Manalyze report for a9f2dffd1bdce2d8161f2a6435d185b2df52399753f335723623561bc474ce4a

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2018-Jun-11 17:55:50
Detected languages	English - United States
Comments	MKVToolNix is a set of tools to create, alter and inspect Matroska files under Linux, other Unices and Windows.
CompanyName	Moritz Bunkus
FileDescription	MKVToolNix 91.0.0
FileVersion	`91.0.0`
LegalCopyright	Moritz Bunkus https://www.bunkus.org/videotools/mkvtoolnix/
ProductName	MKVToolNix
ProductVersion	`91.0.0`

Plugin Output

Suspicious	PEiD Signature:	`AsCrypt v0.1 -> SToRM - needs to be added`
Info	Interesting strings found in the binary:	`Contains domain names: bunkus.org http://nsis.sf.net http://nsis.sf.net/NSIS_Error https://www.bunkus.org https://www.bunkus.org/videotools/mkvtoolnix/ nsis.sf.net www.bunkus.org`
Suspicious	The PE is an NSIS installer	`Unusual section name found: .ndata`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryExA` `Can access the registry: RegCloseKey RegCreateKeyExA RegDeleteKeyA RegDeleteValueA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegQueryValueExA RegSetValueExA` `Possibly launches other programs: CreateProcessA` `Can create temporary files: CreateFileA GetTempPathA` `Functions related to the privilege level: AdjustTokenPrivileges OpenProcessToken` `Changes object ACLs: SetFileSecurityA` `Can shut the system down or lock the screen: ExitWindowsEx`
Info	The PE is digitally signed.	`Signer: LINET Services GmbH` `Issuer: GoGetSSL G4 CS RSA4096 SHA256 2022 CA-1`
Safe	VirusTotal score: 0/66 (Scanned on 2025-03-30 09:30:44)	`All the AVs think this file is safe.`

Hashes

MD5	`e422d2cc72e19dbced07e19102ae07d1`
SHA1	`888f6b0c41df8af041d1b8efbc096978d0d8b56b`
SHA256	`a9f2dffd1bdce2d8161f2a6435d185b2df52399753f335723623561bc474ce4a`
SHA3	`7a695b41a84834ad1083c80d59b9de8b68329e609a1cfdb088c3107608bb8846`
SSDeep	`786432:GT6ZuTswcTwuTn73SCbccjj3GVMgRGx6NDca7X:GT6ZzHwuT7Mmnx6NAa7X`
Imports Hash	`ac906a057556b881e3a2dbe70f53cee4`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`7`
TimeDateStamp	2018-Jun-11 17:55:50
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_DEBUG_STRIPPED` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LINE_NUMS_STRIPPED` `IMAGE_FILE_LOCAL_SYMS_STRIPPED` `IMAGE_FILE_RELOCS_STRIPPED`

Image Optional Header

Magic	`PE32`
LinkerVersion	`2.0`
SizeOfCode	`0x9000`
SizeOfInitializedData	`0x9600`
SizeOfUninitializedData	`0x1a600`
AddressOfEntryPoint	`0x000042E8 (Section: .text)`
BaseOfCode	`0x1000`
BaseOfData	`0xa000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`6.0`
SubsystemVersion	`4.0`
Win32VersionValue	`0`
SizeOfImage	`0x74000`
SizeOfHeaders	`0x400`
Checksum	`0x1cec42f`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x200000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`be5119914d585d84b782b6339c9ee0ce`
SHA1	`a11a46da644131cb80e9f034ed70ba5942b14e64`
SHA256	`8ffe46cf6af879a94472e9a4a4994b3d74d88ca0c9b1276177651ba4cf6bb0de`
SHA3	`91f63f87abad78605ae10ff30663b3cc123a25e0e4f37b6e83a30100ff986611`
VirtualSize	`0x8e04`
VirtualAddress	`0x1000`
SizeOfRawData	`0x9000`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`5.94281`

