| Architecture |
IMAGE_FILE_MACHINE_I386
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date |
2026-Jan-03 05:54:25
|
| Detected languages |
English - United States
|
| FileDescription |
Kashif Bharwana
|
| FileVersion |
3.4.0.0
|
| ProgramID |
com.embarcadero.device unlock tool
|
| ProductName |
device unlock tool
|
| ProductVersion |
1.0.0.0
|
| Info |
Libraries used to perform cryptographic operations: |
Microsoft's Cryptography API
|
| Suspicious |
This PE is packed with Themida |
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found: .themida
Section .themida is both writable and executable.
Unusual section name found: .boot
|
| Suspicious |
The PE contains functions most legitimate programs don't use. |
Uses Microsoft's cryptographic API:
- CryptAcquireContextW
- CryptBinaryToStringW
Leverages the raw socket API to access the Internet:
|
| Suspicious |
No VirusTotal score. |
This file has never been scanned on VirusTotal.
|
| MD5 |
79bb6d9fe99e9d4f8d1cb3396825b1f7
|
| SHA1 |
8ab838a833f4d9d57d7f0db6ed7ceb72829870cd
|
| SHA256 |
e94096b28209c621344d2afe63f5e6261da1178fc448f871d40c9e439ac70986
|
| SHA3 |
d8197f6278b2d8d5ff825972356a006d134033d7ed0c648a8b8aa4484c87bc1c
|
| SSDeep |
196608:deCznDjdtXjUAaek6pjNySY8qvd/3BW2DetFVZ84l81hxalSLJ3bz6O6YTtfYK4+:cCznDhxUKXqvp3BDet5pl0xHxz1tFneU
|
| Imports Hash |
b2d83d035b6a456293eef51b77bf2439
|
| e_magic |
MZ
|
| e_cblp |
0x50
|
| e_cp |
0x2
|
| e_crlc |
0
|
| e_cparhdr |
0x4
|
| e_minalloc |
0xf
|
| e_maxalloc |
0xffff
|
| e_ss |
0
|
| e_sp |
0xb8
|
| e_csum |
0
|
| e_ip |
0
|
| e_cs |
0
|
| e_ovno |
0x1a
|
| e_oemid |
0
|
| e_oeminfo |
0
|
| e_lfanew |
0x200
|
| Signature |
PE
|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections |
16
|
| TimeDateStamp |
2026-Jan-03 05:54:25
|
| PointerToSymbolTable |
0
|
| NumberOfSymbols |
0
|
| SizeOfOptionalHeader |
0xe0
|
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
|
| Magic |
PE32
|
| LinkerVersion |
5.0
|
| SizeOfCode |
0x6ad000
|
| SizeOfInitializedData |
0x149000
|
| SizeOfUninitializedData |
0
|
| AddressOfEntryPoint |
0x015C3058 (Section: .boot)
|
| BaseOfCode |
0x1000
|
| BaseOfData |
0x6ae000
|
| ImageBase |
0x400000
|
| SectionAlignment |
0x1000
|
| FileAlignment |
0x200
|
| OperatingSystemVersion |
6.0
|
| ImageVersion |
0.0
|
| SubsystemVersion |
6.0
|
| Win32VersionValue |
0
|
| SizeOfImage |
0x1add000
|
| SizeOfHeaders |
0x600
|
| Checksum |
0xc0d1e8
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| SizeofStackReserve |
0x100000
|
| SizeofStackCommit |
0x2000
|
| SizeofHeapReserve |
0x100000
|
| SizeofHeapCommit |
0x1000
|
| LoaderFlags |
0
|
| NumberOfRvaAndSizes |
16
|
| MD5 |
d2343eb4c05ebee629f12758a2822542
|
| SHA1 |
8d4bfe05f0cf6d31ef7df35bad8d8627015d19f5
|
| SHA256 |
09d2794311395216e18dcdbb444b5f2e128ede7d2ab3c4c8f1fd736a71e2b5c7
|
| SHA3 |
c61ae533140fbc22ea85e6f5f87bb2830abca3a94a2a9e33de55b70540cfcaf1
|
| VirtualSize |
0x6ad000
|
| VirtualAddress |
0x1000
|
| SizeOfRawData |
0x27ea00
|
| PointerToRawData |
0x600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy |
7.97998
|
| MD5 |
8aae875907a84c819c5a43bada812b91
|
| SHA1 |
9f0d9d1a4b72898a26cbe04ec5b87f46dc1dac77
|
| SHA256 |
7f30607593273c62fd29bee975ea53fa8a706eec8ce0c346f8aaf610769ab39a
|
| SHA3 |
12058fe49c77fbf2dfb078ec96e8cbfd257b56cfcbb7df77d20aee71f607e07f
|
| VirtualSize |
0x149000
|
| VirtualAddress |
0x6ae000
|
| SizeOfRawData |
0x29000
|
| PointerToRawData |
0x27f000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
7.95398
|
| MD5 |
17df13abbb66c60c4e5b63e92a8988ee
