Manalyze report for 771bb8f8d75d0c8081450f3eefad99714e87b9afaf6e2978dc15c407f7487d70

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2025-Dec-06 14:32:10
Detected languages	Process Default Language

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C++ 6.0 - 8.0`
Info	The PE contains common functions which appear in legitimate applications.	`[!] The program may be hiding some of its imports: LoadLibraryW LoadLibraryExA GetProcAddress LoadLibraryExW` `Can create temporary files: CreateFileW GetTempPathW` `Reads the contents of the clipboard: GetClipboardData`
Suspicious	VirusTotal score: 1/67 (Scanned on 2026-03-27 12:42:01)	`MaxSecure: Trojan.Malware.300983.susgen`

Hashes

MD5	`82515844fe662486e8e633dd811c2072`
SHA1	`27b7fc3100fbbb3a9dc3020541dc4db0686a04ba`
SHA256	`771bb8f8d75d0c8081450f3eefad99714e87b9afaf6e2978dc15c407f7487d70`
SHA3	`166444ae44c9f0ec112036cb74cb6b1340eb8c2e167023dc1b64ed9d5d8d6675`
SSDeep	`12288:lQrkGHop6JrlDf82hKdXTtI1PRcF7Wn0jIIM/6s8WaZNXhyaeXmnsXkn2d:lykGHEpIm86s8WaZNZ09d`
Imports Hash	`8d2c07797d9bb251c4a634055a7936bc`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x110`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`5`
TimeDateStamp	2025-Dec-06 14:32:10
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`14.0`
SizeOfCode	`0x82e00`
SizeOfInitializedData	`0x68800`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x000624FB (Section: .text)`
BaseOfCode	`0x1000`
BaseOfData	`0x84000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`5.1`
ImageVersion	`0.0`
SubsystemVersion	`5.1`
Win32VersionValue	`0`
SizeOfImage	`0xef000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`3540dd4b7e8cd0d3f03d720f976b22c4`
SHA1	`c2ffe4c5d655f7639b01fe435711ec3844b1fb30`
SHA256	`1d93bee009b69792ce54c0dfbcfc74004b2e9595bcaa3a641e0839575411df8a`
SHA3	`22236c6fa88a8ba17fdbbeef49d7b1d6eab566c4df3a852e7fa7140de6407e52`
VirtualSize	`0x82c23`
VirtualAddress	`0x1000`
SizeOfRawData	`0x82e00`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.57897`

.rdata

MD5	`06e58ca09f20ad1db35f82ddb44ba5f3`
SHA1	`ff5e3f7fab9876c61958d190bc3ec1fe6e9fecda`
SHA256	`8f4868236238e71509c9b67b022b13c5e2498642d63e342e7cdf5ce62f2b0d32`
SHA3	`f3a76ef9d892884d1b77f2c04b06b7554175e32379cc42d78428592501a22e5d`
VirtualSize	`0x17d92`
VirtualAddress	`0x84000`
SizeOfRawData	`0x17e00`
PointerToRawData	`0x83200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.84995`

.data

MD5	`3220f0b046eb8ef021c0b9e6f4b5e925`
SHA1	`d720a66e52fff489ec005e501791c645abe7911d`
SHA256	`bc40a0040d9ba955b9e4a894c43b2658ffe599bc51840b54b0ce10f38236ff19`
SHA3	`af3074dc7186f16abeed0ea6fa2edfdb2bd793eca49641cba4e15216153ec1e4`
VirtualSize	`0x2814`
VirtualAddress	`0x9c000`
SizeOfRawData	`0x1a00`
PointerToRawData	`0x9b000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.01955`