.data

MD5	`c8d66b0f1b0fb877db8f100f87c459ed`
SHA1	`70c3d0a51fc7813e48abf367a0c7b4944b46c3dd`
SHA256	`57b36f0cd86bc1ae91cbcb6c72ff9d2d40616c9722438f8dbfefd2f6ab110659`
SHA3	`209ef84e4e5b3da8c70f63f284cdce16b57436113d87649bfac0d1860027fbb9`
VirtualSize	`0xc0`
VirtualAddress	`0xa000`
SizeOfRawData	`0x200`
PointerToRawData	`0x9400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`1.42055`

.rdata

MD5	`54132b448cf86e123c61965de20aff36`
SHA1	`20e2db38149c29782e530133b57f43adee26baea`
SHA256	`7317721bc648601bf1805cad913416069dc011bc103b12b0cbfc79ae956ce01b`
SHA3	`9e97e3188cf436f557ba57b691011df20ea6e66430ba519c976aaf8b81aa0646`
VirtualSize	`0x6a60`
VirtualAddress	`0xb000`
SizeOfRawData	`0x6c00`
PointerToRawData	`0x9600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`7.23698`

.bss

MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`
VirtualSize	`0x1a500`
VirtualAddress	`0x12000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_UNINITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`

.idata

MD5	`bc04aaa247fcc109adab7d7ef1e5548f`
SHA1	`d2a12ada0d00b1c87e3889e05a7780dd9742d6ce`
SHA256	`4ddb4bee356a2d40d3e44f48d91a09001769030cc55194feda9ba6c1d84eb188`
SHA3	`6e19a2cfe6c51f76f14becb652d0abd9a852240400eb5cf208f771c8d21005f0`
VirtualSize	`0x1354`
VirtualAddress	`0x2d000`
SizeOfRawData	`0x1400`
PointerToRawData	`0x10200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`5.32958`

.ndata

MD5	`bf619eac0cdf3f68d496ea9344137e8b`
SHA1	`5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5`
SHA256	`076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560`
SHA3	`622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59`
VirtualSize	`0x15000`
VirtualAddress	`0x2f000`
SizeOfRawData	`0x200`
PointerToRawData	`0x11600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.rsrc

MD5	`fb08d918b49276b69e88142fca6308a8`
SHA1	`cada32b3c14bc87845559094a2de4e97afa8e160`
SHA256	`6360cb130a6bd1973fc305300afaf2c94ee2abaf730b3cebe11357b5bcc1f7a2`
SHA3	`c63eda7e7297f1a94544286e86b8934d19fe21e7424497823e0b96adb884abea`
VirtualSize	`0x2f2f0`
VirtualAddress	`0x44000`
SizeOfRawData	`0x2f400`
PointerToRawData	`0x11800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.76967`

