a314db019d608e3d9b2eda797ba5bbe4dfc91bcd621decd144a580080eb13b1b

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2077-May-24 05:15:48
Detected languages English - United States
Comments https://rufus.ie
CompanyName Akeo Consulting
FileDescription Rufus
FileVersion 4.13.2316
InternalName Rufus
LegalCopyright © 2011-2026 Pete Batard (GPL v3)
LegalTrademarks https://www.gnu.org/licenses/gpl-3.0.html
OriginalFilename rufus-4.13.exe
ProductName Rufus
ProductVersion 4.13.2316

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • https://rufus.ie
  • https://www.gnu.org
  • https://www.gnu.org/licenses/gpl-3.0.html
  • www.gnu.org
Suspicious The PE is packed with UPX Unusual section name found: UPX0
Section UPX0 is both writable and executable.
Unusual section name found: UPX1
Section UPX1 is both writable and executable.
The PE only has 6 import(s).
The PE's resources are bigger than it is.
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
Suspicious The PE is possibly a dropper. Resource 121 is possibly compressed or encrypted.
Resource 122 is possibly compressed or encrypted.
Resource 124 is possibly compressed or encrypted.
Resource 126 is possibly compressed or encrypted.
Resource 131 is possibly compressed or encrypted.
Resource 132 is possibly compressed or encrypted.
Resource 133 is possibly compressed or encrypted.
Resource 134 is possibly compressed or encrypted.
Resource 135 is possibly compressed or encrypted.
Resource 136 is possibly compressed or encrypted.
Resource 141 is possibly compressed or encrypted.
Resource 142 is possibly compressed or encrypted.
Resource 143 is possibly compressed or encrypted.
Resource 144 is possibly compressed or encrypted.
Resource 145 is possibly compressed or encrypted.
Resource 146 is possibly compressed or encrypted.
Resource 306 is possibly compressed or encrypted.
Resource 307 is possibly compressed or encrypted.
Resource 308 is possibly compressed or encrypted.
Resource 309 is possibly compressed or encrypted.
Resource 310 is possibly compressed or encrypted.
Resource 311 is possibly compressed or encrypted.
Resource 312 is possibly compressed or encrypted.
Resource 313 is possibly compressed or encrypted.
Resource 314 is possibly compressed or encrypted.
Resource 315 is possibly compressed or encrypted.
Resource 316 is possibly compressed or encrypted.
Resource 317 is possibly compressed or encrypted.
Resource 318 is possibly compressed or encrypted.
Resource 319 is possibly compressed or encrypted.
Resource 320 is possibly compressed or encrypted.
Resource 321 is possibly compressed or encrypted.
Resource 322 is possibly compressed or encrypted.
Resource 323 is possibly compressed or encrypted.
Resource 324 is possibly compressed or encrypted.
Resource 325 is possibly compressed or encrypted.
Resource 326 is possibly compressed or encrypted.
Resource 501 is possibly compressed or encrypted.
Resource 502 is possibly compressed or encrypted.
Resource 503 is possibly compressed or encrypted.
Resource 504 is possibly compressed or encrypted.
Resource 601 is possibly compressed or encrypted.
Resource 602 is possibly compressed or encrypted.
Resource 603 is possibly compressed or encrypted.
Resource 604 is possibly compressed or encrypted.
Resource 606 is possibly compressed or encrypted.
Resource 607 is possibly compressed or encrypted.
Resource 701 is possibly compressed or encrypted.
Resource 702 is possibly compressed or encrypted.
Resource 703 is possibly compressed or encrypted.
Resource 704 is possibly compressed or encrypted.
Resources amount for 177.414% of the executable.
Info The PE is digitally signed. Signer: Akeo Consulting
Issuer: Sectigo Public Code Signing CA EV R36
Suspicious VirusTotal score: 1/72 (Scanned on 2026-03-17 02:03:49) Bkav: W64.AIDetectMalware

Hashes

MD5 d9c4cd467677e8bb23d8d1c2350e08e3
SHA1 29c86660baa994db07599166209006708252081f
SHA256 a314db019d608e3d9b2eda797ba5bbe4dfc91bcd621decd144a580080eb13b1b
SHA3 4b8e1021c20914435ef03278c1d0932af57d1b9ed80dd6e17fa097c889ec4122
SSDeep 49152:+pKfZBaNZ+GnNoUOzOg/DTgZTSBAPZQs5SPlK2hW:UKfSNMGnNoUeOgRkZQMS9i
Imports Hash 93f5418d49b9d5fa371bd3c33af0387b

