Architecture |
IMAGE_FILE_MACHINE_I386
|
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
Compilation Date |
2019-Mar-18 18:09:22
|
Detected languages |
Chinese - PRC
Swedish - Sweden
|
InternalSurname |
dhrj.uxe
|
Copyright |
Copyrighd (C) 2020, odfrjv
|
ProductVersion |
1.0.4.6
|
Info |
Matching compiler(s): |
Microsoft Visual C++ 6.0 - 8.0
|
Info |
The PE contains common functions which appear in legitimate applications. |
[!] The program may be hiding some of its imports:
- GetProcAddress
- LoadLibraryA
|
Info |
The PE's resources present abnormal characteristics. |
Resource 14 is possibly compressed or encrypted.
|
Malicious |
The PE's digital signature is invalid. |
Signer: AVG Technologies USA
Issuer: DigiCert SHA2 Assured ID Code Signing CA
The file was modified after it was signed.
|
Malicious |
VirusTotal score: 54/72 (Scanned on 2020-07-22 07:59:49) |
MicroWorld-eScan:
Trojan.GenericKDZ.68606
CAT-QuickHeal:
Trojan.Wacatac
McAfee:
Ursnif-FSNX!500286EAF9EB
Cylance:
Unsafe
VIPRE:
Trojan.Win32.Generic!BT
Sangfor:
Malware
CrowdStrike:
win/malicious_confidence_90% (W)
BitDefender:
Trojan.GenericKDZ.68606
K7GW:
Trojan ( 0056a7061 )
K7AntiVirus:
Trojan ( 0056a7061 )
Arcabit:
Trojan.Generic.D10BFE
TrendMicro:
Ransom.Win32.SODINOKIBI.AUWUJDEI
F-Prot:
W32/Ursnif.DA.gen!Eldorado
Symantec:
ML.Attribute.HighConfidence
ESET-NOD32:
a variant of Win32/Kryptik.HEUM
APEX:
Malicious
Paloalto:
generic.ml
Kaspersky:
Trojan.Win32.Injuke.gyw
Alibaba:
Trojan:Win32/Injuke.25aec537
NANO-Antivirus:
Trojan.Win32.Injuke.hnokep
Rising:
Trojan.Kryptik!1.C8F8 (CLASSIC)
Ad-Aware:
Trojan.GenericKDZ.68606
Emsisoft:
Trojan.GenericKDZ.68606 (B)
F-Secure:
Trojan.TR/Crypt.Agent.arrem
DrWeb:
Trojan.Encoder.32115
MaxSecure:
Trojan.Malware.300983.susgen
Invincea:
heuristic
Fortinet:
W32/GenKryptik.EOAC!tr
Trapmine:
malicious.moderate.ml.score
FireEye:
Generic.mg.500286eaf9eb11b3
Sophos:
Troj/Agent-BFEH
SentinelOne:
DFI - Malicious PE
Cyren:
W32/Ursnif.DA.gen!Eldorado
Avira:
TR/Crypt.Agent.arrem
MAX:
malware (ai score=89)
Endgame:
malicious (high confidence)
Microsoft:
Trojan:Win32/Glupteba.DSC!MTB
ZoneAlarm:
Trojan.Win32.Injuke.gyw
Cynet:
Malicious (score: 100)
AhnLab-V3:
Malware/Win32.Generic.R344196
Acronis:
suspicious
ALYac:
Trojan.GenericKDZ.68606
VBA32:
BScope.Trojan.Gozi
Malwarebytes:
Trojan.MalPack.GS
Panda:
Trj/GdSda.A
TrendMicro-HouseCall:
Ransom.Win32.SODINOKIBI.AUWUJDEI
Tencent:
Win32.Trojan.Injuke.Sqte
Ikarus:
Trojan.Win32.Krypt
eGambit:
PE.Heur.InvalidSig
GData:
Trojan.GenericKDZ.68606
BitDefenderTheta:
Gen:NN.ZexaF.34136.sq2@aCWGNTaG
AVG:
Win32:DropperX-gen [Drp]
Avast:
Win32:DropperX-gen [Drp]
Qihoo-360:
Win32/Trojan.ae4
|
MD5 |
500286eaf9eb11b34eb413bb0df5543b
|
SHA1 |
b889ff1138b2bd7a3033ca4c4868189dc8588f9b
|
SHA256 |
f67d2bb9157ba5ccacbe051ac737812226fb2b43fe209867ae276695a8a929a4
|
SHA3 |
396126f4ddd92dd693724d317ef39470cddb336e0a8bc788ab53aacd07e930ae
|
SSDeep |
