70c1f7ec0e4af9b9e7ceb7cebb84933bc0060f96f135dea04aa914eea1b6754d

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2026-Oct-14 12:04:57
Detected languages English - United States
TLS Callbacks 2 callback(s) detected.
Debug artifacts C:\Users\dw\Desktop\pulse\build\Pulse.pdb
CompanyName Pulse
FileDescription Pulse - Roblox Overlay
FileVersion 1.0.0.0
InternalName Pulse
LegalCopyright Copyright (C) 2024
OriginalFilename Pulse.exe
ProductName Pulse
ProductVersion 1.0.0.0

Plugin Output

Suspicious Strings found in the binary may indicate undesirable behavior: Miscellaneous malware strings:
  • Exploit
 Contains domain names:
  • SoundBible.com
  • adobe.com
  • assetdelivery.roblox.com
  • crl.microsoft.com
  • en.wikipedia.org
  • fontello.com
  • fontstruct.com
  • github.com
  • http://crl.microsoft.com
  • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0
  • http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X
  • http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
  • http://en.wikipedia.org
  • http://en.wikipedia.org/wiki/MIT_License
  • http://fontello.com
  • http://ns.adobe.com
  • http://ns.adobe.com/tiff/1.0/
  • http://ns.adobe.com/xap/1.0/
  • http://ns.adobe.com/xap/1.0/mm/
  • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
  • http://purl.org
  • http://scripts.sil.org
  • http://scripts.sil.org/OFLInterMediumOpen
  • http://scripts.sil.org/OFLhttp
  • http://www.gimp.org
  • http://www.gimp.org/xmp/
  • http://www.microsoft.com
  • http://www.microsoft.com/Typography
  • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
  • http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
  • http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0
  • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
  • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a
  • http://www.microsoft.com/pkiops/docs/primarycps.htm0
  • http://www.roblox.com
  • http://www.roblox.com/asset/?id
  • http://www.styleseven.comFreeware
  • http://www.styleseven.comSmallest
  • http://www.w3.org
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#
  • https://discord.gg
  • https://fontstruct.com
  • https://fontstruct.comparasiticSpong
  • https://fontstruct.comparasiticSponge
  • https://github.com
  • https://pulse-usercount.apex-auth-fsos.workers.dev
  • https://rsms.me
  • inkscape.org
  • microsoft.com
  • ns.adobe.com
  • roblox.com
  • scripts.sil.org
  • thumbnails.roblox.com
  • wikipedia.org
  • www.gimp.org
  • www.inkscape.org
  • www.microsoft.com
  • www.roblox.com
  • www.w3.org
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to SHA1
Uses constants related to RC5 or RC6
Uses known Mersenne Twister constants
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryExW
  • LoadLibraryA
  • GetProcAddress
 Functions which can be used for anti-debugging purposes:
  • FindWindowW
  • CreateToolhelp32Snapshot
  • SwitchToThread
 Possibly launches other programs:
  • ShellExecuteA
 Uses functions commonly found in keyloggers:
  • GetForegroundWindow
  • GetAsyncKeyState
 Memory manipulation functions often used by packers:
  • VirtualProtect
  • VirtualProtectEx
  • VirtualAllocEx
 Has Internet access capabilities:
  • WinHttpConnect
  • WinHttpReceiveResponse
  • WinHttpOpen
  • WinHttpQueryHeaders
  • WinHttpReadData
  • WinHttpQueryDataAvailable
  • WinHttpSetTimeouts
  • WinHttpOpenRequest
  • WinHttpCloseHandle
  • WinHttpSendRequest
 Leverages the raw socket API to access the Internet:
  • WS2_32.dll
 Manipulates other processes:
  • OpenProcess
  • Process32NextW
  • Process32FirstW
  • ReadProcessMemory
 Can take screenshots:
  • FindWindowW
  • GetDC
 Reads the contents of the clipboard:
  • GetClipboardData
Malicious VirusTotal score: 38/71 (Scanned on 2026-10-23 03:37:49) ALYac: Gen:Variant.Yogi.57588
APEX: Malicious
AVG: Win64:MalwareX-gen [Misc]
AhnLab-V3: Trojan/Win.Generic.R795885
Alibaba: RiskWare:Win64/MalwareX.86314e25
Antiy-AVL: RiskWare/Win64.Gamehack
Arcabit: Trojan.Yogi.DE0F4
Avast: Win64:MalwareX-gen [Misc]
Avira: TR/W64.Agent
BitDefender: Gen:Variant.Yogi.57588
Bkav: W32.Malware.CFA8EF13
CTX: exe.trojan.yogi
CrowdStrike: win/malicious_confidence_70% (W)
Cylance: Unsafe
Cynet: Malicious (score: 99)
ESET-NOD32: Win64/Riskware.GameHack.BO application
Elastic: malicious (high confidence)
Emsisoft: Gen:Variant.Yogi.57588 (B)
F-Secure: Trojan.TR/W64.Agent
GData: Gen:Variant.Yogi.57588
Google: Detected
Gridinsoft: Trojan.Win64.Agent.sa
Ikarus: Trojan.Win64.Krypt
Lionic: Trojan.Win32.Generic.4!c
Malwarebytes: Malware.AI.2241740084
McAfeeD: Trojan:Win/Wacapew.GCF
MicroWorld-eScan: Gen:Variant.Yogi.57588
Microsoft: Trojan:Win32/Wacatac.B!ml
Paloalto: generic.ml
Rising: Hacktool.GameHack!8.59E (CLOUD)
SentinelOne: Static AI - Suspicious PE
Symantec: ML.Attribute.HighConfidence
Tencent: Malware.Win32.Gencirc.14b6a6a2
TrellixENS: Artemis!CC28894AFE47
TrendMicro: Trojan.Win64.YOGI.TL0101JG26ZZ
TrendMicro-HouseCall: Trojan.Win64.YOGI.TL0101JG26ZZ
VIPRE: Gen:Variant.Yogi.57588
Varist: W64/ABTrojan.JLDD-8616

