81363d7f478788c461a654e5af5b467517017add46851e9d7e8ffa7dcfd5bbb1
Summary
| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2017-Jun-02 06:01:07 |
| Detected languages |
English - Australia
English - United States |
| TLS Callbacks | 1 callback(s) detected. |
| Debug artifacts |
C:\Users\jskinner\sublime_text\build\x64\dist\sublime_text.pdb
|
| FileDescription | Sublime Text |
| FileVersion | 3133 |
| InternalName | sublime_text |
| LegalCopyright | Copyright (C) 2006 - 2017 Sublime HQ Pty Ltd |
| CompanyName | Sublime HQ Pty Ltd |
| OriginalFilename | sublime_text.exe |
| ProductName | Sublime Text |
| ProductVersion | 3133 |
Plugin Output
| Info | Cryptographic algorithms detected in the binary: |
Uses constants related to CRC32
Uses constants related to MD5 Uses constants related to SHA1 Uses constants related to SHA256 Microsoft's Cryptography API |
| Suspicious | The PE contains functions most legitimate programs don't use. |
[!] The program may be hiding some of its imports:
|
| Info | The PE is digitally signed. |
Signer: Sublime HQ Pty Ltd
Issuer: COMODO RSA Code Signing CA |
| Safe | VirusTotal score: 0/62 (Scanned on 2017-06-02 15:27:34) | All the AVs think this file is safe. |
Hashes
| MD5 | f32d9d9ff788998234fe2b542f61ee2c 🔍 |
|---|---|
| SHA1 | 53ef37e429d201200ea97701869fb9264bd6cac8 🔍 |
| SHA256 | 81363d7f478788c461a654e5af5b467517017add46851e9d7e8ffa7dcfd5bbb1 🔍 |
| SHA3 | f53975c9594b7559619275f46c2d6c7f11b6461cbf0d1c97da7fac3e423d1e2e 🔍 |
| SSDeep | 49152:wmylWXaiSkI2U1WkBb3RKdV+Mclp2+rD2foGqCfCNM87vlj1bK+OLd+JVd3mzqwU:cvp2++0Nt9OLd8DCQICyksFwuYf4O 🔍 |
| Imports Hash | e832feb7794ccf0c1fce8a82e1cfe1ef 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x110 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 8 |
| TimeDateStamp | 2017-Jun-02 06:01:07 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x4aa200 |
| SizeOfInitializedData | 0x24ce00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000000000042D4A4 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 5.2 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.2 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x6fc000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x6eccfb |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | 8c43668f97b9bb4e01ff997ec0c60948 🔍 |
|---|---|
| SHA1 | 948fbb89a67d1db8c175bb3d32bccfbe716bac77 🔍 |
| SHA256 | 0a0d150ddce7e6de3b4050ef9a0ae3106c22026eeaf45ad4ad9ad029deb8d10f 🔍 |
| SHA3 | 97a2119edd553e977e695b57fabaef851b9dad3c63a1352c8a8abfa02302f66c 🔍 |
| VirtualSize | 0x4aa022 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x4aa200 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.50125 |
.rdata
| MD5 | d7adfa283700116ebc82d849caa52c72 🔍 |
|---|---|
| SHA1 | 43bbcb130df1110481ce5ee6bc70f72b90accb0d 🔍 |
| SHA256 | 1f896d3538f50d7287bea54fbec210ab1d9cb3297e4b5a4e9dd8aea1413b14ee 🔍 |
| SHA3 | a2e4a26f1ec5a6ae77e1015a1d3cb7a60ab06d7570049b647358a82a2af056a1 🔍 |
| VirtualSize | 0x1accbc |
| VirtualAddress | 0x4ac000 |
| SizeOfRawData | 0x1ace00 |
| PointerToRawData | 0x4aa600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 4.63391 |
.data
| MD5 | 320cbe20be8d70672c0c16da5050cca2 🔍 |
|---|---|
| SHA1 | 317674681aac00fbcd2063ffa578807dfb4c1a29 🔍 |
| SHA256 | c5c4b24f1e29257942a030376f2a575d57aa9ffb2339a33975973098df934d0c 🔍 |
