Manalyze report for f07e7c06d1a66307bc38a5b50c3b2a2308ebdbfbb2edcc8132678e0735b6ba99

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-Aug-21 06:48:15
Detected languages	English - United States
TLS Callbacks	1 callback(s) detected.
Debug artifacts	SolaraV3.pdb
CompanyName	CMD Softworks
FileDescription	Solara V3
FileVersion	`0.1.0`
ProductName	Solara V3
ProductVersion	`0.1.0`

Plugin Output

Suspicious	Strings found in the binary may indicate undesirable behavior:	`Miscellaneous malware strings: cmd.exe` Contains domain names: GoDaddy.com api.rscripts.net birthpopuptypesapplyImagebeinguppernoteseveryshowsmeansextramatchtrackknownearlybegansuperpapernorthlearngivennamedendedTermspartsGroupbrandusingwomanfalsereadyaudiotakeswhile.com developer.microsoft.com genretrucklooksValueFrame.net github.com http://127.0.0.1 http://dummy.testC http://no.url.provided.local http://www.C http://www.a http://www.css http://www.hortcut http://www.icon http://www.interpretation http://www.language http://www.style http://www.text-decoration http://www.w3.org http://www.w3.org/shortcut http://www.wencodeURIComponent http://www.years https://api.rscripts.net https://api.rscripts.net/ https://developer.microsoft.com https://developer.microsoft.com/en-us/microsoft-edge/webview2 https://docs.rs https://github.com https://redacted.dev https://redacted.gg https://redacted.net https://robloxscripts.com https://scriptblox.com https://www.World https://www.recent microsoft.com openssl.org redacted.net robloxscripts.com rscripts.net scriptblox.com thing.org www.w3.org
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to SHA256` `Uses constants related to SHA512` `Uses constants related to RC5 or RC6`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: LoadLibraryW LoadLibraryA LoadLibraryExA GetProcAddress LoadLibraryExW` `Functions which can be used for anti-debugging purposes: SwitchToThread` `Can access the registry: RegGetValueW RegOpenKeyExW RegDeleteValueW RegCreateKeyTransactedW RegCreateKeyExW RegOpenKeyTransactedW RegQueryValueExW RegCloseKey` `Possibly launches other programs: CreateProcessW ShellExecuteW` `Uses Windows's Native API: NtOpenFile NtCancelIoFileEx NtCreateFile NtCreateNamedPipeFile NtDeviceIoControlFile NtReadFile NtWriteFile` `Can create temporary files: GetTempPathW CreateFileW` `Uses functions commonly found in keyloggers: GetAsyncKeyState GetForegroundWindow MapVirtualKeyW` `Leverages the raw socket API to access the Internet: ws2_32.dll` `Manipulates other processes: OpenProcess` `Can take screenshots: GetDC BitBlt CreateCompatibleDC` `Interacts with the certificate store: CertOpenStore CertAddCertificateContextToStore`
Info	The PE is digitally signed.	`Signer: CMD Softworks LLC` `Issuer: SSL.com Code Signing Intermediate CA RSA R1`
Malicious	VirusTotal score: 36/64 (Scanned on 2026-11-06 15:51:16)	`AVG: Win64:MalwareX-gen [Misc]` `AhnLab-V3: Malware/Win.Malware-gen.R789852` `Alibaba: Trojan:Win64/Sbadur.7d8a7c57` `Avast: Win64:MalwareX-gen [Misc]` `Avira: TR/W64.Agent` `CAT-QuickHeal: Trojan.Solara` `Cylance: Unsafe` `DeepInstinct: MALICIOUS` `ESET-NOD32: Generik.KRLNAYO potentially unwanted application` `Elastic: malicious (high confidence)` `F-Secure: Trojan.TR/W64.Agent` `GData: QD:Trojan.GenericKDQ.3158FC6A7A` `Google: Detected` `Gridinsoft: Trojan.Win64.Wacatac.cl` `Ikarus: Trojan.W64.Malware` `K7AntiVirus: Riskware ( 00584baa1 )` `K7GW: Riskware ( 00584baa1 )` `Kingsoft: Win64.Trojan.SBadur.gen` `Malwarebytes: RiskWare.Solara` `MaxSecure: Trojan.Malware.218612208.susgen` `McAfeeD: ti!F07E7C06D1A6` `MicroWorld-eScan: QD:Trojan.GenericKDQ.3158FC6A7A` `Microsoft: Trojan:Win64/Sbadur!MTB` `Paloalto: generic.ml` `Rising: Trojan.Sbadur!8.1E10C (CLOUD)` `Skyhigh: Artemis` `Sophos: Mal/Generic-S` `Symantec: ML.Attribute.HighConfidence` `TrellixENS: Artemis!F8492589E784` `TrendMicro: Trojan.Win32.SBADUR.USBLHN26` `TrendMicro-HouseCall: Trojan.Win32.SBADUR.USBLHN26` `VBA32: Trojan.Win64.SBadur` `VIPRE: QD:Trojan.GenericKDQ.3158FC6A7A` `Varist: W64/ABTrojan.SRAO-3372` `Webroot: Win.Trojan.Gen` `alibabacloud: Trojan:Win/Wacatac.B9nj`

