| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| Compilation Date | 2026-Aug-16 23:36:00 |
| Debug artifacts |
Embedded COFF debugging symbols
|
| Suspicious | The PE is possibly packed. |
Unusual section name found: /4
Unusual section name found: /19 Unusual section name found: /31 Unusual section name found: /45 Unusual section name found: /57 Unusual section name found: /70 Unusual section name found: /81 Unusual section name found: /97 Unusual section name found: /113 |
| Suspicious | The file contains overlay data. | 87410 bytes of data starting at offset 0x15e00. |
| Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
| MD5 | e2c1e4968306b373d7e78a9d0e1f1617 🔍 |
|---|---|
| SHA1 | f7d8d4bec47232c7794527247615ed8ebbb125a4 🔍 |
| SHA256 | e646082e9644db241a960b240037382be40a953703cb01b4c666fa967c30ff09 🔍 |
| SHA3 | 6cd43c92d36298e8b0b5d4d809a1a783fe1ef7fb04e5e9d8c72aa568435d3b76 🔍 |
| SSDeep | 1536:UYKzozJ7yHJxaitvNJvu5WSaXYzNFMb4pQWs2rZLQdzFnUi4wSCb9aHx3uDI/Mga:UYMjJvuEs52b4PLgl9aHx3QTpb 🔍 |
| Imports Hash | 90113067ac769822c948f5ec3255ccf9 🔍 |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 18 |
| TimeDateStamp | 2026-Aug-16 23:36:00 |
| PointerToSymbolTable | 0x15e00 |
| NumberOfSymbols | 2363 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_LINE_NUMS_STRIPPED
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 2.0 |
| SizeOfCode | 0x3c00 |
| SizeOfInitializedData | 0x3000 |
| SizeOfUninitializedData | 0x200 |
| AddressOfEntryPoint | 0x0000000000001490 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.2 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x20000 |
| SizeOfHeaders | 0x600 |
| Checksum | 0x39cbc |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
| SizeofStackReserve | 0x200000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| MD5 | a019837516655f6bbebde3db0f18fa67 🔍 |
|---|---|
| SHA1 | c858dd33a0f353aeffca6a15b063d38fa68bcec3 🔍 |
| SHA256 | 2738c851f98cfc2331fcba2c34e56440d01a7334de461026fd28bd4ecd22193b 🔍 |
| SHA3 | a7e7e1007e08d76c74fe0fa4cf2e6ba1a3fbfa7fa634fdd31034a9ec58f847e2 🔍 |
| VirtualSize | 0x3a20 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x3c00 |
| PointerToRawData | 0x600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.57242 |
| MD5 | 95c51ed0c8f5227d5572cdc32e9ed65c 🔍 |
|---|---|
| SHA1 | a6c9975a18da7c494182eeccf3d7552ac5cd077c 🔍 |
| SHA256 | 14877b17c96203ea415e71f24b243d0b505fc1791083b81906e80d6c5ade302c 🔍 |
| SHA3 | 4d948faa137a52c748dfdefafbbc6a58fe7012afbfa2433c69edebddfec557f4 🔍 |
| VirtualSize | 0xb0 |
| VirtualAddress | 0x5000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x4200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0.770943 |
| MD5 | e611a48600590c253168197907c1e520 🔍 |
|---|---|
| SHA1 | 294fca0f590ee1d91ff1fce629a290609168edd9 🔍 |
| SHA256 | 7f566aeb01d6c65e49947e05c4fa638f0431308b6163d68b469a0cafa12782d9 🔍 |
| SHA3 | 160e1d48c9bf06c05f83bb4e2c920ce46962a29025de76b7f988de2e2a71df96 🔍 |
| VirtualSize | 0xb48 |
| VirtualAddress | 0x6000 |
| SizeOfRawData | 0xc00 |
| PointerToRawData | 0x4400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 4.89462 |
| MD5 | 94933998774e7c07a891ed6a77cce807 🔍 |
|---|---|
| SHA1 | 6becf18640696f285d713db6445ef9ba1359a50a 🔍 |
| SHA256 | 2aaddf34def5a0358d7af6c5e739a13f49d5fffee2248cfbcf79ec7ad084d794 🔍 |
| SHA3 | 0061ea65541bcc737497bafa00dd99515d30495ce2d5e04105a9ed6707c6effe 🔍 |
| VirtualSize | 0x720 |
| VirtualAddress | 0x7000 |
| SizeOfRawData | 0x800 |
| PointerToRawData | 0x5000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 3.95465 |
| MD5 | da631597d5f5810a06d9af6e19ebd870 🔍 |
|---|---|
| SHA1 | 0c86baee8c1ddc912b4c796c2c3f5d6ef5327e1f 🔍 |
