6e43032f69b230fcb022adc30b310c05cde283d6b7302e8e45a58c6f2171c927
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2017-Nov-14 06:51:15 |
| Detected languages |
English - United States
|
| TLS Callbacks | 1 callback(s) detected. |
| Debug artifacts |
E:\build\nw26_win32\node-webkit\src\outst\nw\initialexe\nw.exe.pdb
|
| CompanyName | The NWJS Community |
| FileDescription | nwjs |
| InternalName | nw_exe |
| LegalCopyright | Copyright 2016 The Chromium Authors. All rights reserved. |
| OriginalFilename | nw.exe |
| ProductName | nwjs |
| CompanyShortName | nwjs.io |
| ProductShortName | nwjs |
| LastChange | 2da8f187bb38bfbff94be6d62369d30bec04d9ca- |
Plugin Output
| Info | Matching compiler(s): | Microsoft Visual C++ 6.0 - 8.0 |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Info | Cryptographic algorithms detected in the binary: |
Uses constants related to CRC32
Uses constants related to MD5 |
| Suspicious | The PE is possibly packed. |
Unusual section name found: _text32
Unusual section name found: CPADinfo |
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Safe | VirusTotal score: 0/67 (Scanned on 2026-08-19 18:56:47) | All the AVs think this file is safe. |
Hashes
| MD5 | 59b3cd10af502bcb3e94b7aa08000b6c 🔍 |
|---|---|
| SHA1 | f0350b091e2c706ebbce3112174bace9a5dca371 🔍 |
| SHA256 | 6e43032f69b230fcb022adc30b310c05cde283d6b7302e8e45a58c6f2171c927 🔍 |
| SHA3 | affbbead79185b2f36d1a782ae3ab572b88eefbd34d0a6458fd2b96fbeba8452 🔍 |
| SSDeep | 49152:11ofvF4pW2xu+3ozNMWhPCKpIrPdDJUbSThkVk8DvJnvfbwTJAosyhTcpnq1Sf:rivFCW2xu+4ZPCdfhkVpDvdfb6cq1Sf 🔍 |
| Imports Hash | ebc1f0b837db93a03a050fc191ae18df 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x148 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 9 |
| TimeDateStamp | 2017-Nov-14 06:51:15 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x2f1600 |
| SizeOfInitializedData | 0x102e00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0026F280 (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x2f3000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 5.1 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.1 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x3fb000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x3f95e0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | 18ce5187b473863e5aaf013678c9e78f 🔍 |
|---|---|
| SHA1 | ffe1341b6c5d16308907fca59c01453a92998186 🔍 |
| SHA256 | 5a245d91eb6a8630a4dde2735b746ef7c683d1aebcdf9d4d961e1719f418bf7f 🔍 |
| SHA3 | 3a473a7317dac72ec13dff39128fd0230bbfa1aa1852a75a8dd69457060019f7 🔍 |
| VirtualSize | 0x2e3f8f |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x2e4000 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.65796 |
_text32
| MD5 | dfaf22db8cf06e8b0fe2dcb1efb12df0 🔍 |
|---|---|
| SHA1 | 7eb82060cba3cbde9ea2464c9cae95d43bf1c29a 🔍 |
| SHA256 | 05c015146c292a8cfd1348b4d15f6ed4498c14f7fefda112c5935d628cb76ff5 🔍 |
| SHA3 | 68b9b19c07cb10258b85a2ed3535521c46b8691f8b31bbb4676461f25210a16b 🔍 |
| VirtualSize | 0xd46c |
| VirtualAddress | 0x2e5000 |
| SizeOfRawData | 0xd600 |
| PointerToRawData | 0x2e4400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.12158 |
.rdata
| MD5 | 91d5d07b0f9ad0a53e053e658bff5a48 🔍 |
|---|---|
| SHA1 | 0983f1ffb2a080838c010a6f76cc1ec44b38b06d 🔍 |
| SHA256 | c1cd36efe17ddf3e62d46f75a5f63d4b4e08f49cc2b7641fb31fa9a8096b67ae 🔍 |
| SHA3 | 2030ba767c2f8eb0feef08057991a97b0edef62b5d0cc57a121cec0c17389d11 🔍 |
| VirtualSize | 0x88bb2 |
| VirtualAddress | 0x2f3000 |
| SizeOfRawData | 0x88c00 |
| PointerToRawData | 0x2f1a00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 5.52834 |
.data
| MD5 | f6af91fbc07573f31656095759bdcd99 🔍 |
|---|---|
| SHA1 | 283d8b3868ae2de67d81ff0ee1540a760abd1219 🔍 |
| SHA256 | c24fa2cacf9a3e88cf8bddf198bb47541612dcf25f7e5602cf60cd8f1869dd3b 🔍 |
| SHA3 | 3d6d5a37eb3782ccc9dd51fa17e581a3ca07560a764a5e99dace86d71eff6e9c 🔍 |
| VirtualSize | 0x9068 |
| VirtualAddress | 0x37c000 |
| SizeOfRawData | 0x3000 |
| PointerToRawData | 0x37a600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 3.50604 |
.didat
| MD5 | 6cfd8ca68615592f3094e2e913975b8f 🔍 |
|---|---|
| SHA1 | 2d78dfacc869bb860ae70a880eab3bca93af14e7 🔍 |
| SHA256 | 8d8aec6783612613302ce33ac052464f435341e0558bae1a6a74b8232b43ca9e 🔍 |
| SHA3 | 8a11f3212be9bb8f7ba9e64a25791ddd2bf7eefa1696fa81378d269420c8b362 🔍 |
| VirtualSize | 0x3c |
| VirtualAddress | 0x386000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x37d600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0.608607 |
CPADinfo
| MD5 | d273139d7dd4280f40c57791927d34c6 🔍 |
|---|---|
| SHA1 | dd4be37c7bb030db71d83d2d83415b7aca472cec 🔍 |
| SHA256 | 05ca34693b344f97b49848a08d180b20cd6961c60f7fcc2610a2cbe5fe77ac2e 🔍 |
