b850d0a72193f032dd3124e4c53e061293f1bc23b308493bdbe60fed04dcd06e

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2022-Dec-07 14:16:11
Detected languages English - United States
TLS Callbacks 2 callback(s) detected.
FileDescription AdGuard Web Installer
LegalCopyright (C) 2009-2018 Adguard Software Ltd
ProductName AdGuard Web Installer
ProductVersion 1.0
CompanyName Adguard Software Ltd

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • adtidy.org
  • http://static.adtidy.org
  • http://static.adtidy.org/windows/setup.exe
  • https://static.adtidy.org
  • https://static.adtidy.org/windows/setup.exe
  • static.adtidy.org
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryA
  • LoadLibraryExW
 Functions which can be used for anti-debugging purposes:
  • SwitchToThread
 Can access the registry:
  • RegisterHotKey
 Possibly launches other programs:
  • CreateProcessW
  • ShellExecuteW
 Has Internet access capabilities:
  • InternetCloseHandle
  • InternetOpenUrlW
  • InternetOpenW
  • InternetReadFile
 Can take screenshots:
  • CreateCompatibleDC
  • GetDC
Info The PE is digitally signed. Signer: Adguard Software Limited
Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Safe VirusTotal score: 0/71 (Scanned on 2026-10-18 14:05:40) All the AVs think this file is safe.

Hashes

MD5 b47fb4bd9d18d146090e3c2a00a73056 🔍
SHA1 27fc8da6d8957a0bc00db9810e4f8f8d5ca33301 🔍
SHA256 b850d0a72193f032dd3124e4c53e061293f1bc23b308493bdbe60fed04dcd06e 🔍
SHA3 b68117a7cdfefe1bf8ff0ab679ea3986af219b7a76c58b826fafe113d47dcf66 🔍
SSDeep 1536:F4qZHPfB2yq+oK3tp9UobxfHKMFHPGN1ob7t1mKvKC+CO1+kworWE7z2x:F4qZHnMyBV3vfhLFvGyfmKvK9MkBrhe 🔍
Imports Hash b26a7e001a4be269742be838dadc9db9 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 10
TimeDateStamp 2022-Dec-07 14:16:11
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0xb200
SizeOfInitializedData 0x20600
SizeOfUninitializedData 0xc00
AddressOfEntryPoint 0x000014B0 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0xd000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 1.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x27000
SizeOfHeaders 0x400
Checksum 0x29597
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x200000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 5cce674b251f0ff6eb8b7bd87413cf33 🔍
SHA1 752f3f869ebf7596926e3f98ab064b22f17f8f83 🔍
SHA256 413732538f1d731742a83131637fd566cc95ae43dfada6c9661a256445c35650 🔍
SHA3 88ef40626a0ec786f13fb81bbc31116417a3c342f820f6b4d4bc01e3f3ee116a 🔍
VirtualSize 0xb0d4
VirtualAddress 0x1000
SizeOfRawData 0xb200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.24473

.data

MD5 7adb954aa519f21f3e208fe54d047a33 🔍
SHA1 0643a11f0db1353d79bc02e818e86c0e4d08b87b 🔍
SHA256 fa537dca8cdad73680be1b785d8725c2d6b6edcb6020560e17f8545d9bbefb6c 🔍
SHA3 b01ab9c808d976b047be3de3acb6aee948ea6b2b64dcc61501bb0c9b71d36e40 🔍
VirtualSize 0x4a4
VirtualAddress 0xd000
SizeOfRawData 0x600
PointerToRawData 0xb600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.03783

.rdata

MD5 79d1949f2d627c3c1cad1bdfe41201ec 🔍
SHA1 6efc3cad09718b95d176a00c435da4597fd64c5a 🔍
SHA256 3def49a74297b64aadad6e00c6eb757817deb5c769fac06e197d440f459eb232 🔍
SHA3 64eb1fdca318d5e08e1ffc6a503d6fd00cddc4d18339daa085077429d5787a6a 🔍
VirtualSize 0xbc0
VirtualAddress 0xe000
SizeOfRawData 0xc00
PointerToRawData 0xbc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.3011

