82f4b3ecff231fe629d94e221b05ac1a2296be665e246622ac874b017fbce988

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Jul-10 19:03:44
Detected languages English - United States
Process Default Language
TLS Callbacks 2 callback(s) detected.
CompanyName jadx
FileDescription jadx-gui
FileVersion 1.5.6
InternalName jadx-gui
LegalCopyright Skylot
LegalTrademarks
OriginalFilename jadx-gui-1.5.6.exe
ProductName jadx-gui
ProductVersion 1.5.6

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • github.com
  • https://github.com
  • https://www.oracle.com
  • https://www.oracle.com/java/technologies/downloads/#jdk21-windows
  • oracle.com
  • www.oracle.com
Info The PE contains common functions which appear in legitimate applications. Can access the registry:
  • RegCloseKey
  • RegEnumKeyExA
  • RegOpenKeyExA
  • RegQueryValueExA
 Possibly launches other programs:
  • CreateProcessA
  • ShellExecuteA
Safe VirusTotal score: 0/66 (Scanned on 2026-10-23 21:16:41) All the AVs think this file is safe.

Hashes

MD5 1e4094775369207cb3ffeaae5328e368 🔍
SHA1 fa26f2d87adf714bf1dcddc8f996083378a8d33a 🔍
SHA256 82f4b3ecff231fe629d94e221b05ac1a2296be665e246622ac874b017fbce988 🔍
SHA3 41e290f6a52db8dc198199dceee765f98ce9fa032068f4f45fe741ffb560bfb5 🔍
SSDeep 1536:gr3rob4nqB6veqHnq+Pgm5NN9vbDTc+1vIQ/EVWi:47PEg3qcv5PvB/Ez 🔍
Imports Hash 678c98de23ed05ac566dd767b5eaebed 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 9
TimeDateStamp 2026-Jul-10 19:03:44
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0xac00
SizeOfInitializedData 0x8a00
SizeOfUninitializedData 0x9800
AddressOfEntryPoint 0x00001590 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0xc000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 1.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x22000
SizeOfHeaders 0x400
Checksum 0x15415
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x200000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 a8d7ee6c93480cc7f0558d955ddad8a6 🔍
SHA1 e0bd4e99dd7ce6ed03efc1507794f76afcc21c84 🔍
SHA256 1463ed9bd0eef33405a3ba0465aa3dc1674aaf515639ab63d94fffafa8cbb52b 🔍
SHA3 8460f7a2fba5666a9957c2d8b3766eafd509abda5102388d8f8a5ef9f85c9cb0 🔍
VirtualSize 0xab20
VirtualAddress 0x1000
SizeOfRawData 0xac00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_2048BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_8BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.25323

.data

MD5 5a57f321ae6f68794e78fba852a0ca30 🔍
SHA1 21835207dd50da7a0f866604805d817fb31a673b 🔍
SHA256 017adea52125b18584340df414ba8e7be3fd540ce4bec7727c0e3d27c5c1bb84 🔍
SHA3 240b17241915ce04a98f19b63427bb6c8f31e8a420c430f22539c57a11dd3664 🔍
VirtualSize 0x28
VirtualAddress 0xc000
SizeOfRawData 0x200
PointerToRawData 0xb000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.312429

.rdata

MD5 38fcaadbc82d759c822735974f5e0045 🔍
SHA1 8fd600a17f0663590bf6e13522f21c62d18a4b61 🔍
SHA256 0e0bf240b99eaeb34cce8c18d8a52b32d8f79f2c43d854b0cf8d832a3360ee96 🔍
SHA3 f727dcf8540dd8818e35d64cac6e7e7634d0f911f619bb8eba439b7538a217af 🔍
VirtualSize 0xf18
VirtualAddress 0xd000
SizeOfRawData 0x1000
PointerToRawData 0xb200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_2048BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_8BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.554

.eh_fram

MD5 9e2ddb9db862af03aae6cf976d81070c 🔍
SHA1 6aabf1ce2cf928ada3ab324b90ac9e06e49ff24d 🔍
SHA256 c59c85ccb9f0ca449cf4d11e7db16a358ecbbb75531ae9e688ebd8f76c02a22a 🔍
SHA3 a2a58f36ca8052dea12b62fa9fadf60d566aefc65af9fd5c3be6437273d18367 🔍
VirtualSize 0x1d10
VirtualAddress 0xe000
SizeOfRawData 0x1e00
PointerToRawData 0xc200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.88209

.bss

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x9678
VirtualAddress 0x10000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_2048BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_8BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata

MD5 f3f34beb12ab4e6fa44d8ec2bd39e3b3 🔍
SHA1 58e24db50ed85f23bef261e0144bc5594eb8ab09 🔍
SHA256 21d03ae2aa4b0a1730d43d286a8a1ee973da11ff4949e4f52b9c947969f76888 🔍
SHA3 11fd907f60281e1f279a4c5b7b313810d23b37705adab67a3df6fe7358cd2404 🔍
VirtualSize 0xe28
VirtualAddress 0x1a000
SizeOfRawData 0x1000
PointerToRawData 0xe000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.92285

.CRT

MD5 680b5a97669538b6c270dcf63aeae555 🔍
SHA1 1e29ae8ed28bd5d2ba4b766a205e77d2e713b25e 🔍
SHA256 6da88c8a8912c76456d8ae358fe0e3c35f4b0718a37c70c6dd300c00db4ff2b6 🔍
SHA3 6a9828c313a993a109a9260b1eb26ff70d01d30a9bd4d9018a8bc89181b77add 🔍
VirtualSize 0x18
VirtualAddress 0x1b000
SizeOfRawData 0x200
PointerToRawData 0xf000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.114463

.tls

MD5 1d22717eb27005d2f0f43537e6a1e267 🔍
SHA1 7079442aa779193cefa77e91b399826f13b12fc0 🔍
SHA256 2860d9f80742e03efd68e2993973f2dcea7905ad228261914ce09aa9ef00870e 🔍
SHA3 667858e9a0cc9bd4d9ebac094b4825a22ebfe90e6e93e05602600611197c79b7 🔍
VirtualSize 0x20
VirtualAddress 0x1c000
SizeOfRawData 0x200
PointerToRawData 0xf200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.204488

.rsrc

MD5 df6772be7f58f316d000912ea1257ff7 🔍
SHA1 f31846674603bab6d537da48664a489eb71362a7 🔍
SHA256 b2e841a894eaa4f45dc768ade5536e8a94580382a946a18c90b989c2c8ddd9ae 🔍
SHA3 eefaa654bde97d513f28b30cad880f6fd35764ffcfb1e043cd6df82c47f0032c 🔍
VirtualSize 0x45f8
VirtualAddress 0x1d000
SizeOfRawData 0x4600
PointerToRawData 0xf400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.19104

Imports

advapi32.dll RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
kernel32.dll CloseHandle
CreateMutexA
CreatePipe
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindResourceExA
FormatMessageA
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetEnvironmentVariableA
GetExitCodeProcess
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GlobalMemoryStatusEx
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadResource
LocalFree
LockResource
MultiByteToWideChar
ReadFile
SetEnvironmentVariableA
SetHandleInformation
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcrt.dll _strdup
_stricoll
msvcrt.dll (#2) _strdup
_stricoll
shell32.dll ShellExecuteA
user32.dll CreateWindowExA
DispatchMessageA
EnumWindows
FindWindowExA
GetMessageA
GetSystemMetrics
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
KillTimer
LoadImageA
MessageBoxA
PostQuitMessage
SendMessageA
SetForegroundWindow
SetTimer
SetWindowPos
ShowWindow
TranslateMessage
UpdateWindow

Delayed Imports

1

Type RT_ICON
Language Process Default Language
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.6904
MD5 9f9587f9d8a1ffe40e7e9c00c3480132 🔍
SHA1 61657268d458da67198feaa8550f1254c605df79 🔍
SHA256 2902f9e5c38c4cae73fa5d863774eda4277d0e7301477339a4a39f0508f71bc3 🔍
SHA3 0c2d0c256b38ccb13a7dc8785fb73a3c1d8be0d24ef1a20595b20f8df45fda59 🔍

2

Type RT_ICON
Language Process Default Language
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.20611
MD5 efece076cac41eaa04a325642c2ac993 🔍
SHA1 fb3d89078ce8fb7a29a4532111ec81d399a91074 🔍
SHA256 2289af4205601f0d167d9797d72f1ca14d06f574ce39728a35bccd150c17620c 🔍
SHA3 ee26296663ccb1d9201c3f99af6a30dbececffc6be87a908011ff27624797371 🔍

3

Type RT_ICON
Language Process Default Language
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.45368
MD5 318b0ea4b6a85a20748e9373149b6123 🔍
SHA1 bb7b9d1a2bcf8e0ce2c6d22664a5d69cecebb09f 🔍
SHA256 f42d2e2ab9ed921d1fd0be50cf9ef95940f07c97316d46de847086d41504b79c 🔍
SHA3 641adfa1311adbb4671b44639c6e9831e49421e6b8688c812b304676e6414ef9 🔍