| SHA3 | df09b2e653ae5ac827c5b5d3e9206bb2d799825b8387518530d646f450104703 🔍 |
| VirtualSize | 0x24 |
| VirtualAddress | 0x387000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x37d800 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0.122276 |
.tls
| MD5 | bd777d1f1416a1ff3053ce0949d87629 🔍 |
|---|---|
| SHA1 | a33d91b57fce6c1231b7f4ecc05beba062301023 🔍 |
| SHA256 | 37f416f871ff5628986d9c2f8e4b3b23cf733dee5e01c82cdb27c4d1ae54b149 🔍 |
| SHA3 | 14563e9a18f49dd7da0839f8c6fd61d28f59623adbc3ec641245b5bf2c4156e1 🔍 |
| VirtualSize | 0x21 |
| VirtualAddress | 0x388000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x37da00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0.136464 |
.rsrc
| MD5 | 75a6841cfeda1afe0f5b1a4698ccd31b 🔍 |
|---|---|
| SHA1 | 2ada16cb0caa7f4b111047588f4c6d2034c2410e 🔍 |
| SHA256 | 0b4f7042be524d26f38b0d89020074cddd800eaae01ba5f50b0bc1fc896019a2 🔍 |
| SHA3 | a6aa961ab50b940dbf5ac22a5c5c2d65d0e4e01f04932cdd2233cdcbbdd877fe 🔍 |
| VirtualSize | 0x5a7f0 |
| VirtualAddress | 0x389000 |
| SizeOfRawData | 0x5a800 |
| PointerToRawData | 0x37dc00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 4.76106 |
.reloc
| MD5 | 26461c51f7ddeee736dcfc97308bfcce 🔍 |
|---|---|
| SHA1 | e225c2c22a13699f02a6a2ea9294d37f47382276 🔍 |
| SHA256 | 3dc25c274e85ee80ba52ea70e7440a08caf1402f2b1907f6cef79536570a043c 🔍 |
| SHA3 | 3d564bcef6da18b9992e51da71b90f3261436a2402902b5cfb2354c762bfa34d 🔍 |
| VirtualSize | 0x1611c |
| VirtualAddress | 0x3e4000 |
| SizeOfRawData | 0x16200 |
| PointerToRawData | 0x3d8400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.69403 |
Imports
| nw_elf.dll |
SignalChromeElf
GetInstallDetailsPayload |
|---|---|
| ADVAPI32.dll |
ImpersonateNamedPipeClient
GetSecurityInfo RegCloseKey RegCreateKeyExW RegDeleteValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW SystemFunction036 OpenProcessToken GetTokenInformation EventRegister EventUnregister EventWrite GetAce GetKernelObjectSecurity GetLengthSid GetSecurityDescriptorSacl SetKernelObjectSecurity SetTokenInformation SetSecurityInfo ConvertStringSidToSidW ConvertStringSecurityDescriptorToSecurityDescriptorW RevertToSelf RegDisablePredefinedCache CopySid CreateWellKnownSid CreateRestrictedToken DuplicateToken DuplicateTokenEx EqualSid LookupPrivilegeValueW CreateProcessAsUserW SetThreadToken ConvertSidToStringSidW SetEntriesInAclW |
| GDI32.dll |
SetBkMode
CreateFontIndirectW CreateCompatibleDC DeleteDC DeleteObject EnumFontFamiliesExW GetCharABCWidthsW GetFontData GetGlyphOutlineW GetOutlineTextMetricsW GetFontUnicodeRanges GetGlyphIndicesW GetTextExtentPointI AddFontMemResourceEx RemoveFontMemResourceEx SelectObject SetGraphicsMode SetTextColor SetTextAlign GetTextMetricsW SetWorldTransform CreateDIBSection ExtTextOutW GetTextFaceW GdiFlush |
| KERNEL32.dll |
GetThreadLocale
GetSystemDefaultLCID GetCurrentThreadId GetModuleFileNameW GetModuleHandleA GetProcAddress GetLastError SetLastError CreateEventW DuplicateHandle WaitForSingleObject GetCurrentProcess GetProcessId SetCurrentDirectoryW GetCurrentDirectoryW SetProcessShutdownParameters LoadLibraryExW VirtualAlloc VirtualFree MultiByteToWideChar WideCharToMultiByte ExitProcess HeapCreate HeapDestroy CreateFileW DeleteFileW WriteFile OutputDebugStringA CloseHandle GetCurrentProcessId GetLocalTime GetTickCount FormatMessageA QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive Sleep GetCurrentThread SetThreadPriority GetThreadPriority GetSystemTimeAsFileTime QueryThreadCycleTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime FileTimeToSystemTime SystemTimeToFileTime GetCommandLineW LocalFree GetModuleHandleW ExpandEnvironmentStringsW GetVersionExW GetNativeSystemInfo TerminateProcess GetExitCodeProcess OpenProcess FlushFileBuffers GetFileInformationByHandle GetFileSizeEx ReadFile SetEndOfFile SetFilePointerEx SetFileTime VirtualQuery CreateFileMappingW MapViewOfFile UnmapViewOfFile IsDebuggerPresent RaiseException CreateThread GetThreadId HeapAlloc HeapReAlloc HeapFree HeapSize RtlCaptureStackBackTrace SetUnhandledExceptionFilter AcquireSRWLockExclusive GetSystemDirectoryW GetWindowsDirectoryW CreateDirectoryW GetFileAttributesW GetLongPathNameW QueryDosDeviceW RemoveDirectoryW SetFileAttributesW GetTempPathW MoveFileW ReplaceFileW UnregisterWaitEx RegisterWaitForSingleObject GetUserDefaultLangID TlsGetValue GetModuleHandleExW GetProcessTimes FlushViewOfFile GetEnvironmentVariableW SetEnvironmentVariableW FindClose FindFirstFileExW FindNextFileW TlsAlloc TlsSetValue TlsFree CreateIoCompletionPort GetQueuedCompletionStatus PostQueuedCompletionStatus SetInformationJobObject GetSystemInfo VirtualQueryEx HeapSetInformation SetEvent ResetEvent WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW DecodePointer InitializeCriticalSectionAndSpinCount DeleteCriticalSection CreateProcessW InitOnceExecuteOnce FreeLibrary InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetTimeZoneInformation ReleaseSemaphore CreateSemaphoreW ResumeThread LoadLibraryW OutputDebugStringW LockFileEx UnlockFileEx SetConsoleCtrlHandler VirtualAllocEx TerminateJobObject GetUserDefaultLCID WriteProcessMemory AssignProcessToJobObject GetFileType SetHandleInformation ProcessIdToSessionId GetProcessHandleCount GetProcessHeaps SignalObjectAndWait CreateMutexW VirtualProtectEx ReadProcessMemory VirtualFreeEx CreateJobObjectW CreateNamedPipeW CreateRemoteThread DebugBreak lstrlenW SearchPathW VirtualProtect LoadLibraryExA GetThreadContext SuspendThread SleepEx GetVersion WaitNamedPipeW TransactNamedPipe SetNamedPipeHandleState IsWow64Process GetFileInformationByHandleEx DisconnectNamedPipe ConnectNamedPipe SetFilePointer SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage WriteConsoleW EnumSystemLocalesW IsValidLocale ReadConsoleW GetStdHandle GetACP SetStdHandle GetFullPathNameW GetConsoleMode GetConsoleCP PeekNamedPipe GetDriveTypeW RtlUnwind GetCPInfo GetLocaleInfoW LCMapStringW CompareStringW EncodePointer GetStringTypeW GetStartupInfoW InitializeSListHead IsProcessorFeaturePresent UnhandledExceptionFilter WaitForSingleObjectEx |
| PSAPI.DLL |
QueryWorkingSetEx
GetProcessMemoryInfo GetPerformanceInfo |
| SHELL32.dll |
SHGetFolderPathW
SHGetKnownFolderPath CommandLineToArgvW |
| SHLWAPI.dll |
PathMatchSpecW
|
| USER32.dll |
GetMessageW
RegisterClassW GetUserObjectInformationW GetProcessWindowStation SetProcessWindowStation CreateWindowStationW GetThreadDesktop CreateDesktopW CloseWindowStation CloseDesktop PeekMessageW PostThreadMessageW TranslateMessage DispatchMessageW PostMessageW SystemParametersInfoW wsprintfW SetWindowLongW GetWindowLongW DestroyWindow CreateWindowExW UnregisterClassW DefWindowProcW |
| USP10.dll |
ScriptFreeCache
ScriptItemize ScriptShape |
| VERSION.dll |
GetFileVersionInfoW
GetFileVersionInfoSizeW VerQueryValueW |
| WINMM.dll |
timeGetTime
|
| WINHTTP.dll |
WinHttpReceiveResponse
WinHttpCloseHandle WinHttpOpen WinHttpCrackUrl WinHttpReadData WinHttpWriteData WinHttpSetTimeouts WinHttpOpenRequest WinHttpQueryHeaders WinHttpAddRequestHeaders WinHttpSendRequest WinHttpConnect |
| dbghelp.dll (delay-loaded) |
SymSetSearchPathW
SymGetSearchPathW MiniDumpWriteDump SymInitialize SymGetLineFromAddr64 SymSetOptions SymFromAddr |
Delayed Imports
| Attributes | 0x1 |
|---|---|
| Name | dbghelp.dll |
| ModuleHandle | 0x38345c |
| DelayImportAddressTable | 0x386008 |
| DelayImportNameTable | 0x379b64 |
| BoundDelayImportTable | 0x379c78 |
| UnloadDelayImportTable | 0 |
| TimeStamp | 1970-Jan-01 00:00:00 |
GetHandleVerifier
| Ordinal | 1 |
|---|---|
| Address | 0x2df50 |
IsSandboxedProcess
| Ordinal | 2 |
|---|---|
| Address | 0x2592e0 |
1
| Type |
GOOGLEUPDATEAPPLICATIONCOMMANDS
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x4 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 0.811278 |
| MD5 | 4352d88a78aa39750bf70cd6f27bcaa5 🔍 |
| SHA1 | 3c585604e87f855973731fea83e21fab9392d2fc 🔍 |
| SHA256 | 67abdd721024f0ff4e0b3f4c2fc13bc5bad42d0b7851d456d88d203d15aaa450 🔍 |
| SHA3 | 295cd1698c6ac5bd804a09e50f19f8549475e52db1c6ebd441ed0c7b256e1ddf 🔍 |
1 (#2)
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.72812 |
| MD5 | d4ff4e9e724f25f5265a3b0cd07d03d4 🔍 |
| SHA1 | 9777e4e59ce089e4c8727910586b325f1cbfe12d 🔍 |
| SHA256 | 8c5a126b0e59e2927158fe5008c375aeef5396adb797c682e07578d13c283a3f 🔍 |
| SHA3 | c75e4c8d4280cd1e4d3a7d59a7d7993be648ff029d47900a843807031484d03d 🔍 |
2
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.05033 |
| MD5 | 717434e636786d3d0fb3f571f6109660 🔍 |
| SHA1 | 2ed8ddea1a94e39f624dd752c1843648e5ad2aa6 🔍 |
| SHA256 | 06db3222f267c74b72573a349de6a24bcfbb4bba9656d3dd6b50f4f64326e156 🔍 |
| SHA3 | 11bf1f65e167fb701bcd216f1c0dfafb324c6d5c883989c59fcfcd08d93072a3 🔍 |
3
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.80214 |
| MD5 | 97f6acbd9fba8933adafe9cef8193ff7 🔍 |
| SHA1 | 3fcce71b59dd9806e573170748858cc02c00c260 🔍 |
| SHA256 | 91baaad720c63aaff01b902deda14e2c8b355c31159b71c481dc6fb67bcbb4cf 🔍 |
| SHA3 | d5b9de20cb7ea1c27b6a8500de4b0e2b8b436804b1d70a4ddbd8d77ce60ef340 🔍 |
4
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.63098 |
| MD5 | 14a8d213994c484121f0f0d63746601d 🔍 |
| SHA1 | 3ad42569021b69060eb157875531fa0310b48e86 🔍 |
| SHA256 | 2d2aea139c8f41675322a459ce75295ac168eb0e925ed5a75c0981b3693069aa 🔍 |
| SHA3 | e684a3170b7471ffd03ac8607f9d5d56a3892db7d3d21bc5d4ab9383fbebcb92 🔍 |
5
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x3c |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.20118 |