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x118

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 3
TimeDateStamp 2077-May-24 05:15:48
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x1ce000
SizeOfInitializedData 0xb000
SizeOfUninitializedData 0x39e000
AddressOfEntryPoint 0x000000000056C010 (Section: UPX1)
BaseOfCode 0x39f000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x578000
SizeOfHeaders 0x400
Checksum 0x1dfedc
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

UPX0

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x39e000
VirtualAddress 0x1000
SizeOfRawData 0
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1

MD5 c59d5e08013d87b5305a067a6154ac07
SHA1 934f7949bd79d079129225a2f0d38be55d5bef61
SHA256 b3df135187d16bcf6f1b37e10c68144ab3b42eef22ffff208a557270592465bb
SHA3 02c659dfaf93c7fb11c3c1d58ed1ec4c665bf9023f9dcc92cd49dc9e081616f6
VirtualSize 0x1ce000
VirtualAddress 0x39f000
SizeOfRawData 0x1cde00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.99984

.rsrc

MD5 45cc58532cc2a0a5fe16f1231eb6dfdf
SHA1 b46f3ca3bde4660a19b24d94359279cdc84cd5d0
SHA256 82b5cedc4d704863007b2f65fd197a964b0f110886a09dfedc05be5718d43ea2
SHA3 ec932c374bd46743ecb64329de669314e0789dd3f89c2791a8e99ebe68ddb6e8
VirtualSize 0xb000
VirtualAddress 0x56d000
SizeOfRawData 0xa600
PointerToRawData 0x1ce200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.93081

Imports

KERNEL32.DLL LoadLibraryA
ExitProcess
GetProcAddress
VirtualProtect
ntdll.dll NtClose
USER32.dll GetDC

Delayed Imports

1

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.52009
MD5 8e76fb85bf5636a2ecb6205d6b719980
SHA1 803376c1d65d5c3dbee6352af5b0255c7da1eba9
SHA256 e75f13bfe8e914a8f5db0f3d7ee8d1290f0f662ba34fce5a724178024ba72709
SHA3 72b53e02bb6aab757dfcb4153dbd3ccf43ac12da02d7d06d68d02310a83abd8f

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.68423
MD5 85270e341ac35239497da2b0e0ab457f
SHA1 38a0fb7b148a7793874f026be9961d4b86e585d3
SHA256 e84d84cf0d7b8e35bd260e0e9152a5e1671e343de1c404f82269da1f6b4e4d70
SHA3 89d96b19e795876c457e8aaad224b7199331a864dd944073e13f23ee26312dde

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.77127
MD5 3bbfeb6d467245b31e2e2c73ec0eb382
SHA1 cf9e0faaedcb27310c39cdf6b6cd6cf918adac84
SHA256 815f4c0af6b109cc8cac8440f94cae819ae943ed3dad898e596921e5094ba713
SHA3 1dd27bc27445aaf4f6e8ba997abd6b404c22ecbf84d2ea5bf2e7ebf8b524752e

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.98144
MD5 8fd394c50cdb23872a257ec9fce5e4a8
SHA1 592ee7560f87ae7f5c1120c3f6e012e514b4bf84
SHA256 78b2be6de4f1f218b5bbef712a9c728abbe0353275e7717a3784f994ee388512
SHA3 3a6e41dbd1aa8347b94831e51de9c4fc0f4250e4b217989c3ddd43ff5c81a0f0

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.04318
MD5 ae288b230b31fcdf2bd79e5f996e0ec4
SHA1 622ae512cbaca22ddddd5df154ca96c498d6f6cc
SHA256 3ca624d3ff1049040d560c13be5207ccd431e40ec641561e42cd491b37c3fe3b
SHA3 4ec963f8a7eebb031ef933dda4f719c3d2bbbbb8fed98c1db7697fbbcb6db739

101

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x8ee
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

102

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x13c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

103

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x1f6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

104

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x470
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

105

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0xac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

106

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0xea
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

107

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x252
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

108

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x330
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

109

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x1b0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

110

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x3e2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