.rsrc

MD5	`8d037a7d7fabca8affd874c547a2dabf`
SHA1	`66effbb9ca57e166a50cd5e59b75ffe75e04e54b`
SHA256	`f33e0afb53ad5ab68295c7051ed002ccd6c3e101b2c4215ae6e4f3d3a2dfc5c2`
SHA3	`d05ef96eb52c5cfc85c7c901864d0af974c7b94ace7ebd110d6b34a4e81fdbe2`
VirtualSize	`0x48550`
VirtualAddress	`0x9f000`
SizeOfRawData	`0x48600`
PointerToRawData	`0x9ca00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.45244`

.reloc

MD5	`d38816246e844a3deb43ee0921eeecb6`
SHA1	`733038bff82d78f7b93174e5f5ff360dcc01a6d4`
SHA256	`61e6c8ba433cd030254be0fc841e27f5b900a937e78e2d050825c45cf663c235`
SHA3	`5b9d0528d632e7be9bc1c7ecb132e9c8022cdbb4792c933341e6e23b465be929`
VirtualSize	`0x6838`
VirtualAddress	`0xe8000`
SizeOfRawData	`0x6a00`
PointerToRawData	`0xe5000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`6.69481`

Imports

COMCTL32.dll	`#17`
WINMM.dll	`timeBeginPeriod` `joyGetDevCapsW` `joyGetPosEx` `timeEndPeriod`
KERNEL32.dll	`WideCharToMultiByte` `GlobalAddAtomW` `GlobalDeleteAtom` `lstrlenW` `GetCommandLineW` `GetExitCodeProcess` `GlobalAlloc` `GlobalLock` `GlobalUnlock` `SetErrorMode` `GetCurrentDirectoryW` `GlobalFree` `LoadLibraryW` `SetStdHandle` `GetProcessHeap` `FreeEnvironmentStringsW` `GetEnvironmentStringsW` `GetCommandLineA` `FindNextFileA` `FindFirstFileExA` `DecodePointer` `GetFileType` `LCMapStringW` `EnumSystemLocalesW` `GetUserDefaultLCID` `IsValidLocale` `GetOEMCP` `IsValidCodePage` `GetStringTypeW` `GetCPInfo` `HeapFree` `HeapReAlloc` `HeapAlloc` `MultiByteToWideChar` `GetModuleFileNameA` `GetModuleHandleExW` `ExitProcess` `SetEnvironmentVariableW` `DeleteFileW` `GetACP` `DeleteCriticalSection` `LeaveCriticalSection` `EnterCriticalSection` `EncodePointer` `RtlUnwind` `InitializeSListHead` `GetCurrentThreadId` `GetCurrentProcessId` `GetStartupInfoW` `IsDebuggerPresent` `IsProcessorFeaturePresent` `TerminateProcess` `GetCurrentProcess` `SetUnhandledExceptionFilter` `UnhandledExceptionFilter` `GetSystemTimeAsFileTime` `TlsFree` `TlsSetValue` `TlsGetValue` `TlsAlloc` `InitializeCriticalSectionAndSpinCount` `SetLastError` `QueryPerformanceFrequency` `QueryPerformanceCounter` `LoadLibraryExA` `GetModuleHandleW` `VirtualQuery` `VirtualProtect` `GetSystemInfo` `RaiseException` `SetCurrentDirectoryW` `FindNextFileW` `CreateMutexW` `WriteFile` `GetModuleFileNameW` `Sleep` `ReleaseMutex` `WaitForSingleObject` `FindClose` `FindFirstFileW` `CloseHandle` `SetFilePointer` `GetLastError` `ReadFile` `CreateFileW` `CreateDirectoryW` `GetTempFileNameW` `GetTempPathW` `WriteConsoleW` `RemoveDirectoryW` `GetVersionExW` `GetLocaleInfoW` `FreeLibrary` `GetProcAddress` `LoadLibraryExW` `HeapSize` `GetConsoleCP` `GetConsoleMode` `SetFilePointerEx` `FlushFileBuffers` `GetStdHandle`