|
| SHA1 |
be22804e032d037417bcbd9d09b9b7107ee2505e
|
| SHA256 |
2cad9299d64a15d7e2141be9e391021c770fe9dbb454ce0bd025e9972792a617
|
| SHA3 |
9da22fb73eed7c62552c1ed8ab7df446e463b589f2d81955316785a4eab01623
|
| VirtualSize |
0x1000
|
| VirtualAddress |
0x7f7000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0x2a8000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
0.321716
|
| MD5 |
544298d157ddecb068ac7db0c9dbc8f2
|
| SHA1 |
6258b7ed99e6f472c25a75b5f00603899c615452
|
| SHA256 |
818db0f52b6b29828c921154befadbb8895ed0b1bd0f988cd06924e252503372
|
| SHA3 |
980a893ad949086b1446252142e9dfe6d816dcbe5bf0e72851534d4dbc4aef79
|
| VirtualSize |
0x1000
|
| VirtualAddress |
0x7f8000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0x2a8200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
|
| Entropy |
0.402896
|
| MD5 |
e90b60448a31c9a8b30ca4dff2e080d3
|
| SHA1 |
6fe0872976fe5177d90e342e725769b330596066
|
| SHA256 |
3abc0fe116837ad1719170dfa907a13026c6543b42bae91c37f8b3cff1236e18
|
| SHA3 |
79e793b32a7019eea5029856a61984c94f475eb346ff42c76811f81574696966
|
| VirtualSize |
0x5000
|
| VirtualAddress |
0x7f9000
|
| SizeOfRawData |
0x600
|
| PointerToRawData |
0x2a8400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
7.36672
|
| MD5 |
ebce217d0ca7d7208b30fe3d7a3174d1
|
| SHA1 |
cfcfb262e1ccebdc307f0b1a4e08de0beaec0af5
|
| SHA256 |
bf9d7214cc38e5ae87f8513780c6651510e5d24b808c57ccb18c0c7e8eb7f257
|
| SHA3 |
fe54a0744eefb60a8d75b4a1e6a047fe4827ae5dbdcf250cd43a0a6f66579fdb
|
| VirtualSize |
0x1000
|
| VirtualAddress |
0x7fe000
|
| SizeOfRawData |
0x600
|
| PointerToRawData |
0x2a8a00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
6.67244
|
| MD5 |
43aee757eb11627910570caa4097ffe6
|
| SHA1 |
a649b45ee5d6131e5fdc7aa9d5b3e708c380fdf3
|
| SHA256 |
853ad5a32aa2cbc0d2121708fecc5eceaa7e6cbd93e58c89684fb14d9d858718
|
| SHA3 |
74387174f5d82c61d734abfc1d77746c5c48da9a67b0e14ac5706baea6ea136f
|
| VirtualSize |
0xd000
|
| VirtualAddress |
0x7ff000
|
| SizeOfRawData |
0x2400
|
| PointerToRawData |
0x2a9000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
7.85665
|
| MD5 |
6653947a50d65b6c6253d44f46d4730d
|
| SHA1 |
308c8e1b61647441b5a6cc78999c833e23805fcf
|
| SHA256 |
1455dfa36f712ff3116c8292bdb856a8477ca20d512c8ae5e574f40610bbcbad
|
| SHA3 |
64aa29b8006b1c1dd2b6783d0fd62204a1deeb1e54c7086a8047f39da140a600
|
| VirtualSize |
0x422000
|
| VirtualAddress |
0x80c000
|
| SizeOfRawData |
0x3d7e00
|
| PointerToRawData |
0x2ab400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
7.95789
|
| MD5 |
ac880efad9b003fa7221f365c51602f3
|
| SHA1 |
5d89feeb17e7c4cb56ae60da84f887d8962d5a66
|
| SHA256 |
c29e1d5744402377d8325e38a0f273dc9c28bfd8c9824b53266cc80552226f85
|
| SHA3 |
745d37c8dbca7f7bd27eed5d3e3749c45e678ba47e92828d2c4c5804af1b77a6
|
| VirtualSize |
0x88000
|
| VirtualAddress |
0xc2e000
|
| SizeOfRawData |
0x55200
|
| PointerToRawData |
0x683200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
|
| Entropy |
7.97592
|
| MD5 |
e63795c79208350b288aaed480d34ab3
|
| SHA1 |
9c19441972e1432db1f7e441850959f09ddb0844
|
| SHA256 |
c942e7008bbf71c5e140fc444bf5e9762cd687324b85cb453694f8c90af22c2a
|
| SHA3 |
fe83ad038ae167c88608a62b299e7765af87a250c51d68a30d7249c74c7c59fc
|
| VirtualSize |
0xca00
|
| VirtualAddress |
0xcb6000
|
| SizeOfRawData |
0xca00
|
| PointerToRawData |
0x6d8400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
5.68293
|
| MD5 |
126ce7b49a7971a43ed083d28fbddfc3
|
| SHA1 |
c51d9259f4af363c96814f5928df3f1475baabe8
|
| SHA256 |
d7fe9723bbffd15ec176ac8850ee255cf573bb0df99afc96cb0b64311d2cb934
