Manalyze report for a086cb5cb500eb3b6a785469f30506a9

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2020-Aug-01 02:42:47
Detected languages	English - United States Estonian - Estonia
CompanyName	Glarysoft Ltd
FileDescription	Glary Utilities Installer
LegalCopyright	Copyright (c) 2003 - 2024 Glarysoft Ltd
ProductName	Glary Utilities
ProductVersion	`6.20.0.24`

Plugin Output

Info	Interesting strings found in the binary:	`Contains domain names: adobe.com http://ns.adobe.com http://ns.adobe.com/xap/1.0/ http://ns.adobe.com/xap/1.0/mm/ http://ns.adobe.com/xap/1.0/sType/ResourceRef# http://nsis.sf.net http://nsis.sf.net/NSIS_Error http://www.w3.org http://www.w3.org/1999/02/22-rdf-syntax-ns# ns.adobe.com nsis.sf.net www.w3.org`
Suspicious	The PE is an NSIS installer	`Unusual section name found: .ndata`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryExA` `Can access the registry: RegCreateKeyExA RegEnumKeyA RegQueryValueExA RegSetValueExA RegCloseKey RegDeleteValueA RegDeleteKeyA RegOpenKeyExA RegEnumValueA` `Possibly launches other programs: CreateProcessA` `Can create temporary files: CreateFileA GetTempPathA` `Functions related to the privilege level: AdjustTokenPrivileges OpenProcessToken` `Changes object ACLs: SetFileSecurityA` `Can shut the system down or lock the screen: ExitWindowsEx`
Info	The PE is digitally signed.	`Signer: Glarysoft Ltd` `Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1`
Safe	VirusTotal score: 0/67 (Scanned on 2025-01-09 22:43:56)	`All the AVs think this file is safe.`

Hashes

MD5	`a086cb5cb500eb3b6a785469f30506a9`
SHA1	`af0a408f485278a21f8766e91ce269f45ba34adf`
SHA256	`eff639c0ee8b59169b84f1df34edbe2cb65a4a0f8d6465d981517436fce7f7f7`
SHA3	`e497a27b3d3d0e11df7dd028c411f1351b788574f2993e6dcdb9edc180c15fb5`
SSDeep	`393216:gLySuxsX63otMwiDamoP5HSurC06mQqnQcnqkgJh+DTcBBwKdx03hUD6w92VfSw:aATDaNP5HSR0bQqF/EIDYxQk28BN`
Imports Hash	`ced282d9b261d1462772017fe2f6972b`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0xc8`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`5`
TimeDateStamp	2020-Aug-01 02:42:47
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LINE_NUMS_STRIPPED` `IMAGE_FILE_LOCAL_SYMS_STRIPPED` `IMAGE_FILE_RELOCS_STRIPPED`

Image Optional Header

Magic	`PE32`
LinkerVersion	`6.0`
SizeOfCode	`0x6200`
SizeOfInitializedData	`0x1d000`
SizeOfUninitializedData	`0x400`
AddressOfEntryPoint	`0x00003312 (Section: .text)`
BaseOfCode	`0x1000`
BaseOfData	`0x8000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`6.0`
SubsystemVersion	`4.0`
Win32VersionValue	`0`
SizeOfImage	`0x83000`
SizeOfHeaders	`0x400`
Checksum	`0x1ad31cc`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`83acff9b8bf5b52f9975f8acdcabf744`
SHA1	`4f8d8de1682bb187a9c3e3b5984947b692e275d0`
SHA256	`b7bd0795251a2cdc950dc4cc1e0789678829a2531e5f5c449cd1adee82f02fe0`
SHA3	`cf8a837bd6c954cae1f05b46001cbae177c98bfc0f8ae13e47a7d540df80a314`
VirtualSize	`0x60d5`
VirtualAddress	`0x1000`
SizeOfRawData	`0x6200`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.41767`

.rdata

MD5	`b8e42f3d3b81b0e2a4080ab31bc2d1f4`
SHA1	`e0cbe654ca1eb634ed5c80fd7d25a956207641f2`
SHA256	`e57e06f0a1440e2bc802fdb52f8f75ca76a1ac6925d92603ffaac204917446e9`
SHA3	`feb64e053f601977d9302d66116399c9129e43d118f2655907ab6d2dce110d67`
VirtualSize	`0x1274`
VirtualAddress	`0x8000`
SizeOfRawData	`0x1400`
PointerToRawData	`0x6600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.06107`

