4c1856dd096c4558d8a0529fad8a8045

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2021-Nov-22 11:35:36
Detected languages English - United States
CompanyName COURAGEOUS DESK
FileDescription COURAGEOUS DESK Soft
FileVersion 1.0.2.01
InternalName COURAGEOUSDESKSoft.exe
LegalCopyright COURAGEOUS DESK Soft company.
OriginalFilename COURAGEOUSDESKSoft.exe
ProductName COURAGEOUS DESK Soft
ProductVersion 1.0.2.01

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Suspicious PEiD Signature: Crunch 4
Suspicious Strings found in the binary may indicate undesirable behavior: Looks for Qemu presence:
  • QEmu
Contains domain names:
  • .aichi.jp
  • .akita.jp
  • .aomori.jp
  • .chiba.jp
  • .ehime.jp
  • .fukui.jp
  • .fukuoka.jp
  • .fukushima.jp
  • .gifu.jp
  • .gunma.jp
  • .hiroshima.jp
  • .hokkaido.jp
  • .hyogo.jp
  • .ibaraki.jp
  • .ishikawa.jp
  • .iwate.jp
  • .kagawa.jp
  • .kagoshima.jp
  • .kanagawa.jp
  • .kawasaki.jp
  • .kitakyushu.jp
  • .kobe.jp
  • .kochi.jp
  • .kumamoto.jp
  • .kyoto.jp
  • .miyagi.jp
  • .miyazaki.jp
  • .nagano.jp
  • .nagasaki.jp
  • .nagoya.jp
  • .nara.jp
  • .niigata.jp
  • .oita.jp
  • .okayama.jp
  • .okinawa.jp
  • .osaka.jp
  • .saga.jp
  • .saitama.jp
  • .sapporo.jp
  • .sendai.jp
  • .shiga.jp
  • .shimane.jp
  • .shizuoka.jp
  • .tochigi.jp
  • .tokushima.jp
  • .tokyo.jp
  • .tottori.jp
  • .toyama.jp
  • .wakayama.jp
  • .yamagata.jp
  • .yamaguchi.jp
  • .yamanashi.jp
  • .yokohama.jp
  • 4-sale.org
  • 4-sale.us
  • a-anarchist.com
  • a-blogger.com
  • a-bookkeeper.com
  • a-bruinsfan.org
  • a-bulls-fan.com
  • a-candidate.org
  • a-caterer.com
  • a-celticsfan.org
  • a-chef.com
  • a-chef.net
  • a-chef.org
  • a-conservative.com
  • a-cpa.com
  • a-cubicle-slave.com
  • a-democrat.com
  • a-designer.com
  • a-doctor.com
  • a-financialadvisor.com
  • a-geek.com
  • a-geek.net
  • a-geek.org
  • a-green.com
  • a-guru.com
  • a-hard-worker.com
  • a-hunter.com
  • a-knight.org
  • a-la-maison.com
  • a-la-masion.com
  • a-landscaper.com
  • a-lawyer.com
  • a-liberal.com
  • a-libertarian.com
  • a-linux-user.org
  • a-llama.com
  • a-musician.com
  • a-nascarfan.com
  • a-nurse.com
  • a-painter.com
  • a-patsfan.org
  • a-personaltrainer.com
  • a-photographer.com
  • a-player.com
  • a-republican.com
  • a-rockstar.com
  • a-socialist.com
  • a-soxfan.org
  • a-student.com
  • a-teacher.com
  • a-techie.com
  • a-therapist.com
  • accountant.com
  • act.edu.au
  • act.gov.au
  • actor.com
  • actress.com
  • adige.it
  • adygeya.ru
  • aeroport.fr
  • agrigento.it
  • aichi.jp
  • akita.jp
  • alessandria.it
  • altai.ru
  • alto-adige.it
  • altoadige.it
  • amursk.ru
  • an-accountant.com
  • an-actor.com
  • an-actress.com
  • an-anarchist.com
  • an-artist.com
  • an-engineer.com
  • an-entertainer.com
  • anarchist.com
  • ancona.it
  • andria-barletta-trani.it
  • andria-barletta.it
  • andria-trani-barletta.it
  • andria.it
  • andriabarlettatrani.it
  • andriatranibarletta.it
  • anime.com
  • aomori.jp
  • aosta.it
  • aoste.it
  • appspot.com
  • aquila.it
  • arezzo.it
  • arkhangelsk.ru
  • artist.com
  • ascoli-piceno.it
  • ascolipiceno.it
  • assedic.fr
  • astrakhan.ru
  • at-band-camp.net
  • at-home.com
  • at-work.com
  • avellino.it
  • avocat.fr
  • avoues.fr
  • baikal.ru
  • balsan.it
  • band-camp.net
  • barletta-andria.it
  • barletta-trani-andria.it
  • barletta-trani.it
  • barletta.it
  • barlettatraniandria.it
  • barrel-of-knowledge.info
  • barrell-of-knowledge.info
  • bashkiria.ru
  • belgorod.ru
  • belluno.it
  • benevento.it
  • bergamo.it
  • biella.it
  • blogdns.com
  • blogdns.net
  • blogdns.org
  • blogger.com
  • blogsite.org
  • blogueur.com
  • boldlygoingnowhere.org
  • bologna.it
  • bolzano.it
  • bookkeeper.com
  • bozen.it
  • brand.se
  • brescia.it
  • brianza.it
  • brindisi.it
  • british-library.uk
  • broke-it.net
  • bruinsfan.org
  • bryansk.ru
  • bulls-fan.com
  • buryatia.ru
  • buyshouses.net
  • cagliari.it
  • calabria.it
  • caltanissetta.it
  • campidano-medio.it
  • campidano.it
  • campidanomedio.it
  • campobasso.it
  • candidate.org
  • carbonia-iglesias.it
  • carbonia.it
  • carboniaiglesias.it
  • carrara-massa.it
  • carrara.it
  • carraramassa.it
  • cartoons.com
