameW
GetLongPathNameA
QueryDosDeviceW
GetDriveTypeA
CreateDirectoryA
GetFileAttributesA
FileTimeToLocalFileTime
GetShortPathNameW
FindClose
CreateDirectoryW
DeleteFileW
RemoveDirectoryA
GetVolumePathNameW
FindNextFileA
GetDriveTypeW
CompareFileTime
GetTempFileNameW
GetFileSize
GetFileTime
GetFileAttributesExW
GetFullPathNameA
FindFirstFileW
SetFileAttributesW
api-ms-win-core-file-l1-2-2.dll GetTempPathA
api-ms-win-core-kernel32-legacy-l1-1-0.dll CopyFileA
GetShortPathNameA
DosDateTimeToFileTime
api-ms-win-core-version-l1-1-0.dll GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerQueryValueW
api-ms-win-core-registryuserspecific-l1-1-0.dll SHRegDeleteEmptyUSKeyW
SHRegDeleteUSValueW
SHRegOpenUSKeyW
SHRegCreateUSKeyW
SHRegQueryInfoUSKeyW
SHRegWriteUSValueW
SHRegEnumUSValueW
SHRegEnumUSKeyW
SHRegCloseUSKey
SHRegQueryUSValueW
SHRegGetBoolUSValueA
SHRegGetUSValueW
SHRegGetUSValueA
api-ms-win-core-atoms-l1-1-0.dll FindAtomA
FindAtomW
AddAtomW
DeleteAtom
AddAtomA
api-ms-win-core-url-l1-1-0.dll UrlGetLocationW
ParseURLW
UrlUnescapeW
UrlGetPartW
UrlCombineW
UrlIsW
UrlEscapeW
PathCreateFromUrlW
UrlCreateFromPathW
UrlCompareW
ParseURLA
PathCreateFromUrlA
UrlCanonicalizeW
api-ms-win-core-privateprofile-l1-1-0.dll GetPrivateProfileIntA
GetPrivateProfileIntW
GetPrivateProfileSectionW
GetPrivateProfileStringA
GetPrivateProfileStringW
WritePrivateProfileStringW
api-ms-win-core-timezone-l1-1-0.dll FileTimeToSystemTime
SystemTimeToFileTime
api-ms-win-security-base-l1-1-0.dll DuplicateToken
CopySid
CreateWellKnownSid
GetLengthSid
CheckTokenMembership
GetTokenInformation
api-ms-win-core-processenvironment-l1-2-0.dll SearchPathA
api-ms-win-http-time-l1-1-0.dll InternetTimeToSystemTimeA
InternetTimeFromSystemTimeA
InternetTimeFromSystemTimeW
api-ms-win-core-file-l1-2-0.dll GetTempPathW
CreateFile2
GetVolumeNameForVolumeMountPointW
api-ms-win-core-threadpool-l1-2-0.dll WaitForThreadpoolWorkCallbacks
CreateThreadpoolTimer
SetThreadpoolTimer
CreateThreadpoolWork
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
SubmitThreadpoolWork
CloseThreadpoolWork
ntdll.dll RtlGetSuiteMask
RtlIpv6StringToAddressExW
RtlMoveMemory
RtlIpv4StringToAddressExW
api-ms-win-core-threadpool-legacy-l1-1-0.dll QueueUserWorkItem
api-ms-win-core-wow64-l1-1-0.dll IsWow64Process
api-ms-win-core-processthreads-l1-1-2.dll QueryProtectedPolicy
api-ms-win-core-errorhandling-l1-1-2.dll RaiseFailFastException
api-ms-win-core-processenvironment-l1-1-0.dll GetCommandLineW
ExpandEnvironmentStringsA
api-ms-win-core-datetime-l1-1-0.dll GetTimeFormatW
GetTimeFormatA
GetDateFormatW
api-ms-win-core-heap-obsolete-l1-1-0.dll GlobalLock
GlobalUnlock
GlobalSize
api-ms-win-core-file-l2-1-0.dll MoveFileExW
srvcli.dll NetShareGetInfo
netutils.dll NetApiBufferFree
api-ms-win-shell-namespace-l1-1-0.dll SHParseDisplayName
api-ms-win-core-memory-l1-1-0.dll CreateFileMappingW
OpenFileMappingW
MapViewOfFile
VirtualProtect
UnmapViewOfFile
api-ms-win-core-sysinfo-l1-2-0.dll VerSetConditionMask
api-ms-win-core-kernel32-legacy-l1-1-1.dll VerifyVersionInfoW
api-ms-win-core-synch-l1-2-1.dll WaitForMultipleObjects
api-ms-win-core-localization-obsolete-l1-2-0.dll CompareStringA
api-ms-win-stateseparation-helpers-l1-1-0.dll GetPersistedRegistryLocationW
api-ms-win-core-sidebyside-l1-1-0.dll DeactivateActCtx
ActivateActCtx
ReleaseActCtx
CreateActCtxW
api-ms-win-core-apiquery-l1-1-0.dll ApiSetQueryApiSetPresence
api-ms-win-core-delayload-l1-1-1.dll ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0.dll DelayLoadFailureHook
api-ms-win-core-io-l1-1-0.dll DeviceIoControl
wpaxholder.dll (delay-loaded) CallBlockTabForDialogUntilActive

Delayed Imports

Attributes 0x1
Name wpaxholder.dll
ModuleHandle 0x17fdf0
DelayImportAddressTable 0x19ba60
DelayImportNameTable 0x1759f8
BoundDelayImportTable 0x177120
UnloadDelayImportTable 0
TimeStamp 1970-Jan-01 00:00:00

Ordinal 100
Address 0x121ac0

(#2)

Ordinal 101
Address 0x2a420

(#3)

Ordinal 102
Address 0x10eca0

(#4)

Ordinal 103
Address 0x10e8b0

(#5)

Ordinal 104
Address 0x10e690

(#6)

Ordinal 105
Address 0x10e8d0

(#7)

Ordinal 106
Address 0x10ec10

(#8)

Ordinal 107
Address 0x10e610

(#9)

Ordinal 108
Address 0x217f0

FileBearsMarkOfTheWeb

Ordinal 109
Address 0x24530

GetPortFromUrlScheme

Ordinal 110
Address 0xb8060

(#10)

Ordinal 111
Address 0x10edf0

(#11)

Ordinal 112
Address 0x19960

(#12)

Ordinal 113
Address 0x119990

(#13)

Ordinal 114
Address 0x19b40

(#14)

Ordinal 115
Address 0x10ed20

(#15)

