daac638ebdc5fff94e2d3bb191a1409c91d1a7942cfa8c42807e345188862c14

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2018-Feb-01 20:22:18

Plugin Output

Info Matching compiler(s): MASM/TASM - sig2(h)
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to MD5
Uses constants related to SHA1
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • LoadLibraryExW
  • LoadLibraryW
  • GetProcAddress
 Can create temporary files:
  • GetTempPathW
  • CreateFileW
Suspicious The PE is possibly a dropper. Resource 3EC84B0737178B3B4953132627249249 is possibly compressed or encrypted.
Resources amount for 86.9178% of the executable.
Malicious VirusTotal score: 55/71 (Scanned on 2026-11-09 12:19:26) ALYac: Gen:Variant.Application.Midie.76391
APEX: Malicious
AVG: Win32:Malware-gen
AhnLab-V3: Trojan/Win32.Agent.R259682
Alibaba: Trojan:PowerShell/Cobalt.f0659c0e
Antiy-AVL: Trojan/Win32.Agent
Arcabit: Trojan.Application.Midie.D12A67
Avast: Win32:Malware-gen
Avira: TR/W32.Malware
BitDefender: Gen:Variant.Application.Midie.76391
Bkav: W32.Malware.7B35617C
CTX: exe.unknown.generic
CrowdStrike: win/malicious_confidence_70% (W)
Cylance: Unsafe
Cynet: Malicious (score: 100)
DeepInstinct: MALICIOUS
DrWeb: Trojan.MulDrop28.60980
ESET-NOD32: Generik.EOIMXOB trojan
Elastic: malicious (high confidence)
Emsisoft: Gen:Variant.Application.Midie.76391 (B)
F-Secure: Trojan.TR/W32.Malware
Fortinet: W32/Agent.MAZDI!tr
GData: Gen:Variant.Application.Midie.76391
Google: Detected
Gridinsoft: Trojan.Win32.Agent.vb!s1
Jiangmin: RiskTool.Generic.kkp
K7AntiVirus: Trojan ( 005d9b921 )
K7GW: Trojan ( 005d9b921 )
Kaspersky: HEUR:Trojan.PowerShell.Cobalt.gen
Lionic: Trojan.Win32.Dapato.tsra
Malwarebytes: Malware.AI.4231750508
McAfeeD: ti!DAAC638EBDC5
MicroWorld-eScan: Gen:Variant.Application.Midie.76391
Microsoft: Trojan:Win32/Wacatac.B!ml
NANO-Antivirus: Trojan.Win32.Scrop.eytdxi
Paloalto: generic.ml
Rising: Trojan.Kryptik!8.8 (TFE:5:lMYerF3OYHJ)
Sangfor: Trojan.Win32.Save.a
SentinelOne: Static AI - Suspicious PE
Skyhigh: BehavesLike.Win32.Infected.jt
Sophos: Mal/Generic-S
Symantec: ML.Attribute.HighConfidence
Tencent: Win32.Trojan.Cobalt.Fmnw
Trapmine: malicious.high.ml.score
TrellixENS: Artemis!CF320D846185
TrendMicro: TROJ_FRS.VSNTJV26
TrendMicro-HouseCall: TROJ_FRS.VSNTJV26
VBA32: Trojan.Agent
VIPRE: Gen:Variant.Application.Midie.76391
Varist: W32/Trojan.MNUQ-5487
VirIT: Trojan.Win32.Genus.XWT
Webroot: W32.Malware.gen
Yandex: Trojan.GenAsa!xeYOOG2tugU
Zillya: Trojan.Shelma.Win32.1656
alibabacloud: Trojan:Win/Wacatac.B9nj

Hashes

MD5 cf320d846185720f8adbaaf7819f3bbf 🔍
SHA1 d6ea47f64a71d2367b70418f3aab43ca37b9a5be 🔍
SHA256 daac638ebdc5fff94e2d3bb191a1409c91d1a7942cfa8c42807e345188862c14 🔍
SHA3 ad1dc46e9efe88fd0398201a12e4a7b5dfa7c385edd359360c263d2497d6752a 🔍
SSDeep 6144:bOv9DkXyeNTBMZb7ycVcLWbUBN/Sfj2LBDUH2QhAY0:bO1IDNTmBeZ9DUM 🔍
Imports Hash 2adb28da7b9fece4b360fc7188d2f05c 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2018-Feb-01 20:22:18
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0xfe00
SizeOfInitializedData 0x8ea00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00001000 (Section: .code)
BaseOfCode 0x1000
BaseOfData 0x12000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0xa3000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.code