  • caserta.it
  • catania.it
  • catanzaro.it
  • caterer.com
  • cc.ak.us
  • cc.al.us
  • cc.ar.us
  • cc.as.us
  • cc.az.us
  • cc.ca.us
  • cc.co.us
  • cc.ct.us
  • cc.dc.us
  • cc.de.us
  • cc.fl.us
  • cc.ga.us
  • cc.gu.us
  • cc.hi.us
  • cc.ia.us
  • cc.id.us
  • cc.il.us
  • cc.in.us
  • cc.ks.us
  • cc.ky.us
  • cc.la.us
  • cc.ma.us
  • cc.md.us
  • cc.me.us
  • cc.mi.us
  • cc.mn.us
  • cc.mo.us
  • cc.ms.us
  • cc.mt.us
  • cc.nc.us
  • cc.nd.us
  • cc.ne.us
  • cc.nh.us
  • cc.nj.us
  • cc.nm.us
  • cc.nv.us
  • cc.ny.us
  • cc.oh.us
  • cc.ok.us
  • cc.or.us
  • cc.pa.us
  • cc.pr.us
  • cc.ri.us
  • cc.sc.us
  • cc.sd.us
  • cc.tn.us
  • cc.tx.us
  • cc.ut.us
  • cc.va.us
  • cc.vi.us
  • cc.vt.us
  • cc.wa.us
  • cc.wi.us
  • cc.wv.us
  • cc.wy.us
  • cechire.com
  • celticsfan.org
  • certified.com
  • cesena-forli.it
  • cesena.it
  • cesenaforli.it
  • chambagri.fr
  • chelyabinsk.ru
  • chiba.jp
  • chieti.it
  • chirurgiens-dentistes.fr
  • chita.ru
  • chtr.k12.ma.us
  • chukotka.ru
  • chuvashia.ru
  • city.chiba.jp
  • city.fukuoka.jp
  • city.hiroshima.jp
  • city.kawasaki.jp
  • city.kitakyushu.jp
  • city.kobe.jp
  • city.kyoto.jp
  • city.nagoya.jp
  • city.niigata.jp
  • city.okayama.jp
  • city.osaka.jp
  • city.saitama.jp
  • city.sapporo.jp
  • city.sendai.jp
  • city.shizuoka.jp
  • city.yokohama.jp
  • comptables.fr
  • conservative.com
  • cosenza.it
  • cremona.it
  • crotone.it
  • cubicle-slave.com
  • cuneo.it
  • dagestan.ru
  • dell-ogliastra.it
  • della-brianza.it
  • dellogliastra.it
  • democrat.com
  • dentistes.fr
  • designer.com
  • dnsalias.com
  • dnsalias.net
  • dnsalias.org
  • dnsdojo.com
  • dnsdojo.net
  • dnsdojo.org
  • doctor.com
  • does-it.net
  • doesntexist.com
  • doesntexist.org
  • dontexist.com
  • dontexist.net
  • dontexist.org
  • doomdns.com
  • doomdns.org
  • dudinka.ru
  • dvrdns.org
  • dyn-o-saur.com
  • dynalias.com
  • dynalias.net
  • dynalias.org
  • dynathome.net
  • dyndns-at-home.com
  • dyndns-at-work.com
  • dyndns-blog.com
  • dyndns-free.com
  • dyndns-home.com
  • dyndns-ip.com
  • dyndns-mail.com
  • dyndns-office.com
  • dyndns-pics.com
  • dyndns-remote.com
  • dyndns-server.com
  • dyndns-web.com
  • dyndns-wiki.com
  • dyndns-work.com
  • dyndns.info
  • dyndns.org
  • e-burg.ru
  • e-della-brianza.it
  • ehime.jp
  • emilia.it
  • endofinternet.net
  • endofinternet.org
  • endoftheinternet.org
  • engineer.com
  • entertainer.com
  • est-a-la-maison.com
  • est-a-la-masion.com
  • est-le-patron.com
  • est-mon-blogueur.com
  • example.com
  • expert.fr
  • experts-comptables.fr
  • fareast.ru
  • fermo.it
  • ferrara.it
  • financialadvisor.com
  • firenze.it
  • florence.it
  • foggia.it
  • for-less.com
  • for-more.info
  • for-our.info
  • for-u.com
  • forli-cesena.it
  • forli.it
  • forlicesena.it
  • found.org
  • from-ak.com
  • from-al.com
  • from-ar.com
  • from-az.net
  • from-ca.com
  • from-co.net
  • from-ct.com
  • from-dc.com
  • from-de.com
  • from-fl.com
  • from-ga.com
  • from-hi.com
  • from-ia.com
  • from-id.com
  • from-il.com
  • from-in.com
  • from-ks.com
  • from-ky.com
  • from-la.net
  • from-ma.com
  • from-md.com
  • from-me.org
  • from-mi.com
  • from-mn.com
  • from-mo.com
  • from-ms.com
  • from-mt.com
  • from-nc.com
  • from-nd.com
  • from-ne.com
  • from-nh.com
  • from-nj.com
  • from-nm.com
  • from-nv.com
  • from-ny.net
  • from-oh.com
  • from-ok.com
  • from-or.com
  • from-pa.com
  • from-pr.com
  • from-ri.com
  • from-sc.com
  • from-sd.com
  • from-tn.com
  • from-tx.com
  • from-ut.com
  • from-va.com
  • from-vt.com
  • from-wa.com
  • from-wi.com
  • from-wv.com
  • from-wy.com
  • frosinone.it
  • fuettertdasnetz.de
  • fukui.jp
  • fukuoka.jp
  • fukushima.jp
  • game-host.org
  • games.com
  • genoa.it
  • genova.it
  • geometre-expert.fr
  • getmyip.com
  • gets-it.net
  • go.dyndns.org
  • gorizia.it
  • gotdns.com
  • gotdns.org
  • green.com
  • greta.fr
  • groks-the.info
  • groks-this.info
  • grosseto.it
  • grozny.ru
  • gunma.jp
  • ham-radio-op.net
  • hard-worker.com
  • here-for-more.info
  • hiroshima.jp
  • hobby-site.com
  • hobby-site.org
  • hockeynut.com
  • hokkaido.jp
  • home.dyndns.org
  • homedns.org
  • homeftp.net
  • homeftp.org