3072:EbVja8HGRWBX6aty+wZ9mbZzMFqYObz6kp8BNABNKz51sHQW6p+xmvVSU9MGLi/5:2Vj1mRWBLtwZYZoey7qirlUxmvVSaTE
|
Imports Hash |
3f2e6168d574cc14fad3ec5f7fd67501
|
e_magic |
MZ
|
e_cblp |
0x90
|
e_cp |
0x3
|
e_crlc |
0
|
e_cparhdr |
0x4
|
e_minalloc |
0
|
e_maxalloc |
0xffff
|
e_ss |
0
|
e_sp |
0xb8
|
e_csum |
0
|
e_ip |
0
|
e_cs |
0
|
e_ovno |
0
|
e_oemid |
0
|
e_oeminfo |
0
|
e_lfanew |
0xf0
|
Signature |
PE
|
Machine |
IMAGE_FILE_MACHINE_I386
|
NumberofSections |
4
|
TimeDateStamp |
2019-Mar-18 18:09:22
|
PointerToSymbolTable |
0
|
NumberOfSymbols |
0
|
SizeOfOptionalHeader |
0xe0
|
Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_RELOCS_STRIPPED
|
Magic |
PE32
|
LinkerVersion |
9.0
|
SizeOfCode |
0x22000
|
SizeOfInitializedData |
0x2e8fc00
|
SizeOfUninitializedData |
0
|
AddressOfEntryPoint |
0x0000216D (Section: .text)
|
BaseOfCode |
0x1000
|
BaseOfData |
0x23000
|
ImageBase |
0x400000
|
SectionAlignment |
0x1000
|
FileAlignment |
0x200
|
OperatingSystemVersion |
5.0
|
ImageVersion |
0.0
|
SubsystemVersion |
5.0
|
Win32VersionValue |
0
|
SizeOfImage |
0x2eae000
|
SizeOfHeaders |
0x400
|
Checksum |
0x50b8f
|
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
SizeofStackReserve |
0x100000
|
SizeofStackCommit |
0x1000
|
SizeofHeapReserve |
0x100000
|
SizeofHeapCommit |
0x1000
|
LoaderFlags |
0
|
NumberOfRvaAndSizes |
16
|
MD5 |
f99f63d45cd71ab5f4e28053a2abb667
|
SHA1 |
c044da7568154f43b9f5493ebedc30ed9bde3af6
|
SHA256 |
7617fa26f48e03c5d9541068cfc7164b2ea4ed9089a93a22ff5b5e4c25d4aedb
|
SHA3 |
bacf50dc30f34da9a1d1bde883893094170d12bc36e8d3e4b2328b3683756752
|
VirtualSize |
0x21e48
|
VirtualAddress |
0x1000
|
SizeOfRawData |
0x22000
|
PointerToRawData |
0x400
|
PointerToRelocations |
0
|
PointerToLineNumbers |
0
|
NumberOfLineNumbers |
0
|
NumberOfRelocations |
0
|
Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
Entropy |
7.6987
|
MD5 |
4cc7beea1d84e00411cc4cda0495851f
|
SHA1 |
1089631729143fd54c9d6ed6e6848ad80b57b6ac
|
SHA256 |
74768f91f2b176df29146f8e709cb39037852dd752fcdbf9415f637b8f90b031
|
SHA3 |
ea51e079f65ff24e4fa9a8156aa5e2f9caed26bf208204c50ead9a96407e3733
|
VirtualSize |
0x5330
|
VirtualAddress |
0x23000
|
SizeOfRawData |
0x5400
|
PointerToRawData |
0x22400
|
PointerToRelocations |
0
|
PointerToLineNumbers |
0
|
NumberOfLineNumbers |
0
|
NumberOfRelocations |
0
|
Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
Entropy |
6.93449
|
MD5 |
24b26eed5eae8db10f8fe5b0cb35f3d2
|
SHA1 |
00d380d1aadac7bf1046e071efa14926309e5eee
|
SHA256 |
e3d0a9dd7715f2ec8c3d450634ed89d31aa0cbd09cfc37dd4ca468950ceb3725
|
SHA3 |
9357cb468b32b5e4955ace7e26804c634e7ea107a51f67ee8100e4b43e63a97b
|
VirtualSize |
0x2e6aea8
|
VirtualAddress |
0x29000
|
SizeOfRawData |
0x2c00
|
PointerToRawData |
0x27800
|
PointerToRelocations |
0
|
PointerToLineNumbers |
0
|
NumberOfLineNumbers |
0
|
NumberOfRelocations |
0
|
Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
Entropy |
1.76332
|
MD5 |
6d50cd559ff5c2c13720a3206ef5640a
|
SHA1 |
08a6a19d0e1155d6d76395144fbece1e717e0682
