c2b07c264a067b603aa90b9f560456bac2a76dc80c5b386dc3d3428925fb3baa

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2021-Jun-06 04:09:14
Detected languages English - United States
Debug artifacts C:\Users\Benjamin\source\repos\Adv\Git\win\..\Release\Git.pdb

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Suspicious The PE is possibly packed. Unusual section name found: .voltbl
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious VirusTotal score: 2/71 (Scanned on 2026-08-09 00:50:51) AhnLab-V3: Adware/Win.Mplug.C4534169
Bkav: W32.Malware.EF0DDA93

Hashes

MD5 091b3e5e969f1f88626f8751bfebe7ff
SHA1 60c4122e42a350e4b2cca1605b708523d923a01d
SHA256 c2b07c264a067b603aa90b9f560456bac2a76dc80c5b386dc3d3428925fb3baa
SHA3 f2801aeab2de0c858aa3b354ea7e93a82b143b548e8f40264f4eb95fc1184b1d
SSDeep 12288:ee9YylCLsAqxSPkX7kpviUfn/Q/z2k8iEuRz5Xa6v1rGSmzFcc/Yc64YkQI:eMYy8sAqxi86/ItHq5rzpYx4Jv
Imports Hash 46c801c72e4c5171f5fbde3a2e6e5dbf

DOS Header

e_magic MZ
e_cblp 0x78
e_cp 0x1
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0
e_ss 0
e_sp 0
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x78

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 7
TimeDateStamp 2021-Jun-06 04:09:14
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0x53c00
SizeOfInitializedData 0x4f800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000129A5 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xaa000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 ef71a16ca36d20df1ef3fed290662fa7
SHA1 3f3740f47b39c3417931cc652a44d66d02850c1c
SHA256 bb18837356320d0ca80e06c92e6fc06fba2458a3daaac0f42d147bd0382f308a
SHA3 c079c34da743c3db1e5dd5d5cf4f8b703a068d1875de2b687302c00d7906ed48
VirtualSize 0x53ae1
VirtualAddress 0x1000
SizeOfRawData 0x53c00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.67078

.rdata

MD5 143f441a6057bc01f22515142e0f1ed4
SHA1 2db21feb1b10f795c990f3a61744e62b3fe5b8ee
SHA256 480b353a9c8b6fec38786cb4b4a73744fdfa3c081266a98424af3a6c6c2e786d
SHA3 dfd48faaf5983de817b0b45d49962e4834f527424f444471af295568beb45a4e
VirtualSize 0x157e4
VirtualAddress 0x55000
SizeOfRawData 0x15800
PointerToRawData 0x54000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.11918

.data

MD5 79a447770acd51e799a63a3a5ce761e2
SHA1 4b1a180069139c3b508bdd7b1fd480b519b5bdf4
SHA256 f2f46c8564e86f45cfb6654db4eeb68d8e47a071a853feac5314fe7daaf85859
SHA3 4403ce0f9d7c9fcbb8552ac9758a254ba537547fcd74f2843dc6f70c6ca3dbfc
VirtualSize 0x324c
VirtualAddress 0x6b000
SizeOfRawData 0x1600
PointerToRawData 0x69800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.37689

.00cfg

MD5 4196beb7b5e0cb6d6c1b12d98803345b
SHA1 81ddf25dbf9d59b5ab237e81b2791ff9ecf9ca14
SHA256 4230fe01d4d5d42707a7ff8174accc94d69c3e8279b74f54e6b1138f2ead0901
SHA3 549aaffec8191cda16891ae72cb6be0fb76846acc2c07f28adc48476b72d4ece
VirtualSize 0x8
VirtualAddress 0x6f000
SizeOfRawData 0x200
PointerToRawData 0x6ae00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 0.110557

.voltbl

MD5 c155a41f26ff3c00a88400907dd54dfc
SHA1 2217924e3ee071488a8563318b8f05535f3c313e
SHA256 32c31acbbdf639757d3bf34c06def3acd6f9de97157e0b0c134f373389febe34
SHA3 72591a0cfce3a6a9585e0510d2c370f203d2e6858eac99a333f484fb3a7911d9
VirtualSize 0x15a
VirtualAddress 0x70000
SizeOfRawData 0x200
PointerToRawData 0x6b000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics (EMPTY)
Entropy 4.87492