Ordinal 116
Address 0x10e800

GetPropertyFromName

Ordinal 117
Address 0xb8080

GetPropertyName

Ordinal 118
Address 0xb80a0

IsDWORDProperty

Ordinal 119
Address 0xb80c0

IsStringProperty

Ordinal 120
Address 0xb80e0

AsyncGetClassBits

Ordinal 121
Address 0x7e970

AsyncInstallDistributionUnit

Ordinal 122
Address 0xc7610

BindAsyncMoniker

Ordinal 123
Address 0xb8240

CAuthenticateHostUI_CreateInstance

Ordinal 124
Address 0xea060

CDLGetLongPathNameA

Ordinal 125
Address 0xc7f70

CDLGetLongPathNameW

Ordinal 126
Address 0xc7f90

CORPolicyProvider

Ordinal 127
Address 0x128bc0

CoGetClassObjectFromURL

Ordinal 128
Address 0xc76a0

CoInstall

Ordinal 129
Address 0xc7bb0

CoInternetCanonicalizeIUri

Ordinal 130
Address 0x1db90

CoInternetCombineIUri

Ordinal 131
Address 0x4fdc0

CoInternetCombineUrl

Ordinal 132
Address 0x4ce80

CoInternetCombineUrlEx

Ordinal 133
Address 0x5b190

CoInternetCompareUrl

Ordinal 134
Address 0x101160

CoInternetCreateSecurityManager

Ordinal 135
Address 0x5c7c0

CoInternetCreateZoneManager

Ordinal 136
Address 0x19c20

CoInternetFeatureSettingsChanged

Ordinal 137
Address 0x121350

CoInternetGetMobileBrowserAppCompatMode

Ordinal 138
Address 0xba980

CoInternetGetMobileBrowserForceDesktopMode

Ordinal 139
Address 0xba9f0

CoInternetGetProtocolFlags

Ordinal 140
Address 0x7a9d0

CoInternetGetSecurityUrl

Ordinal 141
Address 0x101220

CoInternetGetSecurityUrlEx

Ordinal 142
Address 0x54880

CoInternetGetSession

Ordinal 143
Address 0x1d090

CoInternetIsFeatureEnabled

Ordinal 144
Address 0x68db0

CoInternetIsFeatureEnabledForIUri

Ordinal 145
Address 0x68bf0

CoInternetIsFeatureEnabledForUrl

Ordinal 146
Address 0x68aa0

CoInternetIsFeatureZoneElevationEnabled

Ordinal 147
Address 0x101680

CoInternetParseIUri

Ordinal 148
Address 0x7b620

CoInternetParseUrl

Ordinal 149
Address 0x530a0

CoInternetQueryInfo

Ordinal 150
Address 0x52b60

CoInternetSetFeatureEnabled

Ordinal 151
Address 0x101930

CoInternetSetMobileBrowserAppCompatMode

Ordinal 152
Address 0xbaaa0

CoInternetSetMobileBrowserForceDesktopMode

Ordinal 153
Address 0xbaaf0

CompareSecurityIds

Ordinal 154
Address 0x16500

CompatFlagsFromClsid

Ordinal 155
Address 0x1b640

CopyBindInfo

Ordinal 156
Address 0x1adf0

CopyStgMedium

Ordinal 157
Address 0x1aef0

CreateAsyncBindCtx

Ordinal 158
Address 0xb82f0

CreateAsyncBindCtxEx

Ordinal 159
Address 0x56ac0

CreateFormatEnumerator

Ordinal 160
Address 0x36f00

CreateIUriBuilder

Ordinal 161
Address 0x25ed0

CreateURLMoniker

Ordinal 162
Address 0xb83e0

CreateURLMonikerEx

Ordinal 163
Address 0x2c340

CreateURLMonikerEx2

Ordinal 164
Address 0x6ac0

CreateUri

Ordinal 165
Address 0x20640

CreateUriFromMultiByteString

Ordinal 166
Address 0xb8100

CreateUriPriv

Ordinal 167
Address 0xb8120

CreateUriWithFragment

Ordinal 168
Address 0xb8170

DllCanUnloadNow

Ordinal 169
Address 0x28190

DllGetClassObject

Ordinal 170
Address 0x26110

DllInstall

Ordinal 171
Address 0xb8720

DllRegisterServer

Ordinal 172
Address 0xb8730

DllRegisterServerEx

Ordinal 173
Address 0x7a9d0

DllUnregisterServer

Ordinal 174
Address 0xb8740

Extract

Ordinal 175
Address 0xc8730

FaultInIEFeature

Ordinal 176
Address 0x80430

FindMediaType

Ordinal 177
Address 0xb8d50

FindMediaTypeClass

Ordinal 178
Address 0x35c70

FindMimeFromData

Ordinal 179
Address 0x1eef0

GetAddSitesFileUrl

Ordinal 180
Address 0x121380

GetClassFileOrMime

Ordinal 181
Address 0x8ec0

GetClassURL

Ordinal 182
Address 0x7a9d0

GetComponentIDFromCLSSPEC

Ordinal 183
Address 0xc9400

GetIDNFlagsForUri

Ordinal 184
Address 0x69700

GetIUriPriv

Ordinal 185
Address 0x2aa70

GetIUriPriv2

Ordinal 186
Address 0xb8190

GetLabelsFromNamedHost

Ordinal 187
Address 0x12f410

GetMarkOfTheWeb

Ordinal 188
Address 0x1198a0

GetSoftwareUpdateInfo

Ordinal 189
Address 0x7a9d0

GetUrlmonThreadNotificationHwnd

Ordinal 190
Address 0x102590

GetZoneFromAlternateDataStreamEx

Ordinal 191
Address 0x44f0

HlinkGoBack

Ordinal 192
Address 0x10ab70

HlinkGoForward

Ordinal 193
Address 0x10ac40

HlinkNavigateMoniker

Ordinal 194
Address 0x10ad10

HlinkNavigateString

Ordinal 195
Address 0x10ada0

HlinkSimpleNavigateToMoniker

Ordinal 196
Address 0x10ae30

HlinkSimpleNavigateToString

Ordinal 197
Address 0x10b4a0

IEGetUserPrivateNamespaceName

Ordinal 198
Address 0x10efe0

IEInstallScope

Ordinal 199
Address 0xc7c50

IntlPercentEncodeNormalize

Ordinal 200
Address 0xb81b0

IsAsyncMoniker

Ordinal 201
Address 0x20dc0

IsIntranetAvailable

Ordinal 202
Address 0x121730

IsJITInProgress

Ordinal 203
Address 0x2a9e0

IsLoggingEnabledA

Ordinal 204
Address 0x10c570

IsLoggingEnabledW

Ordinal 205
Address 0x10c6c0

IsValidURL

Ordinal 206
Address 0x6ae0

MkParseDisplayNameEx

Ordinal 207
Address 0xb8400

ObtainUserAgentString

Ordinal 208
Address 0xea220

PrivateCoInstall

Ordinal 209
Address 0xc7c60

QueryAssociations

Ordinal 210
Address 0x7cb70

QueryClsidAssociation

Ordinal 211
Address 0xff9e0

RegisterBindStatusCallback

Ordinal 212
Address 0x557c0

RegisterFormatEnumerator

Ordinal 213
Address 0x36bb0

RegisterMediaTypeClass

Ordinal 214
Address 0xb85b0

RegisterMediaTypes

Ordinal 215
Address 0x7fd10

RegisterWebPlatformPermanentSecurityManager

Ordinal 216
Address 0x138440

ReleaseBindInfo

Ordinal 217
Address 0x357e0

RestrictHTTP2

Ordinal 218
Address 0x295e0

RevokeBindStatusCallback

Ordinal 219
Address 0x55ae0

RevokeFormatEnumerator

Ordinal 220
Address 0xb86d0

SetAccessForIEAppContainer

Ordinal 221
Address 0x10f000

SetSoftwareUpdateAdvertisementState

Ordinal 222
Address 0x7a9d0

ShouldDisplayPunycodeForUri

Ordinal 223
Address 0xea360

ShouldShowIntranetWarningSecband

Ordinal 224
Address 0x26c70

ShowTrustAlertDialog

Ordinal 225
Address 0x121920

URLDownloadA

Ordinal 226
Address 0x101ab0

URLDownloadToCacheFileA

Ordinal 227
Address 0x10bd70

URLDownloadToCacheFileW

Ordinal 228
Address 0x7cd40

URLDownloadToFileA

Ordinal 229
Address 0x10bf00

URLDownloadToFileW

Ordinal 230
Address 0x2beb0

URLDownloadW

Ordinal 231
Address 0x101b20

URLOpenBlockingStreamA

Ordinal 232
Address 0x10c060

URLOpenBlockingStreamW

Ordinal 233
Address 0x10c150

URLOpenPullStreamA

Ordinal 234
Address 0x10c260

URLOpenPullStreamW

Ordinal 235
Address 0x10c330

URLOpenStreamA

Ordinal 236
Address 0x10c400

URLOpenStreamW

Ordinal 237
Address 0x10c4d0

UnregisterWebPlatformPermanentSecurityManager

Ordinal 238
Address 0x75d0

UrlMkBuildVersion

Ordinal 239
Address 0xb88a0

UrlMkGetSessionOption

Ordinal 240
Address 0x27b60

UrlMkSetSessionOption

Ordinal 241
Address 0x1f8f0

UrlmonCleanupCurrentThread

Ordinal 242
Address 0x1d700

WriteHitLogging

Ordinal 243
Address 0x10c5f0

ZonesReInit

Ordinal 244
Address 0x119db0

(#16)

Ordinal 304
Address 0x10ef30

(#17)

Ordinal 305
Address 0x10e130

(#18)

Ordinal 306
Address 0x10d880

(#19)

Ordinal 307
Address 0x10d6f0

(#20)

Ordinal 308
Address 0x12e340

(#21)

Ordinal 309
Address 0x10d990

(#22)

Ordinal 310
Address 0x10e200

(#23)

Ordinal 311
Address 0x10d350

(#24)

Ordinal 312
Address 0x10d5a0

(#25)

Ordinal 313
Address 0x10dc10

(#26)

Ordinal 314
Address 0x10dbd0

(#27)

Ordinal 315
Address 0x10dcd0

(#28)

Ordinal 316
Address 0x10d2a0

(#29)

Ordinal 318
Address 0x10df40

(#30)

Ordinal 319
Address 0x10e000

(#31)

Ordinal 320
Address 0x10dd30

(#32)

Ordinal 321
Address 0x10d540

IECompatLogCSSFix

Ordinal 322
Address 0x10d460

(#33)

Ordinal 323
Address 0x10ddb0

(#34)

Ordinal 324
Address 0x1030d0

(#35)

Ordinal 395
Address 0x10f270

(#36)

Ordinal 403
Address 0x2aa20

(#37)

Ordinal 404
Address 0x2a9e0

(#38)

Ordinal 406
Address 0x2aa20

(#39)

Ordinal 408
Address 0x2a9e0

(#40)

Ordinal 409
Address 0x2a9e0

(#41)

Ordinal 410
Address 0x2a9e0

(#42)

Ordinal 411
Address 0x2a9e0

(#43)

Ordinal 412
Address 0x2a9e0

(#44)

Ordinal 413
Address 0x2a9e0

(#45)

Ordinal 414
Address 0x2a9e0

(#46)

Ordinal 415
Address 0x2a9e0

(#47)

Ordinal 416
Address 0x2a9e0

(#48)

Ordinal 417
Address 0x2a9e0

(#49)

Ordinal 421
Address 0x2a9e0

(#50)

Ordinal 422
Address 0x2aa20

(#51)

Ordinal 434
Address 0x10e080

(#52)

Ordinal 435
Address 0x10d8c0

(#53)

Ordinal 436
Address 0x10d820

(#54)

Ordinal 437
Address 0x10d7b0

(#55)

Ordinal 438
Address 0x10d9d0

(#56)

Ordinal 439
Address 0x10d950

(#57)

Ordinal 441
Address 0xa690

(#58)

Ordinal 442
Address 0x21100

(#59)

Ordinal 443
Address 0x77130

(#60)

Ordinal 444
Address 0x771e0

(#61)

Ordinal 445
Address 0x740a0

(#62)

