Manalyze report for 7c048b1708fb2a2f90c78bfb8282c14e

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2020-Oct-18 10:15:07
Detected languages	English - United States
CompanyName
FileDescription	SHARP Launcher
FileVersion	`1.46`
LegalCopyright

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C++ 6.0 - 8.0`
Suspicious	Strings found in the binary may indicate undesirable behavior:	`Contains another PE executable: This program cannot be run in DOS mode.` `Contains domain names: clickteam.com http://www.clickteam.com http://www.clickteam.com/pub www.clickteam.com`
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: LoadLibraryExW LoadLibraryExA GetProcAddress LoadLibraryW` `Can create temporary files: GetTempPathW CreateFileW` `Uses functions commonly found in keyloggers: MapVirtualKeyW GetAsyncKeyState CallNextHookEx` `Reads the contents of the clipboard: GetClipboardData`
Suspicious	The file contains overlay data.	`3077778 bytes of data starting at offset 0xb6000.` `The overlay data has an entropy of 7.93049 and is possibly compressed or encrypted.` `Overlay data amounts for 80.5016% of the executable.`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`7c048b1708fb2a2f90c78bfb8282c14e`
SHA1	`af9ea4c8d09283861ef12faa5fbe79dd324ea401`
SHA256	`2fedf5dfcfc2479617e31658480d94d17a340536ebe1c8a325a13a43e3fa762d`
SHA3	`61996092ba44dd19ad86ce8fdea54c37311c329de3196a12e1e6836647631466`
SSDeep	`98304:EsKxN/BSNdeZTMNzoBIqLKZ2lf/T3x3Itnfk3+m:EsqENdeZTMNzfCKZ2pT3x3Anfk3R`
Imports Hash	`cc6ef94e4b717e5d576c42524696ddf4`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x100`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`5`
TimeDateStamp	2020-Oct-18 10:15:07
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`14.0`
SizeOfCode	`0x8f000`
SizeOfInitializedData	`0x27c00`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0006DE97 (Section: .text)`
BaseOfCode	`0x1000`
BaseOfData	`0x90000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0xba000`
SizeOfHeaders	`0x400`
Checksum	`0x3ad87e`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`f122ef36d0fafae7367ee4dabfd601ce`
SHA1	`d92e2a6ad1b7c530e418a147e290de86b80be009`
SHA256	`f2945303506a33acdefab20cc6d8f35823b3f565560fc2fe35cf56a730098611`
SHA3	`b0fd4b248824c77a796de0e9f572a9a1da11a91abb37691be0d84e85e1c36baa`
VirtualSize	`0x8ee1c`
VirtualAddress	`0x1000`
SizeOfRawData	`0x8f000`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.58184`

.rdata

MD5	`7b4bb9167153baab1f0dbcb3f7182f6b`
SHA1	`43b29d45c71abb16212c04d060dbd6c7beab6f88`
SHA256	`62eb8e24505d1e3ca48a4c1865f7b1d6d2b98055508d016b22fa127128422c7c`
SHA3	`c6c91352594a9fd611254df152c6fe2c89b1eb0bd880aa6ad640529885359b9e`
VirtualSize	`0x17066`
VirtualAddress	`0x90000`
SizeOfRawData	`0x17200`
PointerToRawData	`0x8f400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.87639`

.data

MD5	`5921bd62eccc46512b126dcbb8a2bcc9`
SHA1	`e84c08ec1f926cfc09738f6a6b562d440011e35e`
SHA256	`d000305a5e143edcb82a42ddbd268555520c5abde5cb629264a0bd5a240103d0`
SHA3	`4a37e41ceeb8e739c6202bd67bec1523640ffef08fcf977407d794dd3a875728`
VirtualSize	`0x37dc`
VirtualAddress	`0xa8000`
SizeOfRawData	`0x2800`
PointerToRawData	`0xa6600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.04241`

.rsrc

MD5	`955924ef3c5eedc054e40ddce9b7bebf`
SHA1	`85b8afddf2c79d63501b5fe99f0be47477f178d1`
SHA256	`23780f5eb96067a12101d6866258a43b31df99003d4e730f10ca1adc0fbbb33e`
SHA3	`6aedf4752003f41d79a97d732d9e148c936d9f058651ae7842b66584767d6ef2`
VirtualSize	`0x58db`
VirtualAddress	`0xac000`
SizeOfRawData	`0x5a00`
PointerToRawData	`0xa8e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.11367`