.data

MD5	`599a2f85a30bf72bff5e1c2e854c43ee`
SHA1	`aa1f5737ec607d682ca66abf0359157cde44ad08`
SHA256	`eefc550e3dcbf08f3a45d7bf56cd1f2d97a3c85a8f219c8ce9a398f0c78b2dfe`
SHA3	`617b107fb3488d44d6aeb990550c7e47da73872eca28340cc7f87f45cd8e176d`
VirtualSize	`0x1a838`
VirtualAddress	`0xa000`
SizeOfRawData	`0x600`
PointerToRawData	`0x7a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`3.99516`

.ndata

MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`
VirtualSize	`0x1a000`
VirtualAddress	`0x25000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_UNINITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`

.rsrc

MD5	`5e681eb30a03bea20674820a6a4a8802`
SHA1	`4a45c3725fef6d5f351e1d467e721afe2fba2ce8`
SHA256	`92f47380eaf9de96e70bbbea8c89627345635511a854309e64c63cefdcc8606f`
SHA3	`881be7e53da9ea4d13a3965e65f7c21f65a12d916af521cd1b1b5eac789f3b54`
VirtualSize	`0x433f0`
VirtualAddress	`0x3f000`
SizeOfRawData	`0x43400`
PointerToRawData	`0x8000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.56522`

Imports

ADVAPI32.dll	`RegCreateKeyExA` `RegEnumKeyA` `RegQueryValueExA` `RegSetValueExA` `RegCloseKey` `RegDeleteValueA` `RegDeleteKeyA` `AdjustTokenPrivileges` `LookupPrivilegeValueA` `OpenProcessToken` `SetFileSecurityA` `RegOpenKeyExA` `RegEnumValueA`
SHELL32.dll	`SHGetFileInfoA` `SHFileOperationA` `SHGetPathFromIDListA` `ShellExecuteExA` `SHGetSpecialFolderLocation` `SHBrowseForFolderA`
ole32.dll	`IIDFromString` `OleInitialize` `OleUninitialize` `CoCreateInstance` `CoTaskMemFree`
COMCTL32.dll	`#17` `ImageList_Create` `ImageList_Destroy` `ImageList_AddMasked`
USER32.dll	`SetClipboardData` `CharPrevA` `CallWindowProcA` `PeekMessageA` `DispatchMessageA` `MessageBoxIndirectA` `GetDlgItemTextA` `SetDlgItemTextA` `GetSystemMetrics` `CreatePopupMenu` `AppendMenuA` `TrackPopupMenu` `FillRect` `EmptyClipboard` `LoadCursorA` `GetMessagePos` `CheckDlgButton` `GetSysColor` `SetCursor` `GetWindowLongA` `SetClassLongA` `SetWindowPos` `IsWindowEnabled` `GetWindowRect` `GetSystemMenu` `EnableMenuItem` `RegisterClassA` `ScreenToClient` `EndDialog` `GetClassInfoA` `SystemParametersInfoA` `CreateWindowExA` `ExitWindowsEx` `DialogBoxParamA` `CharNextA` `SetTimer` `DestroyWindow` `CreateDialogParamA` `SetForegroundWindow` `SetWindowTextA` `PostQuitMessage` `SendMessageTimeoutA` `ShowWindow` `wsprintfA` `GetDlgItem` `FindWindowExA` `IsWindow` `GetDC` `SetWindowLongA` `LoadImageA` `InvalidateRect` `ReleaseDC` `EnableWindow` `BeginPaint` `SendMessageA` `DefWindowProcA` `DrawTextA` `GetClientRect` `EndPaint` `IsWindowVisible` `CloseClipboard` `OpenClipboard`
GDI32.dll	`SetBkMode` `SetBkColor` `GetDeviceCaps` `CreateFontIndirectA` `CreateBrushIndirect` `DeleteObject` `SetTextColor` `SelectObject`
KERNEL32.dll	`GetExitCodeProcess` `WaitForSingleObject` `GetProcAddress` `GetSystemDirectoryA` `WideCharToMultiByte` `MoveFileExA` `ReadFile` `GetTempFileNameA` `WriteFile` `RemoveDirectoryA` `CreateProcessA` `CreateFileA` `GetLastError` `CreateThread` `CreateDirectoryA` `GlobalUnlock` `GetDiskFreeSpaceA` `GlobalLock` `SetErrorMode` `GetVersion` `lstrcpynA` `GetCommandLineA` `GetTempPathA` `lstrlenA` `SetEnvironmentVariableA` `ExitProcess` `GetWindowsDirectoryA` `GetCurrentProcess` `GetModuleFileNameA` `CopyFileA` `GetTickCount` `Sleep` `GetFileSize` `GetFileAttributesA` `SetCurrentDirectoryA` `SetFileAttributesA` `GetFullPathNameA` `GetShortPathNameA` `MoveFileA` `CompareFileTime` `SetFileTime` `SearchPathA` `lstrcmpiA` `lstrcmpA` `CloseHandle` `GlobalFree` `GlobalAlloc` `ExpandEnvironmentStringsA` `LoadLibraryExA` `FreeLibrary` `lstrcpyA` `lstrcatA` `FindClose` `MultiByteToWideChar` `WritePrivateProfileStringA` `GetPrivateProfileStringA` `SetFilePointer` `GetModuleHandleA` `FindNextFileA` `FindFirstFileA` `DeleteFileA` `MulDiv`

