93475593346cbc8b29823c858ffc0855

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2025-Apr-02 08:22:27
Detected languages English - United States
Debug artifacts D:\Descargas\Dirty Adobe Hosts Rust\DirtyAdobePatch\x64\Release\DirtyAdobePatch.pdb

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryW
 Can access the registry:
  • RegOpenKeyExW
  • RegEnumKeyExW
  • RegCloseKey
  • RegQueryValueExW
Suspicious VirusTotal score: 1/72 (Scanned on 2025-04-02 08:46:48) MaxSecure: Trojan.Malware.300983.susgen

Hashes

MD5 93475593346cbc8b29823c858ffc0855
SHA1 c7b76febeeff235c85fd46d61472bc46fca6f162
SHA256 4a89476a4663b73021ef1fd2e2d17dced027eca7647b4f84f875285e0d5518ff
SHA3 739faef27a2b48c35595c649a4075eb26ef8e194873e1874bad3bfea327380fb
SSDeep 6144:wfXGr20PPprzOSofklhSHOHnc8zTLxhBdWwQma1XHj:w3e6kOu8EFWwi
Imports Hash bc7f0c3a3bb6f03f30799c8a0ee2175f

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2025-Apr-02 08:22:27
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x2cc00
SizeOfInitializedData 0x34400
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000002B32C (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x64000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 18a563f07147b57931ceb1a89750186b
SHA1 90fd6b5c879008931c31d69334fa745d38922749
SHA256 07cfb425d86fd61da2e15ee15176cc92c071eaf20a4a408331bb7889dbb5b17f
SHA3 5f9f8aae4ac583c46cc356d7b092a7c3e0349c1e71e8ddf94308b5a6896e1094
VirtualSize 0x2cbff
VirtualAddress 0x1000
SizeOfRawData 0x2cc00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.54119

.rdata

MD5 ab2c9d1ea8eb33eb6acfc37e72f24765
SHA1 757ef91d17e870aa954a6879a34e94a303245af7
SHA256 57abe59127cd3b7a0e50b87a36a3b795ae6228912cb27e8f46b43f5f79efb68d
SHA3 a124b2a6b8f5154fdbbd3e59b723f7eff9ad40a38b44a9cb92662704d8f3231e
VirtualSize 0xcfb8
VirtualAddress 0x2e000
SizeOfRawData 0xd000
PointerToRawData 0x2d000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.77386

.data

MD5 15b46ad1cdd5c9f64be7a7e4376445cb
SHA1 e8f98be72b69217a2a4af4b7ea274502e5415092
SHA256 d84f40724b80a3204d72575aca1f6b8778d4a57709306f51c811d9f7c18a9cae
SHA3 8f711dc069fdd71048dafcafd0e0a1e78bf9d81367a33b4d0f176a97b82c0da0
VirtualSize 0xde0
VirtualAddress 0x3b000
SizeOfRawData 0x800
PointerToRawData 0x3a000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.53162

.pdata

MD5 5534db91522117171939cfd1d410a51c
SHA1 bc8a7010af11ac2c6daae707a68e280d07d4cf51
SHA256 56b30db9e55da4c182e1d6167b1e9434f64f8339a20204307819467e53c64717
SHA3 0a653d79c215435b4651ffa6d0ba3340aa5f40183134c6914d773994a38d23bc
VirtualSize 0x4bb4
VirtualAddress 0x3c000
SizeOfRawData 0x4c00
PointerToRawData 0x3a800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.19654

.rsrc

MD5 c9c2629fcb86465b17b90e3267121371
SHA1 78962e417cb80f5db7879668f64364077c39954a
SHA256 8d03e20f397049c25b89cfd745b46947e1f939f69a8bf6cce0b862be77cdb854
SHA3 f0f8405e8ab578316c30bed50c761957b06d158fc3ba7469708a851981f22e67
VirtualSize 0x217b0
VirtualAddress 0x41000
SizeOfRawData 0x21800
PointerToRawData 0x3f400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.95215