Hashes

MD5	`f8492589e784210e01e3e1be866ff66d` 🔍
SHA1	`df1a10229580316766f36aa084ec8be5f3548f06` 🔍
SHA256	`f07e7c06d1a66307bc38a5b50c3b2a2308ebdbfbb2edcc8132678e0735b6ba99` 🔍
SHA3	`b6648835e182a669c899224bd86f39727982900a697326db51e84dd16a7e9a0c` 🔍
SSDeep	`196608:IVz5s2HBOMaY77v9G5LCAIJzB+zKg5RPMDd5j3z:K5s2HBOMaY77v9GIAIJzB+2gv0Ddx3z` 🔍
Imports Hash	`fdb821e6727e84f0fdecc7df382b9a0e` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0xf8`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`6`
TimeDateStamp	2026-Aug-21 06:48:15
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0xc9a800`
SizeOfInitializedData	`0x5d7a00`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000000000C6A680 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x1275000`
SizeOfHeaders	`0x400`
Checksum	`0x128158c`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`04efd27b7d1dad594f97a5866507e952 🔍`
SHA1	`23e5b15aa57f353a9e865532d2e532ff77981ecb 🔍`
SHA256	`0f0f51335bed14e89484bfa36a269aa2f765274b1ff5d4802ec1cbd0aaefff02 🔍`
SHA3	`781c9cef6d1743248ae6cfe0ced99394d16544f25af040ed5aff0a6d91ff0a2f 🔍`
VirtualSize	`0xc9a720`
VirtualAddress	`0x1000`
SizeOfRawData	`0xc9a800`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.18781`

.rdata

MD5	`2f2db51b166301097a910f1b163baaae 🔍`
SHA1	`312636cb5ff425701fe1c1dada7b66cbb9012fe6 🔍`
SHA256	`8dc76de45c10f32f4f06903e5ec929257c93155c2fff204c040ebde1845fbf73 🔍`
SHA3	`2e8cb94f19e8c19eab375620c5347b7d9f3ba6a0900a32f4fb3a85467f8e13a1 🔍`
VirtualSize	`0x4fff60`
VirtualAddress	`0xc9c000`
SizeOfRawData	`0x500000`
PointerToRawData	`0xc9ac00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.94987`

.data

MD5	`2409dd9a5a4f87ed3491f6e2713e692a 🔍`
SHA1	`b45a6d0158a2225fcb40cdb3f539c2d72df379a4 🔍`
SHA256	`b157382d8bccec2f8822fd807fbf2c847cd315ecc9204ecdb3cdb42c00699b2b 🔍`
SHA3	`45ff22acd685b3cd50420a90489f136e593099ddf45b981685b2a0a3b93f7fda 🔍`
VirtualSize	`0x5588`
VirtualAddress	`0x119c000`
SizeOfRawData	`0x3000`
PointerToRawData	`0x119ac00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`2.40833`

.pdata

MD5	`2678a2ecb380419a739e335bb7ef5da9 🔍`
SHA1	`c3cda16a4348efc85e12d065a5cc209f21942034 🔍`
SHA256	`344f813dde62374d4bfc2f8b18ce59b8076c32e4cdd89fe1cd2c4028f4b0e852 🔍`
SHA3	`4848e3e068ad35eba5a162cf0e6be4bf6702ea40f1615543667d01514ec6f7b5 🔍`
VirtualSize	`0xb0c7c`
VirtualAddress	`0x11a2000`
SizeOfRawData	`0xb0e00`
PointerToRawData	`0x119dc00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.73847`

