78b57a1cfb2c55470d43b05ffde8c1b841c5fc30e2149b2281bc8c49908329e3

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 1970-Jan-01 00:00:00
Detected languages English - United States
Turkish - Turkey
Debug artifacts Embedded COFF debugging symbols
CompanyName WolfTeam Topluluk Sunucusu
FileDescription WolfTeam Oyun Launcher
FileVersion 1.0.489.0
InternalName wolfteam-launcher
LegalCopyright WolfTeam Topluluk Sunucusu
OriginalFilename wolfteam-launcher.exe
ProductName WolfTeam Launcher
ProductVersion 1.0.489.0

Plugin Output

Suspicious PEiD Signature: XWD graphics format
HQR data file
Info Interesting strings found in the binary: Contains domain names:
  • DateGonegzip.com
  • deneyin.net
  • fonts.googleapis.com
  • fonts.gstatic.com
  • golang.org
  • googleapis.com
  • gstatic.com
  • https://fonts.googleapis.com
  • https://fonts.googleapis.com/css2?family
  • https://fonts.gstatic.com
  • https://go.dev
  • https://wolfteam.wtfix.com
  • https://wolfteam.wtfix.com/Fetch.dll?2000&oyun
  • https://wolfteam.wtfix.com/api/launcher/manifestslice
  • https://wolfteam.wtfix.com/api/v1/launcher/sessionnet/http
  • https://wolfteam.wtfix.compencere
  • textproto.nl
  • wolfteam.wtfix.com
  • wtfix.com
Info Cryptographic algorithms detected in the binary: Uses constants related to MD5
Uses constants related to SHA1
Uses constants related to SHA256
Uses constants related to SHA512
Uses constants related to AES
Suspicious The PE is possibly packed. Unusual section name found: /4
Unusual section name found: /19
Unusual section name found: /32
Unusual section name found: /46
Unusual section name found: /65
Unusual section name found: /78
Unusual section name found: /95
Unusual section name found: /112
Unusual section name found: .symtab
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • LoadLibraryExW
  • GetProcAddress
 Functions which can be used for anti-debugging purposes:
  • SwitchToThread
Suspicious VirusTotal score: 1/49 (Scanned on 2026-09-29 14:08:13) Trapmine: malicious.moderate.ml.score

Hashes

MD5 3c454c026b993c8ef362f7852ae9e0e5 🔍
SHA1 f75359686479c888dc83ee84a07d78278a3b9f09 🔍
SHA256 78b57a1cfb2c55470d43b05ffde8c1b841c5fc30e2149b2281bc8c49908329e3 🔍
SHA3 2a54bd978194a66fa0f478f6a9973c7fcd88fdce17b0225c60d6ee6b2cba8c87 🔍
SSDeep 98304:T8HM+y2Nt0YtL90gSyBrCPETDTDfDE/k65HtrMU8Jtw6IXNK5g161D1pwcF:osGF9vSyBbrM/LjM5tcXL61Ds 🔍
Imports Hash 4e2bd2c481372f7ab13b83b63b424e97 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0x8b
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 17
TimeDateStamp 1970-Jan-01 00:00:00
PointerToSymbolTable 0xa01a00
NumberOfSymbols 9720
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 3.0
SizeOfCode 0x337200
SizeOfInitializedData 0x51e00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000089920 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion A.0
ImageVersion 1.0
SubsystemVersion A.0
Win32VersionValue 0
SizeOfImage 0x2b12000
SizeOfHeaders 0x600
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x200000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 f8b10ba9cfcae0e44ef6a066cacbf528 🔍
SHA1 f0d503cfb262abb5e69ce30beaefb036f731b52a 🔍
SHA256 bd9d66cb5d1d7fd4aa6c93d73962407ecc0beccd25e4ae10f8efab47c50df18e 🔍
SHA3 d59bb694a7342cb83fad331f950e7767442ab57017966086a0515ed76e67404a 🔍
VirtualSize 0x3371f1
VirtualAddress 0x1000
SizeOfRawData 0x337200
PointerToRawData 0x600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.20827