USER32.dll	`OffsetRect` `DestroyWindow` `PostQuitMessage` `DrawTextW` `FillRect` `GetUpdateRect` `DefMDIChildProcW` `EndPaint` `BeginPaint` `InflateRect` `GetClassNameW` `GetDlgItemTextW` `SendDlgItemMessageW` `EndDialog` `GetDlgItem` `SetDlgItemTextW` `DrawEdge` `MapVirtualKeyW` `GetInputState` `DrawMenuBar` `SetMenuInfo` `DestroyMenu` `LoadMenuIndirectW` `GetMenuItemCount` `SetWindowPlacement` `GetWindowPlacement` `EndDeferWindowPos` `DeferWindowPos` `BeginDeferWindowPos` `GetDesktopWindow` `GetSystemMenu` `UpdateWindow` `GetWindow` `RegisterClassW` `GetTabbedTextExtentW` `ModifyMenuW` `GetMenuStringW` `DialogBoxIndirectParamW` `GetMenuItemID` `RegisterClassExW` `LoadImageW` `LoadIconW` `GetMonitorInfoW` `MonitorFromWindow` `GetSystemMetrics` `RedrawWindow` `IsIconic` `IsDialogMessageW` `SetTimer` `GetClipboardData` `CloseClipboard` `SetClipboardData` `EmptyClipboard` `OpenClipboard` `IsClipboardFormatAvailable` `CheckMenuItem` `EnableMenuItem` `GetMenu` `PtInRect` `PostMessageW` `InvalidateRect` `SetFocus` `GetFocus` `CallWindowProcW` `RemovePropW` `SetPropW` `SetWindowLongW` `GetPropW` `MessageBoxW` `GetParent` `GetActiveWindow` `ShowCursor` `SetCapture` `ReleaseCapture` `GetKeyState` `GetWindowRect` `GetWindowDC` `SetCursorPos` `ClientToScreen` `ScreenToClient` `GetCursorPos` `LoadStringW` `MapWindowPoints` `SetWindowPos` `IsZoomed` `GetWindowLongW` `AdjustWindowRectEx` `SendMessageW` `LockWindowUpdate` `ShowWindow` `IsWindowVisible` `GetClientRect` `SetWindowTextW` `wsprintfW` `IntersectRect` `KillTimer` `DestroyIcon` `GetSubMenu` `DeleteMenu` `GetMenuState` `LoadCursorW` `SetCursor` `SystemParametersInfoW` `GetSysColor` `ReleaseDC` `CreateIconIndirect` `GetDC` `MsgWaitForMultipleObjects` `DispatchMessageW` `TranslateMessage` `TranslateMDISysAccel` `GetMessageW` `PeekMessageW` `DialogBoxParamW`
GDI32.dll	`CreatePalette` `SelectPalette` `RealizePalette` `EnumFontFamiliesExW` `GetStockObject` `SelectObject` `GetTextExtentPointW` `GetDeviceCaps` `GetObjectW` `CreateFontIndirectW` `DeleteObject` `CreatePen` `Rectangle` `LineTo` `SetBkColor` `ExtTextOutW` `SetTextColor` `SetBkMode` `CreateRectRgn` `GetClipRgn` `ExcludeClipRect` `SelectClipRgn` `SetDIBits` `CreateCompatibleBitmap` `CreateSolidBrush` `CreateBitmap`