Hashes

MD5 cc28894afe4780ecf5e0bc66a2cc31b1 🔍
SHA1 294fc676f469801c40c0cb005712d26bd3414b91 🔍
SHA256 70c1f7ec0e4af9b9e7ceb7cebb84933bc0060f96f135dea04aa914eea1b6754d 🔍
SHA3 2b6a6d9f37b543255de586a85932faccc5c94779ea21b94e0282c8ef9f7726a2 🔍
SSDeep 98304:FvlZ1Pji8lqZLa3xo/Y7mgTm05AwJHE6hFktlZqL9PlFBJ3:7/Ligkrg7PAmkm8ZqL1lF3 🔍
Imports Hash fdc3781d5c527c3adfd95edd740fd5a2 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x130

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2026-Oct-14 12:04:57
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x251000
SizeOfInitializedData 0x3ae800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000209F0C (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x604000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 d7e9d6ab9c0f2dd88d99941d0f45c4bd 🔍
SHA1 96228ceff4067b6327058e67b05d88ec5edf483e 🔍
SHA256 9d38782fe7629e28d16e2eb72af0701bb3c24bdae15d1de152a44696405f5321 🔍
SHA3 d0d9d450cbfcf32a932bac33c35200492d1d26597620638fa5105aa431886e41 🔍
VirtualSize 0x250f10
VirtualAddress 0x1000
SizeOfRawData 0x251000
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.53578

.rdata

MD5 5ad756ad2f7a22fd3dc1c7a367fae099 🔍
SHA1 b3215a0e7a15e9e9f09b2bf94cd4ad47cf2fc937 🔍
SHA256 d471d27b381f4cfc394a306d12e4c2278a8741440a640dbda432a11ee1d294df 🔍
SHA3 1d2a172221d1895939377d8c32cf6cd8cf8d03c02b434860fe1284890e5d94ee 🔍
VirtualSize 0x193f70
VirtualAddress 0x252000
SizeOfRawData 0x194000
PointerToRawData 0x251400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.51802

.data

MD5 511865241cb8d27e48e9cc3f873dc939 🔍
SHA1 d88755aa338b81a98564803ff03606ff379c208c 🔍
SHA256 23403c95b6a25cfe84117168a1895b78b584570452c4c0f71c8f42335d9dfc9d 🔍
SHA3 809e1140cdbbf250a359f4f8634bfed24c537e44d8b179a3f4080484febf3971 🔍
VirtualSize 0x1bb51c
VirtualAddress 0x3e6000
SizeOfRawData 0x1b6c00
PointerToRawData 0x3e5400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.72645

.pdata

MD5 a4171ef19b8d188649712b72d80647be 🔍
SHA1 355a7691e6adfb965d5e9437a5d86c29895ee043 🔍
SHA256 d36fda6c54562126fb3c21b3b76356ed323c81a73a3f60f22660f613c3b53e5a 🔍
SHA3 033efe63d96a8ba693eef30210468943713561ea00c8604c10cb8c7fd742dbcf 🔍
VirtualSize 0x15018
VirtualAddress 0x5a2000
SizeOfRawData 0x15200
PointerToRawData 0x59c000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.29089