| SHA3 | 8067af9570b8487a2d2fb81f29d4dde1c46d584fb985cac3c35beea05198752a 🔍 |
| VirtualSize | 0x537a0 |
| VirtualAddress | 0x659000 |
| SizeOfRawData | 0x46c00 |
| PointerToRawData | 0x657400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 6.71219 |
.pdata
| MD5 | bd7518b981a7c7d84e4a79358d0d766d 🔍 |
|---|---|
| SHA1 | ff494df0d5e63909e55b1fcbb217477800fb05f7 🔍 |
| SHA256 | 6842744b1273a23bf66bca53101e8582ddc7fab7deb670d9ed421395ca3fa84c 🔍 |
| SHA3 | 62facf1cda7090cc636e0127fe7419c77d66894ae46623a8b4a0b3495e73c3d5 🔍 |
| VirtualSize | 0x31578 |
| VirtualAddress | 0x6ad000 |
| SizeOfRawData | 0x31600 |
| PointerToRawData | 0x69e000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 6.41821 |
.gfids
| MD5 | 6fde153fd91c4e0336e166caa3a6918e 🔍 |
|---|---|
| SHA1 | 9fd05c43ef070905d55f30bbf5f317babeea0af3 🔍 |
| SHA256 | be3a906ba80d3ffe1fd7dd341ab400cdf895de0752be1566be3fcd9c17ea93f2 🔍 |
| SHA3 | f20535ee79a1a988a971bf614b2079326b592620c233f199ae7a20fc7947ce71 🔍 |
| VirtualSize | 0xb28 |
| VirtualAddress | 0x6df000 |
| SizeOfRawData | 0xc00 |
| PointerToRawData | 0x6cf600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 3.72399 |
.tls
| MD5 | 1f354d76203061bfdd5a53dae48d5435 🔍 |
|---|---|
| SHA1 | aa0d33a0c854e073439067876e932688b65cb6a9 🔍 |
| SHA256 | 4c6474903705cb450bb6434c29e8854f17d8324efca1fdb9ee9008599060883a 🔍 |
| SHA3 | 991fbbd46bbd69198269fe6c247d440e0f8a7d38259b7a1e04b74790301d1d2b 🔍 |
| VirtualSize | 0x9 |
| VirtualAddress | 0x6e0000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x6d0200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0.0203931 |
.rsrc
| MD5 | 42bfbc1536d9529352b5684b0e92eeaf 🔍 |
|---|---|
| SHA1 | f1ada80ec0c5dadc9a93350cd90f7d02d6b7a29b 🔍 |
| SHA256 | 117043db16e3d9ae38b414d470d70bb16c5fcaaafc871a69a6a3472e98ec5ea6 🔍 |
| SHA3 | 751cf7921360fceec9cd51a21127b44a1393d3e06e63c0941a2a8d23cd1a4301 🔍 |
| VirtualSize | 0xe7f8 |
| VirtualAddress | 0x6e1000 |
| SizeOfRawData | 0xe800 |
| PointerToRawData | 0x6d0400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 7.09566 |
.reloc
| MD5 | b8ea8f1101a727dbfb287f8f23f5aea7 🔍 |
|---|---|
| SHA1 | 88f5bb06ad23a9b3927adffc613f98fc99c20640 🔍 |
| SHA256 | d0d1586339e9d23c345a061afda1d4a8fb461ea875ddd3040e542ad80a81b086 🔍 |
| SHA3 | 356f20144fdfae1b530182cc51fdaefd1902442f1face6fa1db8d7a5cf9501f9 🔍 |
| VirtualSize | 0xbb3c |
| VirtualAddress | 0x6f0000 |
| SizeOfRawData | 0xbc00 |
| PointerToRawData | 0x6dec00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.45732 |
Imports
| USP10.dll |
ScriptFreeCache
ScriptGetCMap |
|---|---|
| KERNEL32.dll |
GlobalLock
FreeLibrary GlobalUnlock GetVersionExW CancelIo ReadDirectoryChangesW Sleep OutputDebugStringW SetPriorityClass GetCurrentProcess TerminateProcess WaitForSingleObject OpenProcess ExitProcess GetCurrentProcessId WaitForSingleObjectEx CreateDirectoryW FindFirstFileW GetFileSizeEx FindNextFileW RemoveDirectoryW FindClose GetCurrentDirectoryW SetCurrentDirectoryW GetFileTime QueryPerformanceFrequency QueryPerformanceCounter OpenFileMappingW UnmapViewOfFile CreateFileMappingW MapViewOfFile SwitchToThread CreateEventW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection RaiseException CreateThread IsDebuggerPresent ReleaseSemaphore CreateSemaphoreW GetSystemTimeAsFileTime SystemTimeToFileTime GetSystemTime