|
SHA256 |
8f87843955a0489b16c624792ba58279b95b81b3dfc78d7bfef6793827824fe1
|
SHA3 |
ca8927deabc71628d7f7b2c619f2452f6a02537ba7472d22a928ceee612fbea3
|
VirtualSize |
0x19918
|
VirtualAddress |
0x2e94000
|
SizeOfRawData |
0x19a00
|
PointerToRawData |
0x2a400
|
PointerToRelocations |
0
|
PointerToLineNumbers |
0
|
NumberOfLineNumbers |
0
|
NumberOfRelocations |
0
|
Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
Entropy |
5.89666
|
KERNEL32.dll |
CreateMutexW
CommConfigDialogA
lstrcpynA
InterlockedIncrement
WaitForSingleObject
SetEvent
GetModuleHandleW
GetTickCount
GetWindowsDirectoryA
WaitNamedPipeW
WriteFile
FindActCtxSectionStringA
GetEnvironmentStrings
GlobalAlloc
SetFileShortNameW
GetSystemPowerStatus
GetCalendarInfoW
GetFileAttributesW
SetSystemPowerState
lstrcatA
GetACP
lstrlenW
ReleaseActCtx
GetProcAddress
AttachConsole
WaitForMultipleObjects
GetModuleFileNameA
CreateMutexA
DeleteFileW
lstrcpyA
GetCommandLineA
GetStartupInfoA
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetFilePointer
HeapFree
CloseHandle
GetStdHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetOEMCP
IsValidCodePage
MultiByteToWideChar
RtlUnwind
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RaiseException
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
|
Type |
CAZADOTUTAFODIVASOHE
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x322
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
4.59806
|
MD5 |
2cd65ce3dc00f1f77f127fc1b8f889f4
|
SHA1 |
13e227a2b4746203214b02b2e18a881ecd65a5c1
|
SHA256 |
928f543ec688de25ff87a03bd0f0e3a625c2098a79e2171ed28529f417a9eea2
|
SHA3 |
43cc5b7a242fb2d8dcb9f8c77a9201a1e680b7bb4cf4fc1dcac68ceef150c8cb
|
Type |
KER
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0xacd
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
4.63701
|
MD5 |
8cd8342376e4b570b933fe5e7b28a5ce
|
SHA1 |
ed6b589df19a7ac1f368e9bafb0752fef1add70e
|
SHA256 |
b7f04c20bdd7e17012a2bfe512d8815accf48eb2f8f06e49a5eb2f2372eb5b76
|
SHA3 |
ca2f2aaa9f9768fa6ceb42f96735e9c75c62f7183f35558ace4d2e8fc7da4d84
|
Type |
RUFEFEXAKUBUPEXAXUKECAVIPENUVORI
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x685
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
4.63947
|
MD5 |
ca503f3b7a6397f6ef7dcd60451e8b2d
|
SHA1 |
76ca1058214ae236b20924f38153453322bb34d3
|
SHA256 |
8b496ca70d5d0807912f31849b944ef4db8b4d88fa724eee9c40fbbcef659ba6
|
SHA3 |
9481e7dde4306dc605dbedfb938c784cc59ef6b0f11a15d551d5a217e6a20e9d
|
Type |
RT_CURSOR
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x130
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
2.44093
|
MD5 |
df7040d6bfffe170275ea7f8f46bc89d
|
SHA1 |
eb470be9aa613998d303922cd0a90dc0c89eb686
|
SHA256 |
665c5c54de11054a0fdbfe66f7a55567f1354657b489dc4c272ce44443f6131c
|
SHA3 |
888352f2739763b1ef7f94ec022fcc317a1e64b7164fad21068faec235da3d6c
|
Type |
RT_CURSOR
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0xea8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