  • homeip.net
  • homelinux.com
  • homelinux.net
  • homelinux.org
  • homeunix.com
  • homeunix.net
  • homeunix.org
  • http://www.w3.org
  • http://www.w3.org/1999/xlink
  • http://www.w3.org/2000/xmlns/
  • http://www.w3.org/TR/REC-html40/strict.dtd
  • http://www.w3.org/XML/1998/namespace
  • https://curl.se
  • huissier-justice.fr
  • hunter.com
  • hyogo.jp
  • iamallama.com
  • ibaraki.jp
  • icnet.uk
  • iglesias-carbonia.it
  • iglesias.it
  • iglesiascarbonia.it
  • imperia.it
  • in-the-band.net
  • inkscape.org
  • into-anime.com
  • into-cars.com
  • into-cartoons.com
  • into-games.com
  • irkutsk.ru
  • is-a-anarchist.com
  • is-a-blogger.com
  • is-a-bookkeeper.com
  • is-a-bruinsfan.org
  • is-a-bulls-fan.com
  • is-a-candidate.org
  • is-a-caterer.com
  • is-a-celticsfan.org
  • is-a-chef.com
  • is-a-chef.net
  • is-a-chef.org
  • is-a-conservative.com
  • is-a-cpa.com
  • is-a-cubicle-slave.com
  • is-a-democrat.com
  • is-a-designer.com
  • is-a-doctor.com
  • is-a-financialadvisor.com
  • is-a-geek.com
  • is-a-geek.net
  • is-a-geek.org
  • is-a-green.com
  • is-a-guru.com
  • is-a-hard-worker.com
  • is-a-hunter.com
  • is-a-knight.org
  • is-a-landscaper.com
  • is-a-lawyer.com
  • is-a-liberal.com
  • is-a-libertarian.com
  • is-a-linux-user.org
  • is-a-llama.com
  • is-a-musician.com
  • is-a-nascarfan.com
  • is-a-nurse.com
  • is-a-painter.com
  • is-a-patsfan.org
  • is-a-personaltrainer.com
  • is-a-photographer.com
  • is-a-player.com
  • is-a-republican.com
  • is-a-rockstar.com
  • is-a-socialist.com
  • is-a-soxfan.org
  • is-a-student.com
  • is-a-teacher.com
  • is-a-techie.com
  • is-a-therapist.com
  • is-an-accountant.com
  • is-an-actor.com
  • is-an-actress.com
  • is-an-anarchist.com
  • is-an-artist.com
  • is-an-engineer.com
  • is-an-entertainer.com
  • is-by.us
  • is-certified.com
  • is-found.org
  • is-gone.com
  • is-into-anime.com
  • is-into-cars.com
  • is-into-cartoons.com
  • is-into-games.com
  • is-leet.com
  • is-lost.org
  • is-not-certified.com
  • is-saved.org
  • is-slick.com
  • is-uberleet.com
  • is-very-bad.org
  • is-very-evil.org
  • is-very-good.org
  • is-very-nice.org
  • is-very-sweet.org
  • is-with-theband.com
  • isa-geek.com
  • isa-geek.net
  • isa-geek.org
  • isa-hockeynut.com
  • isernia.it
  • ishikawa.jp
  • issmarterthanyou.com
  • isteingeek.de
  • istmein.de
  • ivanovo.ru
  • iwate.jp
  • izhevsk.ru
  • jamal.ru
  • joshkar-ola.ru
  • justice.fr
  • k-uralsk.ru
  • k12.ak.us
  • k12.al.us
  • k12.ar.us
  • k12.as.us
  • k12.az.us
  • k12.ca.us
  • k12.co.us
  • k12.ct.us
  • k12.dc.us
  • k12.de.us
  • k12.fl.us
  • k12.ga.us
  • k12.gu.us
  • k12.ia.us
  • k12.id.us
  • k12.il.us
  • k12.in.us
  • k12.ks.us
  • k12.ky.us
  • k12.la.us
  • k12.ma.us
  • k12.md.us
  • k12.me.us
  • k12.mi.us
  • k12.mn.us
  • k12.mo.us
  • k12.ms.us
  • k12.mt.us
  • k12.nc.us
  • k12.nd.us
  • k12.ne.us
  • k12.nh.us
  • k12.nj.us
  • k12.nm.us
  • k12.nv.us
  • k12.ny.us
  • k12.oh.us
  • k12.ok.us
  • k12.or.us
  • k12.pa.us
  • k12.pr.us
  • k12.ri.us
  • k12.sc.us
  • k12.sd.us
  • k12.tn.us
  • k12.tx.us
  • k12.ut.us
  • k12.va.us
  • k12.vi.us
  • k12.vt.us
  • k12.wa.us
  • k12.wi.us
  • k12.wv.us
  • k12.wy.us
  • kagawa.jp
  • kagoshima.jp
  • kalmykia.ru
  • kaluga.ru
  • kamchatka.ru
  • kanagawa.jp
  • karelia.ru
  • kawasaki.jp
  • kazan.ru
  • kemerovo.ru
  • khabarovsk.ru
  • khakassia.ru
  • kicks-ass.net
  • kicks-ass.org
  • kirov.ru
  • kitakyushu.jp
  • knight.org
  • knowledge.info
  • knowsitall.info
  • kochi.jp
  • koenig.ru
  • komforb.se
  • kommunalforbund.se
  • komvux.se
  • kostroma.ru
  • krasnoyarsk.ru
  • kuban.ru
  • kumamoto.jp
  • kurgan.ru
  • kursk.ru
  • kustanai.ru
  • kuzbass.ru
  • kyoto.jp
  • la-maison.com
  • la-masion.com
  • la-spezia.it
  • lanbib.se
  • land-4-sale.us
  • landscaper.com
  • laquila.it
  • laspezia.it
  • latina.it
  • lawyer.com
  • le-patron.com
  • lebtimnetz.de
  • lecce.it
  • lecco.it
  • leitungsen.de
  • lib.ak.us
  • lib.al.us
  • lib.ar.us
  • lib.as.us
  • lib.az.us
  • lib.ca.us
  • lib.co.us
  • lib.ct.us
  • lib.dc.us
  • lib.de.us
  • lib.fl.us
  • lib.ga.us
  • lib.gu.us
  • lib.hi.us
  • lib.ia.us
  • lib.id.us
  • lib.il.us
  • lib.in.us
  • lib.ks.us