121

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x26a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.68421
MD5 9cf80f0bf115209af2202400b017be5a
SHA1 6e1abf24e35f8940b7202dd8ef9104935e8ddea5
SHA256 b81cc002b73b5582b2c45306fb4c56372353c4dd8ad82de4182b4aaadd47c6ed
SHA3 96052cd2ae8b0ff85c7d9cee0ae60e4aef5fa6d7cf9e200aa3a68dd2679aefcc

122

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1a5
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.54098
MD5 785195bb99ff771c15054c19f2b6b376
SHA1 e5e6ec51b32c2429395f8a0fc9518e9fe57500cb
SHA256 3bd070383dc37623d9d83e7e6cb7c732006733c0666d32f54920059ae98e49c7
SHA3 339b772e4d60830e6083a158a4d867a0fa3cde60f252fbb541995e11fa3e176d

123

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xcf
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.99765
MD5 ea516e1d22de5b36360d32e6639e934d
SHA1 b20dbaa8c03c8a5cc50100950578521fc9ce4341
SHA256 0f692e31944a07f290e3d7f450fd7a0a33200c596d695c41aec23c1acc57fbaf
SHA3 1c24e53ca27140d63f6845553915e81bf6b6f4a030520b2d2fb1a187319b454f

124

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x15f
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.33198
MD5 257a02b124b28db44b738cbcca5550c0
SHA1 acd079f94d615d08b7a7d0fe2a5e69d4abf001c3
SHA256 cda715e135bb11f2bfa281330a43f0cc1b53af60532d67255033448f04dd0c2c
SHA3 320cb8ca5917ad724e5e81a67443867d04f18d868b24e9a0cc058fe156f31356

125

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xbf
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.94105
MD5 72276174ea5ac1e556cb416c1aa3e47e
SHA1 f48d6d0f664bd761cc25e287e283dd591e01a5b8
SHA256 38fad8546eb819a9238be951d109f4c76f757f0c7f0d766934f3c78482775bba
SHA3 ebfa6f7a9217680a81f2112fcd665d2bb5b72dbc6586d0404024e84a314b4736

126

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1f6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.52774
MD5 43d5e7e78486a618091eaee9326027cf
SHA1 cc413730305771c707b3ee1571b81c702b6482f1
SHA256 b0f57b46d136732dfed31d01571bfbf02d81aa4b9c4a647f67169ca3b09bc302
SHA3 7cb23ca6e9de29a1ae6e48f8b563987a11fadb74dd652bea28c58238fde17bcc

131

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x33b
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.75253
MD5 a762190b416a6c0baf6a91bfaaf2b06d
SHA1 5f221f0f39d66437aeaca2f41ac81451ab4e4046
SHA256 27085ef6950eceb7c9ba3510d8ad8681697fc8e93f4e792af37ab86c1e65d12d
SHA3 f9d429d1b54a55597eebf85f6b7a3c2f5bb5242f3dc1b07d36d540db25415d04

132

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1f0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.55441
MD5 cc122246ca9fd9dadedcdac8594e1a46
SHA1 0fc08564ebd8172ce8ea01e1dc846f7d786cf01f
SHA256 8b246161f039a50d7c1fd4218c177fea3528af65536dab90ba5b660b0177565b
SHA3 87343733fac6115457e5cdeba20777940e6d1dfd1e05b85f2b15307232c83f11

133

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x181
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.37853
MD5 38e6c8d722f354963468ea229ed8667e
SHA1 a97cf0216efc1dd55158f29b41646d9a05c0974e
SHA256 951dc46df1413623d3ddf41b651d72a3abd066ec733b8417517354f8da631cf5
SHA3 f5a10fa434cf82f03828cf58605d66cd7dc4a6e7c824039d052509b50f687eb6

134

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x205
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.61919
MD5 0b7211bb61956a8ce4efc615de6eb1b0
SHA1 75bfd30030780eab469842294b2c72903bd2b3aa
SHA256 5107175592ccd86e1b79293a27aa9b2f7a65ca8194446084e2e2526e4bffac80
SHA3 19ff9371603783b9c241c7cb3e0b46ee95f4e35fa8417de775bdfb7f37645359

135

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x154
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.39495
MD5 b98ca02fb180f632312efe01550c361f
SHA1 7bd38738983ce3bef2ca83d1bb09832e43eb528c
SHA256 bf77e67350578ae1425e2134792eac30409af3a20ba997147a31b812eedf9ef2
SHA3 e2abf4bacd0ae7d44071174d56802ce92f9d5e12932f7b02764556c1ac946315