Ordinal 446
Address 0x1eda0

(#63)

Ordinal 447
Address 0xbaa20

(#64)

Ordinal 448
Address 0xbb920

(#65)

Ordinal 449
Address 0x57fc0

(#66)

Ordinal 450
Address 0x248f0

(#67)

Ordinal 451
Address 0xbacd0

(#68)

Ordinal 452
Address 0xbb7f0

(#69)

Ordinal 453
Address 0x121480

(#70)

Ordinal 454
Address 0x1217a0

(#71)

Ordinal 455
Address 0x1224a0

(#72)

Ordinal 456
Address 0x2a9e0

(#73)

Ordinal 457
Address 0xb8700

(#74)

Ordinal 458
Address 0xea210

(#75)

Ordinal 460
Address 0x100520

(#76)

Ordinal 461
Address 0x100510

(#77)

Ordinal 462
Address 0x100410

(#78)

Ordinal 463
Address 0x100490

(#79)

Ordinal 470
Address 0x22f70

(#80)

Ordinal 471
Address 0x216c0

(#81)

Ordinal 473
Address 0x7d360

(#82)

Ordinal 474
Address 0x121ba0

(#83)

Ordinal 475
Address 0x121c50

(#84)

Ordinal 476
Address 0x121c90

(#85)

Ordinal 477
Address 0x121ea0

(#86)

Ordinal 478
Address 0x121d30

(#87)

Ordinal 479
Address 0x7d150

(#88)

Ordinal 480
Address 0x121de0

(#89)

Ordinal 481
Address 0x7d1a0

(#90)

Ordinal 482
Address 0x121ad0

(#91)

Ordinal 483
Address 0x121b00

(#92)

Ordinal 484
Address 0x36a70

(#93)

Ordinal 485
Address 0x32d60

(#94)

Ordinal 486
Address 0x27780

(#95)

Ordinal 487
Address 0x132eb0

(#96)

Ordinal 488
Address 0x132f90

(#97)

Ordinal 489
Address 0x2b40

(#98)

Ordinal 490
Address 0xc7710

(#99)

Ordinal 491
Address 0x216e0

(#100)

Ordinal 492
Address 0x74630

(#101)

Ordinal 493
Address 0x18d80

(#102)

Ordinal 494
Address 0x18d50

(#103)

Ordinal 495
Address 0x21d40

(#104)

Ordinal 496
Address 0x23420

(#105)

Ordinal 497
Address 0x76a0

(#106)

Ordinal 498
Address 0x79690

(#107)

Ordinal 499
Address 0x34960

(#108)

Ordinal 500
Address 0x2a8b0

(#109)

Ordinal 501
Address 0x1215e0

(#110)

Ordinal 502
Address 0x121310

(#111)

Ordinal 503
Address 0x7a080

(#112)

Ordinal 504
Address 0x124dd0

(#113)

Ordinal 505
Address 0x77aa0

(#114)

Ordinal 506
Address 0x125350

(#115)

Ordinal 507
Address 0x29ee0

(#116)

Ordinal 508
Address 0x79070

(#117)

Ordinal 509
Address 0x68290

(#118)

Ordinal 510
Address 0xbae60

(#119)

Ordinal 511
Address 0x58e0

(#120)

Ordinal 512
Address 0xbb1c0

(#121)

Ordinal 513
Address 0x2aa10

(#122)

Ordinal 514
Address 0x125340

(#123)

Ordinal 515
Address 0x132f40

(#124)

Ordinal 516
Address 0x2aa20

(#125)

Ordinal 517
Address 0x7a420

(#126)

Ordinal 518
Address 0x78c70

(#127)

Ordinal 519
Address 0x5f460

(#128)

Ordinal 520
Address 0x62020

(#129)

Ordinal 521
Address 0x5fd40

(#130)

Ordinal 522
Address 0x19df0

(#131)

Ordinal 523
Address 0x19cf0

(#132)

Ordinal 524
Address 0xbad50

(#133)

Ordinal 525
Address 0x125150

(#134)

Ordinal 526
Address 0x1254e0

(#135)

Ordinal 527
Address 0xbb0c0

(#136)

Ordinal 528
Address 0x132600

(#137)

Ordinal 529
Address 0x25950

(#138)

Ordinal 530
Address 0x132470

(#139)

Ordinal 531
Address 0x1328a0

(#140)

Ordinal 532
Address 0x1326b0

(#141)

Ordinal 533
Address 0x2bb0

(#142)

Ordinal 534
Address 0x2aa10

(#143)

Ordinal 535
Address 0x132850

(#144)

Ordinal 536
Address 0x121630

(#145)

Ordinal 537
Address 0xbb1e0

(#146)

Ordinal 538
Address 0x2aa10

(#147)

Ordinal 539
Address 0x1325c0

(#148)

Ordinal 540
Address 0x132670

(#149)

Ordinal 543
Address 0xbaf10

(#150)

Ordinal 544
Address 0x1214e0

(#151)

Ordinal 545
Address 0x6ab00

(#152)

Ordinal 546
Address 0xbb080

(#153)

Ordinal 547
Address 0x237f0

(#154)

Ordinal 548
Address 0x76a70

(#155)

Ordinal 553
Address 0x25520

(#156)

Ordinal 555
Address 0x28fe0

(#157)

Ordinal 557
Address 0x18140

(#158)

Ordinal 558
Address 0x110ec0

(#159)

Ordinal 559
Address 0x110f30

(#160)

Ordinal 560
Address 0x268f0

(#161)

Ordinal 561
Address 0x8da0

(#162)

Ordinal 562
Address 0x10ece0

(#163)

Ordinal 563
Address 0x11c670

(#164)

Ordinal 564
Address 0xbac40

(#165)

Ordinal 565
Address 0x1bd90

(#166)

Ordinal 566
Address 0x79550

(#167)

Ordinal 567
Address 0x77fc0

(#168)

Ordinal 568
Address 0xf4ba0

(#169)

Ordinal 569
Address 0xf4c70

(#170)

Ordinal 570
Address 0x28cb0

(#171)

Ordinal 571
Address 0x21f20

(#172)

Ordinal 572
Address 0x131a50

(#173)

Ordinal 573
Address 0x131940

(#174)

Ordinal 574
Address 0xbb140

(#175)

Ordinal 575
Address 0x21dd0

(#176)

Ordinal 576
Address 0xbade0

(#177)

Ordinal 577
Address 0x24f10

(#178)

Ordinal 578
Address 0x25670

(#179)

Ordinal 579
Address 0x5720

(#180)

Ordinal 580
Address 0x132820

(#181)

Ordinal 601
Address 0x2c190

(#182)

Ordinal 602
Address 0x101aa0

(#183)

Ordinal 603
Address 0x4dca0

(#184)

Ordinal 604
Address 0x101920

(#185)

Ordinal 605
Address 0x101150

1

Type MUI
Language English - United States
Codepage UNKNOWN
Size 0x110
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.81469
MD5 9d1db9a080c6a13cf235a06556daf217
SHA1 33b4ce1aee34edc3e3f0e00a9df5ca31cfe81cb5
SHA256 76fbb80b5017dbd6329ebadbbcda56011ef79a9613c98f55ab78b8ee071c32a9
SHA3 db2f78fb3eb846a6df42e197126795a93f898d745361324bcbbcf593e55018b7

REGINST

Type REGINST
Language English - United States
Codepage UNKNOWN
Size 0x6267
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.59298
MD5 0d6e3b5966c8910612cbb86683829efd
SHA1 7e5eda212b998edddab2b7df0c2634ca8f0a0988
SHA256 6b5c97558fdf8cc87169cad942f04a633bf2b9931d50bf22d91e632c0ea596af
SHA3 b12a971c314e1814f95385298d53b99926e4a94530f166b47663784d98484851

1 (#2)

Type WEVT_TEMPLATE
Language English - United States
Codepage UNKNOWN
Size 0x1236
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.14679
MD5 fee538b7aa0d389fdbc9fc05ea3eafdf
SHA1 b97a54fd89ffdfeef59efab5064a86520c69df40
SHA256 a80a2fcd31616f51e4dfb0643921ff05833a42b1b9cc7423143ffbb24db15041
SHA3 bef3724aaaef570d7d7d2fe98edcf76eb39be8d866ba62d8cbee13c64cfe3c39

1 (#3)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.4564
MD5 cc84a3d5bee871ac8669c667536e9504
SHA1 72b5564e2ef3a1499af63e89f3bf0aec22fe20a4
SHA256 11930e6771516a505bf2fe2847a179eeb37c6132bd2a05d3401510684f56b39a
SHA3 6163ec9778550e4d7a491d1df3b7e9ccd709c43d44f84cb9e76dec78c99e2d10

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.63739
MD5 bda87170c50016986f4c6b6434b5c622
SHA1 a0edb214c3814afa69d0ea484304f84307426003
SHA256 28cd0128695b47313e8751b8787977f1755d8cd7e6c47e12cb7dc72079253cab
SHA3 d6acc51b26d7095721db52a8fdbb0633a15c146c73aaad50a90f89d67723826a

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.31112
MD5 d1f7f72a2f4c0c1294b8aa06c80bf09b
SHA1 0a13bd90c9684de30b730f1954ad227164f0834f
SHA256 1686f489fd3edcd3977ddcba01858483ff33363baf01b5320aab6858565a35d7
SHA3 33aa3c1c4149daaaa1e5fd082c38494bdc6a3195e561ec11305857a154980bb4