COMDLG32.dll	`GetSaveFileNameW` `GetOpenFileNameW`
SHELL32.dll	`DragFinish` `DragQueryFileW` `ShellExecuteExW` `DragAcceptFiles`
MMFS2.dll (delay-loaded)	`#3` `#172` `#831` `#19` `#1033` `#1145` `#425` `#1144` `#423` `#430` `#1146` `#121` `#31` `#1105` `#255` `#281` `#174` `#419` `#688` `#192` `#120` `#333` `#80` `#468` `#280` `#67` `#125` `#249` `#276` `#366` `#959` `#945` `#123` `#124` `#11` `#1049` `#1036` `#173` `#493` `#487` `#372` `#520` `#585` `#341` `#342` `#417` `#355` `#610` `#445` `#344` `#50` `#62` `#34` `#982` `#1106` `#1017` `#876` `#361` `#32` `#63` `#832` `#742` `#102` `#101` `#17` `#16` `#103` `#753` `#536` `#47` `#756` `#757` `#343` `#686` `#443` `#1000` `#265` `#1068` `#162` `#765` `#1069` `#379` `#661` `#1031` `#433` `#184` `#191` `#825` `#201` `#158` `#177` `#186` `#163` `#176` `#189` `#1073` `#183` `#153` `#1072` `#10` `#9` `#6` `#8` `#7` `#766` `#64` `#43` `#65` `#66` `#264` `#587` `#448` `#286` `#568` `#169` `#849` `#571` `#701` `#703` `#170` `#51` `#74` `#83` `#97` `#81` `#979` `#79` `#187` `#82` `#76` `#78` `#106` `#107` `#105` `#168` `#691` `#75` `#241` `#272` `#245` `#274` `#363` `#645` `#584` `#519` `#356` `#739` `#713` `#137` `#554` `#155` `#786` `#619` `#462` `#761` `#411` `#1120` `#469` `#1134` `#95` `#1123` `#1126` `#94` `#1124` `#1125` `#98` `#91` `#24` `#59` `#61` `#60` `#70` `#69` `#68` `#819` `#820` `#77` `#72` `#389` `#755` `#795` `#1054` `#1077` `#204` `#205` `#1071` `#203` `#195` `#198` `#196` `#199` `#808` `#813` `#809` `#807` `#811` `#810` `#814` `#812` `#826` `#827` `#828` `#422` `#803` `#806` `#800` `#802` `#804` `#798` `#805` `#799` `#801` `#797` `#830` `#829` `#607` `#1074` `#494` `#1130` `#1029` `#611` `#1081` `#27` `#39` `#29` `#834` `#1101` `#1007` `#837` `#896` `#975` `#953` `#893` `#986` `#954` `#895` `#1048` `#929` `#677` `#412` `#234` `#612` `#678` `#413` `#679` `#1118` `#680` `#573` `#414` `#415` `#416` `#232` `#972` `#681` `#476` `#620` `#762` `#236` `#114` `#104` `#171` `#789` `#790` `#46` `#111` `#42` `#113` `#115` `#254` `#785` `#722` `#328` `#116` `#90` `#84` `#1010` `#92` `#1008` `#1011` `#117` `#997` `#996` `#998` `#108` `#109` `#73` `#110` `#71` `#913` `#859` `#878` `#994` `#894` `#974` `#882` `#948` `#991` `#269` `#267` `#268` `#976` `#1006` `#985` `#1037` `#794` `#1053` `#1128` `#35` `#1080` `#18` `#340` `#14` `#984` `#5` `#418` `#750` `#695` `#23` `#1070` `#373` `#740` `#546` `#4` `#1055` `#2` `#1104`