.reloc

MD5 eaca0b7307954a0ea5bffcf900da1727
SHA1 04c1e5ae53dbd09ef44d1e16c0c0636434aead28
SHA256 bb74cbbc7b3752ff0016448dfd71eb5b7df07ebeccd3fd103aef2cc36e1c19df
SHA3 defa09990eaecd8b5c12d0a89308315e42990dd2176ddfe192bab091da232318
VirtualSize 0x148
VirtualAddress 0x63000
SizeOfRawData 0x200
PointerToRawData 0x60c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 3.82554

Imports

KERNEL32.dll GetExitCodeProcess
GetModuleHandleW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
SetConsoleMode
SetConsoleCP
SetConsoleOutputCP
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetSystemTimeAsFileTime
WaitForSingleObject
GetLastError
CloseHandle
GetConsoleMode
GetStdHandle
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetFileInformationByHandleEx
CopyFileW
AreFileApisANSI
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateFileW
GetLocaleInfoEx
FormatMessageA
LocalFree
InitializeSListHead
ADVAPI32.dll RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
MSVCP140.dll ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xruntime_error@std@@YAXPEBD@Z
?uncaught_exceptions@std@@YAHXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
??0_Locinfo@std@@QEAA@HPEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getname@_Locinfo@std@@QEBAPEBDXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?global@locale@std@@SA?AV12@AEBV12@@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??Bios_base@std@@QEBA_NXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
VCRUNTIME140.dll memcmp
memchr
__current_exception
__current_exception_context
__C_specific_handler
memcpy
memmove
__std_exception_destroy
__std_exception_copy
memset
_CxxThrowException
VCRUNTIME140_1.dll __CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0.dll abort
_get_initial_narrow_environment
_c_exit
_initterm
_initterm_e
__p___argv
terminate
__p___argc
_configure_narrow_argv
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
exit
_register_onexit_function
_crt_atexit
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_cexit
_exit
_set_app_type
api-ms-win-crt-string-l1-1-0.dll strcmp
strlen
wcslen
towlower
iswalnum
api-ms-win-crt-stdio-l1-1-0.dll _isatty
fclose
fflush
fgetc
fgetpos
fputc
fread
fsetpos
_fseeki64
fwrite
setvbuf
ungetc
_get_stream_buffer_pointers
__p__commode
_set_fmode
_fileno
__acrt_iob_func
api-ms-win-crt-math-l1-1-0.dll __setusermatherr
ceilf
api-ms-win-crt-heap-l1-1-0.dll free
malloc
_callnewh
_set_new_mode
api-ms-win-crt-environment-l1-1-0.dll _wdupenv_s
_wputenv_s
api-ms-win-crt-filesystem-l1-1-0.dll _lock_file
_unlock_file
api-ms-win-crt-locale-l1-1-0.dll _configthreadlocale
___lc_codepage_func

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2d9
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.68094
Detected Filetype PNG graphic file
MD5 2c5f00aa75e68c1c965ab1a0da5c72a7
SHA1 f0cc65f6b265a6c0ffe24c73f853252d95e7623a
SHA256 9de92aca7ea8dede90ed844443bec090d39b5331b169cbc667819cc9282f310e
SHA3 e11f0d5ca0414268ca2d68251c5624be785080627a652c5554d2f28d8fe119b0

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x497
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.82684
Detected Filetype PNG graphic file
MD5 93d6bda74083599fcc98ce49c07491ab
SHA1 4c3f6cb7cb4e31cdd6ece1108cd2d05ca0994cb0
SHA256 2f05695b6325a68ed474f670ffbef14bb354995ea2e8c15e43676bdce9c5df6d
SHA3 e1ae3a0d3083bc1afdfd589089856596cc0f1a051f3744902371951712d9730d

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x65d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.83351
Detected Filetype PNG graphic file
MD5 10c51ecaccee16e7b135d2047401f2e0
SHA1 87ffff7a4310b014eade5d23cb2b8985784ed12c
SHA256 0691f0a99446e92a926ef4f0da192556a6da38150515ab12608b379b322be577
SHA3 60f26e5b2f23a1feafe5d81fd4ca4c7aadac6ce231b606a7f2370e83da8c56da