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.91874
MD5 cfb37564b19a98fcb9fc638f30bb394f
SHA1 90ca047c57788bd71a013130498aa3c10a30dbda
SHA256 9bc1dbd1e064f8b7a66e65ee1316913431106bf9ef81a3d53e101bfc062e1328
SHA3 da50c7d02d8cd9012bdab43f2b9ca2729862bf4e2a358ca771bb779aac639494

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.46387
MD5 920a7b260210a9641eded0c391cfaec6
SHA1 8610ffe2da24e9a1d5896a0eedc9a77e8fb1b059
SHA256 ccc49da4fd78c539ec0685b12962fee444535cb67b0afc32a2dde8fd6b7cab24
SHA3 375f203dfb50ebb8e12679ed7731b20dc99ef5dd3a6424e89a2f21141e006a72

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.74112
MD5 5aa00a8186c0140d8124ef58f4efd9ff
SHA1 016734e37c325df849909d2be001dd41024ce23a
SHA256 0b1d3ee537ce515262c9efd53a8d791c353b7205279a76b427146ce48fa4ebf9
SHA3 ab8d9f703c98dfe0976537dbe4c8d1cf5bf9b717d2ab515d701e94ef97f56378

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.90289
MD5 88dff3edbe03ac767ea7f726fb57344c
SHA1 c1be13d937d286cbda06bb412dc9d68863138e22
SHA256 0cb707d2ad7a47664b4ca8c54dc8c2b6390a451934db8f27483d25033fa224bb
SHA3 d7438217d52449f50663dd20ce08bdcaec15a4c2c4951dff3281be0b347f5bca

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.8545
MD5 3ce7817d9db2ef6b31320b2c3400829e
SHA1 55ea0bc08325aadb87f5cb9f0214586b2ec3ae58
SHA256 202d9332585c121920adcdb99c2a9eda5cf1450b5aea1cba957db3bec85a62cc
SHA3 a788acd3260c99cfc261e064e8a927619c0b3a5daa9263b574537825227b8513

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.97249
MD5 0c9c37531db66d29c8a230be809aea64
SHA1 05c29c1bda2af299d47949f69334c67b39c4dee1
SHA256 1b41b5458155f5df96eb8587eeea4b9dc7fa9e433fdff233713e02843f662bdb
SHA3 1e94bbc2f76aad6a90742376d5ed45953758ad685b7732a0964524cd548e9aee

10

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.40695
MD5 811adc84ef60dc053326bbbd9fa1f2fd
SHA1 745af6cb2acfed07ec11371efaa60d86d7087274
SHA256 72859e2505fa51c385d8a736d417d4b6ee10b6b8b30ae7f8a7ff46f1fb69ba09
SHA3 3d02a78bafd6fba4a61d9c1ebe23798a9fd8560f5a524f9bf0cfdfb635c711be

11

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.9
MD5 1ae5ef9620de398ea5cf86642cd29379
SHA1 cdf05f85f213b587460d6125abee83a6cbe49cec
SHA256 4ecc151a017373b26792e6c89c86f2977022fe99e73b3b99514732b34e516c14
SHA3 5c848434cc461e3fb9ec19e06934fd503c3700f9385c248cfd6866ac33b39542

12

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.40531
MD5 9fdfb90494758c7cc0a4e5a2402521cb
SHA1 e59860b2f9609057f377f87aad10429af02948b3
SHA256 badba5a83f9ed9cf5663b49b03354b5d2f6c19f5a2973980bdbe65ced72f2734
SHA3 ba1d72e20c2767042a8f98c96e1f8ad3189af9e063e1a5ae272b0da6beb9d71b

13

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.1401
MD5 24e84639bc4eef186799b6eb6d36f315
SHA1 d14b3c60c7cefb88c3c314fdd42f57aff824fcb1
SHA256 a9a57169e8935a3698f24ce472bda66423385333c93a1640dc7955e027b2b577
SHA3 84886ea37d01436e3c80ba12fdb92ff4bcd438223cb0f18c2dc044684f31034b

14

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.93605
MD5 b07ced2c653e927eaa8608a10c7d1cd8
SHA1 ffcef1f36d7ca20d8cd9c3da168fdcab80df667d
SHA256 75a0aef64b2f7406f8ce94f3e1f785daf4bab2691af899a85550f29335085c49
SHA3 32f224544436ed912bc97dace40762923c9b3c6d512b2a68697ec19243f14272

15

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.39137
MD5 3b261577d0ecfa5b7794404d8fb46a47
SHA1 852387b9ba5fa45ff03f7953665d654d59854d20
SHA256 0b7c5dbe8f36335f515dfbaeddc8ad79b2858ca9a4dc9110d075a5fbce166931
SHA3 b6782997a4164d84bac3607742fa749ddfb271a537bfd47e68fd3098dd53666b

16

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.86998
MD5 76fd32449a176760966089d271195044
SHA1 2851965f439254c8175fc72769c5206f11c5501e
SHA256 e2688f320e2a3bde3af56662fc4c81ec4b0952e6fb7cb4f13dbf01ebe9c6dad5
SHA3 6d2e949524e6e8ea2fee87808a495d74c5d30ad034bc8a2e823e1b67efaf1bd8

17

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.50382
MD5 b173d1cfdf5ee8b9ce8b9fcf216150bc
SHA1 34c4acfdacd9b3248ba3bef8af4fa944169436cf
SHA256 6cd60544e566d4e077061533c33bac8e5841aeafb8b5ca6677a1866351179193
SHA3 87e3ad85e483b758b0bdca37ea46853fcaff346e9aec0bde8f7716eeae5427e8

18

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.87205
MD5 9d95e7edec8da8021216e222122e8485
SHA1 3fda9e4dd599f3c9bf2314368f299c0203c6433b
SHA256 6ef7bf8e27df1f57af250546ad1119b3b1578e3b50dc38616f8482c9eb7a122d
SHA3 60561629bb420deac5e70304fdc13450b6232b1dd908dff90a640cafb5141619

19

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.56961
MD5 836a46123654c3ecc636a0aace3837c7
SHA1 7a6e85f718693455a198761b4d88182964069759
SHA256 ef8f41819f0e08996510976a1a09e16599c7821a1185883aaa0905283a084795
SHA3 0205a9a20d7d311d360e60f91997a36478e599d6c00905f93c0afe4708e5c5b6

20

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.5445
MD5 ec6a538af48d6c428a26a7b3b8c0d098
SHA1 2f7b2c796b9e8733fb1182017a34944b36958fbc
SHA256 3c00788316060f47d6b1dd11c6e915de12c5ae5046301838f17ca5a041b13dff
SHA3 362d35fe94c7a2a1cfd65804d1affda00df58fdb433e1e7b7455251b4ee19913

21

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.69589
MD5 672399b1872dbee289736aaedac22b82
SHA1 67e49e6a32bb3594d808192a82f929ebc7d1fdb5
SHA256 23cb8977322ffef17e3134481e8c597fdad9f69e866d11fcf851d91c00427578
SHA3 3d829b8ec672b0c15fbe06096cee7d7e7325d3220518f71faa6b75931d4940a4

22

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.9566
MD5 50754166c7fefca08dfc7b075ab45610
SHA1 39cdc02ee957e9a782191d29556292085a9223c5
SHA256 6d26197c15e9d10583891b718d7662a70fca9fcbc8f10b7821977dd60d6fc7d8
SHA3 1a54acd9b856688bbb4623d76ad4bbc62ecdf0b778d0d5ce97433918a4185bf0

23

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.25844
MD5 1d8b77ef9985af2c232331cef4bc767f
SHA1 0f9a505d10a0497dd4c60399357feec082b334c8
SHA256 933bc82aaf63fc80c54a63da3cb05a7d8f96c316c59b3816b9295088231b6bd1
SHA3 427974bc79d7848c78709968889f44173e35e18ba3fe126db68faa684a9d4610

24

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.99322
MD5 0236dc41685a5e3fb3b77ee01dec8918
SHA1 acae0be9e9af9573f6af9d9dd834ed97a32f5956
SHA256 5482466771640a7d0b61b1e87447d912d504ac7b5cbd8b5fb73881359cfd55c9
SHA3 4d90dae824076240db3a7c746a5293cc9699d0af1c511ad8a14c7e2486925f7f

25

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.81894
MD5 35404a5469162b204fbfe73f41c03e9f
SHA1 46f12025db6dfe618c1fa62dc95ff1e2c4d97123
SHA256 41c82c5018afefdaa1f5e64503bda755d10658f00ba93f1ea3f62971ee1d7361
SHA3 f001a1a77387e9f5c30e52dd9bd9aa5037a93282d6370d72eb1b204ede6b1399

26

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.72814
MD5 a5378a08f876ee473a640b35c6882c84
SHA1 9e6d04c1340592127a9883c80ff5e3529b83820b
SHA256 caa208451441c6f99c44628591627c78341ff32bd27f17c9bbcd8e0e4bfa0163
SHA3 a2e7601285f89dab9236c117e0623c5508a799acff0c98993c3bc7836458d931

27

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.0427
MD5 7d5df920e6c7d119754342b169f66670
SHA1 a745d2604ad2fd11d4d3b2919567eca6646e7512
SHA256 85e96b82da5dfc5e320e4547d560d54af1f09eb60086e0984c1716ef8de86c2a
SHA3 f57af792c308651b9085a372daccf8e296d7cecb05d7084150943e2f3d22049e