Imports

ADVAPI32.dll	`AdjustTokenPrivileges` `LookupPrivilegeValueA` `OpenProcessToken` `RegCloseKey` `RegCreateKeyExA` `RegDeleteKeyA` `RegDeleteValueA` `RegEnumKeyA` `RegEnumValueA` `RegOpenKeyExA` `RegQueryValueExA` `RegSetValueExA` `SetFileSecurityA`
COMCTL32.DLL	`ImageList_AddMasked` `ImageList_Create` `ImageList_Destroy` `InitCommonControls`
GDI32.dll	`CreateBrushIndirect` `CreateFontIndirectA` `DeleteObject` `GetDeviceCaps` `SelectObject` `SetBkColor` `SetBkMode` `SetTextColor`
KERNEL32.dll	`CloseHandle` `CompareFileTime` `CopyFileA` `CreateDirectoryA` `CreateFileA` `CreateProcessA` `CreateThread` `DeleteFileA` `ExitProcess` `ExpandEnvironmentStringsA` `FindClose` `FindFirstFileA` `FindNextFileA` `FreeLibrary` `GetCommandLineA` `GetCurrentProcess` `GetDiskFreeSpaceA` `GetExitCodeProcess` `GetFileAttributesA` `GetFileSize` `GetFullPathNameA` `GetLastError` `GetModuleFileNameA` `GetModuleHandleA` `GetPrivateProfileStringA` `GetProcAddress` `GetShortPathNameA` `GetSystemDirectoryA` `GetTempFileNameA` `GetTempPathA` `GetTickCount` `GetVersion` `GetWindowsDirectoryA` `GlobalAlloc` `GlobalFree` `GlobalLock` `GlobalUnlock` `LoadLibraryExA` `MoveFileA` `MoveFileExA` `MulDiv` `MultiByteToWideChar` `ReadFile` `RemoveDirectoryA` `SearchPathA` `SetCurrentDirectoryA` `SetEnvironmentVariableA` `SetErrorMode` `SetFileAttributesA` `SetFilePointer` `SetFileTime` `Sleep` `WaitForSingleObject` `WriteFile` `WritePrivateProfileStringA` `lstrcatA` `lstrcmpA` `lstrcmpiA` `lstrcpyA` `lstrcpynA` `lstrlenA`
ole32.dll	`CoCreateInstance` `CoTaskMemFree` `OleInitialize` `OleUninitialize`
SHELL32.dll	`SHBrowseForFolderA` `SHFileOperationA` `SHGetFileInfoA` `SHGetPathFromIDListA` `SHGetSpecialFolderLocation` `ShellExecuteExA`
USER32.dll	`AppendMenuA` `BeginPaint` `CallWindowProcA` `CharNextA` `CharPrevA` `CheckDlgButton` `CloseClipboard` `CreateDialogParamA` `CreatePopupMenu` `CreateWindowExA` `DefWindowProcA` `DestroyWindow` `DialogBoxParamA` `DispatchMessageA` `DrawTextA` `EmptyClipboard` `EnableMenuItem` `EnableWindow` `EndDialog` `EndPaint` `ExitWindowsEx` `FillRect` `FindWindowExA` `GetClassInfoA` `GetClientRect` `GetDC` `GetDlgItem` `GetDlgItemTextA` `GetMessagePos` `GetSysColor` `GetSystemMenu` `GetSystemMetrics` `GetWindowLongA` `GetWindowRect` `InvalidateRect` `IsWindow` `IsWindowEnabled` `IsWindowVisible` `LoadBitmapA` `LoadCursorA` `LoadImageA` `MessageBoxIndirectA` `OpenClipboard` `PeekMessageA` `PostQuitMessage` `RegisterClassA` `ReleaseDC` `ScreenToClient` `SendMessageA` `SendMessageTimeoutA` `SetClassLongA` `SetClipboardData` `SetCursor` `SetDlgItemTextA` `SetForegroundWindow` `SetTimer` `SetWindowLongA` `SetWindowPos` `SetWindowTextA` `ShowWindow` `SystemParametersInfoA` `TrackPopupMenu` `wsprintfA`

Delayed Imports

1

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10828`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.26416`
MD5	`9eb911d7da19f60d05670ae850e3a976`
SHA1	`291a11ebc0c4cc3864fc0696a56f9a711a9388d5`
SHA256	`dfd76040e55666ce880029b75fd7d44855e43312ec12ffb18ce71ff5192c5095`
SHA3	`38a2a0a7166dd45b39e16eec1ea49d747b3e96f060b3b6274ea4ffd6bb099b09`

2

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0xa88f`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.93464`
Detected Filetype	PNG graphic file
MD5	`060a7b35ff4ef01cec4f998b01a486d4`
SHA1	`f109e62d0c34a15e7b0ed764bc82999f648efec9`
SHA256	`1fc8b227a163fd156b48b46241afd623a639e5b753e1a6e387663b04ac225cbf`
SHA3	`81f2a72c806124abc7fa9e36cce9cdd60461bac6d99c04f674362516058004df`

3

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x94a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.34133`
MD5	`35062ea6f6c47b367d04864832a9a107`
SHA1	`44110c4d38562bb05913526c9e349728a3718f9f`
SHA256	`a2031d1e66e677f672cbe82a69c7b87930a90a8c5584d9a9901588dbd9307205`
SHA3	`9c6bf8883c869fb85870b949396adf70df40add67e363472e198ed9fb6bbfbd9`

4

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x4228`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.54103`
MD5	`6292f00d1e2ab270f615d7956cf37278`
SHA1	`56f2557b667b11ed2293bacbc7cb46c8a3a86482`
SHA256	`856a3d464cddfa993e8d5d15454e02ef9b888f7c01b7b6dd677e1e0a943beb3f`
SHA3	`a3c5dfb08c709addb24ae736d8e4b4f2ce48100ebbbca5a62eae1d607565150e`