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xa55
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.91675
Detected Filetype PNG graphic file
MD5 646d5a79b19daad3426c68b4a18d381d
SHA1 1b25ab4c65062a6322d3d16caceb0304f9f4b523
SHA256 975bbb64768c3446e3cbe31e3c8c023b924bc228fa6a5693879b59c5a6c33581
SHA3 58bb2d2fe7ea6a45274bbfc046681c30d267c1f4e70745df5cc9499d4bf5d690

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xed9
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.91354
Detected Filetype PNG graphic file
MD5 39dfa917b3ece605b2ba90f2a1b2b324
SHA1 0800168b0cc8aec378c9c8047f003b22dded0a4d
SHA256 0797e67b6fede8a480352d210f73a0aec0ebb8d4127693217343f5ae24968891
SHA3 8508d09ffd71bc5ad16d637f421c70e168bc87047f62532787a80aa75520b4c4

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x19dc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.954
Detected Filetype PNG graphic file
MD5 f83271e6cf173ba857137298eb87abf2
SHA1 a104d78bc4e2949ed2bc4ea85f8b18087026183c
SHA256 7e26a5145c2c51d669637f57c400b2b7aa809f51c9331d6713fc280c00af5278
SHA3 d2220f32d35142b592396cac091f378cdac283897ae6835012f12a09030d77bc

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x265b
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.9509
Detected Filetype PNG graphic file
MD5 b6b101d18551b081715e009afeccf194
SHA1 cad5742716bcebea8af31d068cc8c03f1818fd06
SHA256 462814b6148d2065fc162670b72b17ba0c7ee08fef317fd48baf12314bb5e449
SHA3 160b58a295f28ffd12122d886a3b79655016c71a2f22740489cee658a6014242

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x6509
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.94365
Detected Filetype PNG graphic file
MD5 baa7368d9b8ef8e18212e766c4e27b0a
SHA1 ef2357b8f54cebf1f4832f0d1d88f4be8d5fd050
SHA256 089af4acf51391d5f503d8c7b6aa6f4f395a90a2c1722fd0653c238d8c3519a5
SHA3 bbf714782d6f3d29408168a223447bf33a625a5fceed821e97ad6996400c114e

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x146d2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.96103
Detected Filetype PNG graphic file
MD5 ae08bbf52a49541bc5e1f7cc2b698c51
SHA1 82425bb082bd8e8e46eb8f612c80f5dca1f65649
SHA256 af2922afb59148ff1676ad7eebb0710e8081787de999894c713e62c446deeb7f
SHA3 04049eb4264423f829e99320ec14edd0fbd2557ab17558e809ed6d97a1feb0f9

101

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.99229
Detected Filetype Icon file
MD5 e64635cfbd537cbf4b6a31e6afadd59e
SHA1 2042af0f89ce73755d8d91f3287a2cf413172746
SHA256 9400130456e6c05fceb377a6f7a2489baf423dfa18c31b83785ad81a8778351b
SHA3 22f90c6b31114f9a395bad16cdc26ccd1c3fab106c2bdadd802ac2b879075543

1 (#2)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2025-Apr-02 08:22:27
Version 0.0
SizeofData 108
AddressOfRawData 0x36320
PointerToRawData 0x35320
Referenced File D:\Descargas\Dirty Adobe Hosts Rust\DirtyAdobePatch\x64\Release\DirtyAdobePatch.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2025-Apr-02 08:22:27
Version 0.0
SizeofData 20
AddressOfRawData 0x3638c
PointerToRawData 0x3538c

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2025-Apr-02 08:22:27
Version 0.0
SizeofData 800
AddressOfRawData 0x363a0
PointerToRawData 0x353a0

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x14003b040

RICH Header

XOR Key 0x8c819f26
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 16
ASM objects (34321) 4
C objects (34321) 10
C++ objects (34321) 33
Imports (34321) 6
Imports (30795) 5
Total imports 246
C++ objects (34618) 1
Resource objects (34618) 1
151 1
Linker (34618) 1

Errors

<-- -->