2.697
|
MD5 |
43a50c2f09e0a5994b49ed27a7cd89f3
|
SHA1 |
fbe8d240f3c5c5ef8c48e44fee1d4ea2e868e726
|
SHA256 |
688c7705da1cf555e6cd446aca007277e9dbc97967bb261e1f23f31a4f6721c1
|
SHA3 |
8b53d1fbe374e0be8bd64ef443fa782a894e705ac186b0f3ec32c08a60b2d2ab
|
Type |
RT_CURSOR
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x8a8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
3.76287
|
MD5 |
53fae6172bd9e2af02f0cee75c62384c
|
SHA1 |
f5fb873564c65f3d6cb39dbd3305936f67e953c1
|
SHA256 |
3060c1f6855b4c81c6ab44cf155ca716021863a192a5e778d5626e1cb8f8f028
|
SHA3 |
f8c0ba633e60acc9cd1cbbae84bc0448b8d8aafe2bb0de93b59e2da57a2ba4ac
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0xea8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
3.70405
|
MD5 |
c1547ae4c33feaa0885d0d5ca0fee3fc
|
SHA1 |
a176db8a09eb92715be7daa8b5848015b3212be4
|
SHA256 |
8874718d304a3516ddfc6ceddaeaab2bd3307b9527b756b3a540d11e7221cea1
|
SHA3 |
d1073de54d7a3a426fcf75ed01d778da94ce8721f1444511bb77a800256637aa
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x8a8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
3.5331
|
MD5 |
200b0f0e35004164f6e50b8cb0082d35
|
SHA1 |
b416954bc911741f39e4b5f9acc93277c66bf771
|
SHA256 |
65dd8f176165bd3835c26e034f42737128e104ded66e917e59f821e7a9fcd9c7
|
SHA3 |
bd53d925bf80e65a31ddd2676d3fb30685357db07cea46b7be37dbb5671fb682
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x568
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
2.40433
|
MD5 |
fa04b000fd43212f443ab80f8a5ff30e
|
SHA1 |
0573b824148e68bff551010ed8428400cef1030d
|
SHA256 |
f9ed445c1469c245e1ca4cdd933c6ee7f56fa7869af7332109205070d41fe7ee
|
SHA3 |
9a997fa51c2bcab66aa51be80eebde034e19cd7e1a2ae939af281c7557220e48
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x25a8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
4.59374
|
MD5 |
2e86c48a87d863d22afc58caee1b2235
|
SHA1 |
327cc688f0fca9a6b36e9db120251ded1412068a
|
SHA256 |
aa85dea02c9649b23bbcca05ce2fed43b04e2f6fdea9975b266a42f68733bea8
|
SHA3 |
b076305c1b461f9b93dc3d3cb34b4e7021fa086a773668167ed5957a8665282d
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x10a8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
5.23204
|
MD5 |
1ab1b9858c4cf391d12603da954778c8
|
SHA1 |
e2b123541d0d4a8382c6860f6f8c8b133aa0a6ea
|
SHA256 |
a8c85c44f4be552f62a06da8d9289fd300a6f66ee56cc882409aae722e495923
|
SHA3 |
5d4a3664192ed0561262f69f9b19d5b9e1b5d331438460de6ed56a194893aca9
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x988
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
5.35137
|
MD5 |
23d56f51754a1817e97ceae0359fd543
|
SHA1 |
16507bb3a7f205ebe2c5bf5faa76cf52279f0f27
|
SHA256 |
d23a4819b283884509071fdca0b546eb8e5200ba4bbbec5bbe20c49d554beaa8
|
SHA3 |
88a72c20852c359710743567e33adf3ec0c811716e74b8ebdfa3bd6c45c0d465
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x468
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
5.26395
|
MD5 |
b48c4fc5be7548161c42684c9000cbd7
|
SHA1 |