  • lib.ky.us
  • lib.la.us
  • lib.ma.us
  • lib.md.us
  • lib.me.us
  • lib.mi.us
  • lib.mn.us
  • lib.mo.us
  • lib.ms.us
  • lib.mt.us
  • lib.nc.us
  • lib.nd.us
  • lib.ne.us
  • lib.nh.us
  • lib.nj.us
  • lib.nm.us
  • lib.nv.us
  • lib.ny.us
  • lib.oh.us
  • lib.ok.us
  • lib.or.us
  • lib.pa.us
  • lib.pr.us
  • lib.ri.us
  • lib.sc.us
  • lib.sd.us
  • lib.tn.us
  • lib.tx.us
  • lib.ut.us
  • lib.va.us
  • lib.vi.us
  • lib.vt.us
  • lib.wa.us
  • lib.wi.us
  • lib.wv.us
  • lib.wy.us
  • liberal.com
  • libertarian.com
  • library-scotland.uk
  • library.uk
  • likes-pie.com
  • likescandy.com
  • linux-user.org
  • lipetsk.ru
  • livorno.it
  • llama.com
  • lucca.it
  • macerata.it
  • magadan.ru
  • magnitka.ru
  • maison.com
  • mantova.it
  • mari-el.ru
  • marine.ru
  • masion.com
  • massa-carrara.it
  • massa.it
  • massacarrara.it
  • matera.it
  • medecin.fr
  • medio-campidano.it
  • medio.it
  • mediocampidano.it
  • messina.it
  • metro.tokyo.jp
  • milan.it
  • milano.it
  • misconfused.org
  • miyagi.jp
  • miyazaki.jp
  • modena.it
  • mon-blogueur.com
  • monza-brianza.it
  • monza-e-della-brianza.it
  • monza.it
  • monzabrianza.it
  • monzaebrianza.it
  • monzaedellabrianza.it
  • mordovia.ru
  • mosreg.ru
  • murmansk.ru
  • musician.com
  • mytis.ru
  • nagano.jp
  • nagasaki.jp
  • nagoya.jp
  • nakhodka.ru
  • nalchik.ru
  • naples.it
  • napoli.it
  • nascarfan.com
  • national-library-scotland.uk
  • naturbruksgymn.se
  • neat-url.com
  • niigata.jp
  • norilsk.ru
  • not-certified.com
  • notaires.fr
  • novara.it
  • novosibirsk.ru
  • nsw.edu.au
  • nt.edu.au
  • nt.gov.au
  • nuoro.it
  • nurse.com
  • o-saur.com
  • of-knowledge.info
  • office-on-the.net
  • office.com
  • ogliastra.it
  • okayama.jp
  • okinawa.jp
  • olbia-tempio.it
  • olbia.it
  • olbiatempio.it
  • on-the.net
  • operaunite.com
  • orenburg.ru
  • oristano.it
  • oryol.ru
  • osaka.jp
  • oskol.ru
  • padova.it
  • padua.it
  • painter.com
  • palana.ru
  • palermo.it
  • parliament.uk
  • parma.it
  • paroch.k12.ma.us
  • parti.se
  • patron.com
  • patsfan.org
  • pavia.it
  • penza.ru
  • personaltrainer.com
  • perugia.it
  • pesaro-urbino.it
  • pesaro.it
  • pesarourbino.it
  • pescara.it
  • pharmacien.fr
  • photographer.com
  • piacenza.it
  • piceno.it
  • pistoia.it
  • player.com
  • podzone.net
  • podzone.org
  • police.uk
  • pordenone.it
  • potenza.it
  • prato.it
  • pref.aichi.jp
  • pref.akita.jp
  • pref.aomori.jp
  • pref.chiba.jp
  • pref.ehime.jp
  • pref.fukui.jp
  • pref.fukuoka.jp
  • pref.fukushima.jp
  • pref.gifu.jp
  • pref.gunma.jp
  • pref.hiroshima.jp
  • pref.hokkaido.jp
  • pref.hyogo.jp
  • pref.ibaraki.jp
  • pref.ishikawa.jp
  • pref.iwate.jp
  • pref.kagawa.jp
  • pref.kagoshima.jp
  • pref.kanagawa.jp
  • pref.kochi.jp
  • pref.kumamoto.jp
  • pref.kyoto.jp
  • pref.mie.jp
  • pref.miyagi.jp
  • pref.miyazaki.jp
  • pref.nagano.jp
  • pref.nagasaki.jp
  • pref.nara.jp
  • pref.niigata.jp
  • pref.oita.jp
  • pref.okayama.jp
  • pref.okinawa.jp
  • pref.osaka.jp
  • pref.saga.jp
  • pref.saitama.jp
  • pref.shiga.jp
  • pref.shimane.jp
  • pref.shizuoka.jp
  • pref.tochigi.jp
  • pref.tokushima.jp
  • pref.tottori.jp
  • pref.toyama.jp
  • pref.wakayama.jp
  • pref.yamagata.jp
  • pref.yamaguchi.jp
  • pref.yamanashi.jp
  • press.se
  • presse.fr
  • pskov.ru
  • pvt.k12.ma.us
  • pyatigorsk.ru
  • qld.edu.au
  • qld.gov.au
  • radio-op.net
  • radio.br
  • ragusa.it
  • ravenna.it
  • readmyblog.org
  • reggio-calabria.it
  • reggio-emilia.it
  • reggiocalabria.it
  • reggioemilia.it
  • remote.com
  • republican.com
  • rieti.it
  • rimini.it
  • rockstar.com
  • rovigo.it
  • rubtsovsk.ru
  • ryazan.ru
  • sa.edu.au
  • sa.gov.au
  • saitama.jp
  • sakhalin.ru
  • sakhalinsk.ru
  • salerno.it
  • samara.ru
  • sapporo.jp
  • saratov.ru
  • sassari.it
  • saved.org
  • saves-the-whales.com
  • savona.it
  • scotland.uk
  • scrapper-site.net
  • selfip.com
  • selfip.info
  • selfip.net
  • selfip.org
  • sells-for-less.com
  • sells-for-u.com
  • sells-it.net
  • sellsyourhome.org
  • sendai.jp
  • servebbs.com
  • servebbs.net
  • servebbs.org
  • serveftp.net
  • serveftp.org
  • servegame.org
  • server.com
  • shiga.jp
  • shimane.jp