Delayed Imports

1

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x15557`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.94693`
Detected Filetype	PNG graphic file
MD5	`74af35f1f8e8790158ff8dc9866a892d`
SHA1	`0e9cbf6ca185070b4da75f3a62ac860b2f0716c6`
SHA256	`3a5cd01275a0e4506b07163698d9ea72216feb573d8f64da4911409265db2b1c`
SHA3	`805c560be753322c7415603410626638e8761de87f9448351b7beb2f2ff3826e`

2

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10828`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.51641`
MD5	`17e0187ce480039378e4dad25f482022`
SHA1	`55c53901aa1ca3d4222d5522693512b1986abcce`
SHA256	`5401ab25c176b001c23dba0e35ca68303e2f35dc42f1cd4b36063faade5f604b`
SHA3	`5835e22b6d527534fca80e0a6a13f4d8d4437b2e21c3fc1d93f13349d7a66628`

3

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x94a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.86489`
MD5	`8d700dfc152ef6abdcde6bda8acc53bb`
SHA1	`14184dee4a4f0fe6bf09f08fde874c23f3bcef0b`
SHA256	`95f701feeb011328d1a14e986966c6573d3636ff137b4a928d4c64e7bf67eda2`
SHA3	`6cb305f9766f9ea6308f3a11c8138ed6fe3f89d9374cf6e4fec1b773e2a58722`

4

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x5488`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.90342`
MD5	`4947bb8c8b1fbb45a20401e6d826400f`
SHA1	`22bafecf503eb303a2d72f0465c826ab49f3ffc3`
SHA256	`7c384b0e20d8f2b4cf9191a7c2e386e28da0d53d5216ea5d52bda77ee13f2f91`
SHA3	`891de9675b852a7bc96aaeee0ac6cb2631dbde944cd3901ffba043ec42fb126c`

5

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x4228`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.75383`
MD5	`595aeeafadc6cef5cabf1c83cd1d2332`
SHA1	`eddc86bc761ef5e1bc28e6c4c9f7866d19325ee4`
SHA256	`77fa1d9eaf6e5c6079a9c4ef4629de1e3b27ccd88899222a5196302b7f4a2323`
SHA3	`6062038939e63308cb3cfbaa03d7a9838713ccc8862a1dfa9dab0ce0c79e239f`

6

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.01101`
MD5	`7475c6d1ae5ec3a1e742131dc458c94d`
SHA1	`038fdb5fe77130c4e5c270ec1d18bf407de0d167`
SHA256	`4a0c83dbc7847e1452854e6ff56a1ce01bfbd0faf32f63af1448676be87ef8c6`
SHA3	`9e3fcdcdd04295cdc74df4d388102188e994083cc0888c7fe120ab216cf50fe0`

7

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.05923`
MD5	`550af6b774b5c3052bbb825c31ea0bed`
SHA1	`74c76166ce4046e503d5b241430d0003f124d7fb`
SHA256	`aae7f3caf2e8cb4db1078341dfd46817e0602ecd8b5b7a9473286ba583bd697e`
SHA3	`f14b0db218ae0f4e7cc3a5ed38cd8af8dcfec45bee6076138483bca7f3f2b0bd`

8

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0xea8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.28649`
MD5	`a728fb4110f037abc99df801bf7a461c`
SHA1	`cfc259686c2ac5021fb75aabb8ca139a8db222b1`
SHA256	`1c06679977d1d9bb5e3072f2be1e20453e68cfea58b9b4c3991cd10e6db1ad00`
SHA3	`3600f6a74d1f82f731aeaaeb63c39adb0c9329d75ad867c0f12bb2d06d2cae23`