1 (#2)

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0xc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.25163
MD5 e7ad888d00efc92b46dd46b9d808e099 🔍
SHA1 124074e52bdecfc877971823d1b536a3c65b5db4 🔍
SHA256 30274065de40797eb01fe40b90c509db14896b1b2a68fd7a4e1c6b71ea0a85eb 🔍
SHA3 84b4d33037c7a88a8e520d6c580febfa6ed73a814db4834dd9327abcc5bc32ee 🔍

2 (#2)

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x3
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.918296
MD5 d21cbc77d196c49ae12a78356292d895 🔍
SHA1 591a80a8335444e328748690ed3b9a8bc57bf88d 🔍
SHA256 e4dda54e86921e36487a807938bd60fd073a255d5ec8b33f513959c2cf67a20c 🔍
SHA3 a3d9beb962b1fc2885beecb7b5ff66932967f05adf6065a4285a4efeced7be94 🔍

12

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x1c7
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.14445
MD5 f4550b7335b739af87d945d4e4b8be2c 🔍
SHA1 b3fe5ce073122909fb39402fa92797f32e1ac3c9 🔍
SHA256 81036f893c435f18dd7c654702d7607c832dc73763e0a5b6b06907e8413220e3 🔍
SHA3 5ea6fe1cdf181898ebf043b6d5826c5e1b45040791881b6e6746ce94a0620c32 🔍

14

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x13
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.68188
MD5 37971f623986646f8b893203b2b0f855 🔍
SHA1 6037803b05beba66c1a694bb006fdf7117da933e 🔍
SHA256 6ad2f123242ba2ae8755fa73df069247aedfce463725b38168363b83c4c26c6a 🔍
SHA3 2f41434ce853b570565735745c63d205395b1acaaf958650dd5b749c46129feb 🔍

15

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x11
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.61687
MD5 84e4d3fa9efcb612d7f385afbadd4675 🔍
SHA1 87d6e67921b9766c68abab51437e2ed1a01e4b4f 🔍
SHA256 5a9cc857f34a0dbe091cc249637639ae4076e0a7f084cd53a98576480b4cda2c 🔍
SHA3 d6e9e5586c253ae322721b364261b5d1e7ff5f30d14530669bfcd375a0606639 🔍

16

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x24
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.36383
MD5 3c611eb697cd77fb5baa35df086c8e55 🔍
SHA1 06e26136d944fd68896b5b8f14829a400fc9dd55 🔍
SHA256 c20dd6ea33fa1cb84f3aba5bf904873b5f91126ad7909e10cf61e7e59fa5c4be 🔍
SHA3 eb3d81619f9f40faffdf56f64bf9244d23df639ca1e03045b752c6f3fb28719f 🔍

20

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x3
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.58496
MD5 00ccbaa75e32b1a555509ae4aa03970d 🔍
SHA1 b8d2d275b8e18b128218e64a4d6494a97189c8ed 🔍
SHA256 91c2a5652b88665d5de623e946a59451f7527d2c704c30a5650cc10bb225ff02 🔍
SHA3 c624bb3c48d93e0c92d7168ea049495ea4f8f3917334ee727feb661a39811f48 🔍

21

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x42
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.43158
MD5 4c25ae79f49473922f6819e6d4b01122 🔍
SHA1 9360bc9feaf4b072ab63441041056c8572dc3266 🔍
SHA256 020488fae06c4b538c9c977a0c9fcc16a2770ba916365fea719ecbd631169e27 🔍
SHA3 21bdaf67ef43e27b4aaa594f91db4609c2c7e1da5af8748734f17f8878b4f20e 🔍

22

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x1f
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.24452
MD5 c9a1aca28f0cc910c2d6b56667f12a33 🔍
SHA1 61c29a2caefeb5c42b1dbba631200eb6e86003d9 🔍
SHA256 34689fb090a6640feeb3bf4b79a34ee8a724318682ec4d6628f27cf3bc8f4548 🔍
SHA3 2aa9acce72135ff5965eba71b5db27e1122cdab1143ba439c74b6780b6a7b40c 🔍

24

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x5
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.32193
MD5 90fc40aff201b2c5e5a6952ef44f6253 🔍
SHA1 8f67990faec0121ed21c2fcc53f236a619daa29f 🔍
SHA256 4ba5846ef5d15a5da13e7946c20233a1cc9b5eff06f440b8fd21e848638ea018 🔍
SHA3 8afc387c93dacd2bc735ca0c0e511cb1ba6d1ac09e0c1c042f090f19ea0385ed 🔍