.rdata

MD5 bdadf083f7d01378e45f2486a4577812 🔍
SHA1 199591982c7d3ec89b0e8479927fe84ec98aec2c 🔍
SHA256 d08806620e3c259b62f1b07434ff886d280c967d06310ce284092df2208ca23a 🔍
SHA3 63adb351808e4e2a24cb60142dc465562b04aa8c67d2a8daa3501a227676b5f8 🔍
VirtualSize 0x3afc68
VirtualAddress 0x339000
SizeOfRawData 0x3afe00
PointerToRawData 0x337800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.0953

.data

MD5 ba6086dd445c664992003d8cd6e30b21 🔍
SHA1 af5f93c78315b598a0ffa1a531a7d45283f6ae1c 🔍
SHA256 90453438f10a33065ee3b75cf0292efe3d7dca13c4b5ddca8c5e7c58e6ccb0fc 🔍
SHA3 a187f408ba79a2047d53f4bd140e5a17ad70dacece9933be7799527aad6ea640 🔍
VirtualSize 0x20a8c68
VirtualAddress 0x6e9000
SizeOfRawData 0x51e00
PointerToRawData 0x6e7600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 6.25029

.pdata

MD5 b33cf1b32b2db82dc3bde59857ba56a5 🔍
SHA1 ed625812088d309a9190b9406b6e7cbe648ecbdd 🔍
SHA256 9a7c864f8dda666048be0be1a4237944f3062c8623f7e24eefe76fb762941ce0 🔍
SHA3 1454eb4f46b25e5d7ab946744f28ef9602706c240d48b6ffa036f294c7fe0f37 🔍
VirtualSize 0x12000
VirtualAddress 0x2792000
SizeOfRawData 0x12000
PointerToRawData 0x739400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.65662

.xdata

MD5 6c06d3a3330ad9abb8aa259e3cfb4f8c 🔍
SHA1 426163fe681cec73260df4256d9bf11060134d9e 🔍
SHA256 601a08c9befda487e5f983548879976ef9f5a3ee06a0b5d81485aa6051544f36 🔍
SHA3 9b55a3c053c3db255aa8ccdedc033379eacd2b109ee6b97a596c0452be1c20d0 🔍
VirtualSize 0xb4
VirtualAddress 0x27a4000
SizeOfRawData 0x200
PointerToRawData 0x74b400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.78173

/4

MD5 597d7f866ce9b79d0bb3c15d0f5de47f 🔍
SHA1 7ce84a517a35da0ab14bf1d9dfce30d27200467a 🔍
SHA256 b198ff76dd3d0b990f4f0bc6a2610b870bbcc01c65d466cbe9e6ab8883c7650f 🔍
SHA3 974b9f7c4f27500c9d878a1cb71b5c0069439c85aebec1ce0b57621badc7a847 🔍
VirtualSize 0x164
VirtualAddress 0x27a5000
SizeOfRawData 0x200
PointerToRawData 0x74b600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.8855

/19

MD5 79a561512011885e246eaa5b6cc09a99 🔍
SHA1 32a1e38fee68547e7f2ee98d5d3eec80750a70d1 🔍
SHA256 304999063d52e5487dcb17e961d7b6cf44fcbce76fd5bbb93a814685ec5c7153 🔍
SHA3 71ba006568bc2fe421daa53d2632f692d90340a233c075b9e8208a87923b0a77 🔍
VirtualSize 0x9a103
VirtualAddress 0x27a6000
SizeOfRawData 0x9a200
PointerToRawData 0x74b800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 7.98302