9

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x988`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.31734`
MD5	`2107d74a082b55e879d77dede09c6f73`
SHA1	`810ba04bcf804eb27daa1226f53131b66a628c04`
SHA256	`2bb9d25a59720f337e8bf743972a1dc0b128855b19636b8cffd13031fb4abe6b`
SHA3	`b7600e967cf7cccf9669c2ec26329801bfe0c7af12b0c8cff79f9d483619e94e`

10

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x8a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.13887`
MD5	`8113d8cd9d6534340cf67aaab7029a3c`
SHA1	`ffd6f7b1d479ea6d6c3f2fc7994a02ec2007f1c0`
SHA256	`e524558e4d9989619c1ceb711c9522d007435075d6d20b150a307c3bbc6f5b76`
SHA3	`1eeefa118d578f8333acdf37fd4b952115c2f0f4bb16abbb5c31bb5724e0f7d6`

11

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x668`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.64039`
MD5	`caa00eaf56c4f633b91e6ac3032a79f7`
SHA1	`2d6fb3adfb3516586b2cb430d1f9c401de6b3dac`
SHA256	`31973281e2d0f1622d63d39ecce259b6f3f9aa15c2eefea8e3f2b777bae36fd0`
SHA3	`1defe288467dffe9751a5278d381d8610f7e503ffbd194ba2243fbe9ac92de3f`

12

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.57254`
MD5	`2c42e81c441c9912b8752dd092064b67`
SHA1	`0475d7f19017e33dfb209e543911d324cf005023`
SHA256	`cfeb5a2f4ba56b0d48e81cb28ae33993fe36892757082c13d9838154bcde5ae8`
SHA3	`c440e3eab941739bbc6091d1d89094b4d640f407408213c144d4f7e280be7488`

13

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.29921`
MD5	`1678d66a06add307beb5c3e3846d2e53`
SHA1	`7247e424645fdbe217212b48f1bba6d2949d76f7`
SHA256	`ea1f4ee4e4e2f1ea69d6d4bb0be91b41e80c047df6213f247cb3e7eec7d8c75d`
SHA3	`fcd0ae46fc43dc7afda1e8f63bd21177605890bfce0f30fa5c93e64e00b95265`

14

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2e8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.90336`
MD5	`79de66a7043ccb9ab8d4a9e34e2957d1`
SHA1	`30abd77575c50044dc1a47ff4b7099d64b53c2f2`
SHA256	`5b461fe847af9ebab71b5775e481f0566df6be7e3309170e2726575c23c60783`
SHA3	`ccef3fd56369852a2abf68215e8c5e4454f49849c347a62234da661a1603d514`

15

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.61423`
MD5	`3a245513e42e484cf10434c42b43f23c`
SHA1	`30b224af541eddc5c52cd723003cb05b08b8524e`
SHA256	`1ae9bdd42a846e3df0755abce73b11928d5cd92d2d5430b10891511ff8e8b7f2`
SHA3	`4d303abc9e0879d9a1be56e0af2ae8a12000b906c93ceca00bd4a2baac736b79`

102

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xb4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.71813`
MD5	`7add80697358fcc3e63354d269ea5ac9`
SHA1	`72c0a1363b9b4fee0a4acb42b31cd9b5e0664c4c`
SHA256	`b29c7a1301ddb0e896faf944d8ea8f4e57ff4f3d5fc3e5dc5bf3e64ed6be2fdd`
SHA3	`40a0e6b6b579b110550a4c3304eb33293a293d9aa288b02b11750143b52423fe`

103

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x120`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.56193`
MD5	`db6dd0434da4d7cac564518725167e09`
SHA1	`a65a1367d7cd96450f089a8f8108239bbcea9f5b`
SHA256	`c50631fc1f8425a95fd1edcc8e730d339e193a38f18d42372c32847a5ad2c016`
SHA3	`4e3be5455c51e1cb04836e318cb69ecdffd2deadd0f338d4bc985d8f5ca653ff`

105

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x200`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.68372`
MD5	`583fb02149a19ffff54516cfd5edebd4`
SHA1	`9de29568e142e36811e4fc5130e60fdb78f3db06`
SHA256	`9dfacbe444e14cd17c5956afa713f043c2b1150d37868af1661b5bb848fee3f5`
SHA3	`6c2967d2415996675fe0ca406c7a3ab94fe6cfd18bf7b98cf11f20c314b3fc81`

106

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xf8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.91148`
MD5	`fa83652660409e90e0db9731ad2adb17`
SHA1	`0a8f0af67723c87fe26ccf676b8e19ec6357b4dc`
SHA256	`4a55bd714f5d50cd8eabba10e57f0618f1842717dcfa582d73a917b1933cd1d4`
SHA3	`5b3e1cb25be7a2dbae4f08f0d4794ed23dbd6ea37a3f9702be12dba588f42a7b`