136

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x279
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.67108
MD5 591304224aef12cde9ba7bc3fac7cad7
SHA1 2f177a6a9c3f7a0cb0a80a83623e4be1905be188
SHA256 d87dbe89fcac9c4e5652b8c6d3bedc4466e79546d24e172f7b5055538893d584
SHA3 4d8180a818649f8a378b7313bc1627d4b5a032ea343ef710f73bcfb03b0f4bb7

141

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x430
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.81257
MD5 7026aea4086dc1989a738aaa7cdedb19
SHA1 860025dbb4acdc06808b8b04e08772bf6b0edc0c
SHA256 5d027389d55957de42fed1b7714f3bd0703106645c7525ed76ef321d18f3a4e4
SHA3 c7d5edb70d55bec45177ab0fed4979ed602492087eaf78a54e97c938fd6a85dc

142

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x2dc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.68655
MD5 a5e8bee38155c70084677de66da5f9bc
SHA1 e161f0f147efb5023059610e3126a8f4fb73f76c
SHA256 b421ac66b6765b2fb834f24ccb7aa28c01b3b7f109e093fd850d601cea5fb4ff
SHA3 e324421e4bcd26ee0b1d8093cbc0483ac392f0488e8ac78fcf1eea9318a3ca8d

143

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x120
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.28552
MD5 83827b219e2154fc7eaafe0d69157510
SHA1 198959a7cb7d0d9f5b59bee43222659055915761
SHA256 e0d6678c5e39f2fbdc98417f45e30aee674e59a0b6d69fbdd6051201b8b6c32b
SHA3 927cd77da8f4231ae95861a0953f63f9872328647072f2cdebe5466ebcf22377

144

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x16d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.27282
MD5 9ff10d05fb453ea837e38d9213a458b6
SHA1 ab095eac78fd671ae8ac84c895ac48288df5a72c
SHA256 78c4024fad0699408741c8ed43b2e88d41d4f01de8c7054644edc0e90720c10b
SHA3 d82e5600526622d9c6a642afb1aaaa63994dd04108e3770653bf2ce4a803471c

145

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x10d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.21517
MD5 5ec3f62771798d382a57b0790d4299e0
SHA1 23068791eac5c5e1d8e9721db7fbb2230ca7fcb2
SHA256 4ab11bddeaa0a987954b0dcc2b692a8fe7d862e6c5050beb63226f75cd8a33ef
SHA3 d4c0b61f4769181bd0e7e27deadbd3adfb0d4a8823d27e3a12129754acdb1955

146

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x366
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.7587
MD5 1774f50e24218fa1f9333e43304a1f3d
SHA1 165be0284726bf271172954da4de14bdd1b16a38
SHA256 ab682f8086989bb52f0bb27c09cdf3f8d760b150a19f5ba9594fd97e456b0674
SHA3 3b0a2d6299a712b58c86b08dd3f6e7f0c3365a8b3540d45e72a196846744a0d7

300

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x156dc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

301

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xb4b0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

302

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xe49
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

303

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x2e2b
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

304

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x3f74
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

305

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x9daa
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

306

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x7436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99453
MD5 6eae9968de5f04dadb99afaf800874ae
SHA1 181ff9b5a3f0c213e4205e01202936130bb60395
SHA256 ab332781956284597f14e293efaa980b9bdd5b9ddb6dc3e1f3a0347c0f50d240
SHA3 346759b31f3cb96567177b44ee49e72627fbaeba97835648b2438138a76d2e0a

307

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x7db2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99459
MD5 cdc206061616ab81a1da4d276eb3f988
SHA1 4cfdf12a0ce3fc881ef568b417eb1f2c1d4db033
SHA256 5e6b726427f137a287a6702f4797f5cfba328260e83e958a9b2da1ddd59938c3
SHA3 cb648e0f17650a692630ce08b636700c55ee09b144a6160a852dac1acd31092c

308

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x3331
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.9853
MD5 19186aabab7941fa376884afd705ba83
SHA1 3c8be1a524bd3a4ced5ece5c23f4157fdebaa9ee
SHA256 b4a4885a8f9c57ef3c0a077a7b87f7808ab8a1558fa115f64862340b9d9a9d7b
SHA3 f1373d3531dbc0ce7d4ddafe5003e12b1d559888a2b409754da9343d01c71362