| MD5 | 949051d3e4cd407e696581501fef8c1e 🔍 |
| SHA1 | cb69313c16a86cac5ba55b5d808cea073ed580c6 🔍 |
| SHA256 | e885dbf2a5fce6c41a16ad6e633830cbeaa469512bbf15b8bb4ca51562aec60b 🔍 |
| SHA3 | 5ffb72c181ab2dfd9d894992179b1f1d3c64c1cbc59b4ce3fd28be6675fb3020 🔍 |
6
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.55212 |
| MD5 | 04a6442470e12c4f6931ecd090862ef9 🔍 |
| SHA1 | 11704afd9e26ca32f68ede4e0c043405722ffba3 🔍 |
| SHA256 | a4319fd1d9a81d7a6dc9ef1818d85dc68ded85342754d2f5768e01d0edf46780 🔍 |
| SHA3 | 37952f4114576bfe8616ef61541c8f81eddef30236d455ce5f74a30d98a8539f 🔍 |
7
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0xcac |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.29146 |
| MD5 | db2dc0ce6ad8b8cdc5be830bf79a761b 🔍 |
| SHA1 | c9345712f79eed69677a5f165d115624da3de4cf 🔍 |
| SHA256 | ff8ccb25e747ead631922be99ebc2004a97295b0b606f40e83f15c2dc2bbbc81 🔍 |
| SHA3 | c0f08c34bfb83c0aebe052470d5b51b2367a2bb61bb911259c200931f6b0d42b 🔍 |
8
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.17845 |
| MD5 | 35fffe5c3ef617079a0237e67ada2472 🔍 |
| SHA1 | 70900b1268464c03c8c5f7192456b7e6efceb1da 🔍 |
| SHA256 | 860a680c92db087b12dd6bf2ef581979c08ac13ed9657403dab974f387420555 🔍 |
| SHA3 | dd8b7568bca263f759c9dffa79fc19cf647abcbfdc473b14d2ac11a86fd45e70 🔍 |
9
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0xcac |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 0.995644 |
| MD5 | 1b905e5ca2a21da398c9c73124428505 🔍 |
| SHA1 | 6f922d03bc5d6ec61789deb9731141893edf55a0 🔍 |
| SHA256 | 5edad8d3d744070cb51e4dfdb02053a15101c8c954f952e4dfe57a4d7659e5b2 🔍 |
| SHA3 | f07b653197b1cf5483179f834c56415c8e7f11f3e59af3a35753df6cd0a94520 🔍 |
10
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x10ac |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 0.666526 |
| MD5 | 75bec5efc67babcf530d51321d95ed7e 🔍 |
| SHA1 | 38eb531d42adfab051bc81ef0590d60a21d77498 🔍 |
| SHA256 | 3bd84b82f6e6a2cb156d881bdc1f29567d5712ad81d2da33b0ff9cd8a5a9981f 🔍 |
| SHA3 | 665bc39673c1b61060b16e7572c6520c7d50080a166343540e56f4dd9e233502 🔍 |
11
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x10ac |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.84104 |
| MD5 | acd42b137b48d1f19ee65a10fc90814e 🔍 |
| SHA1 | d1f9068dee688563ae870c437900709795cc6dbe 🔍 |
| SHA256 | d87015c12fb89d2c54c2b1ea0b5f0feaf50bba50cddcf546668c62316597bf2f 🔍 |
| SHA3 | eafa118068102c848c31a6c914e40e8de8a682f2c36091294cb30b518fc5e6e5 🔍 |
12
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x10ac |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 0.670417 |
| MD5 | 6d9a8875e9bc6d3e9eae95b2b03257ce 🔍 |
| SHA1 | b7c15c9636773a47be134736c68bdd339922aeb9 🔍 |
| SHA256 | cbb310244272c36ea589f9257476e6c19b1eb6be0cd5193cd5901efd4d184c35 🔍 |
| SHA3 | 744ffb0101cc0d94ee909ff8cdc163f79773c26af417370d25faffc4bc936155 🔍 |
13
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x10ac |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 0.659108 |
| MD5 | fe9cc0eafbb8e74285bf641fb8e73244 🔍 |
| SHA1 | 5ab52f22cb2de40638a657785c87df0ae3729fa7 🔍 |
| SHA256 | 302d274cf49db7ebc8f97dd4320489781da8a44447cbb2a7346ccff84b1b944b 🔍 |
| SHA3 | 2803d7cd35174ade40efc9c9f338db79b345777a589353be85b7c744e7a3a4fc 🔍 |
14
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x10ac |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 0.65993 |
| MD5 | 53fb50fe6ce1aa6722afa878db7289a8 🔍 |
| SHA1 | a31cf91b8df398a12b84c5fbd10494b2ff6b749d 🔍 |
| SHA256 | bc19a3937fe7fb79cf877d2bea8d1ab4ea30d1a05f4c60d42cf57142c81290e9 🔍 |
| SHA3 | 6a4d76c847f3ef198074c93c4e25056a081fc8131151daa0473cd2a9394db239 🔍 |
15
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x10ac |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 0.670417 |
| MD5 | 12a2030014722c91cddfed04b83be533 🔍 |
| SHA1 | c462f3e4e6bc388726ba3d488506d366ea0c6999 🔍 |
| SHA256 | 9534fac9229e10c53a85e5a6deb4224d12a7a3024b7ff9ccc1cb8717ffd7acaa 🔍 |
| SHA3 | 11e87ce0be315125dcceaf8d8136b0ec09a3ed22b2fbc4724501aeaf38077e1c 🔍 |
16
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x10ac |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 0.659108 |
| MD5 | 94ea73b19eada640886c96389652ec8f 🔍 |
| SHA1 | aaaf2828cb9aed84f203efec44e302e5af20bafe 🔍 |
| SHA256 | faf155f58e17b8e1a98cc26aaa92597c62dc87ff98555cd708f6684eb8243d4c 🔍 |
| SHA3 | cb12ab171e7bf02f1c82573cf89cac99f83e304a66f3c4137bf54d4b742f4e7c 🔍 |
17
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x10ac |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 0.65993 |
| MD5 | 2dc824995511736d22408fb4dba702ba 🔍 |
| SHA1 | 9aac0c12e6f517872128083df0f5b1105d6d8e7c 🔍 |
| SHA256 | f4bcc6750981e15e3fc8c751997156f4df9055cece8d16944e4dea2ce4bc911b 🔍 |