.rsrc

MD5 60a7afd9c0199a6236aafb949f6a7b55
SHA1 6350d26cf0230740f4dfc469e5c1f116e7eac00a
SHA256 990bbd9a0c2427b0edb79bf715cedb8476251e9e5e2644c63ede98a5a176eac8
SHA3 1868a0c9e616301562457cf04ae2e0aa5521c2dc85f8aa8a871befc18a96f252
VirtualSize 0x349a8
VirtualAddress 0x71000
SizeOfRawData 0x34a00
PointerToRawData 0x6b200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.2679

.reloc

MD5 222dad632c88400b72815ff3dd2756b8
SHA1 ce7b1e7c8768dee98cc8489c58be19f789dccb98
SHA256 e8cb6837570629dfdf2c06831645124ed7c02b2ba0db57e05926c419d6f67bf2
SHA3 8c5241f5915b784ffbbde37e7968d111040c7fb0db9d823facb050ba5a1082a2
VirtualSize 0x3da0
VirtualAddress 0xa6000
SizeOfRawData 0x3e00
PointerToRawData 0x9fc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.63979

Imports

Glk.dll #1
#100
#105
#87
#69
#71
#78
#70
#77
#79
#51
#52
#2
#50
#48
#44
#40
#41
#125
#122
#42
#31
#29
#26
#30
#28
#67
#111
#114
#116
#113
#118
#117
#136
#88
KERNEL32.dll CloseHandle
CompareStringW
CreateFileA
CreateFileMappingA
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileAttributesA
GetFileSize
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeFormatW
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MapViewOfFile
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
WideCharToMultiByte
WriteConsoleW
WriteFile
USER32.dll MessageBoxA

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.92733
MD5 ca7fb38140e4dce12f85495a82586eef
SHA1 281031c30126772d885045ff8058aaae29e7ce99
SHA256 6fa933fe61872a7120f55bde39ed7484963c42ddbb3b5d638c33f7764c2ccc36
SHA3 9da6b6eb91811222ad96da25ef9342f23a0edf05796e062893d8058d2f4c602b

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.68221
MD5 bde54e4d75ac80f3a99a39b2199f9749
SHA1 74338e813b41cb14ed1d2bbfcd294f953781c65d
SHA256 68f1d958039cce3c9f45084145adfe8c7a695564ccad0e42c28cdbed9fb68a24
SHA3 f0c7df34fc08d81941b30063a842a30a46f6071d2a46bcab3847f615c2ee7f1a

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.50822
MD5 85cd909db60e5d1eaca3f5523048abe0
SHA1 7db8e6eadf9bf5b88097ce00141705d1d4248ad1
SHA256 7e70377f86ae3c1981ff5638f07463f6333996975b162279a9ecfab0e6cf06bc
SHA3 3747138400871d9c2b0185a4780f7ddb693270d8ad5fb5e2a0be78227ed011e7

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.09657
MD5 e1ebb326ad2de3787a1bdf6aafd0970e
SHA1 744b516bcf2fa0537143b8d6df22a999700aa267
SHA256 02e134caebefd22a1db60a5a88c1b98e455f879a9654e52e1f1d92e9e1eaf95c
SHA3 aa28a5a3294f2141da97b58807f3ec51c89f1ca7e4419f9eca1d513ba9db7665

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.81244
MD5 b7c7f8ba9cd656f6490203dc2881d2c3
SHA1 177e88875d9c888c92a68e62b281643664d6c0bb
SHA256 3218558f4b988f5a7e94a9f85bdaa3ac3f1fd2d60a3b483ce2de7c1412876724
SHA3 1f93f214cf585f92851508b0dad581a019fead82602206f007c40a60681e1b53

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.61507
MD5 e657006616b874e94adf44a6772733de
SHA1 1267e7d2b82cd8773a36469520f22254626472c6
SHA256 222bd8c53f3aeabc61a327dc9e899e7091275abc692721031d4fe9f9cb765bcd
SHA3 bb57320637410204f75eaca46a5c8a2ac63999181e5c18b38f6b34b14402e425