28

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.10583
MD5 bf028d3a7793c44099dfe01c4a5288c5
SHA1 886ce6c1e1e382a249adfd67943815a61fd04455
SHA256 10570bb5c9519c744e09631221c26e15a6e5b79491d4c1eae88ac97d2f699b0f
SHA3 84ff8239a5143cc7f0b97f0f601fc094dd76836458a6ff7baa5d8f6f23d0eca5

29

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.42022
MD5 6bec0c7747534282db9ca55188c0b6e9
SHA1 cbd5a61387c03505127fcb5a6bb46356c8a3cd7a
SHA256 3d107cb2bfe37cd81b4d06f8df870714b806a30231d494c37d857569b9b8e395
SHA3 cfadbff83a8be866c342202f92b7c4f2156a0ea2b71fb532dc82375a39867f1a

30

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.43391
MD5 4e318c5b564bbeb4964b3d612b683797
SHA1 3bc7576c0dbc60be03f026585c8f78a7a5fbfae7
SHA256 ca79e29f437cd83594c658e17be144a97d6cd7482ec6661e712d0c71eb185ffe
SHA3 c9e6a412ab68ee9e5efd68d83cad1c38ac0da1edfb96e9be06ff7b6176725a65

31

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.77202
MD5 b1aeca168fe3b7b93b8d25457a9082e4
SHA1 4282e1ea34b55b352653d62c9b9901d04f139055
SHA256 81cd7a5d2ab2f6b346a1a89c085d375a322403f20a5f999877356f31c7236458
SHA3 713b9fe850c8a7799665c11364fd5a6837be9c9e9533cc68e55f29f4e8bba4cf

32

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.24442
MD5 f3099493ab0aab7ce67d8b22f1fc2930
SHA1 bd70c1b328965ee34902f678c5dc50c2d5586b4d
SHA256 3c0a3c4ea629eecf5ef745a208f70c0f0b46ac59fcb212cd7da4a4686a393657
SHA3 0d9ae51d99ff574b3bfe6bbf1e5a83b2251a1b71dbf4c623402fe41e0146a8a0

33

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.40271
MD5 a4d61d0b168c2b67eddfe353a5e56eb2
SHA1 9942387f066279136fa2aeb93ff3d436ce70aab4
SHA256 1072372c0cbc765436613e38314b5dac98647aa5533a41963d3b9ccb11dd8e4f
SHA3 d9595f3d1cb00c6c53d2306bc5bff42288aeac80e65329796bffddccee7857b3

34

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea04
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.8832
Detected Filetype PNG graphic file
MD5 88fc9991abeb1e1b3cd2defaaa39eec0
SHA1 d9c9ec0206c568227f445dbe1ec21335b7f76df1
SHA256 a90cbb50c0eed1c6d42b0bb346b87a9d32a0253f5e9525281c17ea56f0cfac84
SHA3 131190f905fce4969b801cddc03d006c99ac30436b63660be8df19d98af07441

35

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.42656
MD5 a3dda19319416522d1790913ecca618e
SHA1 081af0c264063b83f1dcf3537915edf58dbaeaa6
SHA256 8276a6ec5ba2b1695f46569658499a74929b92b6d0349b7f8ed179d6ca7dddac
SHA3 d2936fdd57795b24cf657fa4fbd362ef57df5aede9f7f2a2e92000859f26b1e9

36

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.84471
MD5 e0e9801c25a43c05929ae7f4fbd12118
SHA1 ff95bdb890f42dd0deb88b48170c3a596b0648a5
SHA256 6f5dd3814e6b2e6178316454b04c17686d4afee67fff38248899bf92d3efa513
SHA3 1313abad936437f85cba64d4aa81d2315020bbced092be9994815b08b8aec078

37

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.92411
MD5 6763ea9c605a2f86de7fc5bb0f7b8312
SHA1 c383e75915f8b64fedc396f6788ab2bfd4cc4a95
SHA256 5c0ef62c72cc0f3f1f0e6d26b1f73a1f4ecb47b7dc80f40d0da3bb9486c22a3c
SHA3 5087a7c9bd48cd9ec5ec171ce6f24b3e9cbbb975a484d0ecbf1fe88eda9cc98c

38

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.14529
MD5 e09a2fa74c1e05a4d983ca9f8223a164
SHA1 5573113c52853a6feb09fe7c98e5a307bc1e32a3
SHA256 20260e931c86677496b94691a2c328ac156b72b057fc2c58002cf2bb476de0d4
SHA3 b4ad56869f0215535615a0dd9c8e22d14b12d7b533f7be033021d7e72a32165a

39

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.40733
MD5 21f4bc0b3ed69885e6ee041c63c30681
SHA1 65bb1da232c63e1f8041b17825e91e6955e18595
SHA256 df3abb75afafbfee84ae3a04f199172a8e12386a65f14db1bb32a9b3f033474f
SHA3 d4d1ab6fe543be68ce76dc8c4caa6c20330fab51974df24b681e9c702766e553

40

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.35853
MD5 baa9204ec65e438b4826cfa2285e65a9
SHA1 180507ce45d486fe43735e404873451e2ae01208
SHA256 e3a2046dfa2907b47483de5b8c4c2c152030428e084aef09d1541d5b65508d64
SHA3 f6d7c495cd403e7ca4df2f253be29efda32f91d7eb6caecd67fcb9fce5b67834

41

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.76876
MD5 a6d68ddddb4340c9e92f9262358a9dd7
SHA1 7237828111a1335614b5f1e213fee06643eafad3
SHA256 32208d4b06a9b889fae97a62a914215cce7b977ccc2d1bf74d86d4c239e7fa2d
SHA3 4e4a44b083a40bdcf9d4c58acd1f2c653caa492732cc61d5dc6ebd8291167d77

42

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.95375
MD5 cf41b2d476522bacfb8d1e0e766b9fc9
SHA1 adc2f9120e0020fca28fc303dac5f75efc43670c
SHA256 c897b24e85b0079d63c8f6210eb18b151eba3b8e9167828580ce5b0b3dc50b87
SHA3 28d59f0b1160e73120fa368ad27eb842c98c477440b2cf5329a652a68135987b

43

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.35191
MD5 084dc4f70893b61e463021a9dfbeae9e
SHA1 03564b816e443ef4a2d0892aea8f9bb627011750
SHA256 2e5d572e644dfb19d7d424ce3c6cabbaf51611c47f64afe2766ab9be080c8b26
SHA3 038437984ee0fcc44d909993f9627923009ca9b4b63c30697c5b2bab53cea64e

44

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.60801
MD5 9841a3f561a366521e0574d14a3b4a01
SHA1 96e636493e19ccd3b26fef02e6410a33bc6e7108
SHA256 cbf86f6e41b6811ee4a821459330c91b53c86c91a643104d72a973c8018b5dec
SHA3 71c2615ec15aedde5f78cbf9366101f081f86d5816ee5f9d8d5905ea9cc9d6f3

45

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.92874
MD5 97495ecd75fa92fe32a55bd2a50ac5fe
SHA1 6665d371e17d6a62572ca84d62ef0662c47f8323
SHA256 44305ca073db1fa723fdcb95a0146ba2c30c9698201cf25acbd9e2500d1afdf1
SHA3 09c8272dad9d3a6f719df84537aab5ea171add6c8a7b40a646cd92ad0b654619

46

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.54364
MD5 bb72593689fb2eb9d2135d49dc7f0f6c
SHA1 9b9a2b7eb41a76d6181e45d92a4d1fa85493da69
SHA256 29ceff9876ccd6073eaf92be8605bb8ebc6aa6c613d5911f2cf5f64828203cce
SHA3 943fe6d398317d4e218454f2c09e861b4a82fa789148229014dc24c2cf4c105c

47

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.5445
MD5 ec6a538af48d6c428a26a7b3b8c0d098
SHA1 2f7b2c796b9e8733fb1182017a34944b36958fbc
SHA256 3c00788316060f47d6b1dd11c6e915de12c5ae5046301838f17ca5a041b13dff
SHA3 362d35fe94c7a2a1cfd65804d1affda00df58fdb433e1e7b7455251b4ee19913

48

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.69589
MD5 672399b1872dbee289736aaedac22b82
SHA1 67e49e6a32bb3594d808192a82f929ebc7d1fdb5
SHA256 23cb8977322ffef17e3134481e8c597fdad9f69e866d11fcf851d91c00427578
SHA3 3d829b8ec672b0c15fbe06096cee7d7e7325d3220518f71faa6b75931d4940a4

49

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.25844
MD5 1d8b77ef9985af2c232331cef4bc767f
SHA1 0f9a505d10a0497dd4c60399357feec082b334c8
SHA256 933bc82aaf63fc80c54a63da3cb05a7d8f96c316c59b3816b9295088231b6bd1
SHA3 427974bc79d7848c78709968889f44173e35e18ba3fe126db68faa684a9d4610

50

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.99322
MD5 0236dc41685a5e3fb3b77ee01dec8918
SHA1 acae0be9e9af9573f6af9d9dd834ed97a32f5956
SHA256 5482466771640a7d0b61b1e87447d912d504ac7b5cbd8b5fb73881359cfd55c9
SHA3 4d90dae824076240db3a7c746a5293cc9699d0af1c511ad8a14c7e2486925f7f