| SHA3 | 56d609cc52f073b584c7138bb6349751b24e07fe66ba60fb56ea997b8bb1f078 🔍 |
18
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x10ac |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 0.799151 |
| MD5 | 6505e57c301902618e8f1d070667db1a 🔍 |
| SHA1 | c8a96d9801db8e9550741da0e8f4a55655253281 🔍 |
| SHA256 | 787dc2d9d3f4034a91bd222034d01eafb01e1053ac3579a0fd033f141dcccb69 🔍 |
| SHA3 | 92104dc773f9195f1795235be40b81774a87b52603a7e3089d48780829cf7bae 🔍 |
19
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.65872 |
| MD5 | ea82e850caed8b7eda4b753fb9d8c03a 🔍 |
| SHA1 | 699e1bb7f568456fcc41c9ed9ecc9089d640d6a1 🔍 |
| SHA256 | 236462dd2d629d67ff18c41f41cfa739549aff2933f7df2bd51630790b4d424e 🔍 |
| SHA3 | 7cc9d637e593f742566b68ce8dd23201f2097429a4f48d55993f87da0d726754 🔍 |
20
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.46615 |
| MD5 | ff49a9a5c7e188634136611a03c441ed 🔍 |
| SHA1 | 756344327134a9f9c1404185baaad435bf0a53fc 🔍 |
| SHA256 | 3eba69eaec7cef56d2c964dee1f9c0226a365b3ae869a402690d548c82c16ba3 🔍 |
| SHA3 | a5bebb0afb2d86976c02d4f2befc5fa28d496be24ad98a8611055f9d67683c27 🔍 |
21
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.08719 |
| MD5 | b490b06239b76334192a94969717671b 🔍 |
| SHA1 | 3f19007fbd45bebdd6fe4235fb95517bf67911c1 🔍 |
| SHA256 | 2a53b434f3ab8d37381a5461163027d2a256f0bda3ea8f65795ed6d2c66b4e30 🔍 |
| SHA3 | 5217b671e39ef4e252e5fa4e6b4f1a05d89627e53702a0842d0c9504b7aa3ee6 🔍 |
22
| Type |
RT_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.07143 |
| MD5 | aac863f48e2b416af0febc82cd648345 🔍 |
| SHA1 | f4bec546c4c140e4436ca28d82148997a56f1ac0 🔍 |
| SHA256 | 5b4c85e7d881d8c74760c07f9e4fe3d7427a72bed0e379aed6a78f7cbeca3199 🔍 |
| SHA3 | 3c0698cb59f54d170bb85287b6fc265cf78e0a7a8b2502718f0c7899fdc95685 🔍 |
1 (#3)
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x42028 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.02794 |
| MD5 | a29215c2d08412d0a09089bece74a8d8 🔍 |
| SHA1 | 7f427a32af62958ee729a48113126b0034f8338d 🔍 |
| SHA256 | cbef4b9a98a6118f2665822d7a2868b8a4645f36c517627e3f4fe361f128ee32 🔍 |
| SHA3 | 598f9ada42b2c0ec13af2bb0acd86650df2f7bf0860cfbfb85931352f08f76e6 🔍 |
2 (#2)
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xea8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.05163 |
| MD5 | 1d631f6d8fa19398d2df5863be341a2c 🔍 |
| SHA1 | 97243c848ad1a29da52855996d88fbdb092ef48f 🔍 |
| SHA256 | 7abae35099733d994c7168b58edf433d9a87096ffacdbee04cacc5a05dd84909 🔍 |
| SHA3 | d6fbfd69d2f15297c09308bc2fc122cb08b379927f53cbf30c5974c6f62067a9 🔍 |
3 (#2)
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x8a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.36687 |
| MD5 | f5a0e41bc60f9722f17d2eec66a72996 🔍 |
| SHA1 | db94b2c361fd617c8ef978dc1e4e5f71e0538d7c 🔍 |
| SHA256 | 110d31262fc1d5c2a33c27059c94469b6fb4f7e4e16a91572c0492795c3f21b7 🔍 |
| SHA3 | 2c2652334d23ef6e09283055ceb3997751854a44b3907deca030491f4fd46f59 🔍 |
4 (#2)
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x568 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.32943 |
| MD5 | faaa6b184f0de776b3694d7333bb7dd3 🔍 |
| SHA1 | 821091dda1f7b14e9d84a2114021773366aead18 🔍 |
| SHA256 | a8589c4aab8ed377a9602ef5bf3b6565e45a3357911efd6048f38a56b0a102c7 🔍 |
| SHA3 | 3f0f8f6b4531727f1e8196654de4352ba230b90a335a6b5f621bbca551d72e9d 🔍 |
5 (#2)
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x7c8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.26175 |
| Detected Filetype | PNG graphic file |
| MD5 | 44ecf3fd91cf33cfb4535bb2ea59e27a 🔍 |
| SHA1 | 3090f24b36ec71739d9820d550aa3f4eed8e52e9 🔍 |
| SHA256 | 977990ecb2a3a7bf7ef2edea2c484b538b73476eb46722791fb8591d19bcda4a 🔍 |
| SHA3 | b339de91d44a8b0b0dddcc8b659a82533fc85134b67ad2e7a6c70e9a13577924 🔍 |
6 (#2)
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x25a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.32779 |
| MD5 | d790cb9b9086f45ea53fec385891355d 🔍 |
| SHA1 | 20e3548d16dbba68b8f322a1c4f7086e38110d10 🔍 |
| SHA256 | 18621604c0b5f4229416994b569e2afda775a608e1759d5ba7082a31458e1169 🔍 |
| SHA3 | b14e2bb5e8953ae807c2ec3b726942eb2ead7890772fdf6a410a8c9a71e81915 🔍 |
7 (#2)
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x10a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.21995 |
| MD5 | 7ab8c3240114b0f7ebc42c5c489060f6 🔍 |
| SHA1 | 0de249b988a94d3374bbf9eb3585f00ace2e5499 🔍 |
| SHA256 | f5feb3ba96da36d90fb879e6f1af274a1c5f6fd4ba68332b1c25d97c6508d062 🔍 |
| SHA3 | def1c08500690c2ea7b272685c0a594f8ca5bf9865055bfb9c488d12a6955dfe 🔍 |
8 (#2)
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x468 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.65783 |
| MD5 | d720ab3b897affd8516a5c73e9020b19 🔍 |
| SHA1 | 36e5ac25f4b4f4b869d109c0072da7f6f1fd03c2 🔍 |