GetProcessTimes GetSystemInfo DuplicateHandle GetModuleHandleA CreateSemaphoreA GetTickCount FormatMessageA SetWaitableTimer OpenEventA HeapFree WaitForMultipleObjectsEx ResetEvent HeapAlloc GetProcessHeap TlsSetValue CreateWaitableTimerW ResumeThread GetLogicalProcessorInformation TlsAlloc TlsGetValue TlsFree SetEndOfFile QueueUserWorkItem FlushViewOfFile GetLocalTime SetFilePointerEx WideCharToMultiByte MoveFileW RtlCaptureContext GetProcessId VirtualQueryEx SetUnhandledExceptionFilter SetNamedPipeHandleState GetProcAddress TransactNamedPipe WaitNamedPipeW OutputDebugStringA IsValidLocale GetACP GetCommandLineA GetModuleFileNameA GetStdHandle HeapReAlloc ExitThread HeapSize GetFileType SetStdHandle GetModuleHandleExW RtlUnwindEx RtlPcToFileHeader UnregisterWaitEx QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList VirtualProtect VirtualFree VirtualAlloc LoadLibraryExW FreeLibraryAndExitThread GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetThreadPriority SetThreadPriority SignalObjectAndWait CreateTimerQueue IsProcessorFeaturePresent GetStartupInfoW UnhandledExceptionFilter RtlVirtualUnwind GetUserDefaultLCID RtlLookupFunctionEntry InitializeSListHead GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW GetModuleHandleW InitializeCriticalSectionAndSpinCount SetLastError DecodePointer EncodePointer TryEnterCriticalSection GetNativeSystemInfo GetCurrentThread EnumSystemLocalesW GetConsoleMode ReadConsoleW GetConsoleCP GetTimeZoneInformation FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA LoadLibraryW GlobalAlloc GlobalSize MultiByteToWideChar GetCurrentThreadId CreateMutexW GetLongPathNameW GetCommandLineW FlushFileBuffers ReplaceFileW MoveFileExW LocalFree GetLastError FormatMessageW GetFileInformationByHandle SetFileAttributesW GetFileAttributesW LocalAlloc WriteFile CreateFileW ReadFile GetModuleFileNameW CopyFileW DeleteFileW CreateEventA SetEvent CreateProcessW CloseHandle GetTempPathW WriteConsoleW WaitForMultipleObjects |
| USER32.dll |
SendMessageW
GetWindowThreadProcessId MessageBoxW GetClassNameW EnumWindows GetWindowLongPtrW SendMessageTimeoutW GetMessageW wsprintfW GetWindowLongW SetScrollInfo RegisterClipboardFormatW DefWindowProcW ModifyMenuW AdjustWindowRectEx GetKeyState GetUpdateRgn AllowSetForegroundWindow PostMessageW GetWindowRect GetMenuItemID GetMenu GetFocus DestroyWindow GetDC SetWindowPos MonitorFromWindow GetMenuItemCount SetWindowLongPtrW EnumDisplayMonitors CreateWindowExW ScreenToClient SetWindowTextW CreatePopupMenu RegisterClassExW GetWindowPlacement TrackPopupMenu GetSubMenu GetActiveWindow ShowWindow OpenClipboard DispatchMessageW SetTimer ClientToScreen CloseClipboard EmptyClipboard PeekMessageW MsgWaitForMultipleObjectsEx SetWindowPlacement GetDoubleClickTime TrackMouseEvent AdjustWindowRect EnumClipboardFormats SetMenu GetMessageTime DestroyMenu SetFocus TranslateMessage GetClipboardFormatNameW GetClipboardData LoadCursorW SetCapture InsertMenuW SetClipboardData SetCursor SetWindowLongW RemoveMenu CheckMenuItem GetClientRect AppendMenuW UpdateLayeredWindow PostThreadMessageW SetRect GetCaretBlinkTime KillTimer PostQuitMessage EnableMenuItem CreateMenu GetParent PtInRect ReleaseCapture SetForegroundWindow InvalidateRect IsIconic ReleaseDC GetCursorPos BeginPaint EndPaint EnableWindow SystemParametersInfoW GetMonitorInfoW |