29

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x5
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.32193
MD5 cc04a27b7e4921cad6340357dea87002 🔍
SHA1 6327dc7237d67e8099089dad4c84c2cca4992e06 🔍
SHA256 debc2f07db78d52d2def07b7bc620d7042367501d9439a62ba09b559a98e0957 🔍
SHA3 2dbccc2e90fcda82baad7a2059c60bb370e6c2e41815ec714c412cb32a3c61e8 🔍

101

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x32
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.04307
MD5 5543dda0068cad802d1a66943873faf3 🔍
SHA1 927138fcb8945141429e999e92f5cfbe50082cd8 🔍
SHA256 4ef9e51eb916d15bf8901e8ae324390cdedf728297a729d0fb823964730801fe 🔍
SHA3 b06418d850e2e0fcc623d3d85e663444a69583ac633d3fe67e836b2ac2390da5 🔍

102

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x36
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.20399
MD5 86a3c1ca9da5e80fbbb350021bd618d8 🔍
SHA1 e94d2b7cc56af615837c349916eff9849bdfeed2 🔍
SHA256 2621256c93375617aba5a69d36c418c44381c5e913dddfaca576702aa105a2b1 🔍
SHA3 5828a6f0f07a0794c18151cefcc2d078fb5de35b3362271d095e53d2edef2a40 🔍

103

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x35
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.14776
MD5 de13262b91fa9ac1a9a1119dcfa949af 🔍
SHA1 52b6eda6148a9802ccb4c7d8e35cd2a32c01aad3 🔍
SHA256 0bf65805e92c10fa89fbeaf313dedeaaf166f8f8cee5827f7478f2a7d4c3bd9d 🔍
SHA3 50cc4ec50a982a8afc58491e28132f174f86399f71f563d6857394e5632718e6 🔍

104

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.11008
MD5 0098ee1e5282941a123051f1d9056aae 🔍
SHA1 253ae65f8a2a8d7e3a4135985cc8814739204897 🔍
SHA256 a9c88a2082dfa1f26c8ee0d9f6f58ad42142baa0f111d239011830a847fea5c5 🔍
SHA3 6a7e8eefdc45dad04fa11e5ea59b3b0dfbeeda27c6b3d93d8bd862091949881b 🔍

105

Type RT_RCDATA
Language Process Default Language
Codepage UNKNOWN
Size 0x2c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.90306
MD5 f6176ea6bfeccd872b7b477f44392121 🔍
SHA1 37449a167458cab448881c606cfbe3517fd85e69 🔍
SHA256 ade17080d1ebd541761fe6b306aefc9923e986fce048303f767473ee9c707f15 🔍
SHA3 c1772ef9226ae6ae6b17e38968f2a4a340347dbb76aaf25834a7b136c028aefe 🔍

1 (#3)

Type RT_GROUP_ICON
Language Process Default Language
Codepage UNKNOWN
Size 0x30
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.45849
Detected Filetype Icon file
MD5 1ec6a7b3300970378c29695a6cc13d36 🔍
SHA1 99ce74251d19d800608e30bed6e0d793931da56e 🔍
SHA256 77a1efb6136f52dd2372987b13bf486aa75baeacb93bad009aa3e284c57b8694 🔍
SHA3 7a94ba315b3ab461cec9dad3048599d32b0e597047f9655159bd6dfdc694e4a3 🔍

1 (#4)

Type RT_VERSION
Language Process Default Language
Codepage UNKNOWN
Size 0x2b8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.30236
MD5 e23b2282303a3ace357b07d39d8afd48 🔍
SHA1 73f8392f7e6a94e99552e728c48225edfae06eff 🔍
SHA256 8f9e8e735d53d37fb9b5d992c6e0d5adcf2741d5d9d0f49ffa325c96dc247cb9 🔍
SHA3 d85f6293111ac4cb4460db1fc84d5fb494866cae7eb072341adae488cb36f3c7 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.5.6.0
ProductVersion 1.5.6.0
FileFlags (EMPTY)
FileOs VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
FileType VFT_APP
Language English - United States
CompanyName jadx
FileDescription jadx-gui
FileVersion (#2) 1.5.6
InternalName jadx-gui
LegalCopyright Skylot
LegalTrademarks
OriginalFilename jadx-gui-1.5.6.exe
ProductName jadx-gui
ProductVersion (#2) 1.5.6
Resource LangID Process Default Language

TLS Callbacks

StartAddressOfRawData 0x41c001
EndAddressOfRawData 0x41c01c
AddressOfIndex 0x410048
AddressOfCallbacks 0x41b004
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks 0x00404FE0
0x00404F90

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0!
Leave a comment

No comments yet.