5

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.77158`
MD5	`04352104b2f44eff7d2444d83c8f9cb5`
SHA1	`d65dd4831ed163e7b0c97e59746a41abf3654cd3`
SHA256	`f44156219ae97b536688ffa3ed245b4808a9fca2fb8a14430eabd6f6c4dd1f39`
SHA3	`6500d7f22c2af7f8b18a3f5df4b5935467f2df29245bfd68a4655844c9ea5240`

6

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.3463`
MD5	`36ec83ec9ee1be7a6dd4860518db4bac`
SHA1	`285bdd17e2f0763f4189c6b4d99f32eab3333319`
SHA256	`b1d78d06c2c13e316b05d1dccfeaf55f65c2f07157b3e7581033a1ac21a51705`
SHA3	`0b653bc755f36cff6f30105867c3489605e61d43dd6610de0d0ad2b6e10b18f3`

7

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x988`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.57351`
MD5	`3ad7da3715baec1eab685e68ae330c7a`
SHA1	`d7e93374144e809c461a57f52f26e5a8ab665c4e`
SHA256	`ff366a3ff3849c64405735c2990d19ceb0beb3ce3418e5f09d07966ff5775a2d`
SHA3	`abc4f99b07984a42879e4924613443c3bc01d411aa334d6b68d147bfe99bded2`

8

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.65935`
MD5	`3dfc6c672e76507a23737d0ac013426b`
SHA1	`a8be2966aeacde850cf04d9690aaa2af6d914ea8`
SHA256	`f99c5cc0b954dbb6ef1b4adc0489f517ec543a6fc4cba9e8d504366bc727e8b5`
SHA3	`b201764d70e3785e2c7038c35493882b6861e923e24ecb5b2cd75ddc8dfd483a`

103

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x144`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.62375`
MD5	`1d958df872e65e9a04f929c89155e3f3`
SHA1	`5fff638c5caa7a6f598bfbafd8d8e7fe4f5764cd`
SHA256	`e6065cad9c0f4a4c7ec1de33c05b192b04cb96ad6cfb0e2ae0188fcaea6ea7c3`
SHA3	`b29b01b665ef63d2e0f362ce3bf145b41d860ddb989398de87df16d48ac8483b`

105

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x246`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.69006`
MD5	`bbf0bf5868b31b02973987e9cc8bccc6`
SHA1	`12fd0f0cf89836f03befaa1d0ffd2154342d1763`
SHA256	`6e7e8576ce6fa04d027ec922dc81f835549c99ec2f29f86feafa46c0d4ad48cf`
SHA3	`868d80cb1ec8dd33f92aea6e1436f6384654b1ef100a60f21bf1953c5e9055c3`

106

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x104`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.84976`
MD5	`b756cf50afdc5a248bf9f3ff865177a6`
SHA1	`267b0f95a9f852b7af09e5d909a3febc24ca3ccb`
SHA256	`c47426270cabd4199bbff8e4fc363265990a8a935c023a8c7d6597a0378e5f5f`
SHA3	`1fb62d573cc8b6fdf137fd2c44249ba4f1c6d687bd878a786a395448d6069438`

111

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xee`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.82649`
MD5	`93747344f48468f7ae6b1c049c868200`
SHA1	`99882e58097b3d6058d52e9572d005bd8e36fff6`
SHA256	`6c3bb50031add345da47da0f8b29d117763266754d362438c6c7a867b8282c46`
SHA3	`b45be00315fc31592c92b9062ca8a51e5cc240c396ab6501b720da8815add091`

203

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x13c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.71382`
MD5	`b9f31ba298d1432fa65b231a9c33e095`
SHA1	`c0c2437792a50bc52698d77bb7141e9ff6930ce2`
SHA256	`e0df4f9534a90644b5069398e79e9c8833816af5aa12a0b00816bc4f8576ca07`
SHA3	`f9122e3304365e4cab94e3889cddf528714da50a967333996d29418f5000aae3`

205

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x23e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.74411`
MD5	`59db0c3a87c393472765d22ed0368117`
SHA1	`462b10b0a6b1764affa29c91794d90baf89859f5`
SHA256	`a8f0ddfe797279f07ccfd343ef00b9b1e72283bc5b8839ec77b3a2f402a4e4b7`
SHA3	`b92ba960fdecb9f75c23ff1c9c61568eebe6ebf32d1091f334059278833bae3c`