/32

MD5 e502508f6d292d42180a9105e396c781 🔍
SHA1 714fe7f19b96c928a8c05522c203f41ec8ec8e6a 🔍
SHA256 095a3eda1aa7d5342b4c6b9942671a699b1030b6e42c87748596a2b72f7aa120 🔍
SHA3 6dd5044dc22abd5c351b1805b0e0e14906f983053aed40b62cd99a313d473094 🔍
VirtualSize 0x1e544
VirtualAddress 0x2841000
SizeOfRawData 0x1e600
PointerToRawData 0x7e5a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 7.95799

/46

MD5 87b999fb861257d2ce3244b153dfddd2 🔍
SHA1 cf906bd9e3fd82896b29318558baddfc587cd5d7 🔍
SHA256 80d2d1ca391bcc3fd9cdf1cec5822cf4e9daf422c91060e5381bd230e377c75d 🔍
SHA3 1caa8e2b08d2e60327565ec995b93c789b1b72358580fa5c1c3df5bb767abf59 🔍
VirtualSize 0x18
VirtualAddress 0x2860000
SizeOfRawData 0x200
PointerToRawData 0x804000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.440284

/65

MD5 c5ac84905e7adffe5a3a13f8f289971d 🔍
SHA1 77e71d633ccf825bea427aa80f82a87cdcb18d7f 🔍
SHA256 d6647ae8e7ce51d7f010363a8ef77e4df4084845216aa0bcfd0c93b5ec1f9e62 🔍
SHA3 2c000670972b3ab68904277d90727cab0cfeabf55a158d97eb7396541c31eea0 🔍
VirtualSize 0x10e716
VirtualAddress 0x2861000
SizeOfRawData 0x10e800
PointerToRawData 0x804200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 7.99746

/78

MD5 1e36ce4d64277c60ada925a000d36585 🔍
SHA1 2c43b4058bddc83da5a19542389b510f4056ec11 🔍
SHA256 cfa3729c1b9c0c9aa79f6799ca6ba9919a32294fc6455b9fdcab43e7d219025d 🔍
SHA3 7cc975a87ea63ec5802b2dc4f973318fc6592df4814759d3a4af6e8fc6304397 🔍
VirtualSize 0x9c7ca
VirtualAddress 0x2970000
SizeOfRawData 0x9c800
PointerToRawData 0x912a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 7.99575

/95

MD5 be36389bbbe8904beb336dbdee4f6415 🔍
SHA1 366601b5aa91cd5f30fb34bc7697bd3fa480fcd7 🔍
SHA256 f7ed39a6157fbe9b007e267bcafc90e371b3333b2c9332e8b334146c183cd3ff 🔍
SHA3 c94faf2cc00f0740e3c7ace66a87328ddf8929f0f53a9031ea68c10bb4c08e85 🔍
VirtualSize 0x3e8da
VirtualAddress 0x2a0d000
SizeOfRawData 0x3ea00
PointerToRawData 0x9af200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 7.9837

/112

MD5 f84caae4dde2cd6b6119ab6fa4b2649a 🔍
SHA1 892e9e5e71cd1ddb8c437e0f9abf77314013813c 🔍
SHA256 f0a983952f9d895c798bb7d9d197b39291bbf961834352238c5dc8100e84913d 🔍
SHA3 8180ad0366de9e7430cdadf6902d887238c1137241dcaf1cc9c7a55e9ab91947 🔍
VirtualSize 0x4109
VirtualAddress 0x2a4c000
SizeOfRawData 0x4200
PointerToRawData 0x9edc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 7.77298

.idata

MD5 9437de27ae745b86198c5abe1f1b38b0 🔍
SHA1 ab07dfd2ae4b579efe4f5970563537bc19f111ab 🔍
SHA256 4e67f406368253af573513cfbaa2d82dfedbc6aa16b0764a3901e8c486f7ad81 🔍
SHA3 cdaaa6712e6f0e9cc927dec0a12fd594e2af126d578abd7c4745624a1e862f98 🔍
VirtualSize 0x57c
VirtualAddress 0x2a51000
SizeOfRawData 0x600
PointerToRawData 0x9f1e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.31081