|
| SHA3 |
2cfe618adc5198189bd9be6e456b0a92d887876a62dbb6ca8c357d0c162f7e62
|
| VirtualSize |
0x1000
|
| VirtualAddress |
0xcc3000
|
| SizeOfRawData |
0x600
|
| PointerToRawData |
0x6e4e00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
3.89305
|
| MD5 |
78dab2c9043a3ada0551816f2f3e15e8
|
| SHA1 |
42e93f7438a3eb29172d51f321947f1dfb44647f
|
| SHA256 |
ddde890400dac8fb3abc5a74dc143b27e4bd35e93b40372c587205242f2ff493
|
| SHA3 |
28760d2eddc179d2d6fcc42c200dae4de45bce2fc48d37ba400b508fb5c48ef7
|
| VirtualSize |
0x1000
|
| VirtualAddress |
0xcc4000
|
| SizeOfRawData |
0x400
|
| PointerToRawData |
0x6e5400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
0.161427
|
| MD5 |
092015d2d51e3b45ae2c8e205673758d
|
| SHA1 |
8368a6e65064905b7dce3d7c9d390bd466b32aed
|
| SHA256 |
492e80def2f0076a769ec9c70936f880bedf34a4ecd35eb3c87cd73ef1de0ba6
|
| SHA3 |
0268857551797be6b3dafe4f78d26390fc4932b85f4ab474794be211735efddd
|
| VirtualSize |
0x1e00
|
| VirtualAddress |
0xcc5000
|
| SizeOfRawData |
0x1e00
|
| PointerToRawData |
0x6e5800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
5.41689
|
| MD5 |
d41d8cd98f00b204e9800998ecf8427e
|
| SHA1 |
da39a3ee5e6b4b0d3255bfef95601890afd80709
|
| SHA256 |
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
| SHA3 |
a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
|
| VirtualSize |
0x8fc000
|
| VirtualAddress |
0xcc7000
|
| SizeOfRawData |
0
|
| PointerToRawData |
0x6e7600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| MD5 |
0f04809241ba24bd8a06f1e1ddafdd91
|
| SHA1 |
26eb7a5a08e2cb61902c5c8e03146eaaa3c78a24
|
| SHA256 |
1bdcf83ce6a1e5bd0971716d36588a06dcc383aee83613284f27b7be166a2272
|
| SHA3 |
bf9b8d6624a9bd4ff59aba19bd39ccb8d0489d20d065ac9a63c00899515f6a32
|
| VirtualSize |
0x518200
|
| VirtualAddress |
0x15c3000
|
| SizeOfRawData |
0x518200
|
| PointerToRawData |
0x6e7600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy |
7.93297
|
| MD5 |
5614fc0b9f7e1eb92bbf6559bc69fcab
|
| SHA1 |
1fadf92d278b2765d6066c9ac81103514e6ead7f
|
| SHA256 |
47c022390dc8c92afffd485b608b0a1107ac62c406de0beec4de4016f5a58b7c
|
| SHA3 |
334f04fc5b4a2170d71687c80ff698f573fb09202e3a13dbcff206aa8686588b
|
| VirtualSize |
0x1000
|
| VirtualAddress |
0x1adc000
|
| SizeOfRawData |
0x10
|
| PointerToRawData |
0xbff800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_MEM_READ
|
| Entropy |
2.4746
|
| kernel32.dll |
GetModuleHandleA
|
| LIBCRYPTO-3.DLL |
EVP_CIPHER_CTX_free
|
| SETUPAPI.DLL |
SetupDiDestroyDeviceInfoList
|
| ADVAPI32.DLL |
CryptAcquireContextW
|
| RPCRT4.DLL |
RpcStringFreeW
|
| VERSION.DLL |
GetFileVersionInfoSizeW
|
| WINSPOOL.DRV |
ClosePrinter
|
| COMCTL32.DLL |
FlatSB_GetScrollInfo
|
| COMDLG32.DLL |
FindTextW
|
| DWMAPI.DLL |
(EMPTY)
|
| GDI32.DLL |
AbortDoc
|
| MSIMG32.DLL |
(EMPTY)
|
| SHELL32.DLL |
SHAppBarMessage
|
| USER32.DLL |
ActivateKeyboardLayout
|
| IMM32.DLL |
(EMPTY)
|
| OLE32.DLL |
CLSIDFromProgID
|
| OLEAUT32.DLL |
GetErrorInfo
|
| OLEDLG.DLL |
OleUIInsertObjectW
|
| WS2_32.DLL |
socket
|
| CRYPT32.DLL |
CryptBinaryToStringW
|
| WTSAPI32.DLL |
WTSRegisterSessionNotification
|
| WINDOWSCODECS.DLL |
(EMPTY)
|
| SHCORE.DLL |
(EMPTY)
|
| UXTHEME.DLL |
(EMPTY)
|
| WINUSB.DLL |
WinUsb_Free
|
| Ordinal |
3
|
| Address |
0x15050
|
| Ordinal |
4
|
| Address |
0x15108
|
| Ordinal |
5
|
| Address |
0x15144
|
| Ordinal |
6
|
| Address |
0x1517c
|
| Ordinal |
7
|
| Address |
0x151ac
|
| Ordinal |
8
|
| Address |
0x151e0
|
| Ordinal |
9
|
| Address |
0x15218
|
| Ordinal |
10
|
| Address |
0x152fc
|
| Ordinal |
11
|