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.33319
MD5 5637dd3bb049b46abb130df6b6f0325c
SHA1 cfcfc49c4e95f86abe7555651855697a9d81ddd9
SHA256 2e8a448fb1cf0b29591677e1984f32fbc7ff9bd74efdd7761eb683ec0df80230
SHA3 34b3671900288dd64f8f1c8434d4c5a506a9081804f29c624bf781f5f6954043

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.67136
MD5 85ac071df85b38ffecce19ce6aaee5b9
SHA1 3e90b75fba8b1e8d09e309179c136f38fdb76a1f
SHA256 19bd41e64fccc9be11ab5f0cadd674b6181163ff315e3a9bef22c60227917362
SHA3 219dc9f1ba412470dea53ba11757445e161353b4431c46c5d65427e92d99727d

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.22617
MD5 f1884fae9d019ddcfcca22029da52ce8
SHA1 53d7f6c8db9d8cb735d39610aa95a956e94f527a
SHA256 8f0c7ae95f13b4f14838cfbcdac7c26e34e896aca6667f864c0ceed3b60c3f85
SHA3 f5440015e61dd91c6aded5c2d50b61d1ce62c86a7ff52b59af2f4ac5624b9a97

10

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xa0f3
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97674
Detected Filetype PNG graphic file
MD5 9ddf5475210d9c758e232b7a24482428
SHA1 9ee8a0e717fee41f2263f9a79dc4fa68f5f1e807
SHA256 fe17757c4f83a0063ae4f51c6918a3d456600e687bebbe9dabbb38e64bd53e7d
SHA3 029f5de1e35a8232e970f0e779a039e289224ce44bbac7666786547c7e87f1dd

11

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.30633
MD5 040452ccde3442e1416ea3fa4144edb8
SHA1 69cc5801432db4e2a0fc5715c90c94d4f3b553ef
SHA256 91eba0dfa32d11439c7ba9cc22d08b27df2a544b49ce93f568a4110506cb8215
SHA3 51f01159915e0fd03be1a7333c84484b65332adfb332b0d5dd49a3d19120ae7a

12

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.86967
MD5 b34dc3faf1c1caaa0fe12d1128f3880a
SHA1 4ae4adfae13005148754e8b2de5fdbc2aed16f44
SHA256 3dfc8656c8e0ca17e19b1cb380edf2b3ad5b8303f2fbf402d01b386b6ad57073
SHA3 e883c77f61696750fc970e0122e6384ce8510c3fd868531f0c05e26794d0b29a

13

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.73512
MD5 48011a0e8c268da1288ab6f550596705
SHA1 92027436ea7f32fcfa599c4667af309bf0489559
SHA256 0c1aa1864d1d3aaa136a2c97fa870f2cf9e7b74940c471c3b95454dacc0150ae
SHA3 82c62dc4e7fcd72a781c95d6b4e0674db3407b84f2720679a493420b59cc781c

14

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.61016
MD5 f0a41d962d13f922255c6bfaf0ee8d85
SHA1 579ce0de5cec739b2a15b25ed4ce65f3bb6ccb47
SHA256 0cf6c0535a6c071239d8c240af4adc79628fe503b268238342b59f48b25258f8
SHA3 f7f6d10a928df31e5dbf6245e5965c543b91b9b6feec0327dc5be14316207918

15

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.36502
MD5 43755da96cd03a6a35c3a0793cf2dbea
SHA1 46e406c1aa14a3528a6678d5b352866efc04434b
SHA256 eae810d621d755887be993f17901a67686564dbf6308de9855ddca03d8b31aba
SHA3 1ddeee26d1fa0bffe9694135e5e547b22d03370298b4e6fd0d8d0e5f5553aeaf

16

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.19767
MD5 d85fa40fe0f56167784982e1b2f17070
SHA1 a617cbe4cd92396de20b196ccd736e27d7102a9f
SHA256 1c700c14976ef6c7c3ea88eb579255a62003ddd0ca3b49caf18575ec184b74e1
SHA3 ff4b468389e9ed4a6c7c64a392bc7de514b0ca59e1b31351cd0cbf102480ef10