MD5 b729b25a916638015e2caaa79da47f5d 🔍
SHA1 444fda36e2ea77a77ad347403b6289b943699d0a 🔍
SHA256 5c623154a52940c24002446e3abc7a4112947dd195de0f4eac32b40af3531ed7 🔍
SHA3 9f9743f130b704a9daf48b830211f586634af3f1c1b0c2caf14dd48bfdf90060 🔍
VirtualSize 0x3018
VirtualAddress 0x1000
SizeOfRawData 0x3200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.51797

.text

MD5 1fa7311f693f1815cedfcd8d90089d6e 🔍
SHA1 4d178fb5b957aeed89734127977582d3d8e26ea9 🔍
SHA256 0afcafe9cbb93806cdca177e6ed458822d78f3e4d52a43efce303e6f1231e7d0 🔍
SHA3 2def0924d98ce9bfff8ffa43fbd4ab122340e3902fa7d8692a7a8afa5b894b75 🔍
VirtualSize 0xcaa2
VirtualAddress 0x5000
SizeOfRawData 0xcc00
PointerToRawData 0x3600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.58019

.rdata

MD5 6784f513fac4815ca52b2a1098c59370 🔍
SHA1 3aef23f6fc51062b5d1ded994c194b02300ac51f 🔍
SHA256 c921d0b441a0daec25616a445930b1a356217220055d11969409024c45cf3182 🔍
SHA3 8f3c70a202ef020a7abb7742bc9cfcbf61399a4aa0371e29c5a1e6b74679adad 🔍
VirtualSize 0x33a0
VirtualAddress 0x12000
SizeOfRawData 0x3400
PointerToRawData 0x10200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.109

.data

MD5 cd707830c1feed50f6e6f699e08283c1 🔍
SHA1 942066bb1500ac79f6a2c14adfdf5c49bbf88b3b 🔍
SHA256 0b368aa1cc49cb8ac6890a40cb61274878d6a513e0d0876fa75e11b38e24d7da 🔍
SHA3 4ba8eb145edb77757ee53cc1dbe294146e602bccc2f479c8d39f0ffcd9fc175b 🔍
VirtualSize 0x16c4
VirtualAddress 0x16000
SizeOfRawData 0x1000
PointerToRawData 0x13600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.28612

.rsrc

MD5 d928fa58b5acc5bea42677e6ddc48fd5 🔍
SHA1 98031b63a144c1f5618fc531c4f7d10e9568f231 🔍
SHA256 e43acde8f4b6e453a97c2d6189d57c2833f3b73f82367c78bdb2b0a9345b31de 🔍
SHA3 6f8bcf5c2bb7baa0186b16c2eb46bbc4a4005dc5c064593be28a76684c4c0037 🔍
VirtualSize 0x8a5c8
VirtualAddress 0x18000
SizeOfRawData 0x8a600
PointerToRawData 0x14600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.61122