9d019a5cbc5cf9e23a2d25aae6410619cd630932
|
SHA256 |
1930c4f5e94da64508e4c280cb143aa6afc74d15fa035a6297e03d9021729db2
|
SHA3 |
8c8bb1ac854d7ccc15396932cf542d362d32029799a3405193dbe167fa218284
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0xea8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
3.7755
|
MD5 |
5174c2fdb698d575ca9c5c85a1678f97
|
SHA1 |
1ff190ef14029f8a16db41202a6e367cc556d549
|
SHA256 |
db3adb01ff86ae6eb0f7a93ee68ecab2e327c560f3583afb8dd415ad82f755bd
|
SHA3 |
38490174d12105727583beab67560ef53fe9a9068437b8c51cfd8f17d9ce1766
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x8a8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
4.73551
|
MD5 |
d54c2878a21f4b587edf1b4fbf32f042
|
SHA1 |
46e9579d698c7d4000318618093d816b7a8f7b3e
|
SHA256 |
7c48d5a89ce7fd1731689671a6e9ea116c0c7b847affd8e66667c9e0a3b735b1
|
SHA3 |
1266a28bf364aba2d431fbc0de0f0dada14dc9cbef740aae550438376c0ed870
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x6c8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
3.52154
|
MD5 |
ffd84dced0b92a7aef968a97b632b014
|
SHA1 |
77b9551daa224db4d6fa8304c3aba495f22f4702
|
SHA256 |
ac654afd0c248e2f37389a75208be874d3449e569bf894952959b58572e9c28d
|
SHA3 |
efca8dd51f5762d24f9504a5faf0f8f7e9f30f70f012709601cfab0db4897e28
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x568
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
2.33034
|
MD5 |
0ea09f0c2334be7d2783fd3d9c7dfb38
|
SHA1 |
ac279702f2fcb18cd4d8622782d713e5b394b954
|
SHA256 |
56c1421527637ecc63ad8dc76be6c1e141fba3248c4649d28c9fef1de10bc944
|
SHA3 |
9320f503010c86e44bd116decdef39bd9cf7052ab123095845395fc218cc81d9
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x25a8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
6.47071
|
MD5 |
a3a2f4d013f4f3e89590cf90cfb94aa8
|
SHA1 |
a8904b0c30aed3f1f8221a272b6f071ced345ad5
|
SHA256 |
2de19acc9844361ae06dcd18cefb7aea46943893dc0a1e17bc6873a7f6249dc7
|
SHA3 |
ad103c9d2bd43c4f19a7bde09bacb17a133134c99be1912dbe2a8b36b33a2693
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x10a8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
6.75969
|
MD5 |
84e65db04c6ce1931b90efe75417825e
|
SHA1 |
5d4f9bcddd4d403f5fb81c50ecd68238c786f3b7
|
SHA256 |
9e685cad970d023d2449643f372e050cd735c0d0af18c70a7d76a806b9308192
|
SHA3 |
fb424670c6962b9988e4c05bea0cc5febe889d9603cb0d772fcdc00b3c5055b4
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x988
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
7.08602
|
MD5 |
49818fca89e97b3148c4f8e65737c857
|
SHA1 |
13449cc15de3b3ed9ed51898e90f9a11c3412ffc
|
SHA256 |
a763e6fedb2e4b3884cee6b06c64b6dc173a4dd59cf9acb6dcb97e4c317296c1
|
SHA3 |
d60c5d7e17f0b04074cdab751aacf26f9f4fd8eedbe41dc485b91d475314b4fc
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x468
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
6.82266
|
MD5 |
5b3bbd3760333b0504c60341084be0fa
|
SHA1 |
5832ad34e26adb8be39cbfcaf844a6db0bd281ef
|
SHA256 |