| SHA256 | f269848277f345c8fc62634f14c012bc8ee1afa4887e8819228e99c6915bbdf3 🔍 |
| SHA3 | c946f83fcb2547d27caf0a1adff84c375349fd416f64281d3fb2653a224affa0 🔍 |
9 (#2)
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x4a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.70621 |
| MD5 | 7a8fd82c16489f1ed6e5cdc5dc38c815 🔍 |
| SHA1 | 595b39dc0c92b6e3943ea918a213cec58503daf4 🔍 |
| SHA256 | 9260d8b6f0fd7fc00e9a960db1b1283180efd59049be2c8867a4e660b1ff0123 🔍 |
| SHA3 | 2eec2ac06df13fa72c5317fe2f7e049cddea95363b53620674c73c866a7f8d52 🔍 |
10 (#2)
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x1234 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.90997 |
| MD5 | 11921cfff61b5877c53bb37c86b6d09c 🔍 |
| SHA1 | 3800127e39a03ea9b2a9f79538d40227ef4d0c89 🔍 |
| SHA256 | c714566bd8b7f0be360e68950a5615a2fb365d53b14ea7c2812f23c458497799 🔍 |
| SHA3 | 0e2df531413bcc400f2f42179d34b093d3229754f3ee9d7c982faacd2f766e18 🔍 |
11 (#2)
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x2668 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.72497 |
| MD5 | 0e559d7f5897727c98dfdd1e6c3631e7 🔍 |
| SHA1 | fcd9803592250e14d186e9c8fd0f094e7debfdf0 🔍 |
| SHA256 | 6e6dd7cc3df380721e4678fb1825b982df22a4dc058091634e733c33f3543b1f 🔍 |
| SHA3 | 54cc4d475eb6e3066dda379e7ce197dad0d994522cc58d68673a5707d4aa46cf 🔍 |
12 (#2)
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x184b |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.91162 |
| Detected Filetype | PNG graphic file |
| MD5 | e3e595605f7ba7a83a424e5698b342b4 🔍 |
| SHA1 | b7cf89a883818649ffeab77f323b07808b1b717e 🔍 |
| SHA256 | 05de73b49e62f848770d877a92a4a920e2ef6812538b84ab3a3255ee89bf3666 🔍 |
| SHA3 | 0a0834c7fc8c9270e4ef414eb9095219a154fefc631b38f811eb7639a46a3aec 🔍 |
26850
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.83876 |
| Detected Filetype | Cursor file |
| MD5 | a2baa01ccdea3190e4998a54dbc202a4 🔍 |
| SHA1 | e8217df98038141ab4e449cb979b1c3bbea12da3 🔍 |
| SHA256 | c53efa8085835ba129c1909beaff8a67b45f50837707f22dfff0f24d8cd26710 🔍 |
| SHA3 | 8874564c406835306368adf5e869422e1bb97109b97c1499caa8af219990e8dc 🔍 |
| Preview |
|
26851
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.91924 |
| Detected Filetype | Cursor file |
| MD5 | aff0f5e372bd49ceb9f615b9a04c97df 🔍 |
| SHA1 | e3205724d7ee695f027ab5ea8d8e1a453aaad0dd 🔍 |
| SHA256 | b07e022f8ef0a8e5fd3f56986b2e5bf06df07054e9ea9177996b0a6c27d74d7c 🔍 |
| SHA3 | 9cb042121a5269b80d18c3c5a94c0e453890686aedade960097752377dfa9712 🔍 |
| Preview |
|
26852
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.01924 |
| Detected Filetype | Cursor file |
| MD5 | 48e064acaba0088aa097b52394887587 🔍 |
| SHA1 | 310b283d52aa218e77c0c08db694c970378b481d 🔍 |
| SHA256 | 43f40dd5140804309a4c901ec3c85b54481316e67a6fe18beb9d5c0ce3a42c3a 🔍 |
| SHA3 | 38753084b0ada40269914e80dbacf7656dc94764048bd5dff649b08b700f3ed5 🔍 |
| Preview |
|
26853
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.01924 |
| Detected Filetype | Cursor file |
| MD5 | 1ae28d964ba1a2b1b73cd813a32d4b40 🔍 |
| SHA1 | 8883cd93b8ef7c15928177de37711f95f9e4cd22 🔍 |
| SHA256 | ff47a48c11c234903a7d625cb8b62101909f735ad84266c98dd4834549452c39 🔍 |
| SHA3 | a85dadd416ce2d22aa291c0794c45766a0613b853c6e3b884a2b05fc791427b8 🔍 |
| Preview |
|
26854
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.67095 |
| Detected Filetype | Cursor file |
| MD5 | 92aed2fe83f8aad05aada50cc1f7a0fd 🔍 |
| SHA1 | 2cc1fd624e3ef76a96e82af2e5a13dbda3cb83d2 🔍 |
| SHA256 | 40ef29652899604b7e4230bc75edd33ff374a1dd973b2d8f1165cfb10d17a950 🔍 |
| SHA3 | b7241bb804eb356f2c3f0688e55007d76707a5e16521535748f13728ff6846da 🔍 |
| Preview |
|
26855
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x22 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.46809 |
| Detected Filetype | Cursor file |
| MD5 | 2d827c2d818f44f66a086e7a32955cee 🔍 |
| SHA1 | 24b12fd864db6a0b79a2ae15c5791987ece86d58 🔍 |
| SHA256 | d2c99a8724942e1e0e4496347817d9f07a3924c0237d0ad522c7d7f801ee9c59 🔍 |
| SHA3 | 2acd7b0e30e038fd65393f9f8bd4aa76fbe183d219d487b386c2eeaa4e5ea5f9 🔍 |
| Preview |
|
26856
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x22 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.46809 |
| Detected Filetype | Cursor file |
| MD5 | d28b61eccdefa5e37d7b0cdc9cbd3363 🔍 |
| SHA1 | 580fc47123346dca56b9ad463469dd44454e16ce 🔍 |
| SHA256 | 83067746fdd1cb6fdcf4a17e2600a5e481eb93f527a57b4dca6adf6ccb711b2d 🔍 |
| SHA3 | c4e01a49d8c4f348502ccaee05ad460e83cd2498f44dc6a20f0433ce6b72075b 🔍 |
| Preview |
|
26857
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.21924 |
| Detected Filetype | Cursor file |
| MD5 | cc34525879592b62945fa5102955e7af 🔍 |
| SHA1 | 1c1f341f0ff952d168ec070d95809224631c5f59 🔍 |