Delayed Imports

Attributes	`0x1`
Name	`MMFS2.dll`
ModuleHandle	`0x9d940`
DelayImportAddressTable	`0x9d420`
DelayImportNameTable	`0x99cec`
BoundDelayImportTable	`0x9a208`
UnloadDelayImportTable	`0`
TimeStamp	`1970-Jan-01 00:00:00`

AmdPowerXpressRequestHighPerformance

Ordinal	`1`
Address	`0x9d2b0`

NvOptimusEnablement

Ordinal	`2`
Address	`0x9d2b4`

1

Type	`RT_ICON`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0xea8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.93935`
MD5	`4a7ad684b5bfdfe9493f5995cc35cbe3`
SHA1	`8ec209377619638ee558c2e47751bf093740598e`
SHA256	`7170767c67b79cbb1b7235cebaad511f52a95004988a25d25fae1bb562be677f`
SHA3	`17c446ea9fde2b9830cae7a35cd46b0d3d8a205ebcdd9623545ee0c5e50319dd`

2

Type	`RT_ICON`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0x8a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.99586`
MD5	`22ec0c3a12a569c9e4e7d36d9e53bd16`
SHA1	`9364a8ab720271f79ba9328a7b56661c5af93deb`
SHA256	`832961eea7671787f22520334cce5f1fdc1bf184567ca5390a0054acd47cb95c`
SHA3	`d89bf0fed9920e8ebe889eba8e8eca7afe644af9b6881cbb38112fdf0b2bf30d`

3

Type	`RT_ICON`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0x568`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.66575`
MD5	`203494fd8067c1c285a55acc6998b6b5`
SHA1	`a110c7234ab265730100162104142ba86b307a0e`
SHA256	`71eafec7f363bc5979d1ceafa3d65248e0d3754d68eb55b96168c7b50e92c99f`
SHA3	`2d53956e3560ac6813445968b3cae4c545f3d1d0e8edc040b321947baad8ceaa`

4

Type	`RT_ICON`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0x42028`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.32139`
MD5	`f47f815b3c7fd1d8e31555524cb22e09`
SHA1	`bea0d57a137a2ecc792defabb13c1546a03685ea`
SHA256	`81f79866c99935f8d8ef2cd9fa2ecaf255be57ea05fdbea0a8233325d73458b5`
SHA3	`8a3d08c571daceb02822bebeefee3b7a89c3d5257fe709cf19c05770112ed1c0`

5

Type	`RT_ICON`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.33019`
MD5	`b4e8029733dff4f0c850bd73b8129683`
SHA1	`8b327f48821c52cb6ee9ea26488c1649bb9512ac`
SHA256	`bb9ab93a8d528f812b9fca3f3db045c2e60473337d9e976b17f23f2039e53063`
SHA3	`edf0c78d1224ab444859125902aed9b0dd11b243d1eb66f166ce695f6b17cf07`

6

Type	`RT_ICON`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.37948`
MD5	`953d39e97acf10fdba68217495a9e4f8`
SHA1	`d9eb69540449e2efb99c1877735e1efaa4a638f7`
SHA256	`75aac0cb7c5662fd649eea17bddc932870447c10d98af4e9ee45e0412ac86bd1`
SHA3	`18417b560988fa78d84a8d8665c5428eb751e0f27fa0f026149189ee790f6f23`

7

Type	`RT_ICON`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.304`
MD5	`c9db9624474b7ebcc2f2b56198cfe841`
SHA1	`2cf5143980487d129df294f2cdc8ad1e5d81e94c`
SHA256	`bf64757a4c4bd10d0c6ab84108350437f157b9367e603032b1501e3c8a153cf4`
SHA3	`1721653c04d65f91c93f64b1517c72584ca74422a6d9623b33acb7777bd5ac1a`

11

Type	`RT_STRING`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0x2e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.18832`
MD5	`e7f9ceec412a374f50796a2400179a61`
SHA1	`6d5c358dab6dd92da6ff608b2bd105b28cdb2050`
SHA256	`1fa9291164ef84ddcb60da58567411199e3c02cd89f4108cd5c96908b27433ac`
SHA3	`f997d66a7005b7b8c8419d1a0e85d9aa168958af9aba4023357bca4caca3d14c`

13

Type	`RT_STRING`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0x35c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.34458`
MD5	`c17aec44d84eb2e52970fc661a64cba2`
SHA1	`c4713636920212a201524092d38e4d90b29acb07`
SHA256	`7b03fef145a7134b43506d8c0500d1084dc3c0562cfa540a55c50424ae62cb00`
SHA3	`db4f296bd9a5c7aa75bbf40cf5bd0393b261d69cab49752af49395c2c68d8db1`