Imports

MSVCRT.dll memset
wcsncmp
memmove
wcsncpy
wcsstr
_wcsnicmp
_wcsicmp
wcslen
wcscpy
wcscmp
memcpy
tolower
wcscat
malloc
free
KERNEL32.dll GetModuleHandleW
HeapCreate
GetStdHandle
HeapDestroy
ExitProcess
WriteFile
LoadLibraryExW
EnumResourceTypesW
FreeLibrary
RemoveDirectoryW
GetExitCodeProcess
EnumResourceNamesW
GetCommandLineW
LoadResource
SizeofResource
FreeResource
FindResourceW
GetShortPathNameW
GetTempFileNameW
EnterCriticalSection
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
TerminateThread
CreateThread
Sleep
WideCharToMultiByte
HeapAlloc
HeapFree
LoadLibraryW
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
HeapSize
MultiByteToWideChar
CreateDirectoryW
SetFileAttributesW
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetTempPathW
CreateFileW
SetFilePointer
TlsFree
TlsGetValue
TlsSetValue
TlsAlloc
HeapReAlloc
DeleteCriticalSection
InterlockedCompareExchange
InterlockedExchange
GetLastError
SetLastError
UnregisterWait
GetCurrentThread
DuplicateHandle
RegisterWaitForSingleObject
USER32.DLL CharUpperW
CharLowerW
MessageBoxW
SendMessageW
PostMessageW
DefWindowProcW
DestroyWindow
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
UnregisterClassW
LoadIconW
LoadCursorW
RegisterClassExW
IsWindowEnabled
EnableWindow
GetSystemMetrics
CreateWindowExW
SetWindowLongW
SetFocus
CreateAcceleratorTableW
SetForegroundWindow
BringWindowToTop
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
DestroyAcceleratorTable
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
EnumWindows
SetWindowPos
GDI32.DLL GetStockObject
COMCTL32.DLL InitCommonControlsEx
SHELL32.DLL ShellExecuteExW
SHGetFolderLocation
SHGetPathFromIDListW
WINMM.DLL timeBeginPeriod
OLE32.DLL CoInitialize
CoTaskMemFree
SHLWAPI.DLL PathQuoteSpacesW
PathAddBackslashW
PathRemoveBackslashW
PathRemoveArgsW
PathRenameExtensionW

Delayed Imports

1

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xa068
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.90834
MD5 dcebc9eda8b0ed5ade9d6537ab56019e 🔍
SHA1 6ddc21c71f49c77fa402ff9a59dee5ec18ae1e05 🔍
SHA256 134207ef18bafed7d30708b0258183d206789bccfa4917dd44aea4bab22afcb4 🔍
SHA3 f9767a561e94cf7bb23242f116257a076120eaa1a1c86da16de6d1306dc7352f 🔍

2

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.20725
MD5 a62d233d0b36382ff6b291edd1c21a51 🔍
SHA1 2becc86bdc8c6d8b5e999080b308494191c926a1 🔍
SHA256 84d421c93c68a173efde8c981e24ef2d422124ae8a0cd1e629875e451f5a66bc 🔍
SHA3 6f448a73cb91790027eb468cde909bd7b445d26ef294d55fe5195c3a8edc3b39 🔍

3

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32328
MD5 e8467958d492ab1fa8ab8f7618788d30 🔍
SHA1 be21fdd56bc9224ec1e1ba1f104487431b9178f9 🔍
SHA256 3d80f3e939711285232be13641ed0b0763f39839623739bffcd9beadf8b856ea 🔍
SHA3 6557400414ffc6846d901bd5d00e3d5563040594885179cfd3264fb6b564795c 🔍

4

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x1e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.311
MD5 ed0912cf2f57faf489ad84e55b49fa3f 🔍
SHA1 5f753ee99bb8202ac4b4577b2b0426a253d77966 🔍
SHA256 e5700dcec07cb27cceb3912f82abe131c20ecb9eb33719ebc2feee5562a5ae00 🔍
SHA3 31e6f02dd4eb7f9fd99dc78c48f29606a74397ecb11dddaa1169f1510559a125 🔍

5

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.94783
MD5 bf7b02d1730f4a2689315c3e67de66bd 🔍
SHA1 94fe6748d04b320300952c4f29fface40b8ae316 🔍
SHA256 718826dc691c0666627ce0051fb150d67517fe23decb1e328fa7ddc34c2a04f4 🔍
SHA3 52e665578ad7a2046c2ab4e3457c70698c6310a6f0ca7dc44ad1be67340dc33b 🔍

6

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x12428
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.4581
MD5 62f9b91fe76141809987ac19b40db474 🔍
SHA1 cdc6fb9ba65e9fbb68ba6fd64c4781effbbc6d4f 🔍
SHA256 e7eb2d8f7726e956c77276b120eb891972339b64ad4866e79f8cadfbdc8b81a0 🔍
SHA3 860336b44c4475a31857469f843ebd6e8dc00b5c0b91e2255a893143c58f25d8 🔍