.fptable

MD5 bf619eac0cdf3f68d496ea9344137e8b 🔍
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍
VirtualSize 0x100
VirtualAddress 0x5b8000
SizeOfRawData 0x200
PointerToRawData 0x5b1200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 de136138bc93ce4c2278c143a1121ae8 🔍
SHA1 e59ad5e8e09eff23452612d0103fc29a59e5ae6a 🔍
SHA256 057123b33d59fb3b13f85c98f7eb3901dda57c2fc3e25deb0ede7c7b2452442e 🔍
SHA3 060dfaefa4514e36244b9b4469e25e05f4da826fd8b55d6684ad1db87e60aac9 🔍
VirtualSize 0x46400
VirtualAddress 0x5b9000
SizeOfRawData 0x46400
PointerToRawData 0x5b1400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.40905

.reloc

MD5 2276e7776a866d905c08ef688bb0c6c5 🔍
SHA1 fef8cc50ac0d62045638ebf7e9245c96fe643d16 🔍
SHA256 df7695bc769a32c32fee9cf85937bedd134fcc6942c3945fe6981c906694eb44 🔍
SHA3 302065094ed01b4976fc9d2aab6ec220c56515bfce7627a451472fb330d42cd6 🔍
VirtualSize 0x38f0
VirtualAddress 0x600000
SizeOfRawData 0x3a00
PointerToRawData 0x5f7800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.43631

Imports

WS2_32.dll inet_pton
IPHLPAPI.DLL IcmpSendEcho
IcmpCreateFile
IcmpCloseHandle
d3d11.dll D3D11CreateDeviceAndSwapChain
d3dx11_43.dll D3DX11CreateShaderResourceViewFromMemory
ntdll.dll RtlCaptureContext
VerSetConditionMask
RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlUnwind
WINHTTP.dll WinHttpConnect
WinHttpReceiveResponse
WinHttpOpen
WinHttpQueryHeaders
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSendRequest
USER32.dll CloseClipboard
ReleaseDC
SetCursorPos
ReleaseCapture
IsWindowUnicode
GetClientRect
SetCursor
SetCapture
GetForegroundWindow
GetKeyboardLayout
TrackMouseEvent
ClientToScreen
GetCapture
ScreenToClient
MonitorFromPoint
DispatchMessageA
DestroyWindow
GetSystemMetrics
GetRawInputData
SetWindowDisplayAffinity
MessageBoxA
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
RegisterRawInputDevices
TranslateMessage
PeekMessageA
UnregisterClassA
PostQuitMessage
SetWindowLongPtrA
RegisterClassExA
UpdateWindow
IsWindow
EnumWindows
GetWindowThreadProcessId
FindWindowW
IsWindowVisible
ShowWindow
GetWindowRect
GetAsyncKeyState
SendInput
OpenClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
GetKeyState
GetMessageExtraInfo
LoadCursorA
GetDC
GetCursorPos
GDI32.dll GetDeviceCaps
KERNEL32.dll GetTimeZoneInformation
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
VirtualProtect
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetFileType
ReadConsoleW
SetFilePointerEx
GetCommandLineW
GetCommandLineA
ExitProcess
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeW
GetSystemTimeAsFileTime
GetCPInfo
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
HeapSize
GetLocaleInfoA
MultiByteToWideChar
LoadLibraryA
GetACP
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
ReadFile
WaitNamedPipeA
WriteFile
PeekNamedPipe
GetLastError
CreateFileA
CloseHandle
GetCurrentProcessId
SetLastError
GetSystemInfo
VirtualProtectEx
VirtualAllocEx
GetModuleHandleW
FlushInstructionCache
VirtualFreeEx
VirtualQueryEx
SetConsoleCtrlHandler
GetTickCount64
SetThreadPriority
GetCurrentThread
GetModuleFileNameA
GetStdHandle
SetConsoleMode
GetConsoleMode
GetConsoleWindow
Module32Next
GetProcessId
Module32First
OpenProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
lstrcmpiW
SizeofResource
FindResourceA
LockResource
LoadResource
GetModuleFileNameW
MoveFileExW
QueryFullProcessImageNameW
ReadProcessMemory
GetExitCodeProcess
SetPriorityClass
SetConsoleTitleA
GetCurrentProcess
GetFileSizeEx
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetFileAttributesExW
IsValidCodePage
GetOEMCP
LeaveCriticalSection
EnterCriticalSection
LCMapStringEx
GetFileInformationByHandleEx
QueryPerformanceFrequency
GetEnvironmentStringsW
WriteConsoleW
GetModuleHandleA
SetEndOfFile
AreFileApisANSI
SetFileInformationByHandle
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
ReleaseSRWLockShared
AcquireSRWLockShared
SleepConditionVariableSRW
Sleep
SwitchToThread
RaiseException
IsProcessorFeaturePresent
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
InitOnceComplete
InitOnceBeginInitialize
FormatMessageA
WakeConditionVariable
WakeAllConditionVariable
LocalFree
GetLocaleInfoEx
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
SHELL32.dll ShellExecuteA
SHGetFolderPathA
D3DCOMPILER_47.dll D3DCompile
dwmapi.dll DwmExtendFrameIntoClientArea
IMM32.dll ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext
ImmSetCandidateWindow
WINMM.dll PlaySoundA