.reloc

MD5 c353ab846c5a0fc463ae0954b7442e09 🔍
SHA1 c02e104f6e2f588ec392508e224317c9343fcf8c 🔍
SHA256 84f5a93dc63dbb79ca1989cf0f7fb54fe04a502081a5969d49ac542283e2da27 🔍
SHA3 8110480584ab6045840420236572584d083c9127cca978af643a4719ed687919 🔍
VirtualSize 0xf544
VirtualAddress 0x2a52000
SizeOfRawData 0xf600
PointerToRawData 0x9f2400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.45665

.symtab

MD5 eb6ec00755125cbbfbd6ac55fef1be80 🔍
SHA1 8a6dd9da5392aed77bd24f26e387c58c2c3b359b 🔍
SHA256 8ff4f79e1f20adb6ff1db3d1f5116c86cf5528d814de557cc0c5c26120a0a36e 🔍
SHA3 572ee4fcd9b38dd2ac44b9fb0b299670966015264d168d01470bd7583fdd112c 🔍
VirtualSize 0x7e58c
VirtualAddress 0x2a62000
SizeOfRawData 0x7e600
PointerToRawData 0xa01a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.37526

.rsrc

MD5 4c4a4fda4ad7d5beaccd35b95938a819 🔍
SHA1 c3e74e2b09e2e17f2e985b71ddf022666908b98b 🔍
SHA256 09a7601114a00f2175010713df899e3f086594afc0e3e2a8b6ca5450d0e5dea6 🔍
SHA3 9b35c3f7a766fbe66f80686468b984e455038314a137aa3596f9dd20fd2f4e26 🔍
VirtualSize 0x30018
VirtualAddress 0x2ae1000
SizeOfRawData 0x30200
PointerToRawData 0xa80000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.90043

Imports

kernel32.dll WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
QueryPerformanceCounter
PostQueuedCompletionStatus
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
GetProcAddress
LoadLibraryExW

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.93449
MD5 2fa0dee8f04378ac60da8a1beb1bfb94 🔍
SHA1 6782ca0c4acd43b7c2841fa40b491c13b2de2287 🔍
SHA256 406d2bf65185e220d808463c811af4a40927c46a7ce7f0127235be9ae85bd51d 🔍
SHA3 1131c1d23e1be21e1595fd44623cfc395173524aaab0cdcbe84b03a64bf0a5a0 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.62951
MD5 32c7efae520622b23217fb15ced0e9ac 🔍
SHA1 f90756c404104662b700a4f69a3c25e038df89de 🔍
SHA256 41e35f885f2dda50503b29c1f81fe2c447b942166a9aef05309c23f0aad9df9f 🔍
SHA3 d0018ba3c06d6e1fc16a3260fcfa18e6f9f8731565824da8c384ad3b92580a25 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x15843
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98726
Detected Filetype PNG graphic file
MD5 dc7492dd938ed3a37abe578809c178ea 🔍
SHA1 c24de2368fdd4987bb0ed2dc7657d86201745ca9 🔍
SHA256 303271f91cfb5636e3a2e639dfbb57a3ee2249c3f00e377dcf027f2d05653d86 🔍
SHA3 5433014c2c782aa439f426185589a22ffd3ad45c4904f4b3ab42cf930e07fc5c 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.23156
MD5 635f34a3dc9ba569b2974ad26979abdd 🔍
SHA1 adfb336e50ff75751ac0094d001246e7bec96531 🔍
SHA256 94f09b5122b39ecd397ea45572b6760eab6a7cc63b62ad55463ed417109de11c 🔍
SHA3 4c37d4b9d284f66b662e3a9c6bfbfc5b3446fa51be8493576f9e61c3040508c8 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.5349
MD5 6996817a0020e73b8bb6f5fe3801a9c9 🔍
SHA1 f158e576dd19e495bdf27c44bb561d6d2902647c 🔍
SHA256 224255010c830dec7db8ad2dca305d020816603ec52c7fa99f67aed58b28d080 🔍
SHA3 5446cf0f69e80dc95395945f389c503e3fbc01b90ff2cfa9239409ab263b97d9 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.73754
MD5 ced12b5d9c79e78073c1b3a883d5cbc7 🔍
SHA1 a8c496a254161f5ee884d529b2f51a2a504144f6 🔍
SHA256 a9e40d7cc42f04a3c1248f3943651fe87ca069ee6865f8838bbad826fb943f40 🔍
SHA3 6e18a1fa0dceee58441f35702cb164139144cacc5da2db098bf1eab28fb4b931 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.74682
MD5 d2cea4a57f10b1c1d45fb5f25b6852e4 🔍
SHA1 1a077979245a81d361b7385311b0b6bd742686f3 🔍
SHA256 2341120e1b156c8f04c3378160907e1ad14152f2a8ae57ab9fb7efd61fe581ea 🔍
SHA3 9deb87b3974b9d03941eefe19cb30fa11f1dd3f6fb9ddfd5c893d65bef610167 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.74474
MD5 7cbd056c3832603834c415967bafa23b 🔍
SHA1 a75d4cbc4dd3010a8c2e72fa9e83711250638e53 🔍
SHA256 c0181ea66669084d5c640fdc5aac783274e8014aa86f4e55e6f9c003156f157b 🔍
SHA3 f263381f02a41dadd9e664fd79cdc87d68d5e66a82b0a6caa67de7c79153ef44 🔍