| SHA256 | c7f15e3e69f8bad21f5f9c9546b129828d66e90b38a8fe9cf33cf23846e62700 🔍 |
| SHA3 | 1af1bcbf18cfdeb5e3d81c46ab15ef59bc0b1de5f5ff9dc32f491120f405f5c6 🔍 |
| Preview |
|
26858
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.21924 |
| Detected Filetype | Cursor file |
| MD5 | cb8d29dff5278e39030b2ad47022cf49 🔍 |
| SHA1 | a48b5853b494a9095f0899e23414db872433d366 🔍 |
| SHA256 | fd27224dee56e50f926e0c003d1bdb8c31db4d1f0a089280d0f55b79ff45c1e7 🔍 |
| SHA3 | 3eca032eb883d63cd63778223e4ed5d3982bcbc58eed6534f0a70d84a7a624e5 🔍 |
| Preview |
|
26859
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.21924 |
| Detected Filetype | Cursor file |
| MD5 | 874e41c97e9c38232490d3bea15ae8b3 🔍 |
| SHA1 | ae70b2c25c1566c2e13ac44e0057ef4f6daf8d91 🔍 |
| SHA256 | 2c57fbd554735f2b8ff46f26b3d2d58a5a5e4152a02043e7fd6c552a43a3ceee 🔍 |
| SHA3 | b13a2c1efb8dad10ad85e8b4ce0067cbbea82053146cd5a81b0fecef2a15bf15 🔍 |
| Preview |
|
26860
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.21924 |
| Detected Filetype | Cursor file |
| MD5 | 24d6779f223eda66e958315d638d0b62 🔍 |
| SHA1 | 12525fd20006775a0366d61620ae851ae090dbfb 🔍 |
| SHA256 | 1133ff27d25ac052e4a0570865c18ce0e07a3afbb89577bc52af61435a91b8cc 🔍 |
| SHA3 | feab5af24df559fd8b9b078058f0cd7af2d943e88736af167b57482cff6597bc 🔍 |
| Preview |
|
26861
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.21924 |
| Detected Filetype | Cursor file |
| MD5 | 63e88d11b8e4a0868f5c2dcb5c944b1e 🔍 |
| SHA1 | 19e86d2e68c188e8f8101e3c053bfa02ca714b97 🔍 |
| SHA256 | 5907a1ab79be2dae328a84248db9750607aeb7b802af582f974a5ae59fb3c37c 🔍 |
| SHA3 | fe8a1640613ab39314806298ace08aae1c0f1d9f89c9aa23e7a270562db0dd0e 🔍 |
| Preview |
|
26862
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.21924 |
| Detected Filetype | Cursor file |
| MD5 | 08ffff653a54f5518c6bbcbd1c4e82f4 🔍 |
| SHA1 | 4a8832e7ebf39d3e0398d4332748b00d5964e6e0 🔍 |
| SHA256 | d19508d8742527d523aa3ef78e1091ce417bec079e9632181cdc8ff245c53ce9 🔍 |
| SHA3 | 7650fb4c907b38dfe5785926961a8e754ad52af5bd6eef810c761e1cd02a1fb6 🔍 |
| Preview |
|
26863
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.11924 |
| Detected Filetype | Cursor file |
| MD5 | 384df7c4869187442684d2fb5292ac78 🔍 |
| SHA1 | ffa445392454d9a208a18fc2520b7ad60e5936df 🔍 |
| SHA256 | 1dac0833fe30898ce2c1df2c70b09d62d51f8f765ae0ffd90b811067e875ae98 🔍 |
| SHA3 | 1fbbe841170dac2994db17d7b74b60a56ffe6ab959f8e1bb6c5605c6bcf2c705 🔍 |
| Preview |
|
26864
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.21924 |
| Detected Filetype | Cursor file |
| MD5 | 4e14da9e6db8978ffd0c5eb4b3e9e80a 🔍 |
| SHA1 | 2a4d2df5f07e3a096a27db0f2297f46e7f8df507 🔍 |
| SHA256 | 5fa51d73b8ea1316fb0c8f11c3740c6f755a8499a135e4e18ef6b823aad3ad70 🔍 |
| SHA3 | ea3bf238714cb012824de6f84f91faf385180340f7563976e327c4fef3750f5e 🔍 |
| Preview |
|
26865
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.21924 |
| Detected Filetype | Cursor file |
| MD5 | 015d385990b99272d167c51c508f427e 🔍 |
| SHA1 | f4591544894c9e23e281d023fb2210a1274d1628 🔍 |
| SHA256 | 7794cf070f4c99cd9ec27a43faa84daab8d19e765f0489c981a9ef28468a3899 🔍 |
| SHA3 | 514c273141a62c18cd8fc7252db9af2dcfd0226ea3c3efe8ef3ed5ad3b16be99 🔍 |
| Preview |
|
26866
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.01924 |
| Detected Filetype | Cursor file |
| MD5 | 8408eef234acfcac8a26e706cc35d85c 🔍 |
| SHA1 | 5ecdc1e1be3f1e941b1ca11b45943aafe135c517 🔍 |
| SHA256 | 3f02dcac38fffe306e1825846e2bc0458ee712696310d051e3a69ebda8330cc3 🔍 |
| SHA3 | 0406ff4480e84661d58a225cdf84931c95f7ebf6fea388a3cb6bedbc0343b421 🔍 |
| Preview |
|
26867
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.01924 |
| Detected Filetype | Cursor file |
| MD5 | 79bc23c45190436b2c51ff2941fa8720 🔍 |
| SHA1 | 0a8234176fad8831709703a0a34337a08987a983 🔍 |
| SHA256 | b328fe22a904a2e7e1341a95dbf00e2fdffc9ab350bc64c5ee348d3007c2b479 🔍 |
| SHA3 | b897f30ec85dad865a74be84cd616e0066da486befd0983d87e2b6f5d66a6c6b 🔍 |
| Preview |
|
26868
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.01924 |
| Detected Filetype | Cursor file |
| MD5 | 1e219dd609ce399df95ba7af59ef113f 🔍 |
| SHA1 | 436a16dd20d5e3ec42342a4d005a664cd227f517 🔍 |
| SHA256 | 8f51832638675f16ec5f251ab59251b3f85d84e5129025d44c45b3191b331c58 🔍 |
| SHA3 | 9e44adcf523bb484f416a99197d947211027feae6b6665b457883e548218befd 🔍 |
| Preview |
|
26869
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.01924 |
| Detected Filetype | Cursor file |
| MD5 | 690a20e696fc4e33ffb377a8ef54fb97 🔍 |
| SHA1 | 972159605fa069921dbdee9b7a35879e6f1928a6 🔍 |
| SHA256 | 6c2ef97bca5cdc6aa6de65b1f1ae8328bcb3494a16025eee870231d991e2cd56 🔍 |
| SHA3 | fd9d56519b5bf976a4ae748fe0c51dcd47ac27ce6a7c271fa2bbb3e00f473b22 🔍 |
| Preview |
|
IDR_MAINFRAME
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.67095 |