51

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.72814
MD5 a5378a08f876ee473a640b35c6882c84
SHA1 9e6d04c1340592127a9883c80ff5e3529b83820b
SHA256 caa208451441c6f99c44628591627c78341ff32bd27f17c9bbcd8e0e4bfa0163
SHA3 a2e7601285f89dab9236c117e0623c5508a799acff0c98993c3bc7836458d931

52

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.0427
MD5 7d5df920e6c7d119754342b169f66670
SHA1 a745d2604ad2fd11d4d3b2919567eca6646e7512
SHA256 85e96b82da5dfc5e320e4547d560d54af1f09eb60086e0984c1716ef8de86c2a
SHA3 f57af792c308651b9085a372daccf8e296d7cecb05d7084150943e2f3d22049e

53

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.84343
MD5 cd8f0565073102bcf6ba743d8da72b45
SHA1 09847761e22c8babd1b404a954f665ec4edd0425
SHA256 63eed6c17fd84b8a2c681581f8c7fd65ae306f0ddb03412d8ea3546fa40c8d2c
SHA3 fefd521b9d0c3d00bf8bff52640f005a03dd9b700ff0d00a3a67218593539750

54

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.93605
MD5 b07ced2c653e927eaa8608a10c7d1cd8
SHA1 ffcef1f36d7ca20d8cd9c3da168fdcab80df667d
SHA256 75a0aef64b2f7406f8ce94f3e1f785daf4bab2691af899a85550f29335085c49
SHA3 32f224544436ed912bc97dace40762923c9b3c6d512b2a68697ec19243f14272

55

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.50382
MD5 b173d1cfdf5ee8b9ce8b9fcf216150bc
SHA1 34c4acfdacd9b3248ba3bef8af4fa944169436cf
SHA256 6cd60544e566d4e077061533c33bac8e5841aeafb8b5ca6677a1866351179193
SHA3 87e3ad85e483b758b0bdca37ea46853fcaff346e9aec0bde8f7716eeae5427e8

56

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.63739
MD5 bda87170c50016986f4c6b6434b5c622
SHA1 a0edb214c3814afa69d0ea484304f84307426003
SHA256 28cd0128695b47313e8751b8787977f1755d8cd7e6c47e12cb7dc72079253cab
SHA3 d6acc51b26d7095721db52a8fdbb0633a15c146c73aaad50a90f89d67723826a

57

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.31112
MD5 d1f7f72a2f4c0c1294b8aa06c80bf09b
SHA1 0a13bd90c9684de30b730f1954ad227164f0834f
SHA256 1686f489fd3edcd3977ddcba01858483ff33363baf01b5320aab6858565a35d7
SHA3 33aa3c1c4149daaaa1e5fd082c38494bdc6a3195e561ec11305857a154980bb4

58

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.46387
MD5 920a7b260210a9641eded0c391cfaec6
SHA1 8610ffe2da24e9a1d5896a0eedc9a77e8fb1b059
SHA256 ccc49da4fd78c539ec0685b12962fee444535cb67b0afc32a2dde8fd6b7cab24
SHA3 375f203dfb50ebb8e12679ed7731b20dc99ef5dd3a6424e89a2f21141e006a72

59

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.74112
MD5 5aa00a8186c0140d8124ef58f4efd9ff
SHA1 016734e37c325df849909d2be001dd41024ce23a
SHA256 0b1d3ee537ce515262c9efd53a8d791c353b7205279a76b427146ce48fa4ebf9
SHA3 ab8d9f703c98dfe0976537dbe4c8d1cf5bf9b717d2ab515d701e94ef97f56378

60

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.8545
MD5 3ce7817d9db2ef6b31320b2c3400829e
SHA1 55ea0bc08325aadb87f5cb9f0214586b2ec3ae58
SHA256 202d9332585c121920adcdb99c2a9eda5cf1450b5aea1cba957db3bec85a62cc
SHA3 a788acd3260c99cfc261e064e8a927619c0b3a5daa9263b574537825227b8513

61

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.97249
MD5 0c9c37531db66d29c8a230be809aea64
SHA1 05c29c1bda2af299d47949f69334c67b39c4dee1
SHA256 1b41b5458155f5df96eb8587eeea4b9dc7fa9e433fdff233713e02843f662bdb
SHA3 1e94bbc2f76aad6a90742376d5ed45953758ad685b7732a0964524cd548e9aee

62

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.10874
MD5 db456c5e76394ebd20216b6a74e98af6
SHA1 7e447380b5a47bbed80ccc92fce6acca3e67e3bf
SHA256 c26e15cf5881c9c7940946f5e15d902ddc7cdfd736df04dbdf14dae419faa498
SHA3 dc0f5a659fa2ddf9aec286139d0fe23be82f8d415fdcd9700d86456d8838b80b

63

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.40161
MD5 046c0da72e7db83b2e9085f611d50308
SHA1 09a5b96ec433b0fbee2ca461749c007942d9b1ac
SHA256 6b24f7fdb9982dfd5c3fd5555fee9aedc50e6517c9ac3fbd388b4272e96d3e48
SHA3 07ef02f7cdb36e3dc81572a6d4113ced805db988146502f635ed143d57545325

64

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.75491
MD5 395afe5e6e7d5fe0d29ee88ae5f38ecd
SHA1 3599ee2407de670871585f98ec4dd967cb30a571
SHA256 ea1b95c0723a1f5e2b481de3b05e8c91105a381429192144cab0898ef35bada9
SHA3 547b764192376c3e21a7f45eaf61d37fd9b16a990a963940ca12477dfb134d97

65

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.678
MD5 6f3f0847ecffa38517cc5fd318da11c1
SHA1 afed073c916c3a2a0d8ca5311f9a2b8629b2a4c2
SHA256 bce04c650b978eec3986a61c4f56dc0f9ef3f1aeb09d9e311c2a08c0dddfc27a
SHA3 2986de63d5586f128d114c7abe4c806130f3599d188e3aee083e82e2383fb80d

66

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.21393
MD5 ed118e454b7ae9b8ab3c40a69e53fdad
SHA1 b0d5c6c5d502616c0d86bb4942b6010d895c8541
SHA256 4346597ec480eddac4e95c12448c92d50949da413c479f7f8e6221bbee8e73e1
SHA3 4737d07db8311d39d365d91c6d18792f33f221c6b54485d79db24535a3905f5c

67

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.44877
MD5 a44fad9ba884fe6c5e85165f38592e7c
SHA1 70e432432ee98f4c6acefb505da0cf39596fe327
SHA256 2872bac081923bf6dec1fd75908afe61944c7543697b6b2ad5de30226211a1c2
SHA3 08b920ea50157ebfa5bdce528d77cd7973faf9be90e5186b4a19c26992684c3f

68

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.05844
MD5 18b2f8e7247751aa4ab6f8e7fd985106
SHA1 ec3b99195e703ce056d9d2cbf279aaa8da78caf7
SHA256 862eb4b11a9225de28f0a8ceda030526f81f1f7c60d48a316f8485fb94b312a4
SHA3 546251700ffc5d31fd170e78cd546acf7bca9740ec27c5a1de7e8c65b86a8ed2

69

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.17461
MD5 fec43bf75c468f6d1c5928916881c7e4
SHA1 b59d0fe9d6630449bcb2809317fed353b6a34632
SHA256 634569d128d0cb375bc803ce65c728ae538368171e7750bb17c27c6b9c0e5497
SHA3 7b55bfb7623e91535ea918a42268bc05a7fe55447b4c35248851126898a25492

70

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.62245
MD5 3f1f87d225ddb728f473d0cc1cc1cf9b
SHA1 f5bade40ec814a450e95f77a3f8e4fec130b3d2b
SHA256 e28be6322288633e68e61dd832f7a99aad6c5732b7053102b486308129eaf9dc
SHA3 5225b0d13574163be0003f977b5e07c7edfc18ecf0570c8d7123ec1bc93463b0

71

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.8035
MD5 d69a2ab8284743bbbc0e2fc81694f0e1
SHA1 8f31be629f5ca39dd8bfb9643920efcdb918ab0c
SHA256 b40f1f5e8808631b846fbd41da18ab00e5bec71525943f773c61d4f3bd38efa4
SHA3 989688d4ceb0ca0e61972e4a4e266c6ee17902614e2c2c2d3f0e1d89872b87e2

72

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.40945
MD5 5a95628ecf706564bba9db6b6cfc501d
SHA1 640ad0173652bf1ef63ccda5b3f0a52a3f38e9f2
SHA256 cd7d46cb02928e8a077e739027509732efa36d67cda4a9e5857d83bfbe91bd7b
SHA3 88c257409c693e4ee8af0b7837e1888076cc0a006305b9e0102173f0b7b32138

73

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.08483
MD5 ceb9c63fd93f629bddea22b20547ee8f
SHA1 8ed7163a948800b9f13049d30da4ba056d6a306a
SHA256 caf57a40c4e3ee457bb23ec6fd8ecef9ce5e1a2bb5dbf79dbcd1979278b0aab5
SHA3 1b1b2c2478af6f258884e03180e926069aeb8ec233967d8ccb37ebdd70d41871