| SHA256 | cb53714c9fa462c4cb1ad05fe141edf4820b691519f956f6f93b1939d35a1286 🔍 |
| SHA3 | 7a5f85bc665cb703f1bad5204d31549b27bffb44d38932a0523b2f470d30d3eb 🔍 |
| VirtualSize | 0x750 |
| VirtualAddress | 0x8000 |
| SizeOfRawData | 0x800 |
| PointerToRawData | 0x5800 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 4.0518 |
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x118 |
| VirtualAddress | 0x9000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| MD5 | 16dc887741d9598b191602422633b426 🔍 |
|---|---|
| SHA1 | 22e886da66f0e9cbebc30ede946759e8d39ca887 🔍 |
| SHA256 | 5856c9e209220ad36f44d8835ef2de973e5c38b47439da53c0b9b40b44a3c4ea 🔍 |
| SHA3 | 8536d2f984bb0daa50b9a0b0218acac74679d6ada9d4dbc4bf07332dab5894ad 🔍 |
| VirtualSize | 0x9e4 |
| VirtualAddress | 0xa000 |
| SizeOfRawData | 0xa00 |
| PointerToRawData | 0x6000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 4.38142 |
| MD5 | 3b7f4d778dd55680650e27ddd712b430 🔍 |
|---|---|
| SHA1 | d8c6bb5e232b4098168c9378078aaf4e9d77ee3f 🔍 |
| SHA256 | 515dcabc6686acf9d3d2a7a54f8337460255a705ae8085291acaa45844b71808 🔍 |
| SHA3 | 743cfa3ccece8d4bb0f2cec96615f75128cb53978dbb55f81aff4e60d2c6a2e6 🔍 |
| VirtualSize | 0x4e8 |
| VirtualAddress | 0xb000 |
| SizeOfRawData | 0x600 |
| PointerToRawData | 0x6a00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 4.77848 |
| MD5 | 65ffebbcd5b0a157f057535699cb7a28 🔍 |
|---|---|
| SHA1 | 4d9c2e094fe555020b5e0af25faed5a244e9690c 🔍 |
| SHA256 | d14f4be3aa886475a73602b586b2c5adcc571ac78ee9d7f9d2d4adb06b2ab921 🔍 |
| SHA3 | d88a2c47f1b5d19b2b3d3c521740cdc4d0249d87b0f4b22bc85dbe4808a01dda 🔍 |
| VirtualSize | 0x54 |
| VirtualAddress | 0xc000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x7000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 1.02633 |
| MD5 | 84de8e4d5f5e0be6a7b497e0124a6978 🔍 |
|---|---|
| SHA1 | 4440633a7ed8171849166cc15c53e03fd0170177 🔍 |
| SHA256 | d6407acdfebc386b5098eb1d2a61221f4d47f72077a3bfdcd3a34cacbd17e63a 🔍 |
| SHA3 | 17ebf3eaceb44298651158c8a038a1832ffe70d050b3ab20e5354f08fb2e7142 🔍 |
| VirtualSize | 0x440 |
| VirtualAddress | 0xd000 |
| SizeOfRawData | 0x600 |
| PointerToRawData | 0x7200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 1.26429 |
| MD5 | 0d4f935dd0571b47434358636db34337 🔍 |
|---|---|
| SHA1 | dd786e14d0e1185c3f0fa948fe9e76c2b927a847 🔍 |
| SHA256 | a22d23cfb5d17f5ae71db35e9e7c7fa69f68ca6b71629831dc9a4db77ee3fdf8 🔍 |
| SHA3 | 06af87a2e093e9a7335db35c84fa5cd369c5430a0ac0eef6e82f5679f6b6fcc7 🔍 |
| VirtualSize | 0x7e5c |
| VirtualAddress | 0xe000 |
| SizeOfRawData | 0x8000 |
| PointerToRawData | 0x7800 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.81043 |
| MD5 | dba7baf869e05cc956fd704d4fdf8de4 🔍 |
|---|---|
| SHA1 | 8666576f49e7011129abd69f0da746d266377273 🔍 |
| SHA256 | 8c315cde06dd09860ae5558e13b3e81d7faca51f80c9ac0bdc1918031b70720d 🔍 |
| SHA3 | 6fe43200d54e96e6e014d07752fa33102856d1a8a571a8d4472cf35fb5c708a3 🔍 |
| VirtualSize | 0x1711 |
| VirtualAddress | 0x16000 |
| SizeOfRawData | 0x1800 |
| PointerToRawData | 0xf800 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 4.75858 |
| MD5 | 467cc0633edac8b75fc1fb1c6ef48609 🔍 |
|---|---|
| SHA1 | 09bf7455f0cce24ad09b6eb017c31b864b73ba01 🔍 |
| SHA256 | 8d39586adcfe547f6812dd4d44d8e6507aa7625d553f5671f02f7ddbe8344ad1 🔍 |
| SHA3 | eb00087e692b5a079efd364bd731e9dd2036f44bab4b275a71aea635010658ec 🔍 |
| VirtualSize | 0x18ca |
| VirtualAddress | 0x18000 |
| SizeOfRawData | 0x1a00 |
| PointerToRawData | 0x11000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 4.77792 |
| MD5 | 72ea6859900e6a864e9b8d735de9165d 🔍 |
|---|---|
| SHA1 | 9c8b8c1251036d4cd2bb17bfe6bc00be71e73801 🔍 |