7929c6a86d1de8a4722f9d4abd855de6ef9b70120b3fd16067e58f3315d73c88
|
SHA3 |
58d9db811ba3dcf6227385589722fd14cde5807a8e07f1f98f010339fdafdf55
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0xea8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
5.68739
|
MD5 |
8c906e712698a49743965487ff906c6a
|
SHA1 |
5ed3572aa612673bbdd226171f96b99c29b939c9
|
SHA256 |
c9a64fe47a4ef81682ecb80daef261d298cd5c749d6f91b063ed1e7469a144be
|
SHA3 |
93735cbaa8098620a23323df0c6abf8e22e3a95b6fc708a927831e98f35335f2
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x8a8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
6.2681
|
MD5 |
1217e3d3acd0b98798cdf76489b03470
|
SHA1 |
e400e1f8028f5b73c43f20d3007144582f5b649a
|
SHA256 |
4c7ab8796909fede98b4b65a8568570f892e96dc0fc97d0adfbf68d73de0578c
|
SHA3 |
105f7b7abe9841a9d893ad2b436684828fed1c2ab31c3212001cbe14f4a5b328
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x6c8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
6.25272
|
MD5 |
1f6b7a4f9d5dcf56037e59f359b76a2f
|
SHA1 |
bafb3543d31e5b6af22a3add78ad94cde583eb49
|
SHA256 |
a52bf2e0cb18445ff2bcf63874201117fb58ae7656bd8d44de5b127d6f4ab9ad
|
SHA3 |
7e308fcf99680918490490d3c7b7d7eb27cc246362543e92b38624830ad89443
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x568
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
6.23492
|
MD5 |
39b451932d9214d61a58d7fef65eae11
|
SHA1 |
e8533fd23b7fd0bb763f02a46e42aff052eb3285
|
SHA256 |
0f9bb6e2fd4bbacf32ddf78ba974329e2ce89ee1b8243d85cc7837fcb2fc5c91
|
SHA3 |
d283ea88359d3e2b2971d2fbe93133d3a640de5f585f9b2131bb16645a3115d3
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x25a8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
6.32007
|
MD5 |
cef6d7162fdc417427d59917a07735b1
|
SHA1 |
b3c1df0d1cda4f59ffff622bdb4f07952630331e
|
SHA256 |
a4b90192396bddd3bb59ed8aa1fc02cc604a162f020a2af7f4cc3ce81045b59a
|
SHA3 |
cea019b6cf7fef38a25e3607399979c7587781b3fdda5e52ed564d33490e2813
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x10a8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
6.55692
|
MD5 |
c1c79a45031d1034a0442f25f6de01ae
|
SHA1 |
4855c0b264f1156f4783851bcb3b2db53ecf0dfe
|
SHA256 |
de4143d06c46acde5519b5614994d80840d8e3524ea5df42f4693bb4b52f1d28
|
SHA3 |
d875fa8d41c619c6e3e778ec8d1a92cb4ee3ad9048dc9564623b4b226ba27679
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x468
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
6.82515
|
MD5 |
0a4ac3cd9f9172e27d6b8785feedfe4a
|
SHA1 |
173183388f933d69f59a0caa91b5ea24236e3758
|
SHA256 |
3e4ddd1e87f60cb7b545e36926a6663f87c216a0adb8ba21b280207f71acb8a2
|
SHA3 |
4c8de340282524b033f601bfb5cb341f3cbc72c026d1125c9af260c6a1f034ca
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x6c8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
4.88259
|
MD5 |
991c3e1a1f80a702859407d1012b8bbe
|
SHA1 |
a219faafbb466fbead93dc1aa4129be28aec1ff5
|
SHA256 |
ba84260149e41ab53c7eca6642f91cabe291cf5a61194332e504249170350e45
|
SHA3 |