74

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.51281
MD5 0d64de49cbf2ef18399b7148ccd9d2d2
SHA1 f126aae6bda8c7a33f4c0e6752fb4edfccc1b8b8
SHA256 2cdf47b8c553b623104e9465c1f9ad6add478e458d26de6eb0ae7a5a3535deb1
SHA3 569d3dd6ec44d3db187876f48fe56b55e8dc2062a3bfdbb8171e044eff58acdb

75

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.84469
MD5 940b2998a5cf6ea4fc99a9f23beb3e68
SHA1 67742d33e5e4809e5fbdc035ec3a65b622103ff6
SHA256 a696f869658f65a5885e3ce2b6ffbcc2db8dd87a453683e4ffde561804a69c11
SHA3 008d57891a86c8a1fa9e499c2b7a4767c097e22cec2f7e73c953bb163c6b0cb3

76

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.67451
MD5 9a19d33b8e728357f83c3ca4265a601c
SHA1 de74630f2683c64c05fa8341cb9b6bbc9c476eea
SHA256 0de7719efab35950320686d061dfea84ed383a24aa5576ebd30b6fd2824f5847
SHA3 5c5fd67ea0b3cc1633b741e204bcdc16fb3f87f1721619a51cc7f99172a2729d

77

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.55539
MD5 0caa2365ba0225abebb071e4f50ed9d0
SHA1 dc44dfe4c0904527a8107a5205bc234cf5f7ff62
SHA256 f34c7c3fca46b8ec2056b2a6d4e5f2d6fd55a7ee8f827908457c8cba368e8839
SHA3 c76a2d5342cabfc3a45b03856640e2df0c67424b022f67a99f8f35a21bd4606e

78

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.67157
MD5 d2b4d6e5bc5e8facaf70a6ab35ca716a
SHA1 f95e8fca2536488861f5248fea625817c19168c0
SHA256 b6fd82f656b02571ff8190e50058e8429d9a415ab7c32e5fea73c0d232021981
SHA3 4e18a9dcab766f6821dac5dc7cce0d94fb8bac3f70018ad3c2732d2c367d3048

79

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.77575
MD5 9d289a2b21d618a7e325a6af181bc11e
SHA1 62f04f16bd81822cc6af72fe201c26b3c6a9110f
SHA256 98b7eefc1b4edc3a3fb0d6503cfa708ff364cde849d90e026fbe97e631d5888b
SHA3 339541f62732ee7ae9aa26f5752af47e1d9c0a04cfe64e5d5d0f08cc6af03c8c

80

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.77692
MD5 a62b65319f83d2e96f9e475553864d00
SHA1 7c8919a82f486e1bf6fe8d69f28eb2f1802dfc8c
SHA256 c37a876c89a3c309061cc913607f6e07e1367d7ea5ebb03e7d104f30b9660916
SHA3 5c1a2a397393992c750d5639e9c4e86996fb221f816d641dab90d77b8c3f9080

81

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.67508
MD5 6fdd9c49ebda581178005510949b7399
SHA1 4f7b38eb77b82a116b81f29147a49f90a4f28b4d
SHA256 b0c9352c5e435ef1cb68e4c192676d3c1cf10d6e187568825cb4883f41ac4b55
SHA3 cffcbbef396e75e007ab08a21c8e51c2ff700718c1bc890101cb7c44e25f4718

82

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.96749
MD5 5194e59980965728756cada515a92045
SHA1 f93efbf6bdf75a7934d44c356f44d6b034408426
SHA256 354440b6375506a00b2d20c0cba45a169fd601d0c9886a1d06d2aa559d44d0aa
SHA3 510a94f9a172a0cc6c3601c20f7ea4773ab1534989c435aa0b8bcf56d6620c98

83

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.64429
MD5 ea557a9af1f22ba244833007b91c7aa9
SHA1 68e6260d70e12b45fbc9c2d2254cbdc42abf8490
SHA256 86ebebf3ad371141102226be411050f5eac6c2e12024067cfeb768d1da33ee53
SHA3 94f6c153db0e13215d09b728959a8011f7491ea0ead4ee75b2a42be72b3f0694

84

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.35451
MD5 712539fdf5b44ca360adecfd2cf8600a
SHA1 1455924d49ff4bbc7afb043d263870016557a4b4
SHA256 3840a6fd5e136035a43c92610a0b8d79f220a540a8028158b3a8234af491d46b
SHA3 cdaf60b251f4f2806cab735132dec63d5d546569341e9818b644750c70cb980f

85

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.89338
MD5 ecb37eeb349e031c45f7044db936ba58
SHA1 ae31247ad1e0f6eb0feb32a39bc948e51cce61a9
SHA256 480169dd46207a61386fd99b723cb2e02ed8ca71191c22558842afeadef1860a
SHA3 3a84dbcd5b12f8e8e1a1a8f8b49475b1accd082f43342ab4b2d341baad672636

86

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.8136
MD5 ec7fec249ab2cebe167d43f55dac9b26
SHA1 9af61b4251975e92ce5dec1f38c5fa3356518507
SHA256 187cfa963afc60ea050e3cf936429adf0d027c329f7daafc828fe5c9ba29158a
SHA3 06d69bb6aecd2fcaf045da7a78c36e5603e42c71ad1b6812d05218b2845d6f6f

87

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.76399
MD5 1445a524b61bd2437368641ec9f36121
SHA1 9861efb2a3d745470bca2cf7c3767e678cecaf8f
SHA256 8af307c6133261cb5cb07116b917f4bb88a4452bd4aa6a182fced1ad88579409
SHA3 0e0c640cafe61cc7001b0cb338a9d4ac839b4284c66b159fe5675ad2394d3702

88

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.89105
MD5 66ae0fc487e5dbd5192f5098f6f4e515
SHA1 005025258c3c936b57229deeabbbc9e66f7f5aa5
SHA256 998f7b7910daf034cf3ddd2256f7f192bd38ccc60897dee21144787ed78b0a72
SHA3 150d4257e2e4f64eff4770c7e814d67f0f5e9167267241a18ac194654151e3ff

89

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.0672
MD5 26527689a13483313279c9e03e95cdf7
SHA1 cbc0cd81cd5cabc43d85bd9056c0f157055f7a68
SHA256 8d42feda2bf63a947ad8addc9d12756f47930a77196dbd0c733030b08f43c740
SHA3 688f8d56b76934d757b4cd0e3f487d39e8f4991475591e9fe3b34b3d2c26539b

90

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.70079
MD5 8139632ce5f2a5244dc373cebc99c052
SHA1 3341fadef0ac353bfaace5bedcccabddaacc2e52
SHA256 544c9bc4514a377975eb46cce6a48ebf4249c0bdd1b3c92f648ba0288a59e502
SHA3 6c4793e9a9ed72521f3948ff32162cafaf9494c706e3b0804248fbc32e8b0d3a

91

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.20636
MD5 db601cf49f8cfe17e25c7de5263e1e70
SHA1 7d000efdc8adc8d65c3593b69e4761cf52a6908c
SHA256 d31c06dd075c9b1e9074abe39c18d5533be0558a8faa27ba9cba6d7b05e60daf
SHA3 64194f3c065d742061ae6296b92edf03c7ad8b281324bff325024deff51b6d3b

92

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.28798
MD5 2c5f184c051a8ae0c7d06854e3881902
SHA1 66727470dbc91b27ba640aecc57723441c813ac0
SHA256 7437923f246fee2aa41036a22e2618f8f08e809b01e6209eeebb55ca78a155ca
SHA3 568c1619d75b40307fd97fa8a93bd5c5b0533416a1e1263a87ba16fb8a017a87

93

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.34917
MD5 843d0ac9b221d990263bb3733a3c63ed
SHA1 1a924971e6a9a51921ec49dd2b2871855ff18024
SHA256 1c85487d4a2291e472d1bf4539a6750a078e7cb0883e4ed705254ccbd7fa303f
SHA3 6534287c022a00e29e51c55fbd8d3a91e6759297171aa8c27ea7c24785b9e101

100

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.89097
Detected Filetype Icon file
MD5 a6469ac97a109b7c2bc1bf3020168af3
SHA1 53f3b4b4b61af9cde9de74a33fbc492c71f7660c
SHA256 ca82878ac6f8f5d26249f03257b496eebf06e2d20e02349a0b871bf92766535c
SHA3 15f2850e54173ca36462fa901e1019404484e4da82f3668cb938a5e593f2ed53

101

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.99211
Detected Filetype Icon file
MD5 d229eac204251039bf736a04324e72f1
SHA1 79f302df92e5e0d98fb27996f23cbba372a6c048
SHA256 e54be744cd0432f593650f5f0abb2d598e82a92769e609f9752807d16d7a15ef
SHA3 aa9db99c12be50ab8c0a0027c5d9bec5cd826c2e432e8d82db5b619095e9d6ef

102

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04389
Detected Filetype Icon file
MD5 d57dfdeb92693d1c929d7f4ce6d69781
SHA1 9b9d3ad426f5b50814335e2553c056444beacaf4
SHA256 d4ac613f1e406ca9306be7175473dffd1d707133256637246f1073559035ade0
SHA3 9200d56fae99c5fe29c7c01d2874c59f59139e3321f01fd17e4827d53a3a6ce9

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x92
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.97048
Detected Filetype Icon file
MD5 ba8c6fb978d7edb8d301fb56328e58ac
SHA1 38e89972acd26bf5d2119454290bf73854b6b1fb
SHA256 641987594015e466b7030990e49edadd5b978a331be1413f74decb87994f10ec
SHA3 09653dad2f7a696a5b18c950c81e3f75f0ae9c86108b9cb22d28196ee83e7d91