309

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1940
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97376
MD5 772d04c6ee0424dfd2530f9bc62ed89a
SHA1 c97bf5a65dde008fbfe9654455c77862169272a9
SHA256 60d963cb2097725a0d60e6b39dbca70bcc1b253845579eaf79a47f50b2ad2d10
SHA3 fd97bcee7d74629dd9a22346543824eb19741e371d2213585659056b961b4d77

310

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1b93
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97794
MD5 ebbecbf21bced0c7c8fb60c02f4a7db0
SHA1 eeb2ef5b418b56dc4ee1ca8f8821e90cc12761d3
SHA256 2a0088361f79f2aa1fdef2b4d18964233f27dfebdf9ba4cd2546802279072b64
SHA3 919b96f4de56e580a032ccebc7533b6bb02537671298cdc67d224acaf4b43c8c

311

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x155d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.96638
MD5 861aae13b11b8e511d93d93abe679123
SHA1 3eb8522b4679296945aa7b73cd5ce54e7d9d4596
SHA256 46cc569b6a0498e386a8acb939e6d052a8a1987eeb52423071c482abc9a7b4e8
SHA3 6852411a37ed4b3eaf6fecd15312196ea42b9c43d4ab59dceed38f74d14e1a67

312

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x114f
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.95673
MD5 965b36d9e376e2205d4cd4caac6622f2
SHA1 99bf5c0d43ba7eb8edfa7d2b1e483f3a8c84ad96
SHA256 86784f38c45874ef2f4461db99c9450b4c7f2ed777d3381503685b15fbe81c50
SHA3 85ec7cd7cb83dbef30e7d0da6f56596f992d7b449040cc703206341c6de18b98

313

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1c31
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97636
MD5 8ccf8d8e541e9814f210c8053aaa6996
SHA1 d25272b33037139eaf001ae961b53cff280af849
SHA256 94cfeb3b9ef1c13269a9729685c2cc02abcaea924e6c9ffbbf0ec8a156589246
SHA3 a28fc48daa93e08ab87f77e574ce77d7a878b8609e3ef8fe255b3b844916453c

314

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1cf1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97511
MD5 f89fd818b47cf04b7502954c85a61fee
SHA1 b95ba6670b232a8a51db8275f575f2fc07074df0
SHA256 f3a4ec45aa1732d2d47088ebd4d0692003c099192ded88b5e544a7ada18d5470
SHA3 fd66f5139d1fc9ebeef0b3efd56780feff94435c6fb8c48304aae9745c9acbac

315

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x150b
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.96816
MD5 f0ab2402d3d92b72854a318eb2c569e2
SHA1 c9101e700be709ddd4deb57dfaa4f2bd348f22ad
SHA256 e2dcfa75e8b173f772fbb32b89bbecae7a31e6726f2783975b43d75027b1b6bf
SHA3 b927f72e1d5f79ea7e05e622816050b6a37290f798588b2c89d40f37a900eaad

316

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1b3d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97486
MD5 7d659dcbdaa620a878ef2c6cd1a16818
SHA1 496814bb7fe9f597500ca15fd9c7e0cd5267c762
SHA256 181946ba501e60c0cc9884d45fd554cf5ee1bc6176c47c208e3f59b13dea661a
SHA3 784295cbb3bef9aa3fcc10ebdbed93a43e001de9759a369ea15a4b405d3e5f0d

317

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1699
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97005
MD5 af27ef71780fcb12f2381656242f6891
SHA1 f09dc1a9753cf6ca07e8fc583efd9d28ee960292
SHA256 475b3bc375a8321adde0467f473dc66749ad13376ede8e4816afb891771eacb7
SHA3 c44d40aef1b7908bc9e79cd5d3911a0e274a9863828cf7c2f8fc54a633ee5dea

318

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x15a7
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.96548
MD5 4d0dc3317aac38e6b7f59719f61e13f9
SHA1 01ef8b706ab439e97765b5dec4a3a80104551e9f
SHA256 839210f0f97ee2d48f5c4c0ec5f2512efa1df79f18719aa26d963678fc287db7
SHA3 11aad2259648bcb67edef6d6477cc883230a4d4457ab7ed2c70cd92cee1a0088

319

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1c3c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97127
MD5 482978c6b02fd651b5f4ea86ec3e69c5
SHA1 3f0f63ef4ef61b7fbad8986f417bd1601168d93a
SHA256 4a84073bc628987230f2987d849e9587da40271b12f28f8e533e12386deea50a
SHA3 a5ae316794d13b5f13e3c34cb1adf02b9e01f2876b4137408928aec87c96f5ac