7

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.29433
MD5 c2805caa19680ed0688239902cf44156 🔍
SHA1 eef9dbc983cd3883984db904908d2d0cf52ae23f 🔍
SHA256 e94beaa350e042870c087a2f3e5063c9d2400e78cb21f669538f83911c37b1f5 🔍
SHA3 3ca0298ab49ab64720dff58ffd648d1e19b6a3192a8b7eb11fdfeca4cc5f267b 🔍

8

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.0164
MD5 6f5f581ef6e189b603fb2aebac3fa49a 🔍
SHA1 12f5d71ea045fc02b34d9be010ea9c9459aaa866 🔍
SHA256 07ee0514d5eff6b24393e63554a19b43e76fe971ac9e9e96250ef2ad78429008 🔍
SHA3 67436395faf6033c48a961ec0ce8049caf975a49f728904dbb8498abb8bc94fd 🔍

9

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x6c8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.54688
MD5 4b2d52813b3566b1787ef94b888f5c44 🔍
SHA1 ccc87decb2f24e187942763442f902a7bab6f99f 🔍
SHA256 f01c9f455708feeb02f68e2cab798a41f25b8bf95b30a8e695a03df022c8fd06 🔍
SHA3 f90193e70af1096a7be9061ef3a80a9548ac0634694f46808559681c8614ac59 🔍

10

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.64815
MD5 f8c5de115e4d47e4f7d85149595903c7 🔍
SHA1 00c4b53e960c51abe4362256a4631119829f0815 🔍
SHA256 4258ca69cec8261867f55ced3997dcca2d278d08d1873a81c9187ffb672548d6 🔍
SHA3 d22f7b25546a61f3847d149a91223fd7ec62ba67a6781501563570ac6e2031e1 🔍

11

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.25367
MD5 78a0c5a23895e45892cf3098baa85ef7 🔍
SHA1 ea9c8de5d17efe3c2d6cd61942d378f69876cbea 🔍
SHA256 fefb18ecea101f281a9b6b91fac7f89f36ca7fe9c4c83e43ab6d0fd73b72e849 🔍
SHA3 74a7723c57c88f5e36c449a30aaaadfa33aea680a6665b82ff2738d98e5e0cad 🔍

12

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.36863
MD5 3659913f25dd241e00195435dfe36a36 🔍
SHA1 2179ad045e4af96426ba1d27a139bec1d559af72 🔍
SHA256 163ec5b43dd5a043ea553ff50af0712c0e581edc5a870d89559767f168a2cc72 🔍
SHA3 596a3fc436e2b73d01cbc5e9004eae8d268325204b6e0e90443dd4de787500d8 🔍

13

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.61041
MD5 b97f0120719b0bad1451475d970fdd97 🔍
SHA1 08e418a2d499e0946af76cc528f9836d1665f259 🔍
SHA256 e3260ffcb761dd591d309052d1834b90c8215ea96a6fd1ea0838ee0053b616f7 🔍
SHA3 21a343b8db35b0e1042c2321051e9d8529c64ba3d5a2477d409e1fba59c93bf4 🔍

14

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x5488
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.6081
MD5 4ac0c9393d8f832400b3b253d352fb14 🔍
SHA1 14dac91c5d151bc292fc67f09a15e2bf5d5650a5 🔍
SHA256 bdc5091cfcd2a78fecafbf7c693ec5afe2de9109509c6a77ec1f5aa36d259c19 🔍
SHA3 e47abe451f1eef7736fa254b8fa7d4edb62188201beb004668813ec2d4fb0078 🔍

15

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.53891
MD5 128110df76c4b5a80e28be19ee99046a 🔍
SHA1 9df58da55fe32c857ded2787f808760d18c8b10e 🔍
SHA256 cf2a3e581ccaddb546c9fddc2a68586ba7048c7573107304ef73250bb700c793 🔍
SHA3 010cb218758ea5594e58be73cddf7339017e209176b044ec4d79478cd172102a 🔍

16

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.76989
MD5 091d5a244e9d9ec7d10c825712dd4e8b 🔍
SHA1 0726fc6d33ca35229d8a7ab83dc6a200675b20cd 🔍
SHA256 1001aea47785aecf1a0a818e9c6e433e6b92f2cebe25e10038d44efa304e6ac6 🔍
SHA3 e25fd2de32536ad7fe28db51b7560187f9b59a86d46d1d6c1ca418e2785ca743 🔍