104

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.02873
Detected Filetype Icon file
MD5 d47e1e03edbe075979703e35ea76e82c
SHA1 07927cf3a6ef3c0bda502c6b49449ae9be979986
SHA256 b64c191bd0b9195f5d53710273d2c0ac02a8b0c7f1c7c84f9d7f8e568ed697b4
SHA3 f313f16439c2953025bb2bfbcec7f314b8f6f6c030f2b0322c0be31365867406

105

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.82236
Detected Filetype Icon file
MD5 1f630718a7f7a24c7ed4acd1f25d8473
SHA1 cd2f4d9a669bdc1ce93937527ccaa4db0b93715c
SHA256 0648734e6b68f82b2d5700be0330e323e22ab668e6e6d6db42871ec45911ec7a
SHA3 a7435fd936cd6ea549b4342d9b1cf6f649ab1fbce167fbf6fae30a45958fe4c3

106

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.82236
Detected Filetype Icon file
MD5 574e0f5416accb6a20e85402c4205c23
SHA1 66bf7561720bc64e4e668455030a56fa99d8824c
SHA256 dbe56c5c8bf1ad0990b236059473c59587b63c8d176c106ef254f97e9f739cd9
SHA3 50ab7b52c7f3d627c16b7880b0874e18a33132119c01b6cd753fea4944f2b542

107

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x30
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.59141
Detected Filetype Icon file
MD5 3eee2c837b8e344539c50b53ac335a31
SHA1 d6e723f318a200a870b8aa0bf76aabd19fb06445
SHA256 89bbc451c203824c8c90eb98cdac6503acd05b50b350060bbe2b9e8a88b2d0f1
SHA3 178936f24278da11d6b0eec0f2cd417a22ba0b27a5ba5a0c8e558e0a3ab89809

108

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.9815
Detected Filetype Icon file
MD5 882f93351d3251e56ad3101434e51a23
SHA1 3d8db0f1a2cfe70f04e85d77b7ccec1f54c0e799
SHA256 0da7462932e612469de80c38f5967ffaa020e4c3190cb69bfe0519405cb5241f
SHA3 5d568a2b0c98c155e83a543ee6ca6fed9b7ef444c5d8c7a3bd640c215df98553

109

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.32322
Detected Filetype Icon file
MD5 9fcbef2f320bf158b38b75e8cc3f9624
SHA1 92f7e2768be27d168c0ddf732fba90039b313813
SHA256 b961c4c2c84c241d5918fb4a2ef57d05277f20a362fc76cb68bf7b1f243ae53e
SHA3 bcd02f7355c26847c9b095d4f8f1ce9dd2c209c7e1bea953fb51c4c944ed6009

110

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.92645
Detected Filetype Icon file
MD5 3cfb86f2f3797be6b484bb5e1cafe583
SHA1 f2460b62fc71ec8b784b9dcbb89eb618d3212c53
SHA256 3f04add870ebbeadbdf06de59ffccf20bc7f3da2a9c65ac12ad2aee3ed2658e0
SHA3 7d180ab791c681b1064feff48b78a1d558e3b5988de525c23e36b7dd47057244

111

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.92645
Detected Filetype Icon file
MD5 d2e4935001015b424a7a00aa3c4c4604
SHA1 c29888c79b17caaa607e6cedf0ad591f77762e53
SHA256 93dac0c1d2e07d6a46ed92e4c19438513421bee73de73c7862ffb8838864524a
SHA3 b79e50b3eb09f3c0918771090fbf2e2e8f3fe11c17205cd024cbfbbd860432a4

116

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.32322
Detected Filetype Icon file
MD5 fc9ace89af4d7eb2c2f0b13f8a2af1f4
SHA1 7dc62716e0c872c177aa659aaa0e5bec2a4eda3e
SHA256 1b23c5b613ca7faf6beefb282bbd5eaffd11cfb75a4fd8a5ac03f305f8be71d5
SHA3 89e0d88e66ba1ca26f514cd6c394ab9dadb273e73f978d01dc1b06d8d5168f7b

118

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.32322
Detected Filetype Icon file
MD5 4a8af3e2fefe9354a358bf20913acfd3
SHA1 f66aba68980dfea71490a6c6d427969a6600afb9
SHA256 a6e6dd7c59872e4221524a8b9f06156d104a4a07cdaba29baf226b2fbde8640c
SHA3 3834e66e6af3a62dac179ea2dfae4f0be1f6ba4ccc3724e81a29fc1ca5dc3c95

119

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.32322
Detected Filetype Icon file
MD5 a2a21217cc43eb17bc9ff05b1769b3b7
SHA1 b44a60ca2c7f412d78f331693ad8592af8e610ab
SHA256 6d54a5de506e329e8202f1ead905257a6e08bebdae8da9e02a08ebe1d06b3463
SHA3 4e6b29862931f457953073ac7a7ad058e91f75c98e71620afda484b3d61a99bb

120

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x22
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.55805
Detected Filetype Icon file
MD5 145af3b8574ca821f2b982b7dfb0e2e9
SHA1 c1c4ff490a27de583dac9c8d3488edb854f66f80
SHA256 2fda243d66d547024feaf6badedc32689fd4cf95dc5e1ffe266ae1563a671042
SHA3 c38f357fff4b856aabbf72316b9c60ed7966e38b6817cd32cb157b6127b6dea5

121

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x3e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.79716
Detected Filetype Icon file
MD5 94868197c329fb31c6a56a22ee404ac2
SHA1 98384142771f56da31e83c61bbb3c270edefaafb
SHA256 da07605f2315f92348af07722369b7afd7c3f43765a3a8fb6f1693d8e06f3340
SHA3 8de89d1c6135eed4754892a088a115c125d920673e3889397c6287bad3722d79

36869

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04389
Detected Filetype Icon file
MD5 7669d486d89ff4558a277b68f0910b43
SHA1 07999e427f24fd8f8178b0dcefa3e36e24f88da4
SHA256 e0175366c209862f2f17ded1f31766263c27a9efad21e71a5f5a83cc5cb56dc4
SHA3 3377be4451eeb8f05823b0095f0a7152c0cda08255e6b38d5946329a6acbca16

1 (#4)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x3a4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.48836
MD5 2457fe0c60087b93d55eb3b1a0f9639e
SHA1 b8e9ff3b6dce5c1976f3c3a3608058317c43d9dd
SHA256 77d24e5d429f699de7459f831b705b3c1fefe2559e5f185b71a5dada1be42412
SHA3 5b18a076770f82d8ccd7935079775767d15a63f7d0c030cefe27e9b745aa0888

123

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x2f5
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.94848
MD5 e1190adfcfb4cb33d15232bcf8951aa4
SHA1 d40e99f4727afa57f007bc65ba5d95324a899d4b
SHA256 d6670b4c9f1987d0b417b74696c4aeb41968560d5b88b5ddff837d15de0b5eb0
SHA3 d4344ea18688df1450de80771840f81a1af51aac250b195b3fd4fefc13b15828

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 11.0.19041.6926
ProductVersion 11.0.19041.6926
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_DLL
Language English - United States
CompanyName Microsoft Corporation
FileDescription OLE32 Extensions for Win32
FileVersion (#2) 11.00.19041.6926 (WinBuild.160101.0800)
InternalName UrlMon.dll
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename UrlMon.dll
ProductName Internet Explorer
ProductVersion (#2) 11.00.19041.6926
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2063-May-12 13:59:07
Version 0.0
SizeofData 35
AddressOfRawData 0x164720
PointerToRawData 0x162f20
Referenced File urlmon.pdb

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2063-May-12 13:59:07
Version 0.0
SizeofData 1884
AddressOfRawData 0x164744
PointerToRawData 0x162f44

UNKNOWN

Characteristics 0
TimeDateStamp 2063-May-12 13:59:07
Version 0.0
SizeofData 36
AddressOfRawData 0x164ea0
PointerToRawData 0x1636a0

UNKNOWN (#2)

Characteristics 0
TimeDateStamp 2063-May-12 13:59:07
Version 0.0
SizeofData 4
AddressOfRawData 0x164ec4
PointerToRawData 0x1636c4

TLS Callbacks

StartAddressOfRawData 0x180164ec8
EndAddressOfRawData 0x180164ed0
AddressOfIndex 0x18017fff8
AddressOfCallbacks 0x180147040
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_4BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x118
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x18017f228
GuardCFCheckFunctionPointer 6443789848
GuardCFDispatchFunctionPointer 0
GuardCFFunctionTable 0
GuardCFFunctionCount 0
GuardFlags (EMPTY)
CodeIntegrity.Flags 0
CodeIntegrity.Catalog 0
CodeIntegrity.CatalogOffset 0
CodeIntegrity.Reserved 0
GuardAddressTakenIatEntryTable 0
GuardAddressTakenIatEntryCount 0
GuardLongJumpTargetTable 0
GuardLongJumpTargetCount 0

RICH Header

XOR Key 0xda2ddd9c
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 140
ASM objects (27412) 3
C objects (27412) 46
Total imports 980
Imports (27412) 7
C++ objects (27412) 8
C objects (POGO O) (27412) 299
Exports (27412) 1
Resource objects (27412) 1
Linker (27412) 1

Errors

[*] Warning: 190 invalid export(s) not shown.
Leave a comment

No comments yet.