0a9377830601b5d178408ed5e6bf6c6bb959f151ebf73d3dc82de0848e38736f
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x568
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
4.62088
|
MD5 |
79c878f83276fb92ad286df63e9baa8d
|
SHA1 |
98dc0ff0bf91dc859ce2ddb892f21bad16c3a7e3
|
SHA256 |
9d72f9907183541b26a4aa7a07041492b0fe516552e4f1780497a9d8b250b7ae
|
SHA3 |
183d443d5be181a4d99230f1b0e25830ccd3bccda975bc63fcca8529b3c57adf
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x25a8
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
4.892
|
MD5 |
e4285d2c16b6ca75c3aff47ba8134789
|
SHA1 |
6081f9f1ac2c1e6c7ce744b80e125e00523eb46e
|
SHA256 |
8bcfbca2acf26932d8ab375e156c6603ead60c25cd51acfdaf37e65a5da70eb8
|
SHA3 |
f75c96317727f94f8e1a8b3106ff03f93caf048968f037fd8c249a7703ba9334
|
Type |
RT_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x468
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
6.40329
|
MD5 |
04ca8b925a11064c45a28427408741ce
|
SHA1 |
8a11345dd43a3ac87a36e4f49b415e4da774d373
|
SHA256 |
3aae094dd6228f748fe0da0145481490bcf73c7b2cb9107152cb2558b7d1062e
|
SHA3 |
62418202bb972e6f8527545ebc80a1ea120a062d3a529dac1a52bf849bda7d47
|
Type |
RT_STRING
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x21a
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
3.15238
|
MD5 |
defe3cecd9bbcae7128ee2b4889fb6ae
|
SHA1 |
f2405f2e4a8ea8e83b80651aadbb2de6f2cc4183
|
SHA256 |
0d81805e92d6c4e9a61700ac2268fdc014f506ff9755ae32251f2e4de099c0f1
|
SHA3 |
9ce1b30811412af7803bbd8bb9ab78f3a757253fbb41d409eafbc22358340bbe
|
Type |
RT_ACCELERATOR
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x28
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
2.84209
|
MD5 |
7e808ac50e9cf05b88bb7ce978ce7be3
|
SHA1 |
a8f1d8fa1d62306421bf0a84a6d5369e920e9f77
|
SHA256 |
b26722778e208dd069bfa0e895f4e67952eeca67b8f9322c0f568d7cfe5fd737
|
SHA3 |
72fedfdb32fe316f9c1bce43494221a6f44d3f7d523f5480beb1a9b4bf470e79
|
Type |
RT_GROUP_CURSOR
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x22
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
2.42369
|
Detected Filetype |
Icon file
|
MD5 |
9fac76833c6be6a9aee2b56144ad0579
|
SHA1 |
3cd1d68044c4979b4240056b99bc2a00110cecff
|
SHA256 |
4a2907349c7e93fc37a1b54ff2fa56bcb58b5b6d8a45a45d6f39fab76088d021
|
SHA3 |
977acdae8860be29e840b358c3bafcce22c0139f0431f7d1b83019ac047347e5
|
Type |
RT_GROUP_CURSOR
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x14
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
1.98048
|
Detected Filetype |
Icon file
|
MD5 |
aad2ee16adb19f266c376a45d00c492a
|
SHA1 |
78a7706a680aab2ad58d128572c907198d997c87
|
SHA256 |
30235c9624716e07d7681a6f2ce21be3ce3f01f14a6e6291d4f5939200d15f08
|
SHA3 |
0be8f5f27bb77f1427723f04120afea3360818db9bd9cff86644228acdccb56f
|
Type |
RT_GROUP_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x68
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
2.90861
|
Detected Filetype |
Icon file
|
MD5 |
03879dc415ccef9ecd68530895c9f3c0
|
SHA1 |