111

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xee`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.89887`
MD5	`663040d6315b1d6ce8c0334d182ed8fc`
SHA1	`ebcfff801a12fb8ad1200a4526fca8bd2c3e96cf`
SHA256	`cb3c86cbcb579244a6f819f9c1807a7e89b6e600982ec6ea0841fcdcb16a9efd`
SHA3	`6a25a2cb16aeb17693f10e8aaa0245c701701db571b458fde7830291a4a01cfc`

202

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xa0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.63447`
MD5	`737dd1e8146ef8d56dac24dbc1957838`
SHA1	`15658c461b9fae98eb87e6ad4cbba100bbb51f1d`
SHA256	`09b17373dd40b89a1f1b428f387837db95bc729f40d7189dd3774495c34067b6`
SHA3	`7e5df0e25dc77b7e96d1e207a30515194c9961cda6af96b0c19efbf93ef99ce0`

203

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.47654`
MD5	`888fbcc92ebd6174786b32d45350005a`
SHA1	`ba4959d06247a07012fbca926691e2e709c7aa8f`
SHA256	`b98ac97ffc283bc465d34958c79f8a31480c0f98eb44c5e23977bee9ba52b703`
SHA3	`1ec3fb0c9114bc10f7c71e9bf1d15c48a5e39fd99193dfce3db02c097cbb626c`

205

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1ec`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.62576`
MD5	`4429bc1da2cf5ffffaca57dfbeff9eaa`
SHA1	`65063c7c88ddfd422886554570c73793ea1bf2f9`
SHA256	`3f0bc1e0fc8d86dee74d2ed2e601ad0dfbd163bd38daeecdb3be5d4dfb00e54b`
SHA3	`1c3d43e398f8fab0c6bb889fd5ec88a911f9eafc4d9882ca7596a55556b8fc95`

206

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xe4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.86626`
MD5	`8c69d2c81dd2d9050d0fa94df90ff16b`
SHA1	`cd71d904da747d7141e5abdde9363f7e240b26bd`
SHA256	`1a39a3aabdee2aa68c507c55ff37c38722b05b7f8bde66185a2462792381d8cd`
SHA3	`b80b33ab6bf40b07bc32c7a6a11831084f7c97a27dff86d576769d0aab14b979`

211

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xda`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.9304`
MD5	`2497a44fff8b76b5129662b60a617c85`
SHA1	`f73bd7c9caa4c1f7a0e4840d69b0accdc6d167a0`
SHA256	`a10617b39293152a65ad5c91ca4f35135845c7b785e3a582e58f6c8229045b85`
SHA3	`aaf1dc708c305944a11a7180ef5ee2c8f722c3dd6d4bf91e0ae0f6c2b1a331ca`

302

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xb4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.9709`
MD5	`dc6d11ad565c6f5607f43427d26ce8e7`
SHA1	`17147cbbee9dcab0094b850a16f796a65210fa50`
SHA256	`9bf8fb8e0765f511017f3502f09ac47dc79f8a92fc6c583d123795fb471ec3a9`
SHA3	`e434e61a8031988ddf8da056d52ea9949ebda6a66bb58c3f3644bc8315f920ea`

303

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x120`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.84487`
MD5	`12402b54eddc39fa3dae283957b4eb4c`
SHA1	`beccbeac143c7c78d7271c20c73df7e797c6224b`
SHA256	`4017b96a65ef43c2d6781adc75b048ed8568f3068b81ee971154b90886766250`
SHA3	`d1f0eb13adc7d47e9aa7da0e3a996fd742075668a840e149a5f391955e438793`

305

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x200`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.95867`
MD5	`c14d7114c1c51ee3c9e2cb001f4ac472`
SHA1	`3cca25da6150a3b2c19d79c4a3c9666645b859be`
SHA256	`7f33b718205b0e5780ab19f8725288a7ebd3fbe429aae784db5c816d859fae74`
SHA3	`5af9fe29f40c59306d41085caf745d399b4cd841278e52da1aab33ccfbecac29`

306

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xf8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.10966`
MD5	`1ffe62afd7fe045c34a23ea5c9c7eb22`
SHA1	`ac211007f1f7a65d868d6e9e658d5ff26dec9c8e`
SHA256	`184073a317c843cbe92b68cfacebcf5d73dedb538b3f79c048090f3ee5b614ff`
SHA3	`f34fe335d0a39aedd236cfe40879f6624bc468df8195f5360c1d7267f2bd0113`