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.35013
MD5 1ffda8bda7a977fe7ca1db43f0e794d9 🔍
SHA1 047a3eda7ea44628e3752e916a8f730cd6f30a29 🔍
SHA256 794fcb28edcd79b3a5b2c23c2e6448402e9db822847cf440ddbeec7baf7c5477 🔍
SHA3 9a9ab267d1daa91879cfb9e807591dd2842c6d68bb8566ca61b3c18210558d87 🔍

ICON_FONT

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1ab0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.16147
Detected Filetype TrueType font file
MD5 6dcf59b60dffdc8d6850b9e9f3a301a7 🔍
SHA1 2de9300d2b49e0eeaae09301645570632fa16aa2 🔍
SHA256 ed680ab4844013063430f8a7263ee0bb52760b776a2b69aa50439facc66900f6 🔍
SHA3 85840bb717d810e0870c5f24e327ac2626d7bc4d1f8b87a76e0248ac003fb470 🔍

INTER_MEDIUM_FONT

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x41d7c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.48976
MD5 ef3d193e6a6ad033724c7872aec1cff7 🔍
SHA1 279fa3c60d682531d549d0ec9ed91f1b83402d40 🔍
SHA256 99dab2bdcb613c4c8264000a94351d1227f74dc95a86d1249493aeee0c0179c4 🔍
SHA3 9ebb645fac6a97712d092c7e22c959b5e1b0ceff1076810ba2ac5ee03bc8cc21 🔍

1 (#2)

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.91924
Detected Filetype Icon file
MD5 6da8e7d5ae1d5d15e0230a67a7c16c6d 🔍
SHA1 678db52cbe5d617c33c6269bfd4b6d8d1a17f956 🔍
SHA256 6eb54801f91b6d8effccbfaefe6b2d7705a274a75940e6226e24e0d4ec58c396 🔍
SHA3 994fc217c7b8bc8008ac262ff58044403206de6eceafd424d4640ecad395eb2f 🔍

1 (#3)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x2a4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.30996
MD5 45a76c3beac208cb592a7a62b5a5d6cc 🔍
SHA1 c79171a77848f5138acc6923a8704146e442944f 🔍
SHA256 b10b8e782e22c9f7c900c2795310a97b8754a19a3ca3366039e85eb4d5d13f8e 🔍
SHA3 76435aabde57243c70bd6b071efe572471b3d6a8ab1f84e8a45c57f2142737fa 🔍

1 (#4)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x188
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.89623
MD5 b8e76ddb52d0eb41e972599ff3ca431b 🔍
SHA1 fc12d7ad112ddabfcd8f82f290d84e637a4d62f8 🔍
SHA256 165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8 🔍
SHA3 37f83338b28cb102b1b14f27280ba1aa3fffb17f7bf165cb7b675b7e8eb7cddd 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.0.0
ProductVersion 1.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName Pulse
FileDescription Pulse - Roblox Overlay
FileVersion (#2) 1.0.0.0
InternalName Pulse
LegalCopyright Copyright (C) 2024
OriginalFilename Pulse.exe
ProductName Pulse
ProductVersion (#2) 1.0.0.0
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Oct-14 12:04:57
Version 0.0
SizeofData 66
AddressOfRawData 0x3b9968
PointerToRawData 0x3b8d68
Referenced File C:\Users\dw\Desktop\pulse\build\Pulse.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Oct-14 12:04:57
Version 0.0
SizeofData 20
AddressOfRawData 0x3b99ac
PointerToRawData 0x3b8dac

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Oct-14 12:04:57
Version 0.0
SizeofData 1132
AddressOfRawData 0x3b99c0
PointerToRawData 0x3b8dc0

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2026-Oct-14 12:04:57
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

StartAddressOfRawData 0x1403b9e80
EndAddressOfRawData 0x1403bc798
AddressOfIndex 0x14059da30
AddressOfCallbacks 0x140252b80
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_16BYTES
Callbacks 0x0000000140209A38
0x0000000140209B68

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1403e6300

RICH Header

XOR Key 0x5b25d9bc
Unmarked objects 0
C++ objects (33145) 185
C objects (33145) 43
ASM objects (33145) 25
253 (35207) 1
C objects (35207) 18
ASM objects (35207) 14
C++ objects (35207) 105
Imports (21202) 2
C objects (VS2022 Update 7 (17.7.0-3) compiler 32822) 27
Total imports 284
Imports (33145) 27
C++ objects (LTCG) (35228) 117
ASM objects (35228) 1
Resource objects (35228) 1
151 1
Linker (35228) 1

Errors

Leave a comment

No comments yet.