f8cdd377f66bf83ba337fdbf2a53e5aa79669cac
|
SHA256 |
715c363160d7a6d349aef7d1abf609838ab16c53b3c435df55618bcce5bb3b2d
|
SHA3 |
148d862ea81cc5fad6d3ba3bf4bcc3eb1eb888cc8afb06121240ba07b22ad876
|
Type |
RT_GROUP_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x68
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
2.83776
|
Detected Filetype |
Icon file
|
MD5 |
eeb80c69c9fbf3358c8ff259c7a17b19
|
SHA1 |
bf3c11c0133e3e80dd1cb460f1d19963166d79a1
|
SHA256 |
582b16b3a55169ebdd7885cfa96227e80a971f13f6b395fe0469e06e2ce8b800
|
SHA3 |
cba4568dc45c11c33ae4c764adc6d4f4122d82c4cb62f4ac665b70538d6da01a
|
Type |
RT_GROUP_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x76
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
2.91481
|
Detected Filetype |
Icon file
|
MD5 |
3fd594196581d8b66ec6a6c9c2c260c7
|
SHA1 |
d3f7187f7cbde5f8c20760f151e9ed89cc7e9886
|
SHA256 |
655b3bf20a9f1e6eb73a7379af92bcc79931147f2203b3792d58f747746ee557
|
SHA3 |
c9da016c0c5ddcc8d29a7595a2b966fffe6be2b4a6307515cdf630efb50f4acf
|
Type |
RT_GROUP_ICON
|
Language |
Swedish - Sweden
|
Codepage |
UNKNOWN
|
Size |
0x3e
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
2.81928
|
Detected Filetype |
Icon file
|
MD5 |
9aeae978449e1caeac9e8ad714712f8c
|
SHA1 |
714ffdb2cb20da8916769c536cb4997dc22f1705
|
SHA256 |
b407e02c9a4613f954675f03975607ee08b84ec2899cb1789e4d9e8b8c485ff5
|
SHA3 |
a57998cc744d354982a5121063679f1ad649de876cab3006c5966e16ad0b7b78
|
Type |
RT_VERSION
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x1a4
|
TimeDateStamp |
1980-Jan-01 00:00:00
|
Entropy |
3.34933
|
MD5 |
0fd0e3a5484d39ef7e2d60d327c70c92
|
SHA1 |
9467100ea8fc6ea5eb164b10ed262046dbc420e1
|
SHA256 |
9c5701628d6ddcbac0748820cb6b5ee726765da4d2709a1851b0c3a6c01d260c
|
SHA3 |
b3d557f9edf0c89b22ab8565fb78c0512c460c0ba2c7d60551a547fe33a18099
|
Favigomad bifavuve yolic nesutixikusane welokusosay pewebizaw |
Wohicozelacey yewinucap cugupinexifepu gupigigamafe nexuxikajux zasuzogurujijav bevopowikokege |
Delomufu nazekecibalap yama rumogekinexezig fuvaribamusem zubowohul |
Dube bahevic rulexe pehudojipok |
Signature |
0xfeef04bd
|
StructVersion |
0x10000
|
FileVersion |
1.0.0.1
|
ProductVersion |
1.0.0.1
|
FileFlags |
VS_FF_PATCHED
VS_FF_PRERELEASE
|
FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
FileType |
VFT_STATIC_LIB
|
Language |
Chinese - PRC
|
InternalSurname |
dhrj.uxe
|
Copyright |
Copyrighd (C) 2020, odfrjv
|
ProductVersion (#2) |
1.0.4.6
|
XOR Key |
0x901cf85d
|
Unmarked objects |
0
|
C++ objects (VS2008 build 21022) |
37
|
ASM objects (VS2008 build 21022) |
26
|
C objects (VS2008 build 21022) |
122
|
Imports (VS2012 build 50727 / VS2005 build 50727) |
3
|
Total imports |
128
|
138 (VS2008 build 21022) |
1
|
Linker (VS2008 build 21022) |
1
|
Resource objects (VS2008 build 21022) |
1
|
[!] Error: Could not locate RT_ICON with ID 28!
[*] Warning: Resource 2384 is empty!
[!] Error: Could not locate RT_ICON with ID 27!
[*] Warning: Resource 2385 is empty!