311

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xee`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.06584`
MD5	`7ce8a17102daebb8d864cd1063e987d1`
SHA1	`072345a235d4947d36b53fd47da68e7e6a93fe62`
SHA256	`0fd40b240b9df8f2dece8947dabbebce898f12becca8e196136e4231efba2dc1`
SHA3	`59c7281c1d6dca36fed8a44ee5b408f11090812626d5c5fe1da3d72b526208ab`

402

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xa4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.77222`
MD5	`e00685b7c73ac57d7f0bb3ac7c974224`
SHA1	`ded42aa32130a42138c8cd5e9260cfc86b21f55c`
SHA256	`8dd84d5d195a652dc01b940f9f9673bf5dd3696bf837646efbe87b12966f8f93`
SHA3	`4097931fdf69965d2b356b74d5a7abb368253ab3f0ed6500feb5c41db6cbd41f`

403

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x110`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.58011`
MD5	`088199de88ee4293982cec0b65748394`
SHA1	`ccce70fc022137c746dfb6bf52cd785b8675768d`
SHA256	`583b62d87b496612f7e10bf1da5113b8a4c83f0a2155184d03c0b2ec14fb5ed1`
SHA3	`855ba3bd893d691d7c7f704da34c23efd96142d6deefc65d3bdb0e2968f97d95`

405

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1f0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.68003`
MD5	`7a7689f6b4ee698d7998137f6178eae6`
SHA1	`64e8fd6be5e06b015072b4d94d7dee37a736b8d3`
SHA256	`af95e3210d7b97a9f8d6c028ad4f3155e20412b8452e12047313aa05e24f53d7`
SHA3	`9724707c4dec439575eae44c24993c4949f2f2c7034326e241c776bfceb3f0b9`

406

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xe8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.96511`
MD5	`c33758ab32a791644973dfd60cbf6034`
SHA1	`ee7eb0a27279d39a959f5d35b6dfd4c18c7123fa`
SHA256	`6e7bca0054a1785929747807906d8527c2c2a231ca5975d8ebb3a3f98353f129`
SHA3	`8883e9e9fe2e8e33f0c0a0dcb5c13456e825a62100aa3e10099e225770ecc9ff`

411

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xde`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.03655`
MD5	`2802ee53bc08ac9a2cfaed81b3d79d05`
SHA1	`b7faac6a14545ea9c03651f69ae27cce0e62b010`
SHA256	`65fb71b054977a55435f45bbcddddedaa1e1cf43fdd9fc230938d625c3f7edcd`
SHA3	`1b03466617102ef078d2690bf5a361563eae8b960554205937f87a6c81d328c5`

502

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xac`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.85266`
MD5	`56a98b29f3e9e2490d3235a32d6c1e67`
SHA1	`558d421fa7c5e714708fc4165bd323414ea992fe`
SHA256	`6172e3f35478e9cd3989964257dce0633cf5c9e0858282e0023bd87a64cf64a0`
SHA3	`baeb6b875c38f08b0e9a52ce8950c622ce66501b6692ff236c9a87ded13571cd`

503

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x118`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.64541`
MD5	`44c009c9e1abc2355198b432965c61ef`
SHA1	`4c090f75f279e474a9ca4a07ac84935aa769b0dd`
SHA256	`85f659842e9aa525dc22d0ff4e18e14d4e4ccfc924d1fdfa03d50a0410e6c0d6`
SHA3	`f829f224ca0ee8e4f9b0c51c79cc819098ab16c3d55912e0c1aade1677d1a921`

505

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1f8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.72635`
MD5	`b413ed1b81e37e4b4eeddab8a7869fc6`
SHA1	`83139706f97c4c79f972d7324f111da8cad13ea8`
SHA256	`d951c0aff75a63e17cace239fc171e72c3c2f856809066549f83d973de7547ac`
SHA3	`8734b24efe5af92c50ae2d11f9535f8a7ee36abe7ca9a5ae802fd4ee7d25fdac`

506

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xf0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.04696`
MD5	`c7239ce55362dabbe3887e5fc4bdf5fe`
SHA1	`a2908207ffb889a12da3cbdbe7446e04b254e7ed`
SHA256	`012557f58e68234d4a88df0b713c59800f798ecce19dfd589d326b458dddcbd8`
SHA3	`34f4adf15b3169820de0c298735a1ea7bc4e5c9737c5baac458a5fbfb356b1f6`