| GDI32.dll |
TextOutW
SetTextColor GetRegionData SetBkMode DeleteDC GetObjectW DeleteObject GetCurrentObject IntersectClipRect CreateRectRgn GetDeviceCaps EnumFontFamiliesExW GetStockObject CreateCompatibleDC CreateDIBSection SelectObject BitBlt CreateFontIndirectW SelectClipRgn GetTextExtentPointW GetTextMetricsW |
| COMDLG32.dll |
GetSaveFileNameW
CommDlgExtendedError GetOpenFileNameW |
| ADVAPI32.dll |
CryptGenRandom
CryptReleaseContext RegCloseKey RegOpenKeyExW RegQueryValueExW CryptAcquireContextW |
| SHELL32.dll |
SHBrowseForFolderW
#74 ExtractIconExW CommandLineToArgvW DragAcceptFiles ShellExecuteW DragQueryFileW SHGetFolderPathW SHGetPathFromIDListW |
| ole32.dll |
RevokeDragDrop
CoLockObjectExternal RegisterDragDrop OleInitialize DoDragDrop ReleaseStgMedium CoTaskMemFree CoCreateInstance |
| WININET.dll |
HttpSendRequestW
InternetConnectW InternetOpenW HttpOpenRequestW InternetReadFile HttpQueryInfoW InternetCloseHandle |
Delayed Imports
1
| Type |
RT_ICON
|
|---|---|
| Language | English - Australia |
| Codepage | UNKNOWN |
| Size | 0x528 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.02039 |
| MD5 | ba70967723b5a9d5a823f713014a30f4 🔍 |
| SHA1 | bd830ca662b19f7f0cd43f4b53c05c601e508395 🔍 |
| SHA256 | ad2a22d8fc919965909ccbbf844c49d119752ab0a34f70bb508b949556ae5629 🔍 |
| SHA3 | 2364609fb2d6f58ef42e44ebed6a79e9386a78bb1a091849f33a4a5a9be9f79d 🔍 |
2
| Type |
RT_ICON
|
|---|---|
| Language | English - Australia |
| Codepage | UNKNOWN |
| Size | 0xb68 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.97122 |
| MD5 | 26d16cce581086638033d2b1acd7c4a9 🔍 |
| SHA1 | 936783353a153738df917a67b969b6ef4f2eb5d2 🔍 |
| SHA256 | f0a995a036957e500829b89c0bca9cdc699dce60f992f00ccebd55f04d7149fd 🔍 |
| SHA3 | 326e623bea6d3fcc97537012507e0b63b30e91f09d97a51187879cc3c65ec945 🔍 |
3
| Type |
RT_ICON
|
|---|---|
| Language | English - Australia |
| Codepage | UNKNOWN |
| Size | 0x1428 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.89364 |
| MD5 | 9613dc3b0e3b1f35395c46b89501f12b 🔍 |
| SHA1 | 0c53e895c04bbb0b866ed5c2c450a6513f4a86ed 🔍 |
| SHA256 | bb15eee7793d0fe3ecd26fb2721469f3768c41f14616d6d791412559cd8f5ce1 🔍 |
| SHA3 | 659c5b31a677f3a6b35dad4c2f957c5a3b4754de30b52a43f83bc1e8fe39aad9 🔍 |
4
| Type |
RT_ICON
|
|---|---|
| Language | English - Australia |
| Codepage | UNKNOWN |
| Size | 0x2d28 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.81417 |
| MD5 | 99f70027b9ed44fb9ccbaef7ae44cd63 🔍 |
| SHA1 | b212bf008947aece20e4b84f574d50e3303e617b 🔍 |
| SHA256 | ba890af25d66873184766c3dfdf9d198e226ea2f94c4da5c2429a8ebbe1bbe99 🔍 |
| SHA3 | 3789b4cf0a341149c86c0219adfcb311adeb34b3b868e6f3a687e5a2c6dd26b9 🔍 |
5
| Type |
RT_ICON
|
|---|---|
| Language | English - Australia |
| Codepage | UNKNOWN |
| Size | 0x8e49 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.86165 |
| Detected Filetype | PNG graphic file |
| MD5 | 06983b06b601005cec830715f72dda8d 🔍 |
| SHA1 | ed1be86657f3f005284dc2d2c75fd8ae449dbdc4 🔍 |
| SHA256 | 014e1d25bf4d13096b363df8712fb909cd049ccca6b058aa096ad0fee15570e2 🔍 |
| SHA3 | 3787642290e7b3712ba5aa6f8504d3df5561df4a014ae9553181ed7696e68493 🔍 |
103
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | English - Australia |
| Codepage | UNKNOWN |
| Size | 0x4c |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.63645 |