IDI_ICON1

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x76
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.90462
Detected Filetype Icon file
MD5 b8d07b423cbfa104b38326da8bdb0514 🔍
SHA1 0ad98b1cc97cd102b803ce65dbd4f139368f7465 🔍
SHA256 9ff174a05627d5439811ccb20e18edca790838398c555c26cbe8ab363d67c2de 🔍
SHA3 d0ba469279e700612d0a870c79d7df872a160a0dcb6c073cf3fc33da729d7c19 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x330
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.38558
MD5 a509ee3e43ee239f4fb3158386fc4cfa 🔍
SHA1 1c73d3f10cdd10a08c7ccfd7e1534652ce3f7915 🔍
SHA256 0c5e61d654cd153f3ef6050011543b8417b8b4f381c17562f85c16e34c75c2e5 🔍
SHA3 e4d1175844cc1e8d9380c21d5c57aa7ce879cb7f73a95f537a8eceb7a1541f85 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x871
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.86192
MD5 e77dc20ef012809202db4a1a605e8e5d 🔍
SHA1 183ae67bd0102f0c206c1db8ad03d2e65876c6d5 🔍
SHA256 6ee28e6351f8636023f139401b27ed59f512f789ddfb26a91cb27fec0eb51e93 🔍
SHA3 b487245ee40841750bb8799371f8183d5d5681dd237a7f57fd3daf4eaf073917 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.489.0
ProductVersion 1.0.489.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language Turkish - Turkey
CompanyName WolfTeam Topluluk Sunucusu
FileDescription WolfTeam Oyun Launcher
FileVersion (#2) 1.0.489.0
InternalName wolfteam-launcher
LegalCopyright WolfTeam Topluluk Sunucusu
OriginalFilename wolfteam-launcher.exe
ProductName WolfTeam Launcher
ProductVersion (#2) 1.0.489.0
Resource LangID English - United States

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0

RICH Header

Errors

[*] Warning: Tried to read outside the COFF string table to get the name of section /4! [*] Warning: Tried to read outside the COFF string table to get the name of section /19! [*] Warning: Tried to read outside the COFF string table to get the name of section /32! [*] Warning: Tried to read outside the COFF string table to get the name of section /46! [*] Warning: Tried to read outside the COFF string table to get the name of section /65! [*] Warning: Tried to read outside the COFF string table to get the name of section /78! [*] Warning: Tried to read outside the COFF string table to get the name of section /95! [*] Warning: Tried to read outside the COFF string table to get the name of section /112!
Leave a comment

No comments yet.