11 (#2)

Type	`RT_RCDATA`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.22193`
MD5	`b5f845a19ab1f442fe5c3c75d9d3f3e9`
SHA1	`8f95e3add93aa7a4414ab4f4e6b6e74cd56d2226`
SHA256	`956c602922c196728f6cd6d475e39c1126d9906ca7824f33cbced0bd8a47faa9`
SHA3	`372a22827871e4b521a2b25a83bd04372671370a5fb82a56bcb2c27c89246091`

100

Type	`RT_GROUP_ICON`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0x68`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.71787`
Detected Filetype	Icon file
MD5	`eee2def6081be6fc6c237a1035cd0d47`
SHA1	`8806faa001a31ea3b44f50dd48cc65beaeaf5980`
SHA256	`b4a86ff543995d1a1dcad86ec767539180bbe55d27b306186eb5fa4bc3d5872f`
SHA3	`293718c08c74df16bc3e220b2edcbf174192ba2080a5b914811bc9c27d661b57`

1 (#2)

Type	`RT_VERSION`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0x168`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.10412`
MD5	`3add89918854bcf3c29c71c90c2d7253`
SHA1	`59e118b0023e73200004e641d44cd06a5d4d14aa`
SHA256	`398b55c5c885732488365ff866dd38d4acf2a47eaece03fbb1ff8d9205fc9ff3`
SHA3	`dcaabcf3aee6b330cd8877d9729a20240decc82a8427cc490c6e600fdda245df`

1 (#3)

Type	`RT_MANIFEST`
Language	Process Default Language
Codepage	Latin 1 / Western European
Size	`0x537`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.39655`
MD5	`62d93b74104001b6c579b5c5203ec011`
SHA1	`8ffbdc309f8f855c6d76adb9990f9c84ea104bda`
SHA256	`90fa4e54988fcd675d295afe003cbff22a1978d9a2c6f9af7dfc26b4af6dc866`
SHA3	`1917a18af6cf219fd92c13ec90ad46ad7670eb288cb74e2a4c0341bf415116c2`

String Table contents

Modules
a681ac0d-2cc8-4deb-8fc7-2f508ac13fdd
Cannot initialize application.
Error while opening file.
Not enough memory!
File error!
Cannot find %s!
Cannot load %s. This object might need an external program or library not yet installed.
There is not enough available space in the temporary drive. Free some disk space and try again.
This application has been built with an incompatible version of Clickteam Fusion.
Unknown format!

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	3.0.296.9
ProductVersion	3.0.296.9
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT` `VOS_NT_WINDOWS32` `VOS_WINCE` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	Process Default Language

Resource LangID	Process Default Language

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2025-Dec-06 14:32:10
Version	`0.0`
SizeofData	`884`
AddressOfRawData	`0x98bb8`
PointerToRawData	`0x97db8`

IMAGE_DEBUG_TYPE_ILTCG

Characteristics	`0`
TimeDateStamp	2025-Dec-06 14:32:10
Version	`0.0`
SizeofData	`0`
AddressOfRawData	`0`
PointerToRawData	`0`

TLS Callbacks

Load Configuration

Size	`0xa0`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x49c014`
SEHandlerTable	`0x498b20`
SEHandlerCount	`38`

RICH Header

XOR Key	`0xdacfcce7`
Unmarked objects	`0`
241 (40116)	`46`
243 (40116)	`139`
242 (40116)	`35`
ASM objects (VS 2015/2017 runtime 26706)	`20`
C objects (VS 2015/2017 runtime 26706)	`20`
C++ objects (VS 2015/2017 runtime 26706)	`43`
Imports (VS2008 SP1 build 30729)	`15`
Total imports	`618`
C++ objects (LTCG) (27053)	`43`
Exports (27053)	`1`
Resource objects (27053)	`1`
Linker (27053)	`1`

Errors

Leave a comment

No comments yet.