320

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1fb7
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98082
MD5 ab795236a8a16c0e6ea0e5122f788706
SHA1 944aa528ca29b5738f2e9a3ffbae991fa4cc0be6
SHA256 748db1dc6cc3de67bb7d39f19f9599cbfc7b65cd22d668e4f4908a958b92fac0
SHA3 208efcb2a3f35a9e84ba8b40bb7a94787a3bc4ae5ebb21b7fba60158254651b1

321

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1889
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97292
MD5 44a4e7d122167adb63cb90e90aa32c70
SHA1 4fb71c5ecbd4adcab0f3295c99ec60f138a59a6a
SHA256 c07219f063a0c56736b49f52cd2b7d53753344d4e57ca67a1df5e02e3154a256
SHA3 b049f232a61b298b93f98d184f39e924c76f6b48335dbfc6441881028d068ebf

322

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e4e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97543
MD5 a469b3156b3b04685bd0a6787ee0bd2c
SHA1 9caa8aa4865e8e454d22e2d95552844d5a17b399
SHA256 049b144fddcdba4e5c41e3a82a238ada1cf2acc590b061075a652e9b8761d2b0
SHA3 b2dcbe33a454c8b45e042f8c0453e75fb475dd8e867455b75c8ecf5a7b7b00a9

323

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x193a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97185
MD5 d376d536f8981fea1706cba9eee2e557
SHA1 ac4ed1240957228c3729ae81288180c95aed5f92
SHA256 9e09c3ab79abdd9c198f042857cc00cd66eda99c4f26dd8e62dcd3fe928339af
SHA3 6db6e19b1f3eca844fdb9d328428cd7ba37e3536a51980f1a9364b90e0e45b0d

324

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e71
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97388
MD5 ab5e956b85acf5b4d649b73bb5971fb1
SHA1 97d77a21a8faf817c86fa9a2a4502d489b1d2c82
SHA256 0f068af737e535d5286efb59f9cae258b61965542e664681dd78dfd84cb65107
SHA3 5a1dd9f1927d2992a51e4c29b51b1e0d83efc2aa067e9753cb0462daa6a93dd7

325

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x22e1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98047
MD5 2b4860a6ef67a7fca91e0cc71b10135c
SHA1 39abc072f01fbc47eab6ca0c5776fe9a9eb23de9
SHA256 38a6f11e8479fcd578b9d9e4cec67d670b8642365b877a193a3274bbb99d4169
SHA3 15c7b972fcfee8b72103bc1a69f3d056d950ae04c62e716ec98e15f3d5c3759d

326

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1426
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.9632
MD5 6ec8eda0d78a720851652850c4ff8889
SHA1 9c7888d7cd6f462c2a782cce7145fa0c8f3d9196
SHA256 17a6823d6149aa45acb7eb35f99395356fe7d8c0e39f94a7013ae632d4afa419
SHA3 7550cd79bb66370b68e1df1e90f0b8b901b625836d3fcb752df2479ca49755c0

400

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x200
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

401

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x8e88
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

402

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x200
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

403

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a19
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

404

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x855c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

450

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x2000
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

451

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xa6f6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

452

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x4f1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

500

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x11f2bb
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a

501

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x800
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.91456
MD5 f214377548ac7fd9f46af60082af79a3
SHA1 08b4d02438714bf5d4ec3462c0e44c5ae88c9371
SHA256 690d1c1f31541d63d74ef0bdb7a83e041c46b06b8d3463ecb69651be4ad96b4f
SHA3 7317c653ab51deaa2c80736fe056a27b81ceb725e1190b8dae99d0073eeaaee2

502

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x100000
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99984
MD5 146498ee2db0f89130342048250c156d
SHA1 46fc8cce9fab5d94a447318903194cb8162bef82
SHA256 f84e0c513e71a928c1b5171d95bb9187d71c52e6eb1ee0c4abc403eb1bab2133
SHA3 faa8c812d9748cc25c65a6223395fb3b6725126f3905d2e69845d6a0108a2a68

503

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x24d68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99866
MD5 a0bca517b252e5a345ee0a36268684d1
SHA1 f6afeb71295f7be91b450e53e19c13bec8d348ef
SHA256 c90caa08c643fd296daea46279d96ccf3bf237b8a811a6e0ab04e67d2bdda89e
SHA3 acad0bbc986ee41c7605506daafe250d7303fe5c45b223e1bbf18d86dba416b5