| Detected Filetype | Icon file |
| MD5 | 986574cf9b876f3aa3b3623a73872927 🔍 |
| SHA1 | 7a9f9f758fba5789824a77f80442ef647d7f992e 🔍 |
| SHA256 | 83c6b3170639a0576967e552c09edfe4ed3c24dbadf295fddae94e9a79eb7e6d 🔍 |
| SHA3 | aedda1d4f2d6877b20f37cbf35c50df675ebaaad68e460eb7ca8f70d4efe53a5 🔍 |
1 (#2)
| Type |
RT_VERSION
|
|---|---|
| Language | English - Australia |
| Codepage | UNKNOWN |
| Size | 0x308 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.37454 |
| MD5 | 582b3949480d906d77a649abd5f46acf 🔍 |
| SHA1 | 162241f13e9293acecfaca88c0017bb1b274d7e2 🔍 |
| SHA256 | f41a833f285a2ae27385f1079ce4833432f21104358645468297fab09ba0bcac 🔍 |
| SHA3 | edbe21fa227ce205bc19d4a20922f6ac356c10996975725c5d6061065654d152 🔍 |
1 (#3)
| Type |
RT_MANIFEST
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x27e |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.06467 |
| MD5 | d875a3e09bd74a8f760449a19a351827 🔍 |
| SHA1 | 870df3cd183e92816fb4f92427cafa686f946a33 🔍 |
| SHA256 | a148bb733a7a6233501d6e615bcd37bedb995c29670798088e6c9c325b4429c8 🔍 |
| SHA3 | 782f36c3fdf8521b0f1ebd9c721ce82161d3bd77c965734f3fd2714a3113db23 🔍 |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.0.0.1 |
| ProductVersion | 1.0.0.1 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_UNKNOWN
|
| Language | English - Australia |
| FileDescription | Sublime Text |
| FileVersion (#2) | 3133 |
| InternalName | sublime_text |
| LegalCopyright | Copyright (C) 2006 - 2017 Sublime HQ Pty Ltd |
| CompanyName | Sublime HQ Pty Ltd |
| OriginalFilename | sublime_text.exe |
| ProductName | Sublime Text |
| ProductVersion (#2) | 3133 |
| Resource LangID | English - Australia |
|---|
IMAGE_DEBUG_TYPE_CODEVIEW
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2017-Jun-02 06:01:07 |
| Version | 0.0 |
| SizeofData | 87 |
| AddressOfRawData | 0x5bd854 |
| PointerToRawData | 0x5bbe54 |
| Referenced File | C:\Users\jskinner\sublime_text\build\x64\dist\sublime_text.pdb |
IMAGE_DEBUG_TYPE_VC_FEATURE
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2017-Jun-02 06:01:07 |
| Version | 0.0 |
| SizeofData | 20 |
| AddressOfRawData | 0x5bd8ac |
| PointerToRawData | 0x5bbeac |
IMAGE_DEBUG_TYPE_POGO
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2017-Jun-02 06:01:07 |
| Version | 0.0 |
| SizeofData | 1044 |
| AddressOfRawData | 0x5bd8c0 |
| PointerToRawData | 0x5bbec0 |
TLS Callbacks
| StartAddressOfRawData | 0x1406e0000 |
|---|---|
| EndAddressOfRawData | 0x1406e0008 |
| AddressOfIndex | 0x1406a030c |
| AddressOfCallbacks | 0x1404ad0e8 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_4BYTES
|
| Callbacks |
0x000000014037B360
|
Load Configuration
| Size | 0x94 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x140659080 |
RICH Header
| XOR Key | 0x6a892a7a |
|---|---|
| Unmarked objects | 0 |
| 241 (40116) | 29 |
| 243 (40116) | 179 |
| 242 (40116) | 46 |
| C objects (65501) | 4 |
| 199 (41118) | 7 |
| ASM objects (VS2015 UPD3 build 24123) | 10 |
| C++ objects (VS2015 UPD3 build 24123) | 119 |
| C objects (VS2015 UPD3 build 24123) | 42 |
| Imports (65501) | 19 |
| Total imports | 351 |
| 265 (VS2015 UPD3 build 24210) | 921 |
| Resource objects (VS2015 UPD3 build 24210) | 1 |
| 151 | 1 |
| Linker (VS2015 UPD3 build 24210) | 1 |
Errors
Leave a comment
No comments yet.