.eh_fram

MD5 923ae17274e756093759304ab472082f 🔍
SHA1 2e5d358e4eb48a14ef1063de58ff404e1486e621 🔍
SHA256 40b281aa324723c145d266ded9e3e42dc35f0584e0512333482b8d25b4fe7cbb 🔍
SHA3 724874fd9147a1b4e7787dc7e57141cf211bfbd816a08528a6449899d6c03bed 🔍
VirtualSize 0x1fb0
VirtualAddress 0xf000
SizeOfRawData 0x2000
PointerToRawData 0xc800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.93391

.bss

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0xa74
VirtualAddress 0x11000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata

MD5 7cf265bc970978cf36ffcbe8a9a610da 🔍
SHA1 c6141772a3f92beca132cb4cb5e98fa324d635fe 🔍
SHA256 016904b3586d9bad23a12a4832e952b21a19c10a8d7b1315248e02148f2d12d0 🔍
SHA3 9029343453220ee163d748ac8feeb0e27a1bcf5c349878d6b475ef963ea9a951 🔍
VirtualSize 0x1d0c
VirtualAddress 0x12000
SizeOfRawData 0x1e00
PointerToRawData 0xe800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.37266

.CRT

MD5 4eef9a9546f6bf89752c594cebb6c33b 🔍
SHA1 52c81085e8c0f3ce2520bd7830c8c89e491f8370 🔍
SHA256 8d04890272094648fe60688d30e22caed4c7e657462b7d4e52288331cb3822c7 🔍
SHA3 deb41eef9263d850c2fdf57e0079e13536a77cffbfb74142dfce021f27217b82 🔍
VirtualSize 0x34
VirtualAddress 0x14000
SizeOfRawData 0x200
PointerToRawData 0x10600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.260158

.tls

MD5 bf619eac0cdf3f68d496ea9344137e8b 🔍
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍
VirtualSize 0x8
VirtualAddress 0x15000
SizeOfRawData 0x200
PointerToRawData 0x10800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 c9110b92017325fdc1122be880a5d8e3 🔍
SHA1 a7bb32eed18f504391509f552abfc50071e74ac3 🔍
SHA256 b29c84463510a333f8e017446fca20076ea06b520344f2d3abaebe10c56140ce 🔍
SHA3 c8f840b8b8749434010432d0a6430536518fc61102d4700aef154a671a6ce331 🔍
VirtualSize 0xf610
VirtualAddress 0x16000
SizeOfRawData 0xf610
PointerToRawData 0x10a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 6.31733

.reloc

MD5 b8cec5e153b46df8eb6be699ee49b81e 🔍
SHA1 5c5c0564a8d350cc0a731d432690d7e1cc2f5932 🔍
SHA256 5da47f6eea6caa43b1f95d80c99668b517c3e352bb830fd556fc0b290645291b 🔍
SHA3 3cd2fe4c1860d0681a409b46e46b0b580a71b7eaedf4f7c14c9451cce3d0fdca 🔍
VirtualSize 0x7ac
VirtualAddress 0x26000
SizeOfRawData 0x800
PointerToRawData 0x20200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.51829