| SHA256 | 4588834acedef5fe84d1ec8b79f05e0de5fee8363ba92bb9e138cbf7b2eade07 🔍 |
| SHA3 | e928d6ec0d3cc99f8a9e71dfdae614b0747b49238b68a860a354d29a76b5f0ae 🔍 |
| VirtualSize | 0x690 |
| VirtualAddress | 0x1a000 |
| SizeOfRawData | 0x800 |
| PointerToRawData | 0x12a00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 3.32963 |
| MD5 | 6679335ddf41ace1ee4601a43198ffae 🔍 |
|---|---|
| SHA1 | 9e781ec1a98fcdc4f58ed230e2ff7fb9a7d880f0 🔍 |
| SHA256 | a17cb6861bf8af4f966c18f2f4d03a0ce4ad89ca626e4781732e8f25f8af80dd 🔍 |
| SHA3 | 429bc1dec44ca941ef3982049c43cf682a1385655c31afbbfe172b45faaf8113 🔍 |
| VirtualSize | 0x2a2 |
| VirtualAddress | 0x1b000 |
| SizeOfRawData | 0x400 |
| PointerToRawData | 0x13200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 3.86466 |
| MD5 | 83b25070eddae09606467480c36525f8 🔍 |
|---|---|
| SHA1 | 042a2608463f4ed9ccec67bac67345fc45cb2101 🔍 |
| SHA256 | 7e3671bb3cad78f29982340b4037c5b5e25871bc99cd42b7db0d71884e35a076 🔍 |
| SHA3 | eff14883000b8d42dcf76e9e045fc1978939387914bb2f32d5e1ed28961854ef 🔍 |
| VirtualSize | 0x157a |
| VirtualAddress | 0x1c000 |
| SizeOfRawData | 0x1600 |
| PointerToRawData | 0x13600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 4.89984 |
| MD5 | 717520bbbb130caf955646372c9eab2a 🔍 |
|---|---|
| SHA1 | 411700c9dc0f6502b58d7b22553e49bb59714a68 🔍 |
| SHA256 | 229d402e265969cbea2d77f14de15fa141a80432b9c371c1b145574c9446117c 🔍 |
| SHA3 | 45b40e1843326688cec2239c8a5aa4c02a62516f509a155d0024bcba22eec2ae 🔍 |
| VirtualSize | 0xe22 |
| VirtualAddress | 0x1e000 |
| SizeOfRawData | 0x1000 |
| PointerToRawData | 0x14c00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 4.85939 |
| MD5 | a37fc737c105e1df2b8637df5053c300 🔍 |
|---|---|
| SHA1 | be80da59bb1e62b455de0c96fc4eadb2f1b0f807 🔍 |
| SHA256 | 65523e99385aa283cb4ea898e416b1b02f9ee6536e46e4ab6568c924c3fffc48 🔍 |
| SHA3 | c572b59c670ef1f095adddd27aae129cae2adac8b1ecabcb07fa0eccab5c646e 🔍 |
| VirtualSize | 0x151 |
| VirtualAddress | 0x1f000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x15c00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 3.66455 |
| libClp-0.dll |
_Z11clpReadAmplP9ampl_infoiPPcR10ClpSimplex
_Z8ClpMain0R10ClpSimplex _Z8ClpMain1St5dequeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESaIS5_EER10ClpSimplexP9ampl_info _ZN10ClpSimplexC1Eb _ZN10ClpSimplexD1Ev _ZN8ClpModel20setMaximumIterationsEi _ZN9ClpOutput17printSolverHeaderEP18CoinMessageHandleriiPKPKc |
|---|---|
| libgcc_s_seh-1.dll |
_Unwind_Resume
|
| KERNEL32.dll |
GetLastError
SetUnhandledExceptionFilter Sleep VirtualProtect VirtualQuery |
| msvcrt.dll |
_XcptFilter
__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _exit _fmode _initterm abort atexit exit fflush fprintf malloc memcpy setvbuf strcmp strlen strncmp vfprintf |
| libstdc++-6.dll |
_ZSt17__throw_bad_allocv
_ZSt19__throw_logic_errorPKc _ZSt20__throw_length_errorPKc _ZSt21__glibcxx_assert_failPKciS0_S0_ _ZSt28__throw_bad_array_new_lengthv _ZdlPvy _Znwy __cxa_begin_catch __cxa_end_catch __cxa_rethrow __gxx_personality_seh0 |
| libCoinUtils-0.dll |
_ZN14CoinParamUtils14formInputQueueERSt5dequeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESaIS6_EES6_iPPc
|
| libopenblas.dll |
openblas_set_num_threads
|
| Type |
RT_MANIFEST
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x48f |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.13793 |
| MD5 | 5aa04ce935e78505e230765e85c34355 🔍 |
| SHA1 | 6c93b8c5fde8be4b2231dca6b8ec513cdc82c991 🔍 |
| SHA256 | a73f26a8d504043f785d7360e8febf2eeb8522ec873a0d4dd5d1d4bfd1e67d3d 🔍 |
| SHA3 | 149467cafc03ba34b33cd8076fc2771413760822357952de205dbae2b5cb8059 🔍 |
No comments yet.