17

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.866
MD5 684673428808a166a57bc5dd00272ffc
SHA1 7834f62bc5b841bc3e200265a8be70adc98d63b0
SHA256 28f4855425057ae74d65c03d3cd41ea3c6ab639fda4a69bf028d3f73adfaeffd
SHA3 2ecb52399b056690f9aaef598ab6fc9e1adb5e00d8b523ea31f13034a09407a3

18

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.19202
MD5 68be9cb4dd6275aad1feb11c8bcd28db
SHA1 ad8fbbc5cd95b89cb8ced2a3d56a0fbe3a35df78
SHA256 0ddf49944f28b217562b0539114d2aeff898bf64ea819e55fdc950a4cd54e633
SHA3 82f7ca4f1ea425d85479ee2a6643bbc0165d6db20051600edf2729eb994b6eb4

19

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.67708
MD5 3291c158c5d7cd1f64290b59fa2fa1b4
SHA1 5829af326534083c2a00bc7c609342dd8ebf5acd
SHA256 01b9f02a8532d3cdbd08e6b96e2d723fd7aedd60521bccd14587260a3a4b7baf
SHA3 3185fe0534202a64717869826e0f67efe9f3a9486756cbd1ecb0b726cfbde720

20

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xbcde
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98325
Detected Filetype PNG graphic file
MD5 79d5c381e065c4445079e16fff0e01a9
SHA1 2944ba0f6f5720e84913274648a1ac97e488de7c
SHA256 39291a9231d9c4292b30c458fac42a6de274eedd2f0bc7ff7dc895aa59bce0ec
SHA3 d3adf47019002447d89249c216b72a76c3b019bbcbc4d61351448d316b3a59c3

21

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.28663
MD5 4c638846531cf133931a8b82030f0267
SHA1 d642a44bb11d301164f8b2406dc1623cedbfe9ab
SHA256 173813ad52e2745dd6788969a8224b41937d38b8864d959667bbca43a01a0bd5
SHA3 b5c80691e2218cee7d8a48be072a1c0556cecd0193499a7771e7c6f0669ccefb

22

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.90946
MD5 3bf3bd0cf891d89a0398a16e2efffeb6
SHA1 a709eefc8a9ff8b09fc6b79975fe154d3e45ebfa
SHA256 3e1494c4e40688044eae80bd0395fbb86113484e460142eb442c50a5b0d5c855
SHA3 16ad5bead57bf0eeb9652538b8f16426551cd2125a9124f9bd745434293777ad

23

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.75155
MD5 e4926f324a9ef7d1697f0dbabf0b4d07
SHA1 f5edde0da03d59a555f36b8a80310e7448a79e18
SHA256 b69ec3e7d957d8205881b8f17872025b81e59c479e26f26bd9d19238f08cdf87
SHA3 83392865dd3838ae971234a79a5594999813aa0b85c80ff873a6779957639ea0

24

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.68222
MD5 e37dce64299954e60a8fcfd2327da622
SHA1 74778ee9bc87a441da9944fe8c45ee51214ddedb
SHA256 0aa21abb96407dce0701d2d695285b8dc3517839bbef4840833b9910805c843a
SHA3 976cdd0da8b7105e9bb7c4a059a6f03cc70a80de7f38dc38a6bbd25ee066d67b

25

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.42158
MD5 b063e06da85f4d38bfd5ba7608361e8f
SHA1 4e64f24a48ec8a82e71bd64d83d09e523a8eee23
SHA256 3dcac0469a588219a247ca6e1b60c5f9b3c1e70db8127f5e6d3a2264338b651f
SHA3 628e99d9f463c6630b374e40fb5aec1e10abd346c9b812d271bdd297bd7ce3ef