.reloc

MD5	`f8c477380e23cd13698d294e2a103d48`
SHA1	`9b28fba4dbd3eaf88031e0d38ae2c3545fd46a98`
SHA256	`826ebfa8f444c85eef416a1c87d7cb576b71b0d19ffab943971e195104f6f662`
SHA3	`42ab991b517abbf3a6eeb7e1e4bde62f12e30a36cd8832aef8f3b228a9f40522`
VirtualSize	`0x7610`
VirtualAddress	`0xb2000`
SizeOfRawData	`0x7800`
PointerToRawData	`0xae800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`6.73112`

Imports

COMCTL32.dll	`#17`
WINMM.dll	`timeBeginPeriod` `joyGetDevCapsW` `joyGetPosEx` `timeEndPeriod`
KERNEL32.dll	`GetTempFileNameW` `GlobalAddAtomW` `GlobalDeleteAtom` `lstrlenW` `FreeEnvironmentStringsW` `GetEnvironmentStringsW` `GetCommandLineA` `FindNextFileA` `FindFirstFileExA` `GetProcessHeap` `DecodePointer` `GetFileType` `LCMapStringW` `EnumSystemLocalesW` `GetUserDefaultLCID` `IsValidLocale` `GetOEMCP` `IsValidCodePage` `GetStringTypeW` `GetCPInfo` `HeapFree` `HeapReAlloc` `HeapAlloc` `GetStdHandle` `GetModuleFileNameA` `GetModuleHandleExW` `ExitProcess` `HeapSize` `HeapCompact` `GlobalFree` `SetEnvironmentVariableW` `DeleteFileW` `GetACP` `LoadLibraryExW` `DeleteCriticalSection` `LeaveCriticalSection` `EnterCriticalSection` `EncodePointer` `RtlUnwind` `InitializeSListHead` `GetCurrentProcessId` `GetStartupInfoW` `IsDebuggerPresent` `IsProcessorFeaturePresent` `TerminateProcess` `GetCurrentProcess` `SetUnhandledExceptionFilter` `UnhandledExceptionFilter` `GetSystemTimeAsFileTime` `TlsFree` `TlsSetValue` `TlsGetValue` `TlsAlloc` `InitializeCriticalSectionAndSpinCount` `SetLastError` `QueryPerformanceFrequency` `QueryPerformanceCounter` `LoadLibraryExA` `GetModuleHandleW` `VirtualQuery` `VirtualProtect` `GetSystemInfo` `RaiseException` `FileTimeToSystemTime` `FileTimeToLocalFileTime` `GetSystemTime` `GetVersion` `GetTempPathW` `FindClose` `FindNextFileW` `FindFirstFileW` `GetCurrentDirectoryW` `SetErrorMode` `GlobalUnlock` `GlobalLock` `GlobalAlloc` `GetExitCodeProcess` `GetCommandLineW` `WideCharToMultiByte` `Sleep` `SetCurrentDirectoryW` `CreateDirectoryW` `CloseHandle` `SetFilePointerEx` `SetFilePointer` `WriteFile` `GetLastError` `ReadFile` `CreateFileW` `GetCurrentThreadId` `RemoveDirectoryW` `WriteConsoleW` `GetVersionExW` `GetModuleFileNameW` `GetLocaleInfoW` `MultiByteToWideChar` `FreeLibrary` `GetProcAddress` `LoadLibraryW` `SetStdHandle` `GetConsoleCP` `GetConsoleMode` `FlushFileBuffers`
USER32.dll	`PostQuitMessage` `IntersectRect` `SetRect` `DrawFocusRect` `InvertRect` `DrawTextW` `GetMenuStringW` `GetMenuItemID` `FillRect` `GetUpdateRect` `IsIconic` `DefMDIChildProcW` `SetDlgItemTextW` `EndPaint` `BeginPaint` `PtInRect` `GetDlgItem` `MapVirtualKeyW` `GetInputState` `SendDlgItemMessageW` `EndDialog` `DrawMenuBar` `DrawEdge` `LoadMenuIndirectW` `GetMenuItemCount` `SetWindowPlacement` `GetWindowPlacement` `GetFocus` `CallWindowProcW` `RemovePropW` `SetPropW` `GetPropW` `UnionRect` `DestroyWindow` `SetScrollPos` `SetScrollRange` `CreateWindowExW` `GetParent` `EndDeferWindowPos` `DeferWindowPos` `BeginDeferWindowPos` `SetFocus` `GetSysColor` `GetDesktopWindow` `RedrawWindow` `GetSystemMenu` `UpdateWindow` `SystemParametersInfoW` `GetTabbedTextExtentW` `DestroyMenu` `ModifyMenuW` `SetWindowLongW` `MessageBoxW` `LoadStringW` `DialogBoxParamW` `RegisterClassW` `RegisterClassExW` `LoadImageW` `LoadIconW` `GetWindow` `GetClassNameW` `GetTopWindow` `GetMonitorInfoW` `MonitorFromWindow` `GetSystemMetrics` `OemToCharA` `GetAsyncKeyState` `GetActiveWindow` `ShowCursor` `SetCapture` `ReleaseCapture` `GetKeyState` `GetWindowRect` `MapWindowPoints` `SetWindowPos` `IsZoomed` `GetWindowLongW` `AdjustWindowRectEx` `SendMessageW` `LockWindowUpdate` `IsWindowVisible` `GetClientRect` `SetWindowTextW` `IsDialogMessageW` `SetTimer` `GetWindowDC` `GetClipboardData` `CloseClipboard` `SetClipboardData` `EmptyClipboard` `OpenClipboard` `IsClipboardFormatAvailable` `wsprintfW` `ShowWindow` `PostMessageW` `CheckMenuItem` `EnableMenuItem` `GetMenu` `InvalidateRect` `SetCursorPos` `ClientToScreen` `ScreenToClient` `GetCursorPos` `GetKeyboardState` `CopyRect` `UnhookWindowsHookEx` `KillTimer` `SetWindowsHookExW` `CallNextHookEx` `DestroyIcon` `GetSubMenu` `DeleteMenu` `GetMenuState` `LoadCursorW` `SetCursor` `ReleaseDC` `CreateIconIndirect` `GetDC` `MsgWaitForMultipleObjects` `DispatchMessageW` `TranslateMessage` `TranslateMDISysAccel` `GetMessageW` `PeekMessageW` `GetDlgItemTextW`
GDI32.dll	`CreatePalette` `EnumFontFamiliesExW` `GetDeviceCaps` `SelectPalette` `RealizePalette` `GetObjectW` `CreateFontIndirectW` `CreatePen` `Rectangle` `SelectObject` `MoveToEx` `LineTo` `CreateSolidBrush` `GetStockObject` `SetTextColor` `DeleteObject` `CreateRectRgn` `GetClipRgn` `ExcludeClipRect` `SelectClipRgn` `GetTextExtentPointW` `GetCharWidthW` `DPtoLP` `SetTextAlign` `SetROP2` `LPtoDP` `SetBkColor` `Polygon` `TextOutW` `SetPolyFillMode` `GetTextMetricsW` `GetNearestPaletteIndex` `CreateHatchBrush` `SetDIBits` `CreateCompatibleBitmap` `SetBkMode` `CreateBitmap`
COMDLG32.dll	`GetSaveFileNameW` `GetOpenFileNameW`
SHELL32.dll	`ShellExecuteExW` `DragAcceptFiles` `DragQueryFileW`
MMFS2.dll (delay-loaded)	`#64` `#72` `#43` `#65` `#66` `#74` `#83` `#97` `#81` `#979` `#79` `#80` `#187` `#82` `#76` `#78` `#3` `#172` `#831` `#19` `#1033` `#430` `#425` `#419` `#1145` `#1144` `#423` `#1146` `#121` `#31` `#1105` `#255` `#281` `#174` `#688` `#192` `#120` `#333` `#765` `#249` `#276` `#366` `#153` `#34` `#411` `#176` `#168` `#50` `#1072` `#1068` `#766` `#1071` `#422` `#1069` `#189` `#70` `#494` `#103` `#102` `#101` `#1000` `#173` `#372` `#982` `#1106` `#1017` `#876` `#361` `#32` `#445` `#47` `#106` `#107` `#105` `#786` `#264` `#286` `#169` `#554` `#587` `#585` `#520` `#619` `#462` `#761` `#170` `#1134` `#95` `#1123` `#1126` `#94` `#1124` `#1125` `#98` `#91` `#1049` `#1036` `#1031` `#433` `#536` `#1104` `#468` `#280` `#67` `#125` `#959` `#945` `#123` `#124` `#11` `#343` `#341` `#417` `#344` `#51` `#487` `#610` `#342` `#753` `#448` `#568` `#849` `#571` `#756` `#443` `#701` `#703` `#493` `#355` `#62` `#63` `#832` `#742` `#17` `#16` `#686` `#265` `#24` `#59` `#61` `#60` `#389` `#191` `#755` `#795` `#1054` `#1077` `#201` `#195` `#196` `#198` `#199` `#184` `#204` `#205` `#203` `#813` `#808` `#805` `#799` `#801` `#797` `#811` `#814` `#809` `#803` `#806` `#800` `#810` `#812` `#807` `#802` `#804` `#798` `#826` `#828` `#827` `#830` `#829` `#69` `#175` `#162` `#379` `#661` `#185` `#825` `#158` `#177` `#186` `#163` `#1073` `#183` `#10` `#9` `#6` `#8` `#7` `#834` `#1101` `#1007` `#837` `#896` `#975` `#953` `#893` `#986` `#954` `#895` `#1048` `#929` `#611` `#677` `#412` `#234` `#612` `#678` `#413` `#679` `#1118` `#680` `#573` `#414` `#415` `#416` `#232` `#972` `#681` `#476` `#620` `#762` `#236` `#75` `#114` `#104` `#171` `#789` `#790` `#46` `#111` `#42` `#113` `#691` `#241` `#272` `#245` `#274` `#363` `#645` `#584` `#519` `#356` `#739` `#713` `#137` `#155` `#115` `#254` `#785` `#722` `#328` `#116` `#90` `#84` `#1010` `#92` `#1008` `#1011` `#117` `#997` `#996` `#998` `#108` `#109` `#73` `#110` `#71` `#913` `#859` `#878` `#994` `#894` `#974` `#882` `#948` `#991` `#269` `#267` `#268` `#976` `#1006` `#985` `#1037` `#794` `#1053` `#1128` `#35` `#1080` `#18` `#340` `#14` `#984` `#68` `#819` `#820` `#77` `#484` `#28` `#682` `#30` `#118` `#122` `#5` `#418` `#750` `#695` `#23` `#58` `#57` `#1070` `#373` `#740` `#546` `#4` `#1055` `#2` `#1130` `#1029` `#1081` `#27` `#39` `#29` `#1120`