  • shizuoka.jp
  • siena.it
  • simbirsk.ru
  • simple-url.com
  • siracusa.it
  • slave.com
  • slick.com
  • smolensk.ru
  • socialist.com
  • sondrio.it
  • soxfan.org
  • space-to-rent.com
  • spezia.it
  • starostwo.gov
  • stavropol.ru
  • student.com
  • stuff-4-sale.org
  • stuff-4-sale.us
  • suedtirol.it
  • surgut.ru
  • sweet.org
  • syzran.ru
  • tambov.ru
  • taranto.it
  • tas.edu.au
  • tas.gov.au
  • tatarstan.ru
  • teacher.com
  • teaches-yoga.com
  • techie.com
  • tempio-olbia.it
  • tempio.it
  • tempioolbia.it
  • teramo.it
  • terni.it
  • the-band.net
  • the-whales.com
  • theband.com
  • therapist.com
  • thruhere.net
  • to-rent.com
  • tochigi.jp
  • tokushima.jp
  • tokyo.jp
  • tomsk.ru
  • torino.it
  • tottori.jp
  • toyama.jp
  • traeumtgerade.de
  • trani-andria-barletta.it
  • trani-andria.it
  • trani-barletta-andria.it
  • trani-barletta.it
  • trani.it
  • traniandriabarletta.it
  • tranibarlettaandria.it
  • trapani.it
  • trentino.it
  • trento.it
  • treviso.it
  • trieste.it
  • tsaritsyn.ru
  • turin.it
  • tyumen.ru
  • uberleet.com
  • udine.it
  • udmurtia.ru
  • ulan-ude.ru
  • uralsk.ru
  • urbino-pesaro.it
  • urbino.it
  • urbinopesaro.it
  • valentia.it
  • varese.it
  • vdonsk.ru
  • venezia.it
  • venice.it
  • verbania.it
  • vercelli.it
  • verona.it
  • very-bad.org
  • very-evil.org
  • very-good.org
  • very-nice.org
  • very-sweet.org
  • veterinaire.fr
  • vibo-valentia.it
  • vibovalentia.it
  • vic.edu.au
  • vic.gov.au
  • vicenza.it
  • viterbo.it
  • vladikavkaz.ru
  • vladimir.ru
  • vladivostok.ru
  • volgograd.ru
  • vologda.ru
  • voronezh.ru
  • vyatka.ru
  • wa.edu.au
  • wa.gov.au
  • wakayama.jp
  • webhop.info
  • webhop.net
  • webhop.org
  • whales.com
  • with-theband.com
  • worker.com
  • writesthisblog.com
  • www.inkscape.org
  • www.w3.org
  • yakutia.ru
  • yamagata.jp
  • yamaguchi.jp
  • yamal.ru
  • yamanashi.jp
  • yaroslavl.ru
  • yekaterinburg.ru
  • yokohama.jp
  • yuzhno-sakhalinsk.ru
  • zgrad.ru
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to MD5
Uses constants related to SHA1
Uses constants related to AES
Microsoft's Cryptography API
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryW
  • LoadLibraryA
  • GetProcAddress
  • LoadLibraryExW
Functions which can be used for anti-debugging purposes:
  • SwitchToThread
  • CheckRemoteDebuggerPresent
Can access the registry:
  • RegFlushKey
  • RegQueryValueExW
  • RegDeleteValueW
  • RegQueryInfoKeyW
  • RegOpenKeyExW
  • RegSetValueExW
  • RegEnumKeyExW
  • RegEnumValueW
  • RegCreateKeyExW
  • RegDeleteKeyW
  • RegCloseKey
Possibly launches other programs:
  • ShellExecuteW
  • CreateProcessW
Uses Microsoft's cryptographic API:
  • CryptGetHashParam
  • CryptGenRandom
  • CryptCreateHash
  • CryptHashData
  • CryptDestroyKey
  • CryptAcquireContextA
  • CryptImportKey
  • CryptDestroyHash
  • CryptReleaseContext
  • CryptEncrypt
  • CryptQueryObject
  • CryptDecodeObjectEx
  • CryptStringToBinaryA
Uses functions commonly found in keyloggers:
  • CallNextHookEx
  • GetAsyncKeyState
  • MapVirtualKeyW
Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
Leverages the raw socket API to access the Internet:
  • WSAWaitForMultipleEvents
  • send
  • WSAGetLastError
  • recv
  • bind
  • connect
  • getpeername
  • getsockname
  • getsockopt
  • htons
  • ntohs
  • setsockopt
  • socket
  • gethostname
  • WSASetLastError
  • WSAEventSelect
  • WSAAsyncSelect
  • WSAStartup
  • WSACleanup
  • __WSAFDIsSet
  • select
  • accept
  • htonl
  • listen
  • WSACreateEvent
  • WSAResetEvent
  • closesocket
  • WSACloseEvent
  • freeaddrinfo
  • getaddrinfo
  • WSAEnumNetworkEvents
  • recvfrom
  • sendto
  • ioctlsocket
  • WSAIoctl
Functions related to the privilege level:
  • OpenProcessToken
Enumerates local disk drives:
  • GetVolumeInformationW
  • GetDriveTypeW
Manipulates other processes:
  • OpenProcess
Can take screenshots:
  • BitBlt
  • CreateCompatibleDC
  • GetDC
Interacts with the certificate store:
  • CertAddCertificateContextToStore
  • CertOpenStore
Info The PE is digitally signed. Signer: Nayzak ApS
Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Suspicious VirusTotal score: 1/66 (Scanned on 2021-11-25 14:43:48) eGambit: Unsafe.AI_Score_99%