26

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.13169
MD5 aef68ff00e9ccaec52b36f7fb196386d
SHA1 e70feb48308c54655a53738b3c860a96975014f0
SHA256 8ff5e6f09e16aa093317b6644e337892616b6d2d9fafbc40ed791d0eb9725c44
SHA3 9f5ab63ef2d3bf4240078f62e4b4bfe71d956aedc8e0aea11ece1d0b00073d01

27

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.81436
MD5 9c0c48190f8e520297e57053fa038d03
SHA1 36c541d6c4ad065b238d08c1a36a07402c196df4
SHA256 fc9c7d4fd45b67c23be7ee3dd756090d63c30f4742e486bb1cf02bec9df4cce9
SHA3 e890781eaa10c4960498b107abdc81884ffcebdeac957d739fa7dfe336569750

28

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.13556
MD5 629098c8e82a3b9d3956ab346804a4f2
SHA1 b0c032e687ef12b9495273d68824f99950276044
SHA256 c2c1c2cb5d239987bf5d9bae8584f5c94b4f3814ca785225fbebba5b55392695
SHA3 fce5a91e025e5158635cdf4eba30185c6ce3d80747fcd224f3d56b52f54ba179

29

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.63051
MD5 9291541a51caf8a036ad61e3fa9fbda8
SHA1 5d02a737b88c52ec911272937fed6555c8c86deb
SHA256 da54d3bb55360ccd8cde1d20e23c0dffdd294e191f67eb5dfcdc0638a25d8a14
SHA3 67099a522372ed91184c7fbcfc6d2e646a4a0912953f3117a80264d5fca7b865

30

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xb97c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98342
Detected Filetype PNG graphic file
MD5 0e2aec1c3648f6b36d32ab0e313fbdc9
SHA1 f251611b1ba979aee3948e376c49e9ca6576474b
SHA256 7dc604a5a3d9fe3d0a71fef75533af2fca9ff6f98a16ba59b49e96f1b18c861e
SHA3 7113600434813e74822ceeed154cab953439d9f258451a5a7d81c9f7aaa945d5

100

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x92
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.83843
Detected Filetype Icon file
MD5 4e3363d1db5f405a9d282402a35408e6
SHA1 1e13fdc5dbfbfba08d3e2b58f5013589131c065d
SHA256 5337822a4bd38d6aeadc6aa601fc8c58e8865f2d36b4975d1045f43a3d4bb720
SHA3 39842cd589e4db9aecf8b590dfaa643fdbd7c6aef4ed48c0032dd8fcff3bb0f7

101

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x92
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.93403
Detected Filetype Icon file
MD5 618c0bf904e5dd9f5ced3f58417adbc9
SHA1 b168b2b3c02de7010bac501fc6ff10bac71f23d5
SHA256 2e1df19a3283fdc1616d5d3ed2a1e66afed445d9e2f903d020e3698f131c9766
SHA3 9b317df244cf532e41fa647db192401f0c720b3230dffdfc1a07298689421def

102

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x92
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.97751
Detected Filetype Icon file
MD5 b4cfad45960bbdfe8c221b78174e3591
SHA1 b16467faa9eae3b687a19ccf603700535caa2aee
SHA256 c97b8758bd1747426f04c5fb57907e19679be5487ce4180c4d02cbbf9c84f014
SHA3 6cb707c45abd9ef8d458308ecacdfb818dbe5f98cb8a7bae9b32db9b4290e5f2

1 (#2)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x40a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.16328
MD5 5e401485be619baaa40791c287a58370
SHA1 f44310d32af5c34f4eb59d0089fe7987702d88e7
SHA256 d886b05fe39ba959853e046edb5f18949cef6b4301d9ee5e1a4f7067f5655bd9
SHA3 78e4253d166258fb479379aec9e394303f3245332236d4c1e8ddaf04ee27e94d

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2021-Jun-06 04:09:14
Version 0.0
SizeofData 86
AddressOfRawData 0x693ac
PointerToRawData 0x683ac
Referenced File C:\Users\Benjamin\source\repos\Adv\Git\win\..\Release\Git.pdb

TLS Callbacks

Load Configuration

Size 0xb8
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x46bbb4
SEHandlerTable 0x469402
SEHandlerCount 7

RICH Header

Errors

Leave a comment

No comments yet.