Delayed Imports

Attributes	`0x1`
Name	`MMFS2.dll`
ModuleHandle	`0xaa660`
DelayImportAddressTable	`0xaa120`
DelayImportNameTable	`0xa4db4`
BoundDelayImportTable	`0xa52e8`
UnloadDelayImportTable	`0`
TimeStamp	`1970-Jan-01 00:00:00`

NoAmdPwrXpressRequestHighPerformance

Ordinal	`1`
Address	`0xa9ddc`

NoNvOptimEnablement

Ordinal	`2`
Address	`0xa9de0`

zi32Support

Ordinal	`3`
Address	`0xa9dd8`

1

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.04199`
MD5	`2a7fe800361eb1ab0c13e164b6f1d4cc`
SHA1	`b2c8a61d198af14715986fbf96756865d175acc9`
SHA256	`6053bc2952d6d04e7871809ee7a83892e47e0e206e3c5a6742e7e87f0d1b7ffe`
SHA3	`85a827dbc32013f133036bbb36d4b32d8bf2fb3512135232968ca6c841a6d68f`

2

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.34575`
MD5	`41314cc096f30f26a387a627b93261ae`
SHA1	`2048f77206d6953aa8fc0f252a4fd1c742870dc4`
SHA256	`06eef7be050ac5bd058a8194881d55a97697a18ef95309dc43d934d011e9138d`
SHA3	`e649de4ea38f19d862b86330eb1b7f9afe9c8b30f809efca2f6fcb95172a7a87`

3

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.32057`
MD5	`acbec51c85fd23216d5f7bd500021d80`
SHA1	`24116f364aa18375cfae2b630a39a2c7e84e419d`
SHA256	`c6fa79ab1e6d291b8478cbd06980313a2d5f930fdd1162964ac50d87407d3a20`
SHA3	`9103315a42c1ec34bc04e4d22b781143140a74322ab3d4444d5215aa32a47a48`

700

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x72`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.16984`
MD5	`1c978effa5e126d2e952836d4233ec49`
SHA1	`932e970505fe597bf790eeb8e05573124f6dcf17`
SHA256	`2a791416c3db74cc78f93a6362848fc45a205bd85acb367a7a1c7bea617c161a`
SHA3	`54d1b6d2d5e05760dee04c33f1254732b3a5cf0c1eda2d86cd1142271eb881d6`