Hashes

MD5 4c1856dd096c4558d8a0529fad8a8045
SHA1 89dffdd6893e3bc58df59c6e9c936c1968936cde
SHA256 57aed14e396baaaf84cd0c9563f6e25aa55744899ee60d947518648c78e4d3f4
SHA3 13a8a5f7dd92dd1f2fbf846028cb99ef2a9f0f3a1af595dc9074c52811d91cca
SSDeep 196608:fVIJndxNQDifNljsJqF9Jsv6tWKFdu9CI:fVIJnZQOfr5Jsv6tWKFdu9CI
Imports Hash 111f363db404f14ddd92796fca497659

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x118

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2021-Nov-22 11:35:36
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0x4e2a00
SizeOfInitializedData 0x209c00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x004257FC (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x4e4000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x6ee000
SizeOfHeaders 0x400
Checksum 0x6ea10d
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 9a9bbbc437e5dcb68408bc85b3796acd
SHA1 824cefc7fba11ae593675e18fec80bff56b1a1ec
SHA256 48a9de413dd0e48aef5ae9151c23b3ddc1259fd443d37aaff890d2679e37b80c
SHA3 f266180591b73b1b8ad84308174036d1395b78bc79adea363d98122c66312533
VirtualSize 0x4e2902
VirtualAddress 0x1000
SizeOfRawData 0x4e2a00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.60265

.rdata

MD5 082d314a6fd8804aa77cbc2a14d0ad3c
SHA1 d3d2342a8e544de2a82c4f4100cd1d6b6f9339aa
SHA256 29d251fbba1e7b87527eb0462bbdf3497b1fb6b05dd35f2757da7b994ce83bdb
SHA3 3a579f3547ecb591737b51d33c693e5b78b906d5cdf41b3e770c3be8df7dc55e
VirtualSize 0x1a5f74
VirtualAddress 0x4e4000
SizeOfRawData 0x1a6000
PointerToRawData 0x4e2e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.22532

.data

MD5 2f16e6519de770a1bbd6e88e0ff12571
SHA1 b4aeed1e14cf255d0c9d8eeb0b07bfd591d6fac5
SHA256 435e60857395f4ca51368ad5becc4ed7273707726c1eddf3d2e4e8bb287ce99e
SHA3 5ca8160acd43909a2b3e68fa0b3aec171661b8456e0cca00a44f5460c047ab02
VirtualSize 0x11cf0
VirtualAddress 0x68a000
SizeOfRawData 0xa400
PointerToRawData 0x688e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.57797

.rsrc

MD5 57399487d78789767c3b3f7da38314e0
SHA1 606da41c1a3b7faf93e0db1f6bb4970d73561e67
SHA256 cac41159cf02fc8afd619d1ec408276786abf6bce5e7f3d92787fc4c6b5c846f
SHA3 473577f435fd50d2d5dd20ac5bc1431c1c4f5c53975fd0d3cc946b1248c3c10b
VirtualSize 0x10e40
VirtualAddress 0x69c000
SizeOfRawData 0x11000
PointerToRawData 0x693200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.05333

.reloc

MD5 aa4e976240c6f56d223476d786eeefd9
SHA1 7d78f95114d69a4ad6085f75e2e69a7cc021b5f9
SHA256 523153c1a5a2c47de46c57fb3f9816d6d797dcf2ddd845d381af404d92dc20c5
SHA3 f89418539ceb1fdc497f84a0e15507f2eef84533eaa249e9170de38b5384e213
VirtualSize 0x40caa
VirtualAddress 0x6ad000
SizeOfRawData 0x40e00
PointerToRawData 0x6a4200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.16888