511

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xe6`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.09674`
MD5	`30dab3583979c2008e8de9295ab7c36b`
SHA1	`186cd9560b358bbf8b523d1050573f22bb00264d`
SHA256	`8c64a2341dc473a7d8ab4956af589e9a7257c4f05a8dc229f862c16d49ba37e5`
SHA3	`4449f57b4725dc59d7d66dc9b817250112828d0f5d6b31cba247cd36ff544268`

602

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xb4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.9709`
MD5	`dc6d11ad565c6f5607f43427d26ce8e7`
SHA1	`17147cbbee9dcab0094b850a16f796a65210fa50`
SHA256	`9bf8fb8e0765f511017f3502f09ac47dc79f8a92fc6c583d123795fb471ec3a9`
SHA3	`e434e61a8031988ddf8da056d52ea9949ebda6a66bb58c3f3644bc8315f920ea`

603

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x120`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.84487`
MD5	`12402b54eddc39fa3dae283957b4eb4c`
SHA1	`beccbeac143c7c78d7271c20c73df7e797c6224b`
SHA256	`4017b96a65ef43c2d6781adc75b048ed8568f3068b81ee971154b90886766250`
SHA3	`d1f0eb13adc7d47e9aa7da0e3a996fd742075668a840e149a5f391955e438793`

605

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x200`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.95867`
MD5	`c14d7114c1c51ee3c9e2cb001f4ac472`
SHA1	`3cca25da6150a3b2c19d79c4a3c9666645b859be`
SHA256	`7f33b718205b0e5780ab19f8725288a7ebd3fbe429aae784db5c816d859fae74`
SHA3	`5af9fe29f40c59306d41085caf745d399b4cd841278e52da1aab33ccfbecac29`

606

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xf8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.10966`
MD5	`1ffe62afd7fe045c34a23ea5c9c7eb22`
SHA1	`ac211007f1f7a65d868d6e9e658d5ff26dec9c8e`
SHA256	`184073a317c843cbe92b68cfacebcf5d73dedb538b3f79c048090f3ee5b614ff`
SHA3	`f34fe335d0a39aedd236cfe40879f6624bc468df8195f5360c1d7267f2bd0113`

611

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xee`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.06584`
MD5	`7ce8a17102daebb8d864cd1063e987d1`
SHA1	`072345a235d4947d36b53fd47da68e7e6a93fe62`
SHA256	`0fd40b240b9df8f2dece8947dabbebce898f12becca8e196136e4231efba2dc1`
SHA3	`59c7281c1d6dca36fed8a44ee5b408f11090812626d5c5fe1da3d72b526208ab`

702

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xb4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.9709`
MD5	`dc6d11ad565c6f5607f43427d26ce8e7`
SHA1	`17147cbbee9dcab0094b850a16f796a65210fa50`
SHA256	`9bf8fb8e0765f511017f3502f09ac47dc79f8a92fc6c583d123795fb471ec3a9`
SHA3	`e434e61a8031988ddf8da056d52ea9949ebda6a66bb58c3f3644bc8315f920ea`

703

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x120`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.84487`
MD5	`12402b54eddc39fa3dae283957b4eb4c`
SHA1	`beccbeac143c7c78d7271c20c73df7e797c6224b`
SHA256	`4017b96a65ef43c2d6781adc75b048ed8568f3068b81ee971154b90886766250`
SHA3	`d1f0eb13adc7d47e9aa7da0e3a996fd742075668a840e149a5f391955e438793`

705

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x200`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.95867`
MD5	`c14d7114c1c51ee3c9e2cb001f4ac472`
SHA1	`3cca25da6150a3b2c19d79c4a3c9666645b859be`
SHA256	`7f33b718205b0e5780ab19f8725288a7ebd3fbe429aae784db5c816d859fae74`
SHA3	`5af9fe29f40c59306d41085caf745d399b4cd841278e52da1aab33ccfbecac29`

706

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xf8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.10966`
MD5	`1ffe62afd7fe045c34a23ea5c9c7eb22`
SHA1	`ac211007f1f7a65d868d6e9e658d5ff26dec9c8e`
SHA256	`184073a317c843cbe92b68cfacebcf5d73dedb538b3f79c048090f3ee5b614ff`
SHA3	`f34fe335d0a39aedd236cfe40879f6624bc468df8195f5360c1d7267f2bd0113`

711

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xee`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.06584`
MD5	`7ce8a17102daebb8d864cd1063e987d1`
SHA1	`072345a235d4947d36b53fd47da68e7e6a93fe62`
SHA256	`0fd40b240b9df8f2dece8947dabbebce898f12becca8e196136e4231efba2dc1`
SHA3	`59c7281c1d6dca36fed8a44ee5b408f11090812626d5c5fe1da3d72b526208ab`