| Address |
0x15334
|
| Ordinal |
12
|
| Address |
0x15368
|
| Ordinal |
13
|
| Address |
0x1538c
|
| Ordinal |
14
|
| Address |
0x1d888
|
| Ordinal |
15
|
| Address |
0x1d914
|
| Ordinal |
16
|
| Address |
0x1d94c
|
| Ordinal |
17
|
| Address |
0x1d984
|
| Ordinal |
18
|
| Address |
0x1d9bc
|
| Ordinal |
19
|
| Address |
0x1d9f4
|
| Ordinal |
20
|
| Address |
0x1da2c
|
| Ordinal |
21
|
| Address |
0x1dab4
|
| Ordinal |
22
|
| Address |
0x1daec
|
| Ordinal |
23
|
| Address |
0x1db24
|
| Ordinal |
24
|
| Address |
0x1db5c
|
| Ordinal |
25
|
| Address |
0x1db94
|
| Ordinal |
26
|
| Address |
0x1dbcc
|
| Ordinal |
27
|
| Address |
0x1dc00
|
| Ordinal |
28
|
| Address |
0x1dc2c
|
| Ordinal |
29
|
| Address |
0x20668
|
| Ordinal |
30
|
| Address |
0x206b0
|
| Ordinal |
31
|
| Address |
0x206f0
|
| Ordinal |
32
|
| Address |
0x20728
|
| Ordinal |
33
|
| Address |
0x20768
|
| Ordinal |
34
|
| Address |
0x207a8
|
| Ordinal |
35
|
| Address |
0x207e8
|
| Ordinal |
36
|
| Address |
0x216bc
|
| Ordinal |
37
|
| Address |
0x216e0
|
| Ordinal |
38
|
| Address |
0x27a84
|
| Ordinal |
39
|
| Address |
0x27ccc
|
| Ordinal |
40
|
| Address |
0x31d6c
|
| Ordinal |
41
|
| Address |
0x31e50
|
| Ordinal |
42
|
| Address |
0x31e74
|
| Ordinal |
43
|
| Address |
0x39790
|
| Ordinal |
44
|
| Address |
0x397b4
|
| Ordinal |
45
|
| Address |
0x3b0b0
|
| Ordinal |
46
|
| Address |
0x3b0d4
|
| Ordinal |
47
|
| Address |
0x3b238
|
| Ordinal |
48
|
| Address |
0x3b25c
|
| Ordinal |
49
|
| Address |
0x3d2e0
|
| Ordinal |
50
|
| Address |
0x3d304
|
| Ordinal |
51
|
| Address |
0x4e984
|
| Ordinal |
52
|
| Address |
0x4e9c0
|
| Ordinal |
53
|
| Address |
0x4ea00
|
| Ordinal |
54
|
| Address |
0x4ea40
|
| Ordinal |
55
|
| Address |
0x4ea80
|
| Ordinal |
56
|
| Address |
0x4eac0
|
| Ordinal |
57
|
| Address |
0x4eb00
|
| Ordinal |
58
|
| Address |
0x4eb40
|
| Ordinal |
59
|
| Address |
0x4eb80
|
| Ordinal |
60
|
| Address |
0x4ebc0
|
| Ordinal |
61
|
| Address |
0x4ec00
|
| Ordinal |
62
|
| Address |
0x4ec40
|
| Ordinal |
63
|
| Address |
0x4ec80
|
| Ordinal |
64
|
| Address |
0x4ecc0
|
| Ordinal |
65
|
| Address |
0x4ed00
|
| Ordinal |
66
|
| Address |
0x4ed40
|
| Ordinal |
67
|
| Address |
0x4ed80
|
| Ordinal |
68
|
| Address |
0x4edc0
|
| Ordinal |
69
|
| Address |
0x4ee00
|
| Ordinal |
70
|
| Address |
0x4ee40
|
| Ordinal |
71
|
| Address |
0x4ee80
|
| Ordinal |
72
|
| Address |
0x4eec0
|
| Ordinal |
73
|
| Address |
0x4ef00
|
| Ordinal |
74
|
| Address |
0x4ef40
|
| Ordinal |
75
|
| Address |
0x4ef80
|
| Ordinal |
76
|
| Address |
0x4efc0
|
| Ordinal |
77
|
| Address |
0x4f000
|
| Ordinal |
78
|
| Address |
0x4f040
|
| Ordinal |
79
|
| Address |
0x4f080
|
| Ordinal |
80
|
| Address |
0x4f0c0
|
| Ordinal |
81
|
| Address |
0x4f100
|
| Ordinal |
82
|
| Address |
0x4f140
|
| Ordinal |
83
|
| Address |
0x4f180
|
| Ordinal |
84
|
| Address |
0x4f1c0
|
| Ordinal |
85
|
| Address |
0x4f200
|
| Ordinal |
86
|
| Address |
0x4f240
|
| Ordinal |
87
|
| Address |
0x4f280
|
| Ordinal |
88
|
| Address |
0x4f2c0
|
| Ordinal |
89
|
| Address |
0x4f300
|
| Ordinal |
90
|
| Address |
0x4f340
|
| Ordinal |
91
|
| Address |
0x4f380
|
| Ordinal |
92
|
| Address |
0x4f3c0
|
| Ordinal |
93
|
| Address |
0x4f400
|
| Ordinal |
94
|
| Address |
0x4f440
|
| Ordinal |
95
|
| Address |
0x4f480
|
| Ordinal |
96
|
| Address |
0x4f4bc
|
| Ordinal |
97
|
| Address |
0x4f4e0
|
| Ordinal |
98
|
| Address |
0x5af70
|
| Ordinal |
99
|
| Address |
0x5afb4
|
| Ordinal |
100
|
| Address |
0x5afec
|
| Ordinal |
101
|
| Address |
0x5b028
|
| Ordinal |