206

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xfc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.97765`
MD5	`d2a0986c6adcef818eacd8b162644796`
SHA1	`787a226000bc65732645cd2196b4b53f78953e85`
SHA256	`57611c1e1f0903663cac8f39f7b08a40701735ca5ff69a63a55a2c4fe68df4f3`
SHA3	`8762419a853aa332268a3f62d3ecae09f07409872b10db1bd5f941ea55dcc160`

211

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xe6`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.02285`
MD5	`08cb69abe7cc522f3c19c153865d958e`
SHA1	`cce97718b25b89776f3caac4df41fe20119ddac9`
SHA256	`4f49e0c2ed28ab940dfef2b0c573ac7f7e14de09979b463a7960a271b5e4e980`
SHA3	`b2f569dc9d18b5639e45368d34e22a4a6a2285bd88489736e59999e51e712dfe`

303

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x130`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.56226`
MD5	`0302370b412c769ceb6b0fd381367883`
SHA1	`a6dd03f3ea1ba6f9ac7505fa21ecc599ceaf67a6`
SHA256	`517285748774fc94f5d79726361098036518c785ed63bdba50a0c892f7818b71`
SHA3	`0a821e65740280fedcc60d4213c9bd3f5a876a18804b4ab985cb369b3df7f6ad`

305

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x232`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.64417`
MD5	`181adb9112c6ec6ba111599cd98fef68`
SHA1	`19636c7d92c77917212c33d54d006d07efb14850`
SHA256	`3318b4c0d0fd044c6e4ee9f697f197d8c7fe1e19467cd00e1876fa0c6b7eb6f7`
SHA3	`d2d5a4555c83f50a60defd0cc4a17ffb82a46e6e7e635be09ec4e3b97fb118e6`

306

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xf0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.80191`
MD5	`8bee3f9ac54d2fac61f37eafe56c1c1b`
SHA1	`ff2aec7dfd4585300bf95261c7ecc3347e2cde13`
SHA256	`a583b73fb1b5e826d9c5709c6caae3c3a04ee9125301e7740c3e655cce6952d4`
SHA3	`e0fd335d8427b9cf627d7c71b049aaeb954b9dbd21d6c01da7c8be968b5b544b`

311

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xda`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.84908`
MD5	`3251fcc9ed4b30cb0e18d22a97047b6d`
SHA1	`a0fca318f4d62aea8111caf76ae932fb01ef0ce1`
SHA256	`857338805f1af2409bebcbcdd83e28a92c857bca377d979c9c0fed9ef62f5e4a`
SHA3	`31d5f9b26271ce9ea9da381d39f957470dba36676bea444ef9e0c7faae362890`

403

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x130`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.545`
MD5	`86e700d5c53effbac2b967b33f35d824`
SHA1	`c9bb42a67350d01fe14019c9c4ea4bbb0b6a8584`
SHA256	`7d256f5d76bc52ec3b05d3c4a1b26dd3bd14ba7df6f16c93708a7f9805ea71df`
SHA3	`f7d4b652501f56adf5a5a2279f9fced26418c53fecbba457ae97f57525f513c2`

405

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x232`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.6417`
MD5	`e7f4cbe65a6ce11606824b98000bd967`
SHA1	`81f3ebf2fb799259851cb47e5be445eb38789a54`
SHA256	`1ae5a43fa5d79cffc6ea9e44f601bbae94d1ec8bb24901db30cefe0d6ad310dc`
SHA3	`e58af60fcc17f9d5bf7562b5f283ab5b87b09f80be0b3d35995dec72514984a0`

406

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xf0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.77471`
MD5	`b815bbabf37bddc6e8b9e55c9d31f12b`
SHA1	`ac49638a242bb5bb65f8aa883f5934ddf3580df9`
SHA256	`8bec95cdc0c8dbab7674b2e376399f0fd92d68c97a2c5226b97d99b1d5b16d0d`
SHA3	`c902ae29cce87d60bb6eb412f97a6d9a43b7098b78c7f2a9af18e3610bd9b516`