17

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.82662
MD5 b71630f9640fc711cb43e1f19baed818 🔍
SHA1 e46165eba0d6fbf208b31ecb9c085781cfdb957d 🔍
SHA256 bb6907a974adc6460dc3c3c8fe38df86ead58847d0947be4e2e277643a4aefed 🔍
SHA3 7fbb035f05ade598f782f63cb12ec3d5f18c02eba6c00ba3e40fdc55d2c0d999 🔍

18

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.12906
MD5 ef0c8ca23ad6f628156d48d6928a62b0 🔍
SHA1 ff272dd8b80651a3bb8ca5143ae2a6629a06f9a6 🔍
SHA256 6ab920e734c4293c5cdd5e6776763098065af85413988a8260616d9f7b166191 🔍
SHA3 2b45940c826ca36b7688f1fe80d01e0d6275e7b2f9cecb0aa5668299df652060 🔍

19

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.30215
MD5 1548e082ef07daa5970bbfd083f9d6c9 🔍
SHA1 b8abdc31209cb763a247dda3edc09eafe08a60c9 🔍
SHA256 f62d538dce1c3f0ea552d80d9a9a24424f5536926c6f129e5f0aad78b2a973ea 🔍
SHA3 41c2fd636e4ab37418694648b73c195d21af2d256ee633ee7a7096c78d62b994 🔍

3EC84B0737178B3B4953132627249249

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xf97
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.95492
MD5 6b0147415b43bb99eac07af8a9d98f49 🔍
SHA1 9639045151a9176c1ac71b3fd97661b75affac39 🔍
SHA256 1eeae7a261e0ad99c120b21c89c991e6cf61e75eb2169ec8f81feb9116e852b2 🔍
SHA3 8a42fa451689bf485e68057cd25d0d01ba58754187debc36e02809ce221d8f0e 🔍

5EAC4D9FCB50DC0F449F749183A6F6D1

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xe
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.23593
MD5 7bb55e591962edd967c9a3039407256c 🔍
SHA1 e84642313805d66ef70fdada202992d040a1c2cc 🔍
SHA256 8fcbd3ba77d0af716d0b3f342b877539512ba665a6c5ad7999a531bff05a6a91 🔍
SHA3 116f25e12adcabbb7a50c5223cf85536391d06d1114f226b2e5d018f6907ff91 🔍

769A67A2E8

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0
MD5 55a54008ad1ba589aa210d2629c1df41 🔍
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7 🔍
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a 🔍
SHA3 2767f15c8af2f2c7225d5273fdd683edc714110a987d1054697c348aed4e6cc7 🔍

AA9D3B73722D525C413999718DC62B4E826B14DA

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3
MD5 02744af8de49e172d16c7c115d487d41 🔍
SHA1 6a3421b58ad119d040add7375244caa82dbec95e 🔍
SHA256 0eb0fd27a2b1164b07b612a169d51f28f47106814d07cacf1c4a2c689374e1f3 🔍
SHA3 28eaf26340a2d5b2df05ff546a31e76bd209b365f38015673219b69f2681898a 🔍

1 (#2)

Type RT_GROUP_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x110
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.23244
Detected Filetype Icon file
MD5 ed7e652d50da7cee2966682e688be327 🔍
SHA1 2e79c36def7e96caba3e9a5c7e0bdef2784894f8 🔍
SHA256 40cc9dba70bea1e2cc44c753fabb7e3f064886ff02566a127a4cfb7e3702db9f 🔍
SHA3 c96a37daccac1fbe61ad1c324655318e42d1536c69e9d3fdc24a178cc91d916c 🔍

1 (#3)

Type RT_MANIFEST
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2a0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.08821
MD5 ffd3b06250ba95d239365ef050b3627b 🔍
SHA1 16e3981245d8dbd44f33d93b203c02a44f3c2b95 🔍
SHA256 1c3703755b6e9a690e8eafaa0cc318f667cd5d4c06935b6e3cd07296df9e9dcd 🔍
SHA3 2c6baa84c172762978837565c2b2ed4f7716c0edaab79bda3a3ef74724426773 🔍

Version Info

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.