Imports

COMCTL32.DLL ImageList_Create
COMDLG32.DLL GetOpenFileNameW
GetSaveFileNameW
GDI32.dll CreateCompatibleDC
CreateFontIndirectW
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
SelectObject
SetBkMode
SetTextColor
gdiplus.dll GdipAlloc
GdipCloneBrush
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipCreateSolidFill
GdipDeleteBrush
GdipDeleteGraphics
GdipDisposeImage
GdipFillRectangleI
GdipFree
GdipGetImageHeight
GdipGetImageWidth
GdiplusShutdown
GdiplusStartup
KERNEL32.dll CancelWaitableTimer
CloseHandle
ConnectNamedPipe
CreateDirectoryW
CreateEventW
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateNamedPipeW
CreateProcessW
CreateThread
CreateWaitableTimerW
DeleteCriticalSection
DeleteFileW
DisconnectNamedPipe
EnterCriticalSection
ExpandEnvironmentStringsW
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FindResourceW
FormatMessageW
FreeLibrary
GetCommandLineW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesExW
GetFileSizeEx
GetLastError
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNativeSystemInfo
GetNumberOfConsoleInputEvents
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessIoCounters
GetProcessTimes
GetQueuedCompletionStatus
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadTimes
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadResource
LockResource
MapViewOfFile
MoveFileExW
MultiByteToWideChar
PostQueuedCompletionStatus
QueryPerformanceFrequency
ReadConsoleInputW
ReadFile
RemoveDirectoryW
SetConsoleCtrlHandler
SetConsoleMode
SetDllDirectoryW
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointerEx
SetLastError
SetUnhandledExceptionFilter
SetWaitableTimer
SizeofResource
Sleep
SwitchToThread
TlsGetValue
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
MSIMG32.DLL AlphaBlend
msvcrt.dll __getmainargs
__initenv
__lconv_init
__mb_cur_max
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_daylight
_errno
_initterm
_iob
_onexit
_stricmp
_timezone
_tzset
_wcsicmp
abort
atoi
calloc
exit
fprintf
fputc
free
fwrite
localeconv
malloc
memchr
memcpy
memset
qsort
setlocale
signal
strchr
strerror
strlen
strncmp
vfprintf
wcslen
ole32.dll CreateStreamOnHGlobal
SHELL32.dll DragFinish
DragQueryFileW
ExtractIconExW
ILCreateFromPathW
ILFree
SHOpenFolderAndSelectItems
ShellExecuteW
Shell_NotifyIconW
USER32.dll CallWindowProcW
CloseClipboard
CreateAcceleratorTableW
CreateWindowExW
DefWindowProcW
DestroyAcceleratorTable
DestroyWindow
DispatchMessageW
EmptyClipboard
FillRect
GetClientRect
GetCursorPos
GetDC
GetFocus
GetMessageW
GetParent
GetWindowLongW
GetWindowPlacement
GetWindowRect
IsWindowVisible
LoadCursorW
LoadIconW
LoadImageW
MessageBoxW
OpenClipboard
PostMessageW
PostQuitMessage
PostThreadMessageW
RegisterClassExW
RegisterHotKey
ReleaseDC
ScreenToClient
SendMessageTimeoutW
SendMessageW
SetClipboardData
SetCursor
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetWindowLongW
SetWindowPlacement
SetWindowPos
ShowWindow
SystemParametersInfoW
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMessage
UnregisterClassW
UnregisterHotKey
UpdateLayeredWindow
WININET.DLL HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.64229
MD5 a66f3a1a9ed27fc33a4ecf33ebfcf801 🔍
SHA1 0b245ef432a8307738861091c8362e5379d9be84 🔍
SHA256 d654d23d5c78271ee430f40f48c712bd6a2ad10f73dce77dfceb3d667a592853 🔍
SHA3 1e5b6f5bc3c2e99901c2a6ee56c543f6e47a408881d3cbae07e1b1f6cb0aeac2 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.19566
MD5 08ea3583d577934b8beaaed10fcf9495 🔍
SHA1 1917568ea61559768d71f20e756d51689057ff89 🔍
SHA256 146a9676c314a02e0384e4220de88214e5db7ba1fa335dbceaefdf74f7f7f8f0 🔍
SHA3 0056cc5c05298ca00908c3370c7b82a7ccd8e9fbe1de7a8af9dcf5dc74d70074 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.87369
MD5 e6b8a9583df10030ad126e683f22fcd4 🔍
SHA1 3648d92a52969c09eab658007714de510ca0e611 🔍
SHA256 69dc4c8c1889e50d77bdd5c3c25f18c389dd37999d1292e017edd76dd922f708 🔍
SHA3 560d6c241a467ebb1f158f89b53de3f93af9ec854746ffa4b18da417152f493d 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.71257
MD5 8cca431b8432e7742d9f0e1a4374a279 🔍
SHA1 64174d47425fa8ad1bf06d12390af4ebf99f2a2c 🔍
SHA256 97f7133d114f97284c489b3b91e232640810aacbf1c48788a6d140d63831c12c 🔍
SHA3 88d9b0456d166e6fd5932f153378a738af02d7940d5e6332bca3296f6c5374a0 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x330e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.95846
Detected Filetype PNG graphic file
MD5 e26d1db86f72ad42bc95df47560d0348 🔍
SHA1 23867aeafa6aae1828953ae7fd2f8f8034fc8ffb 🔍
SHA256 be6bd3d98fe2bd8cb1beee833a47662d45f929bb79c6578d248a73ad87aa8c47 🔍
SHA3 39e2d8a708e179bfb2051cd9e414db9330889167b4c09c077fa51f525f544965 🔍