701

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x322`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.18215`
MD5	`c6faa1175dddd3a6a03328c9797012ab`
SHA1	`9cb62752d1882ff99cf2188529bf6cacb58780a9`
SHA256	`b719ff52bf975f4b4fd709c07b525bafdc388fb44e87ca1d1fc6eb2f284d93c5`
SHA3	`e7a457de2f1715b8194cbaa406c6bf74f86673c45ec771215992507f37e63636`

702

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x44`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.58858`
MD5	`ce04779c07f942dad8af2dc5574860bd`
SHA1	`30ed8fa5b592c3c1f20cc7b867b28842cf912db6`
SHA256	`98ba3a2076b30d208cb4581d49ad49170a9b4b742bcd7f0158994ae1620609d2`
SHA3	`0f9b397c6b5daca1604159785953aeefe66846567aba2c0cbb6b2727a8f3b3f9`

703

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xa2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.13521`
MD5	`e711c6d2a34afc7fd85ca790c0f3d6e2`
SHA1	`d4c8718c53bb3b8e64c4b359320f95436a5dba88`
SHA256	`ff74074fa53bfe627e8b2f69497257bfb55a78d9817bb4e73a9503c01ef158b8`
SHA3	`cdbc184ac675ed8b2f4cc35634aeca8c8f44aee9cfc08aa851da984e4c0dbc7b`

704

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x242`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.27571`
MD5	`1a25fb2122ff6998b2d271a7b9f59409`
SHA1	`281545b19a5c2bd79ca06cb0f49f52b638a8ab03`
SHA256	`1adfa6830dbeb9c0a5fbbcfe73d2431202cc76727c9342222ac30d37129e1621`
SHA3	`a51ca6b61ba6381f05b875794c2dea88b3ca1184c4c3d650cf3abf970f8933b8`

705

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xc2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.10029`
MD5	`2c8dae3f2ebee11656424bbdd09aa3f1`
SHA1	`fef7cf598624755c622bf314dda3fd424f73a9b0`
SHA256	`b0818ed82b064a204a8fdfc9073c44d7a94567fe7f964de2636e14a8f5a29744`
SHA3	`2a88d48cf06a4acaa96aa1b4702fe95e8198cccb1919d9a001ac6690dbc64018`

1 (#2)

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1e2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.14519`
MD5	`3ff959ef91f3c55c9f1119778fbea2bb`
SHA1	`5615da34f8b2eaba2ca10848d7f3ca9afd4fcfab`
SHA256	`23ba722192ac40a5039731f03c056946b69e3bdc15af1fe18d5541ebc11daf62`
SHA3	`3ac43d9d0de35211f8278d63a6913508c9ef18d139b213321946d049a5c1ac5a`

2 (#2)

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0x24c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.09619`
MD5	`ca1270937660ae60992e534e9a43b48d`
SHA1	`8a53a737e4d702198de6b3fde0cc32ca73e794f1`
SHA256	`216e728951a2c53bacbefc6379bf8093fe18408e65585106180008f396103793`
SHA3	`caf2713eb059742fd4ec8e2abe26bfdaea67d2e94f3bc31bde1bb7e4b51fd09c`

7

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0x144`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.53307`
MD5	`bc2661f0faad769fffc33aae5f3652c8`
SHA1	`9951563713cdbf84d240ae77ec7a74036b0c7862`
SHA256	`3c8b9116d953ccddc9d4138a2e087f69abdad85015b34de9d6db923222949624`
SHA3	`168f7dfdb45037c156c332ba9b3d55fc241812a9c67172977b0f7ad96a15e8c9`

8

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0xc8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.43545`
MD5	`880e75819c4fa31d7ad496fd4151534c`
SHA1	`43ba921b2f22d5c8035499f803db316fb255e7ac`
SHA256	`b3e0e114380cc4b2adc008da6be8e0f36a73a64ca32259e8e56ce31b1997543c`
SHA3	`09b16f8e5c2772afcd44ca05c14a0e555e525995d528b78f1f73617cb7b14750`

9

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2f2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.10268`
MD5	`85ffc151a140eaa4b12f953d82ec786e`
SHA1	`5878d9d96978cd0a34d4452eb8800ea2c3b4a75c`
SHA256	`c73f5e14a595dfede62ac2edbf2258574a0b0e746624a7fa33f966ad866b5a1d`
SHA3	`915d32e48833778e30343362d670e57b2de7bb07fe8f8fba4848a37c6fae1726`