504

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x24b68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99882
MD5 5e31de4d3751af06e9bc1aba2b2c1b05
SHA1 fa3da72ba5470c2bd296bcf03d80299121363ede
SHA256 186c86c190ff0f6122d76d44de3fb15e1f148677f4033da1067b8f895e0bb87b
SHA3 08e9c656007500642aa9eae85765d0fac752f3a7b6c5cae744220f23703dbcef

601

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xa100
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99554
MD5 793ba4c27f3cfb4b0519aab3e57e9232
SHA1 50e0ed94890e613cd97bd185be5130ec2f327be8
SHA256 35f491c440a89e95a394849f237a2a1f0de7004786762fcf5a29e0b0fec82faa
SHA3 21c57735fe36299aa830a67c9f73793880b01fd4cc7cba5456dc28b36ee6b6b7

602

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x9f50
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99595
MD5 ca9be0a16b522c331f578ce33ba70cb7
SHA1 281cd297162566ebe477903233e6b0b06efedc81
SHA256 145ecf1dcd4c7869be0fa12dd16f159aa77292c45d67f9ae8cf5b82e5b328f93
SHA3 6ed9afd81742dd877e2b573014d2316c511896ac83e1ff9789e46c63df07f01c

603

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x6a40
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99333
MD5 8ed7b55e46cf55481c9cecbf141ca800
SHA1 249f5f2e1442aa7dc081dc6695b2ec1ab7fa56e4
SHA256 902b43f90cf5606bba3a0b5b501a4c5aba97fe19eb5b4f399719a7f3b7063697
SHA3 1b9fe0dae2e333488ab7f9302cae99c5656afb2204eb8ae56642811352282169

604

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xd5f8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99687
MD5 b56000cb84ad058faf4f96152821bc09
SHA1 8cc3cd7f706f093fad83791449262c2b4d375438
SHA256 374aabd7b7259ad6f920b2364a748f067b1911690261a402dde04f7a5f2e9167
SHA3 0d77b89d735d8e088d423772549224c03e64a5a306933e85a4113a4e7dc1ab05

606

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x9240
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99536
MD5 d15a1fc753eb6c9f096dfcba2e9391e4
SHA1 5b55c51bfaa3e21c2ee9a38db860c280187c7615
SHA256 4c3d01717cbb7f055dd4bcf159724ba1886840b770782378e16fc1fd4c2832c7
SHA3 3863030534a9a4dd884b46a94b376d47d4d0444cca6103d95a28bd3be1ac51cf

607

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x8900
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99494
MD5 097d73698da2d52e039bd30c05cb231a
SHA1 b7bb48e25b9bce26aec07278c36d0663df5226af
SHA256 9affb1b9c101a64fae0b3b487dbc43dea67f10e84137611aa7d77b8c749b451d
SHA3 1bb60253d09f3de22a00f0c1733b12fcd058561062aaa69a888a9f3709e19eb0

701

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1565
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.96573
MD5 4113b11ae23cce6d6a93463b382003c5
SHA1 d0fd321a9c3e575d4f843559960c25c066560657
SHA256 0d5676406a8b2ada2c9362931e9b5677751100f3ab5b5d456565c3ce38ed4872
SHA3 81b9f608a93f1030d162e7954ffb8a00e18688bb05c33b49bb55cf75b8c98a15

702

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x5df5
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99294
MD5 cb7e698fb4d8a9018bc26453875a3981
SHA1 08d9cd7dda30d32045e5bb36b9b9df99f2d54e42
SHA256 0cac0bd17be1cb0117adc49b95985c869bdc26503ffd9342bd686323dcc77c66
SHA3 a7997aa2a57950afbdff2599cd0fcc09b16db1b508fc8b816f6821cb920a26f9

703

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x21c5
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97794
MD5 30a28199a6730b58c8b05bc94033b5ad
SHA1 660891f39856c23bbc5ffafcf694196ac4b62b80
SHA256 b95b663af261a7f685b32d6e71145771671245ee47d9d185e19ff05171928c69
SHA3 e32c36d7ce79b6c765eef614b64293d13255d1e31b2237116957ebff9e280370