102
|
| Address |
0x5b064
|
| Ordinal |
103
|
| Address |
0x5b09c
|
| Ordinal |
104
|
| Address |
0x5b0c0
|
| Ordinal |
105
|
| Address |
0x5d320
|
| Ordinal |
106
|
| Address |
0x5d344
|
| Ordinal |
107
|
| Address |
0x68f44
|
| Ordinal |
108
|
| Address |
0x68f70
|
| Ordinal |
109
|
| Address |
0x8ae98
|
| Ordinal |
110
|
| Address |
0x8aee0
|
| Ordinal |
111
|
| Address |
0x8af24
|
| Ordinal |
112
|
| Address |
0x8af68
|
| Ordinal |
113
|
| Address |
0x8afac
|
| Ordinal |
114
|
| Address |
0x8aff0
|
| Ordinal |
115
|
| Address |
0x8b034
|
| Ordinal |
116
|
| Address |
0x8b078
|
| Ordinal |
117
|
| Address |
0x8b0bc
|
| Ordinal |
118
|
| Address |
0x8b100
|
| Ordinal |
119
|
| Address |
0x8b144
|
| Ordinal |
120
|
| Address |
0x8b188
|
| Ordinal |
121
|
| Address |
0x8b1cc
|
| Ordinal |
122
|
| Address |
0x8b210
|
| Ordinal |
123
|
| Address |
0x8b254
|
| Ordinal |
124
|
| Address |
0x8b298
|
| Ordinal |
125
|
| Address |
0x8b2dc
|
| Ordinal |
126
|
| Address |
0x8b320
|
| Ordinal |
127
|
| Address |
0x8b364
|
| Ordinal |
128
|
| Address |
0x8b3a8
|
| Ordinal |
129
|
| Address |
0x8b3ec
|
| Ordinal |
130
|
| Address |
0x8b430
|
| Ordinal |
131
|
| Address |
0x8b474
|
| Ordinal |
132
|
| Address |
0x8b4b8
|
| Ordinal |
133
|
| Address |
0x8b4fc
|
| Ordinal |
134
|
| Address |
0x8b540
|
| Ordinal |
135
|
| Address |
0x8b584
|
| Ordinal |
136
|
| Address |
0x8b5c8
|
| Ordinal |
137
|
| Address |
0x8b60c
|
| Ordinal |
138
|
| Address |
0x8b650
|
| Ordinal |
139
|
| Address |
0x8b690
|
| Ordinal |
140
|
| Address |
0x8b6b4
|
| Ordinal |
141
|
| Address |
0x8cb60
|
| Ordinal |
142
|
| Address |
0x8cb94
|
| Ordinal |
143
|
| Address |
0x8cbd0
|
| Ordinal |
144
|
| Address |
0x8cc0c
|
| Ordinal |
145
|
| Address |
0x960f4
|
| Ordinal |
146
|
| Address |
0x9612c
|
| Ordinal |
147
|
| Address |
0x96168
|
| Ordinal |
148
|
| Address |
0x961a4
|
| Ordinal |
149
|
| Address |
0x961e0
|
| Ordinal |
150
|
| Address |
0x9621c
|
| Ordinal |
151
|
| Address |
0x96258
|
| Ordinal |
152
|
| Address |
0x96294
|
| Ordinal |
153
|
| Address |
0x962d0
|
| Ordinal |
154
|
| Address |
0x9630c
|
| Ordinal |
155
|
| Address |
0x96348
|
| Ordinal |
156
|
| Address |
0x96384
|
| Ordinal |
157
|
| Address |
0x963c0
|
| Ordinal |
158
|
| Address |
0x963fc
|
| Ordinal |
159
|
| Address |
0x96438
|
| Ordinal |
160
|
| Address |
0x96474
|
| Ordinal |
161
|
| Address |
0x964b0
|
| Ordinal |
162
|
| Address |
0x964ec
|
| Ordinal |
163
|
| Address |
0x96528
|
| Ordinal |
164
|
| Address |
0x96564
|
| Ordinal |
165
|
| Address |
0x965a0
|
| Ordinal |
166
|
| Address |
0x965dc
|
| Ordinal |
167
|
| Address |
0x96618
|
| Ordinal |
168
|
| Address |
0x96654
|
| Ordinal |
169
|
| Address |
0x9668c
|
| Ordinal |
170
|
| Address |
0x966b0
|
| Ordinal |
171
|
| Address |
0x9e134
|
| Ordinal |
172
|
| Address |
0x9e168
|
| Ordinal |
173
|
| Address |
0x9e18c
|
| Ordinal |
174
|
| Address |
0xa1b60
|
| Ordinal |
175
|
| Address |
0xa1b98
|
| Ordinal |
176
|
| Address |
0xa1bcc
|
| Ordinal |
177
|
| Address |
0xa1c08
|
| Ordinal |
178
|
| Address |
0xa1c44
|
| Ordinal |
179
|
| Address |
0xa1c80
|
| Ordinal |
180
|
| Address |
0xa1cbc
|
| Ordinal |
181
|
| Address |
0xa1cf8
|
| Ordinal |
182
|
| Address |
0xa1d34
|
| Ordinal |
183
|
| Address |
0xa1d70
|
| Ordinal |
184
|
| Address |
0xa1da8
|
| Ordinal |
185
|
| Address |
0xa1dcc
|
| Ordinal |
186
|
| Address |
0xa350c
|
| Ordinal |
187
|
| Address |
0xa3530
|
| Ordinal |
188
|
| Address |
0xb2cc0
|
| Ordinal |
189
|
| Address |
0xb2cf4
|
| Ordinal |
190
|
| Address |
0xb2d28