3 (#2)

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x11c0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.80246
Detected Filetype PNG graphic file
MD5 e5555b2f44c4f57ccf298966647e94aa 🔍
SHA1 9c92d7a359d95ef9ab0560d55227c668c099e649 🔍
SHA256 efd7ce4379600eb79021859ea997a881a2862ed807211d2040eefd83c86a6e74 🔍
SHA3 6d07b6157d77492bf5ece2e43e6ab5e1c768153ce66fee6f1776b981e9e8dca4 🔍

4 (#2)

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x23f4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.85243
Detected Filetype PNG graphic file
MD5 8156daae86328b5bbd5b06a6aec3032f 🔍
SHA1 96f1a7843d7016b6ccf38cf842980118395b6ac5 🔍
SHA256 8eb7a2cf395b919977e3b93ec4c495597096ab1c24061bf90cef2e2a1c0be7c3 🔍
SHA3 038373aa8819af1a2084157c7081ac50046dea7ee1a466de0759bc2a089903b7 🔍

5 (#2)

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xcb
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.26066
Detected Filetype PNG graphic file
MD5 8452f5f97986dae701778237599812c1 🔍
SHA1 171096712fbe7c1a2b1584a32fce308a58439def 🔍
SHA256 8c973cb7aa44b0a7cb8a9c42d5608f89fff9f8a3eb3b29f0467a49ccea021b81 🔍
SHA3 ff44c528df71ae1a3190d0de309c4b02f274910f29debaba6a7a7534fb10593e 🔍

6

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x154
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.97354
Detected Filetype PNG graphic file
MD5 788f0902a39efff6a9db6cff2180752c 🔍
SHA1 601192be8973f1334e7d6912728951b470faa3a6 🔍
SHA256 0418befebc44d9aa6ef403d91006b95fc8609b03cd9b160c120a1d79c0d8f26d 🔍
SHA3 91d958ef689b482024246fc27f092fe57277eedff357f0a389b9fe3ee12d656c 🔍

2 (#2)

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.64638
Detected Filetype Icon file
MD5 651da54c3921247a91a4a50771228b6f 🔍
SHA1 0f04901e598cd0f9c0200808957eedd55e9c0125 🔍
SHA256 1ba3f995c383048495036eaafd1aa465bf6040d4ddfbb1b38052e784cef13050 🔍
SHA3 228b0f2e0bb93640dabe582bb724ea407ff159f1e0a705d2c1295bba767a18f6 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x260
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33679
MD5 f057fdf72ab454c9a86170d79d9c7e96 🔍
SHA1 9d6775c1b2813ec29f7aa140bff0f5e2e73c358f 🔍
SHA256 984cbccd898a60558bcad628816542117259fb5b888d32108444fb894fb33a82 🔍
SHA3 65d691f7625ad6f605e7505a1a8494866a7695002363d0154913c11fd86b6612 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x3dd
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.16607
MD5 3282caa99acbbfc0b6ed9e97869b25f2 🔍
SHA1 c73fd6558ea1e53852778f11497b10363a0dc08e 🔍
SHA256 6f05714149fc5e910e659d41c335fdcce13299d44a2a7646c81d46ba03fb9a74 🔍
SHA3 d0b88e31758ed31f5e07866a49be282b121b093348e4c1b5af3ba205874c1297 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.0.0
ProductVersion 1.0.0.0
FileFlags (EMPTY)
FileOs (EMPTY)
FileType VFT_UNKNOWN
Language English - United States
FileDescription AdGuard Web Installer
LegalCopyright (C) 2009-2018 Adguard Software Ltd
ProductName AdGuard Web Installer
ProductVersion (#2) 1.0
CompanyName Adguard Software Ltd
Resource LangID English - United States

TLS Callbacks

StartAddressOfRawData 0x415000
EndAddressOfRawData 0x415004
AddressOfIndex 0x411064
AddressOfCallbacks 0x414020
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks 0x00401780
0x00401730

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0!
Leave a comment

No comments yet.