704

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1205
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.96356
MD5 522fd759c3f6fb7e8ba8af6091e2eccf
SHA1 47d42aa0d4ebc64e7bc15fda4b8d589e3ee6a10c
SHA256 440ac18d36f904f0de8e497a6670f3579a336ead089b207002a5e25e62da1745
SHA3 559ba30579fe08ce44ff0ff128ab5ebf08d98b82d7cb017d6069fc85418a6005

120

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x4c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.79808
Detected Filetype Icon file
MD5 aae6decb939a13d7048a1829b30157f2
SHA1 b927e97b6642fbb6121d0ece607a96d07b55ac7d
SHA256 672569335f397f199e8e5ffd52c221068b0082ae9607e73edb0418832db3e2ac
SHA3 1bbb1d06db6fbcfe5725b8156ce06ac465c4487a15c0bbd60aa75b4459527bad

1 (#2)

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x37c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.52326
MD5 10e459b35c4bba6ea12a8c887bca8be5
SHA1 e7b735a8bd812af64bffd4858cd9028c67fbc45d
SHA256 e9ff1ae8a23d2585eb1726f0e16dd862169e7f9854eb276ebde1794cf429f585
SHA3 77e9d9dd2073675bb737aed3b1668a5e99d9eaaa6d7c88d10dcf3771ccf12656

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x8f3
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.21154
MD5 71ba254a17d2e64559cfb3bb96623f58
SHA1 8b2baf2b5e5b3b95e59173f6d1dd18b2a059a0a2
SHA256 ecc34f959edbdbbbf234163948de350cbcd7e468c38931752b6412f9e1a3f576
SHA3 c8be5b42dbebc9af71d958ad99acc4347e0d12cee6edeec38de4270a54834166

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 4.13.2316.0
ProductVersion 4.13.2316.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments https://rufus.ie
CompanyName Akeo Consulting
FileDescription Rufus
FileVersion (#2) 4.13.2316
InternalName Rufus
LegalCopyright © 2011-2026 Pete Batard (GPL v3)
LegalTrademarks https://www.gnu.org/licenses/gpl-3.0.html
OriginalFilename rufus-4.13.exe
ProductName Rufus
ProductVersion (#2) 4.13.2316
Resource LangID UNKNOWN

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0x800
EditList 0
SecurityCookie 0x140191440

RICH Header

XOR Key 0xa16a82a2
Unmarked objects 0
C++ objects (33145) 219
ASM objects (33145) 11
253 (35207) 9
ASM objects (35207) 12
C objects (35207) 20
C objects (35222) 72
C++ objects (35207) 43
C objects (33145) 25
Imports (33145) 7
Total imports 536
C objects (LTCG) (35222) 125
Resource objects (35222) 1
151 1
Linker (35222) 1

Errors

[*] Warning: Could not read the name of the DLL to be delay-loaded! [*] Warning: Section UPX0 has a size of 0! [!] Error: Resource 101 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 101 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 101 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 107 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 107 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 107 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 108 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 108 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 108 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 300 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 300 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 300 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 301 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 301 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 301 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 302 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 302 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 302 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 303 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 303 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 303 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 304 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 304 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 304 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 305 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 305 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 305 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 400 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 400 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 400 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 401 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 401 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 401 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 402 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 402 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 402 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 403 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 403 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 403 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 404 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 404 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 404 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 450 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 450 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 450 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 451 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 451 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 451 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 452 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 452 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 452 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 500 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 500 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 500 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 101 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 101 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 107 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 107 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 108 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 108 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 300 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 300 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 301 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 301 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 302 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 302 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 303 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 303 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 304 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 304 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 305 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 305 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 400 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 400 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 401 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 401 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 402 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 402 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 403 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 403 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 404 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 404 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 450 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 450 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 451 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 451 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 452 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 452 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 500 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 500 is bigger than the PE. Not trying to load it in memory. [*] Warning: Resource is empty! [!] Error: Resource 101 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 101 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 107 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 107 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 108 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 108 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 300 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 300 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 301 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 301 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 302 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 302 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 303 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 303 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 304 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 304 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 305 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 305 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 400 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 400 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 401 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 401 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 402 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 402 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 403 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 403 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 404 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 404 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 450 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 450 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 451 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 451 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 452 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 452 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 500 is bigger than the PE. Not trying to load it in memory. [!] Error: Resource 500 is bigger than the PE. Not trying to load it in memory.
Leave a comment
Anonymous 18 hours ago
Official Rufus Portable