100

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x30`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.45849`
Detected Filetype	Icon file
MD5	`1ec6a7b3300970378c29695a6cc13d36`
SHA1	`99ce74251d19d800608e30bed6e0d793931da56e`
SHA256	`77a1efb6136f52dd2372987b13bf486aa75baeacb93bad009aa3e284c57b8694`
SHA3	`7a94ba315b3ab461cec9dad3048599d32b0e597047f9655159bd6dfdc694e4a3`

1 (#3)

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x424`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.26756`
MD5	`2ae2593abecf06601a4f222cc89a8f99`
SHA1	`74bb91f2ced48019c3629d93b006d95db7b9e207`
SHA256	`e0217bccd0830534095e46b71d264cc41c502226cc8f242e866c91572e192d97`
SHA3	`e32162c05ac714d7359a2e7c7f380c5af1fe0d713366578ff6d3306727ec23dc`

1 (#4)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x547`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.35163`
MD5	`8f4b4f7df0708639482227ccecf941ef`
SHA1	`8396e428a3262cb01c934b208463141ab45b47c4`
SHA256	`9be0671dcfc3e83b2f8d348b64c33148c42f73c9e7820db496e5485d29629255`
SHA3	`7f6ffdb1163d8c719d711f85d5e8b95ddb9cd13b0cf06916b26892599563b186`

String Table contents

Window initialization error.
Application initialization error.
Error while opening file.
Not enough memory!
File error!
Cannot find %s!
There is not enough available space in the temporary drive. Free some disk space and try again.
This application has been built with an incompatible version of Clickteam Fusion.
This is not an application file!
Cannot load %s. This object might need an external program or library not yet installed.
Joystick not connected or driver not installed.
Cannot initialize Application.
Frame %d
Don't play samples.
Play samples.
Don't play music.
Play music.
%d (Num. keypad)
Backspace
Tab
Clear
Enter
Shift
Control
Space bar
Page Up
Page Down
End
Home
Left Arrow
Up Arrow
Right Arrow
Down Arrow
Select
Execute
Ins
Del
Escape
Heap
Video
Sound
Mb
An error has occured while reading the file.
This file is not a MMF application position file.
This file was not saved by this application.
This file was saved with an incompatible version of MMF runtime.
This file was saved by a incompatible version of the application.
The current frame is not the same as the saved one.
An error has occured while writing the file.

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.46.0.0
ProductVersion	1.46.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS` `VOS_DOS_WINDOWS16` `VOS_DOS_WINDOWS32` `VOS_OS232` `VOS_OS232_PM32` `VOS_WINCE` `VOS__PM32` `VOS__WINDOWS16`
FileType	`VFT_APP`
Language	English - United States
CompanyName
FileDescription	SHARP Launcher
FileVersion (#2)	1.46
LegalCopyright

Resource LangID	English - United States

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2020-Oct-18 10:15:07
Version	`0.0`
SizeofData	`884`
AddressOfRawData	`0xa3ba0`
PointerToRawData	`0xa2fa0`

TLS Callbacks

Load Configuration

Size	`0xa0`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x4a8014`
SEHandlerTable	`0x4a3b00`
SEHandlerCount	`40`

RICH Header

XOR Key	`0xcbaadb6`
Unmarked objects	`0`
241 (40116)	`47`
243 (40116)	`141`
242 (40116)	`35`
ASM objects (VS 2015/2017 runtime 26706)	`20`
C objects (VS 2015/2017 runtime 26706)	`20`
C++ objects (VS 2015/2017 runtime 26706)	`43`
Imports (VS2008 SP1 build 30729)	`15`
Total imports	`648`
265 (27043)	`38`
Exports (27043)	`1`
Resource objects (27043)	`1`
Linker (27043)	`1`

7c048b1708fb2a2f90c78bfb8282c14e

Summary

Plugin Output

Hashes

DOS Header

PE Header

Image Optional Header

.text

.rdata

.data

.rsrc

.reloc

Imports

Delayed Imports

NoAmdPwrXpressRequestHighPerformance

NoNvOptimEnablement

zi32Support

1

2

3

700

701

702

703

704

705

1 (#2)

2 (#2)

7

8

9

100

1 (#3)

1 (#4)

String Table contents

Version Info

IMAGE_DEBUG_TYPE_POGO

TLS Callbacks

Load Configuration

RICH Header

Errors