411

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xda`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.85254`
MD5	`9406902ec80b8fbde7ad7f0bbc41db11`
SHA1	`e61d660eba872abda56e128ffc3b83527f0f0cdc`
SHA256	`509bcbcfae179d413ab86440cf3278b4c1b8e9127710c32797cf7ede65fd562d`
SHA3	`956fbd72cff7f09c1e5075e16ffe1329e96350d7c44514d6a95f3a390a6db073`

503

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.64846`
MD5	`04d92c3a96df602b7f17f63db4380f65`
SHA1	`d8fc31914937318d8842429b0a6386c134b40109`
SHA256	`7c9baf41a9ac37fc0ce7b753aaa5b5b56f7796721cd66e11f78971217b285480`
SHA3	`bfe69dc0c1936744a7cfd634cfeb740e8b772fa798d6172a646266b6161d5b95`

505

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x236`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.69782`
MD5	`517ceea30a54e03119a498fe7a776752`
SHA1	`38889db3891bdde229a38e3ab84e266b9b147c34`
SHA256	`3d4986b1f677ccde1b2ae39e17589fc0b9e5c00a5643ec38d10479e26f1a5af6`
SHA3	`fb4f58355c7302af57cd6b9a4095759f0e759901d66a13d5b051beb7493d6d48`

506

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xf4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.90125`
MD5	`1277ef407c41099729b0e3d9fba944bf`
SHA1	`2072cc8f373c2225f6a4423f9ceb02edfcd34381`
SHA256	`d977042372b07a78905efafea3ba2b05737545ee73daa0a1d276cca3a08b2d06`
SHA3	`25ddba05e397413cf9354d6ceead55dc570ab2ee8a79a99693353c9039735e50`

511

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xde`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.96009`
MD5	`155f26e56d4f0423a5075eb1c9e6ffd6`
SHA1	`fa59d1726ac065744c8d8304262ed5fd7323a8f0`
SHA256	`96b4fcfe5a417a055c50e3200a9e9207aee024fe8f68d365c7d35eb386d239af`
SHA3	`ae6ea7dec955b43108b9fb8b57cb48287b8565afb821d05291ee5cf78827923d`

103 (#2)

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x76`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.94571`
Detected Filetype	Icon file
MD5	`dcf5d70d9b85001dff6a2a1417fa81e9`
SHA1	`4e1a1a493c89dd806a09c57e9c5e6be69b3442d3`
SHA256	`862721c8a33faa0c5e7d9e91dc8d6c422d817987bdd3b477c1efdd3141d71463`
SHA3	`d75aace5e8df235f4f42f96f257981cba8f2a9221a0b42c9eaca76599c4096a2`

1 (#2)

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x394`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.41887`
MD5	`6525dacf7afaf99775b71e146df9ed46`
SHA1	`c9c33ada3d4e0b914e3c6e897da8e3483b206895`
SHA256	`8f30f68b1e95ad53c885615ffcc7dce54aa691d6614728e391aee208f62bf286`
SHA3	`729b0651824f1504a7d6d49ae82d498608c279fd663ca1d56c2d8648d2f03c60`

1 (#3)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x211`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.07872`
MD5	`9d1a21a5857c2d3b69e5fb6e244ee227`
SHA1	`1dcc496df5c6f43d7cf6e21973b24a32686252ac`
SHA256	`d485852a6230986baf7b015f1ac1db8ed310e479ca880047a641f729a5783d15`
SHA3	`99342fa1b6761c0476fafda41ecff6bf58234278e2929a1a2acb92c92f6fffbf`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0`
FileVersion	91.0.0.0
ProductVersion	91.0.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	English - United States
Comments	MKVToolNix is a set of tools to create, alter and inspect Matroska files under Linux, other Unices and Windows.
CompanyName	Moritz Bunkus
FileDescription	MKVToolNix 91.0.0
FileVersion (#2)	91.0.0
LegalCopyright	Moritz Bunkus https://www.bunkus.org/videotools/mkvtoolnix/
ProductName	MKVToolNix
ProductVersion (#2)	91.0.0

Resource LangID	English - United States

TLS Callbacks

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0!

Leave a comment

No comments yet.