Imports

GDI32.dll GdiFlush
ExtTextOutW
GetCharABCWidthsI
GetRegionData
CreateBitmap
BitBlt
SelectClipRgn
CombineRgn
GetOutlineTextMetricsW
GetObjectW
GetDeviceCaps
EnumFontFamiliesExW
SetTextAlign
SetWorldTransform
OffsetRgn
SetTextColor
GetCharABCWidthsW
GetCharABCWidthsFloatW
GetTextExtentPoint32W
CreateRectRgn
RealizePalette
SelectObject
GetTextMetricsW
CreateCompatibleBitmap
GetPaletteEntries
DeleteObject
CreateCompatibleDC
PtInRegion
GetGlyphOutlineW
CreatePalette
CreateDIBSection
DeleteDC
CreateEllipticRgn
GetDIBits
SetGraphicsMode
SelectPalette
CreateFontIndirectW
SetBkMode
GetFontData
GetTextFaceW
GetStockObject
OLEAUT32.dll SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VariantInit
IMM32.dll ImmSetCompositionWindow
ImmNotifyIME
ImmGetContext
ImmSetCompositionFontW
ImmSetCandidateWindow
ImmReleaseContext
ImmGetDefaultIMEWnd
ImmGetCompositionStringW
ImmAssociateContext
WINMM.dll PlaySoundW
WS2_32.dll WSAWaitForMultipleEvents
send
WSAGetLastError
recv
bind
connect
getpeername
getsockname
getsockopt
htons
ntohs
setsockopt
socket
gethostname
WSASetLastError
WSAEventSelect
WSAAsyncSelect
WSAStartup
WSACleanup
__WSAFDIsSet
select
accept
htonl
listen
WSACreateEvent
WSAResetEvent
closesocket
WSACloseEvent
freeaddrinfo
getaddrinfo
WSAEnumNetworkEvents
recvfrom
sendto
ioctlsocket
WSAIoctl
ole32.dll OleSetClipboard
OleUninitialize
CoGetMalloc
OleInitialize
CoTaskMemFree
StringFromGUID2
CoInitialize
CoLockObjectExternal
CoUninitialize
OleIsCurrentClipboard
OleFlushClipboard
RegisterDragDrop
DoDragDrop
RevokeDragDrop
OleGetClipboard
CoCreateInstance
ReleaseStgMedium
CoCreateGuid
USER32.dll RegisterClassExW
MessageBeep
WindowFromPoint
GetCursorPos
DestroyIcon
ToAscii
GetDesktopWindow
InvalidateRgn
BeginPaint
DestroyWindow
SetDoubleClickTime
CreateIconIndirect
SetForegroundWindow
GetWindowRect
RegisterClipboardFormatW
DrawIconEx
DefWindowProcW
LoadImageW
GetKeyState
ClipCursor
SetWindowPos
AdjustWindowRectEx
EnableMenuItem
CharNextExA
GetSystemMetrics
GetDC
ToUnicode
GetClientRect
ReleaseCapture
ScreenToClient
GetIconInfo
GetQueueStatus
SetFocus
ReleaseDC
SetMenuItemInfoW
MsgWaitForMultipleObjectsEx
GetWindowThreadProcessId
TrackPopupMenuEx
IsZoomed
SetWindowsHookExW
SetWindowRgn
TranslateMessage
ChangeClipboardChain
GetSystemMenu
SetCaretBlinkTime
HideCaret
SetParent
GetParent
SetCaretPos
GetActiveWindow
SetCursor
SetCapture
UnregisterClassW
SetWindowLongW
GetSysColor
IsWindowVisible
DestroyCursor
GetClassInfoW
RegisterClassW
PeekMessageW
GetWindowRgn
SetWindowTextW
EndPaint
GetCaretBlinkTime
InvalidateRect
SetClipboardViewer
GetWindowLongW
GetClipboardFormatNameW
GetSysColorBrush
SetWindowPlacement
ClientToScreen
UnhookWindowsHookEx
GetUpdateRect
GetKeyboardLayoutList
SetTimer
GetWindowPlacement
SystemParametersInfoW
IsChild
CreateCaret
CallNextHookEx
MoveWindow
FlashWindowEx
GetMenu
SetCursorPos
GetKeyboardLayout
GetKeyboardState
GetAsyncKeyState
PostMessageW
LoadIconW
CreateCursor
ShowWindow
CreateWindowExW
ValidateRgn
GetDoubleClickTime
UpdateWindow
KillTimer
DestroyCaret
IsIconic
DispatchMessageW
RegisterWindowMessageW
MapVirtualKeyW
GetFocus
ScrollWindowEx
SendMessageW
ADVAPI32.dll GetLengthSid
CryptGetHashParam
CryptGenRandom
RegFlushKey
CryptCreateHash
CryptHashData
RegQueryValueExW
CryptDestroyKey
CryptAcquireContextA
OpenProcessToken
CopySid
RegDeleteValueW
RegQueryInfoKeyW
RegOpenKeyExW
CryptImportKey
RegSetValueExW
FreeSid
RegEnumKeyExW
CryptDestroyHash
RegEnumValueW
CryptReleaseContext
RegCreateKeyExW
GetTokenInformation
RegDeleteKeyW
CryptEncrypt
RegCloseKey
SHELL32.dll ShellExecuteW
CommandLineToArgvW
KERNEL32.dll GetCommandLineW
SetFileAttributesW
GetDateFormatW
GetLogicalDrives
PeekNamedPipe
GetModuleHandleW
SetEvent
GlobalAlloc
GetSystemDirectoryA
GetCurrentThread
WriteConsoleW
GlobalSize
CopyFileW
DeleteFileW
LoadLibraryW
GetStringTypeW
GetNumaHighestNodeNumber
UnmapViewOfFile
GetFileSizeEx
CreateEventW
OpenFileMappingW
InterlockedPushEntrySList
DuplicateHandle
GetModuleFileNameW
SwitchToThread
VirtualQuery
TlsFree
UnregisterWait
GlobalLock
InterlockedDecrement
GetEnvironmentVariableA
SetUnhandledExceptionFilter
ExitThread
GetCurrentDirectoryW
DeviceIoControl
CompareStringW
LeaveCriticalSection
GetProcessHeap
GetCurrentThreadId
GetFullPathNameW
GetLastError
CreateFileMappingW
ResumeThread
GetVersionExW
TerminateProcess
WaitForMultipleObjects
QueryDepthSList
VirtualAlloc
HeapAlloc
GetCurrentProcessId
FreeEnvironmentStringsW
CreateSemaphoreW
ReadFile
DecodePointer
MoveFileW
HeapSize
SetEnvironmentVariableA
CreateThread
UnhandledExceptionFilter
InterlockedExchange
FileTimeToSystemTime
InterlockedIncrement
GetFileType
QueryPerformanceCounter
CreateFileA
QueryPerformanceFrequency
RtlUnwind
FileTimeToLocalFileTime
GetEnvironmentStringsW
CheckRemoteDebuggerPresent
GetUserDefaultUILanguage
VerSetConditionMask
FormatMessageW
GetLocaleInfoW
CreateProcessW
SetThreadAffinityMask
InterlockedPopEntrySList
EnterCriticalSection
TlsSetValue
GetStdHandle
GetFileAttributesExW
ResetEvent
GetModuleHandleExW
FindNextFileW
GetVolumeInformationW
VirtualProtect
MultiByteToWideChar
MoveFileExA
InitializeCriticalSectionAndSpinCount
IsValidLocale
GetTimeZoneInformation
SignalObjectAndWait
LoadLibraryA
AreFileApisANSI
GetLongPathNameW
GetFileSize
GetSystemTimeAsFileTime
SetEnvironmentVariableW
IsValidLanguageGroup
GetDriveTypeW
HeapFree
InitializeCriticalSection
GetModuleHandleA
GetThreadTimes
FlushFileBuffers
GetSystemInfo
LCMapStringW
lstrcmpW
ChangeTimerQueueTimer
GetThreadPriority
GetTickCount
VerifyVersionInfoA
GetModuleFileNameA
WaitForSingleObject
ExitProcess
WaitForSingleObjectEx
CreateTimerQueueTimer
FreeLibraryAndExitThread
FindClose
SystemTimeToTzSpecificLocalTime
ReleaseSemaphore
GetConsoleCP
CloseHandle
GetTimeFormatW
FindFirstFileW
GlobalUnlock
TlsAlloc
SetStdHandle
FindFirstFileExW
GetProcessAffinityMask
VirtualFree
GetFileAttributesW
RemoveDirectoryW
GetConsoleMode
InitializeSListHead
GetUserDefaultLCID
SetLastError
GetProcAddress
RegisterWaitForSingleObject
InterlockedFlushSList
GetACP
EncodePointer
GetOEMCP
OutputDebugStringW
GetUserDefaultLangID
CreateFileW
LoadLibraryExW
VerifyVersionInfoW
IsProcessorFeaturePresent
GetSystemDirectoryW
IsValidCodePage
CreateTimerQueue
ExpandEnvironmentStringsW
CreateDirectoryW
TlsGetValue
UnregisterWaitEx
WideCharToMultiByte
FreeLibrary
GetCommandLineA
SetFilePointerEx
EnumSystemLocalesW
OpenProcess
GetFileInformationByHandle
LocalFree
GetExitCodeThread
GetCPInfo
Sleep
TerminateThread
DeleteCriticalSection
IsDebuggerPresent
SetFilePointer
ReadConsoleW
WriteFile
GetLocalTime
GetCurrencyFormatW
InitializeCriticalSectionEx
SetThreadPriority
SetErrorMode
DeleteTimerQueueTimer
GetTickCount64
MapViewOfFile
SleepEx
GetCurrentProcess
HeapReAlloc
SetEndOfFile
RaiseException
GetStartupInfoW
CRYPT32.dll CryptQueryObject
PFXImportCertStore
CertFreeCertificateChain
CryptDecodeObjectEx
CryptStringToBinaryA
CertGetCertificateChain
CertFreeCertificateContext
CertFindCertificateInStore
CertGetNameStringA
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertCreateCertificateChainEngine
CertFindExtension
CertCloseStore
CertOpenStore
CertFreeCertificateChainEngine
WLDAP32.dll #46
#217
#143
#60
#45
#50
#41
#22
#26
#27
#32
#33
#35
#79
#30
#200
#301
#211
Normaliz.dll IdnToAscii