| Detected Filetype | Icon file |
| MD5 | 464cb94db3a2622922a9562865009ae8 🔍 |
| SHA1 | dbe17c767d942f219df59f9eae77b213c15eab70 🔍 |
| SHA256 | 8affd1fa69a6c5a5b54e504d72d4e9a0eba9b7d702a445ea1399a5978794719a 🔍 |
| SHA3 | 3e0e32110c6c0f3323eeeb5e4a6cbb7a8db52ab14e0f065384fb4eedac4fbcda 🔍 |
IDR_X001_APP_LIST
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x68 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.70093 |
| Detected Filetype | Icon file |
| MD5 | ebd01df5e0c227d025c744fd77d18949 🔍 |
| SHA1 | ea41a91bc08e43f974a395bd993654f707491c30 🔍 |
| SHA256 | d55b27d2272c74fda2acb571fbf89a7b7416798a5d992de502021440011b54bd 🔍 |
| SHA3 | 9628813598141ed97d425f1e69c5bedcf64a7dc509ccf0e111fb9cdfd2daed83 🔍 |
IDR_X003_INCOGNITO
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x3e |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.7835 |
| Detected Filetype | Icon file |
| MD5 | 2b1a0aabe335e382aa150d72d082139f 🔍 |
| SHA1 | 9ca0531e01d97b7f40fa2e4880ed08ed568598d4 🔍 |
| SHA256 | 534a7ac5f2ef0bdb2a11ebaa0ed4f0af49ee8ed81baedfce70f4e548d677a045 🔍 |
| SHA3 | b84443d0dc73e05278a110f8a2746d8587c5c94099cf870c32ed820995704514 🔍 |
1 (#4)
| Type |
RT_VERSION
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x360 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.44145 |
| MD5 | 66af65f7e397b6929ca2d4e456aaad5f 🔍 |
| SHA1 | 1cf2f5ddaa7e60cf036828e86dc5ca378aa080b8 🔍 |
| SHA256 | e231a163664400961d0dfcf8e14d40bba2082c5af459463b71d5098ef739e1bf 🔍 |
| SHA3 | d5f09230d36fec467a5e71344720241423cf4d68b2c6d9b0e9778b009e56c7e9 🔍 |
1 (#5)
| Type |
RT_MANIFEST
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x42c |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.33361 |
| MD5 | fa140205692392be88038eaba9ca7910 🔍 |
| SHA1 | 4ede0ea94437564dc9b1d1d989e3116e92a1a4dc 🔍 |
| SHA256 | 1f4b3a5657ae0d8242461a11cb08b8adf8e46a21fb612336311fcba10faccb61 🔍 |
| SHA3 | c72a92379b693f109c695e4e9511e110aa78840b4f2d31bc63ef1a9ff674e88d 🔍 |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 0.0.0.0 |
| ProductVersion | 0.0.0.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | The NWJS Community |
| FileDescription | nwjs |
| InternalName | nw_exe |
| LegalCopyright | Copyright 2016 The Chromium Authors. All rights reserved. |
| OriginalFilename | nw.exe |
| ProductName | nwjs |
| CompanyShortName | nwjs.io |
| ProductShortName | nwjs |
| LastChange | 2da8f187bb38bfbff94be6d62369d30bec04d9ca- |
| Resource LangID | English - United States |
|---|
IMAGE_DEBUG_TYPE_CODEVIEW
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2017-Nov-14 06:51:15 |
| Version | 0.0 |
| SizeofData | 91 |
| AddressOfRawData | 0x37873c |
| PointerToRawData | 0x37713c |
| Referenced File | E:\build\nw26_win32\node-webkit\src\outst\nw\initialexe\nw.exe.pdb |
IMAGE_DEBUG_TYPE_POGO
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2017-Nov-14 06:51:15 |
| Version | 0.0 |
| SizeofData | 1148 |
| AddressOfRawData | 0x378798 |
| PointerToRawData | 0x377198 |
TLS Callbacks
| StartAddressOfRawData | 0x788000 |
|---|---|
| EndAddressOfRawData | 0x788020 |
| AddressOfIndex | 0x7834cc |
| AddressOfCallbacks | 0x6f35b8 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_8BYTES
|
| Callbacks |
0x00457B00
|
Load Configuration
| Size | 0x48 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0x200000 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x77da40 |
| SEHandlerTable | 0x778710 |
| SEHandlerCount | 11 |
| GuardCFCheckFunctionPointer | 0 |
| GuardCFDispatchFunctionPointer | 0 |
| GuardCFFunctionTable | 0 |
| GuardCFFunctionCount | 0 |
| GuardFlags | (EMPTY) |
| CodeIntegrity.Flags | 0 |
| CodeIntegrity.Catalog | 0 |
| CodeIntegrity.CatalogOffset | 0 |
| CodeIntegrity.Reserved | 0 |
| GuardAddressTakenIatEntryTable | 0 |
| GuardAddressTakenIatEntryCount | 0 |
| GuardLongJumpTargetTable | 0 |
| GuardLongJumpTargetCount | 0 |
RICH Header
| XOR Key | 0x11c1c091 |
|---|---|
| Unmarked objects | 0 |
| ASM objects (23917) | 50 |
| C++ objects (23917) | 184 |
| C++ objects (23013) | 2 |
| 199 (41118) | 5 |
| ASM objects (VS2015 UPD3 build 24123) | 29 |
| C objects (VS2015 UPD3 build 24123) | 36 |
| C objects (CVTCIL) (23917) | 1 |
| C objects (23917) | 51 |
| C++ objects (VS2015 UPD3 build 24123) | 66 |
| Imports (23917) | 28 |
| Unmarked objects (#2) | 34 |
| ASM objects (VS2015 UPD3 build 24210) | 3 |
| Imports (VS2015 UPD3.1 build 24215) | 3 |
| Total imports | 484 |
| C objects (VS2015 UPD3.1 build 24215) | 152 |
| C++ objects (VS2015 UPD3.1 build 24215) | 1366 |
| Exports (VS2015 UPD3.1 build 24215) | 1 |
| Resource objects (VS2015 UPD3 build 24210) | 1 |
| 151 | 3 |
| Linker (VS2015 UPD3.1 build 24215) | 1 |
Errors
Leave a comment
No comments yet.