|
| Ordinal |
191
|
| Address |
0xb2d58
|
| Ordinal |
192
|
| Address |
0xb2d7c
|
| Ordinal |
193
|
| Address |
0xc41bc
|
| Ordinal |
194
|
| Address |
0xc41f8
|
| Ordinal |
195
|
| Address |
0xc4234
|
| Ordinal |
196
|
| Address |
0xc4270
|
| Ordinal |
197
|
| Address |
0xc42ac
|
| Ordinal |
198
|
| Address |
0xc42e8
|
| Ordinal |
199
|
| Address |
0xc4324
|
| Ordinal |
200
|
| Address |
0xc4360
|
| Ordinal |
201
|
| Address |
0xc439c
|
| Ordinal |
202
|
| Address |
0xc43d8
|
| Ordinal |
203
|
| Address |
0xc4414
|
| Ordinal |
204
|
| Address |
0xc4450
|
| Ordinal |
205
|
| Address |
0xc6a98
|
| Ordinal |
206
|
| Address |
0xc6adc
|
| Ordinal |
207
|
| Address |
0xc6b00
|
| Ordinal |
208
|
| Address |
0xcad5c
|
| Ordinal |
209
|
| Address |
0xe9f28
|
| Ordinal |
210
|
| Address |
0xe9f60
|
| Ordinal |
211
|
| Address |
0xe9f9c
|
| Ordinal |
212
|
| Address |
0xe9fd8
|
| Ordinal |
213
|
| Address |
0xea014
|
| Ordinal |
214
|
| Address |
0xea050
|
| Ordinal |
215
|
| Address |
0xea08c
|
| Ordinal |
216
|
| Address |
0xea0c8
|
| Ordinal |
217
|
| Address |
0xea104
|
| Ordinal |
218
|
| Address |
0xea140
|
| Ordinal |
219
|
| Address |
0xea17c
|
| Ordinal |
220
|
| Address |
0xea1b8
|
| Ordinal |
221
|
| Address |
0xea1f4
|
| Ordinal |
222
|
| Address |
0xea230
|
| Ordinal |
223
|
| Address |
0xea26c
|
| Ordinal |
224
|
| Address |
0xea2a8
|
| Ordinal |
225
|
| Address |
0xea2e4
|
| Ordinal |
226
|
| Address |
0xea320
|
| Ordinal |
227
|
| Address |
0xea35c
|
| Ordinal |
228
|
| Address |
0xea398
|
| Ordinal |
229
|
| Address |
0xea3d4
|
| Ordinal |
230
|
| Address |
0xea410
|
| Ordinal |
231
|
| Address |
0xea44c
|
| Ordinal |
232
|
| Address |
0xea488
|
| Ordinal |
233
|
| Address |
0xea4c4
|
| Ordinal |
234
|
| Address |
0xea500
|
| Ordinal |
235
|
| Address |
0xea53c
|
| Ordinal |
236
|
| Address |
0xea578
|
| Ordinal |
237
|
| Address |
0xea5b4
|
| Ordinal |
238
|
| Address |
0xea5f0
|
| Ordinal |
239
|
| Address |
0xea62c
|
| Ordinal |
240
|
| Address |
0xf4ca0
|
| Ordinal |
241
|
| Address |
0xf4cd4
|
| Ordinal |
242
|
| Address |
0xf4cf8
|
| Ordinal |
243
|
| Address |
0xf8048
|
| Ordinal |
244
|
| Address |
0xf806c
|
| Ordinal |
245
|
| Address |
0xfc048
|
| Ordinal |
246
|
| Address |
0xfc06c
|
| Ordinal |
247
|
| Address |
0xfcd1c
|
| Ordinal |
248
|
| Address |
0xfcd50
|
| Ordinal |
249
|
| Address |
0xfcd74
|
| Ordinal |
250
|
| Address |
0xfea78
|
| Ordinal |
251
|
| Address |
0xfeaac
|
| Ordinal |
252
|
| Address |
0xfeae8
|
| Ordinal |
253
|
| Address |
0xfeb24
|
| Ordinal |
254
|
| Address |
0xfeb60
|
| Ordinal |
255
|
| Address |
0xfeb9c
|
| Ordinal |
256
|
| Address |
0x100f48
|
| Ordinal |
257
|
| Address |
0x100f80
|
| Ordinal |
258
|
| Address |
0x100fb8
|
| Ordinal |
259
|
| Address |
0x100ff0
|
| Ordinal |
260
|
| Address |
0x101028
|
| Ordinal |
261
|
| Address |
0x1011b0
|
| Ordinal |
262
|
| Address |
0x1011d4
|
| Ordinal |
263
|
| Address |
0x106778
|
| Ordinal |
264
|
| Address |
0x107670
|
| Ordinal |
265
|
| Address |
0x110760
|
| Ordinal |
266
|
| Address |
0x1107ac
|
| Ordinal |
267
|
| Address |
0x1107f4
|
| Ordinal |
268
|
| Address |
0x11083c
|
| Ordinal |
269
|
| Address |
0x110884
|
| Ordinal |
270
|
| Address |
0x1108cc
|
| Ordinal |
271
|
| Address |
0x110914
|
| Ordinal |
272
|
| Address |
0x11095c
|
| Ordinal |
273
|
| Address |
0x1109a4
|
| Ordinal |
274
|
| Address |
0x1109ec
|
| Ordinal |
275
|
| Address |
0x1149d4
|
| Ordinal |
276
|
| Address |
0x114a0c
|
| Ordinal |
277
|
| Address |
0x114a48
|
| Ordinal |
278
|
| Address |
0x114a84