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.03276
MD5 835c159cbae21b285cb20d9b3eef8179
SHA1 7cc1be06f54237e14b5cdb4a8b633eea21413438
SHA256 8b02bed00e6f7d767632698c06ebd54dcd367c60c913207b05239d522c77f6ca
SHA3 a039e1f1a33aac284aa16dc8335b33d4204c1932e33284f8b418f0b31112f860

IDI_ICON1

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.98048
Detected Filetype Icon file
MD5 38388dda6548693f4d42f2241a4218d7
SHA1 78bedd12a20f97e31e58742381f3d0ca1edb4715
SHA256 cd0991dd595a1392452a8c7ccf089e73626bc6eed1fd3f54ee4c6aa7ffbaedba
SHA3 9ace1e9f008d60580379cdfdcd4119706c82d52d2e5fdb9e5745fa00864cc1a8

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x330
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.43426
MD5 a902329d106532370df96bcfd3d83621
SHA1 fd5fbe8cabd81f0bcd31122c99d28f8ab6c16a7c
SHA256 0026d90d049b6b1d5b96b894b4810ae81b3134170eb4057a03f0dc5ecf226ab5
SHA3 e973c90acdb80a56ee1e258f0ffd09a6027b66296987756cbee2bc486cdee710

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.2.1
ProductVersion 1.0.2.1
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName COURAGEOUS DESK
FileDescription COURAGEOUS DESK Soft
FileVersion (#2) 1.0.2.01
InternalName COURAGEOUSDESKSoft.exe
LegalCopyright COURAGEOUS DESK Soft company.
OriginalFilename COURAGEOUSDESKSoft.exe
ProductName COURAGEOUS DESK Soft
ProductVersion (#2) 1.0.2.01
Resource LangID English - United States

TLS Callbacks

Load Configuration

Size 0x48
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0xa91ee8
SEHandlerTable 0xa43ed0
SEHandlerCount 3498

RICH Header

XOR Key 0xf08825c9
Unmarked objects 0
C objects (VS 2015/2017 runtime 26706) 8
ASM objects (VS 2015/2017 runtime 26706) 2
Imports (VS 2015/2017 runtime 26706) 7
C++ objects (VS 2015/2017 runtime 26706) 21
199 (41118) 12
Imports (VS2008 SP1 build 30729) 30
Total imports 463
265 (27045) 12
Exports (27045) 1
Linker (27045) 1

Errors

<-- -->