802

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xa0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.62197`
MD5	`e6291e2e9f4a2bf617a2f5d609b73179`
SHA1	`4a1691980603e4b18f4d8d722e6051671559e045`
SHA256	`1edb8d1dabb534fbf24b5b03f6ec5596dc4961ded3ec76aaa73fd9e4e483948c`
SHA3	`5014bab44e3a140b8c02383e5dd7201e8c67e49db8231a40ef559dfc0755fa18`

803

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.484`
MD5	`b21b5bb94f7cb7111620ebfb32534430`
SHA1	`d4fa9452937d98ccb59bdc96660d588a5183bba9`
SHA256	`eb6f4dac693c6249bb157ef5cfe6057af4088d7bacfce7089e13a85f0661389a`
SHA3	`08dbbf11ee68c7b878492fecb06c7ac64f494ec1cde2b58149e4a6b1af9f3913`

805

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1ec`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.62016`
MD5	`bc875863f57df58a7b9f8258b1caab04`
SHA1	`c5c80b03316a7a8e2360b285c51b052e8a0afec2`
SHA256	`9bba972d38ffe191155e695ba375581976b2c3e1828316b27dff01a2cd1a3096`
SHA3	`eeaf33504e0d34fb7ee3f08ae983582961ba0e65449223cc838d97d627e9081c`

806

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xe4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.86295`
MD5	`cc0021533c65b44747600689ff5fbd43`
SHA1	`b1d1e4594f5ad7b08d56a25cdbe6d9b9378e482b`
SHA256	`ab1e3ad5b5d87630cb0f6a6671c10fe49d9c33839be0d5daeba89ec053dda92c`
SHA3	`84d6def5cee15efe0091dd2b0c1f1293ccd14684a0736bd33e1c5aa70c3471f7`

811

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xda`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.92694`
MD5	`408a7443d8f432b28a248059d8669d1c`
SHA1	`c199828e8051a2825b1d5e216360eb57cd0b37f7`
SHA256	`4677979c1665998318fcb65b9a0c0b3dd9204c12dbddbd5e76df8822ed6e347a`
SHA3	`a3fbf76ef107912c1222e3203143386903416d7d7c171d53f3e0988bea2e4923`

103 (#2)

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0xd8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.2217`
Detected Filetype	Icon file
MD5	`9f6fa552f0dc823ccd1b0c6436e08e3b`
SHA1	`6c85fd1e463759f63185504183a63ee97a3c2a3d`
SHA256	`bf9bfe7f931affce5e98507b96d454b4e8d1b67f4980a3942908aa3c8fc36819`
SHA3	`e393d542f79110b022347eae4c8540608791b0bae9ddf8959f25a9d0d3eb4251`

1 (#2)

Type	`RT_VERSION`
Language	Estonian - Estonia
Codepage	UNKNOWN
Size	`0x260`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.39262`
MD5	`8c82cfcbd1d4c927c08c890cc372b5ca`
SHA1	`db19935c8fc84dc428b27792cfc136b8f025c803`
SHA256	`4c5fa606b832b29186a841384c9c9ea637229ebe29cff64ec4f5054da5bde144`
SHA3	`4db6832f220b2d4a69a7bdd738cf89a00c96de311ab6ff857c13fb58cd1d9d65`

1 (#3)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x430`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.2901`
MD5	`75b45d5a8944a038532a6066258ac4f4`
SHA1	`5d61146f92cdf5495a48f7367d829e3f51b38aaf`
SHA256	`c61ef607960c462d54bca335339a4a38f3ef307afc977463fddc6aced3f096b1`
SHA3	`ab0e5ac7d382005e91587bb193b7f8eb211f2a998663d6f886b5fe69e22e9a6e`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0`
FileVersion	6.20.0.24
ProductVersion	6.20.0.24
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	Estonian - Estonia
CompanyName	Glarysoft Ltd
FileDescription	Glary Utilities Installer
LegalCopyright	Copyright (c) 2003 - 2024 Glarysoft Ltd
ProductName	Glary Utilities
ProductVersion (#2)	6.20.0.24

Resource LangID	Estonian - Estonia

TLS Callbacks

Load Configuration

RICH Header

XOR Key	`0xd24750e9`
Unmarked objects	`0`
C objects (VS2003 (.NET) build 4035)	`2`
Total imports	`160`
Imports (VS2003 (.NET) build 4035)	`15`
48 (9044)	`10`
Resource objects (VS98 SP6 cvtres build 1736)	`1`

Errors

[*] Warning: Section .ndata has a size of 0!