|
| Ordinal |
279
|
| Address |
0x114abc
|
| Ordinal |
280
|
| Address |
0x114ae0
|
| Ordinal |
281
|
| Address |
0x117584
|
| Ordinal |
282
|
| Address |
0x1175c8
|
| Ordinal |
283
|
| Address |
0x11760c
|
| Ordinal |
284
|
| Address |
0x117650
|
| Ordinal |
285
|
| Address |
0x117694
|
| Ordinal |
286
|
| Address |
0x1176d8
|
| Ordinal |
287
|
| Address |
0x117718
|
| Ordinal |
288
|
| Address |
0x11773c
|
| Ordinal |
289
|
| Address |
0x117ffc
|
| Ordinal |
290
|
| Address |
0x118020
|
| Ordinal |
291
|
| Address |
0x1241d0
|
| Ordinal |
292
|
| Address |
0x1241f4
|
| Ordinal |
293
|
| Address |
0x124e20
|
| Ordinal |
294
|
| Address |
0x124e44
|
| Ordinal |
295
|
| Address |
0x12c940
|
| Ordinal |
296
|
| Address |
0x12c978
|
| Ordinal |
297
|
| Address |
0x12c9b0
|
| Ordinal |
298
|
| Address |
0x12c9d4
|
| Ordinal |
299
|
| Address |
0x1327f0
|
| Ordinal |
300
|
| Address |
0x132814
|
| Ordinal |
301
|
| Address |
0x144fdc
|
| Ordinal |
302
|
| Address |
0x14515c
|
| Ordinal |
303
|
| Address |
0x145180
|
| Ordinal |
304
|
| Address |
0x15b400
|
| Ordinal |
305
|
| Address |
0x15b434
|
| Ordinal |
306
|
| Address |
0x15b468
|
| Ordinal |
307
|
| Address |
0x15b49c
|
| Ordinal |
308
|
| Address |
0x15b4d0
|
| Ordinal |
309
|
| Address |
0x15b504
|
| Ordinal |
310
|
| Address |
0x15b538
|
| Ordinal |
311
|
| Address |
0x15b56c
|
| Ordinal |
312
|
| Address |
0x15b5a0
|
| Ordinal |
313
|
| Address |
0x15b5d4
|
| Ordinal |
314
|
| Address |
0x15b608
|
| Ordinal |
315
|
| Address |
0x15b63c
|
| Ordinal |
316
|
| Address |
0x15b670
|
| Ordinal |
317
|
| Address |
0x15b6a4
|
| Ordinal |
318
|
| Address |
0x15b6d8
|
| Ordinal |
319
|
| Address |
0x15b70c
|
| Ordinal |
320
|
| Address |
0x15b740
|
| Ordinal |
321
|
| Address |
0x15b774
|
| Ordinal |
322
|
| Address |
0x15b7a8
|
| Ordinal |
323
|
| Address |
0x15b7dc
|
| Ordinal |
324
|
| Address |
0x15b810
|
| Ordinal |
325
|
| Address |
0x15b844
|
| Ordinal |
326
|
| Address |
0x15b878
|
| Ordinal |
327
|
| Address |
0x15b8ac
|
| Ordinal |
328
|
| Address |
0x15b8e0
|
| Ordinal |
329
|
| Address |
0x15b914
|
| Ordinal |
330
|
| Address |
0x15b948
|
| Ordinal |
331
|
| Address |
0x15b97c
|
| Ordinal |
332
|
| Address |
0x15b9b0
|
| Ordinal |
333
|
| Address |
0x15b9e4
|
| Ordinal |
334
|
| Address |
0x15ba18
|
| Ordinal |
335
|
| Address |
0x15ba4c
|
| Ordinal |
336
|
| Address |
0x15ba80
|
| Ordinal |
337
|
| Address |
0x15bab4
|
| Ordinal |
338
|
| Address |
0x15bae8
|
| Ordinal |
339
|
| Address |
0x15bb1c
|
| Ordinal |
340
|
| Address |
0x15bb50
|
| Ordinal |
341
|
| Address |
0x15bb84
|
| Ordinal |
342
|
| Address |
0x15bbb8
|
| Ordinal |
343
|
| Address |
0x15bbe8
|
| Ordinal |
344
|
| Address |
0x15bc14
|
| Ordinal |
345
|
| Address |
0x160d58
|
| Ordinal |
346
|
| Address |
0x160d94
|
| Ordinal |
347
|
| Address |
0x160dd4
|
| Ordinal |
348
|
| Address |
0x160e14
|
| Ordinal |
349
|
| Address |
0x16773c
|
| Ordinal |
350
|
| Address |
0x167778
|
| Ordinal |
351
|
| Address |
0x1677b4
|
| Ordinal |
352
|
| Address |
0x1677f0
|
| Ordinal |
353
|
| Address |
0x167828
|
| Ordinal |
354
|
| Address |
0x16784c
|
| Ordinal |
355
|
| Address |
0x16a548
|
| Ordinal |
356
|
| Address |
0x16a584
|
| Ordinal |
357
|
| Address |
0x16a5a8
|
| Ordinal |
358
|
| Address |
0x1b7efc
|
| Ordinal |
359
|
| Address |
0x1b7f28
|
| Ordinal |
360
|
| Address |
0x1b7f5c
|
| Ordinal |
361
|
| Address |
0x1b7f90
|
| Ordinal |
362
|
| Address |
0x1b7fc4
|
| Ordinal |
363
|
| Address |
0x1b7ff4
|
| Ordinal |
364
|
| Address |
0x1b8020
|
| Ordinal |
365
|
| Address |
0x1ba52c
|
| Ordinal |
366
|
| Address |
0x1ba568
|
| Ordinal |
367
|
| Address |
0x1ba5a4
|
| Ordinal |
368
|
| Address |
0x1ba5e0
|
| Ordinal |
369
|
| Address |
0x1ba61c
|
| Ordinal |
370
|
| Address |
0x1ba658
|
| Ordinal |
371
|
| Address |
0x1ba690
|
| Ordinal |
372
|
| Address |
0x1ba6b4
|
| Ordinal |
373
|
| Address |
0x1d5978
|
| Ordinal |
374
|
| Address |
0x1daf0c
|
| Ordinal |
375
|
| Address |
0x1e4660
|
| Ordinal |
376
|
| Address |
0x1e4694
|
| Ordinal |
377
|
| Address |
0x1e46b8
|
| Ordinal |
378
|
| Address |
0x6a708c
|
| Ordinal |
379
|
| Address |
0x6ae0b0
|
| Ordinal |
380
|
| Address |
0x73ca10
|
| Ordinal |
381
|
| Address |
0x73d4fc
|
| Type |
RT_ICON
|
| Language |
English - United States
|
| Codepage |
UNKNOWN
|
| Size |
0x10a8
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
4.95903
|
| MD5 |
b416691d523b9f04c5d06fb01acf9ad0
|
| SHA1 |
74c41772b2eaa6fdea8535818d7785a1045d0dc9
|
| SHA256 |
83feeb52de95f3cc869c71c4d916d3863573ac71c3fe192cc1bf858a12094ead
|
| SHA3 |
bb16c048241018b7bb2504d0996b5513af18e9ece25255677b9e149a4f4ad93c
|
| Type |
RT_STRING
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x134
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
3.09658
|
| MD5 |
9b4962d86dfafb607d75e6ead85ae132
|
| SHA1 |
9a3da7e1e9358a537a48477419b1f1633bb5dc85
|
| SHA256 |
a53e438d34a4d7ec4e200e833e0a6a9d4749877876031b91db99af983cde36df
|
| SHA3 |
d9ba4d1e214b655d3993731056cbb2924c4e37e7d970b095b2d2c4a9351e3c0b
|
| Type |
RT_GROUP_ICON
|
| Language |
English - United States
|
| Codepage |
UNKNOWN
|
| Size |
0x14
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
1.86096
|
| Detected Filetype |
Icon file
|
| MD5 |
f267c11c83be33a53b3258d32d01c71f
|
| SHA1 |
de354818d3ec2ba25abbfde1e7325de4a5223124
|
| SHA256 |
af4ffa8e39ac2f72dc0efe9e0bb90413bb45d92209fd2279900b4628f5cf6aba
|
| SHA3 |
5c5dddabef3d135f7c4d72744639b1428b41feeb7d0ef14e51f4f2c11e4a5eee
|
| Type |
RT_VERSION
|
| Language |
English - United States
|
| Codepage |
UNKNOWN
|
| Size |
0x234
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
3.26414
|
| MD5 |
ba4733b144117ae0fc157fbddd19f233
|
| SHA1 |
f22fbb00dac0ab3bd235e292f6dfefb2802aab66
|
| SHA256 |
06acc51b5001c260dc952d68eb47e58bb2188d58cfdf0c9bca4471e1b93f11a0
|
| SHA3 |
8966accc31dc386af46163085f87594d06c7d5c5cf59f5086bca255d57f47c46
|
| Type |
RT_MANIFEST
|
| Language |
English - United States
|
| Codepage |
UNKNOWN
|
| Size |
0x70b
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
5.27093
|
| MD5 |
37f3d469d81afab86559a218b53883af
|
| SHA1 |
f2947291a7ed1b36b475df473b80c124fe49e517
|
| SHA256 |
57ddb0538b36184b8937f46f83424587a7985a1538e31c4bc35b046696923aea
|
| SHA3 |
227324c0211fc51a9058cb37874892086e6889ccb48dd3c0356b627830836575
|
| Windows 8 |
| Windows Server 2012 |
| Windows 8.1 |
| Windows Server 2012 R2 |
| Win32 error: %s (%u)%s%s |
| Library not found: %s |
| Function not found: %s.%s |
| Signature |
0xfeef04bd
|
| StructVersion |
0x10000
|
| FileVersion |
3.4.0.0
|
| ProductVersion |
1.0.0.0
|
| FileFlags |
(EMPTY)
|
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language |
English - United States
|
| FileDescription |
Kashif Bharwana
|
| FileVersion (#2) |
3.4.0.0
|
| ProgramID |
com.embarcadero.device unlock tool
|
| ProductName |
device unlock tool
|
| ProductVersion (#2) |
1.0.0.0
|
| Resource LangID |
English - United States
|
[*] Warning: Could not read the name of the DLL to be delay-loaded!
[!] Error: Could not reach the TLS callback table.
[*] Warning: Section .themida has a size of 0!