.rsrc

MD5	`858f0efd61355dcc5fca41e8d532b3b9 🔍`
SHA1	`4b9260260c82eeb20e64b912fc160e817a86a22e 🔍`
SHA256	`c25685f711d70370dae307a7801cef03df2f65256c4196013ecb5d162a3984b6 🔍`
SHA3	`994700eb47f732bce7a46967833174230238eacea1ff442b5a41d1e1b0bd19e5 🔍`
VirtualSize	`0x12b80`
VirtualAddress	`0x1253000`
SizeOfRawData	`0x12c00`
PointerToRawData	`0x124ea00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`7.9651`

.reloc

MD5	`09a1c58372afd6a12a4b3a53e1508e84 🔍`
SHA1	`880aead1c3059bf81d5ae8e885abad93bc5d3058 🔍`
SHA256	`fb8f8302537ff242a85db81c511fa8d02ff37a01b1ace56f7905ce0e811138f2 🔍`
SHA3	`7de4a0aa3e357fc850448ad1a828d863e8252fec3a83c3e1a602fc0f3754f72a 🔍`
VirtualSize	`0xe814`
VirtualAddress	`0x1266000`
SizeOfRawData	`0xea00`
PointerToRawData	`0x1261600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.47068`

Imports

kernel32.dll	`CloseHandle` `GetConsoleOutputCP` `WriteConsoleW` `MultiByteToWideChar` `SetEnvironmentVariableW` `DeleteFileW` `DeviceIoControl` `GetFinalPathNameByHandleW` `ReleaseMutex` `CreateMutexA` `WaitForSingleObjectEx` `WideCharToMultiByte` `SwitchToThread` `GetSystemInfo` `ExitProcess` `FindClose` `FindFirstFileExW` `FindNextFileW` `GetTempPathW` `SetWaitableTimer` `CopyFileExW` `RemoveDirectoryW` `GetCommandLineW` `GetCurrentDirectoryW` `GetCurrentThread` `SetThreadStackGuarantee` `CreateWaitableTimerExW` `SetFilePointerEx` `CreateDirectoryW` `GetTimeZoneInformationForYear` `GetStdHandle` `CreateProcessW` `GetWindowsDirectoryW` `GetSystemDirectoryW` `GetEnvironmentStringsW` `GetFileInformationByHandleEx` `GetSystemTimePreciseAsFileTime` `RtlCaptureContext` `DuplicateHandle` `ReadFileEx` `GetCurrentProcessId` `CreateThread` `QueryPerformanceCounter` `QueryPerformanceFrequency` `HeapReAlloc` `SetFileTime` `SetFileInformationByHandle` `MoveFileExW` `GetFullPathNameW` `SetLastError` `AddVectoredExceptionHandler` `LoadLibraryW` `SleepEx` `WriteFileEx` `SetHandleInformation` `WaitForSingleObject` `FreeEnvironmentStringsW` `OutputDebugStringA` `OutputDebugStringW` `CompareStringOrdinal` `GetEnvironmentVariableW` `InitializeCriticalSectionEx` `LoadLibraryA` `GetModuleFileNameW` `lstrlenW` `FreeLibrary` `RtlVirtualUnwind` `GetCurrentThreadId` `LCIDToLocaleName` `GetUserDefaultUILanguage` `GetConsoleMode` `GetFileInformationByHandle` `GetFileAttributesW` `SetFileCompletionNotificationModes` `GetQueuedCompletionStatusEx` `CreateIoCompletionPort` `CancelIoEx` `RtlLookupFunctionEntry` `WriteFile` `ReleaseSRWLockExclusive` `ReadFile` `PostQueuedCompletionStatus` `GetOverlappedResult` `SetThreadErrorMode` `AcquireSRWLockExclusive` `WakeAllConditionVariable` `GetModuleHandleW` `SleepConditionVariableSRW` `GetSystemTimeAsFileTime` `RtlPcToFileHeader` `DeleteCriticalSection` `CreateFileW` `SetNamedPipeHandleState` `RaiseException` `QueryFullProcessImageNameW` `OpenProcess` `TerminateProcess` `GetCurrentProcess` `FlsAlloc` `GetModuleHandleA` `Sleep` `FlsGetValue` `FlsSetValue` `GetProcessHeap` `FormatMessageW` `LoadLibraryExA` `FlsFree` `EncodePointer` `GetProcAddress` `InitializeSListHead` `SetUnhandledExceptionFilter` `RtlUnwindEx` `HeapAlloc` `HeapFree` `GetLastError` `LoadLibraryExW`
advapi32.dll	`SystemFunction036` `EventRegister` `EventSetInformation` `EventWriteTransfer` `EventUnregister` `RegGetValueW` `RegOpenKeyExW` `RegDeleteValueW` `RegCreateKeyTransactedW` `RegCreateKeyExW` `RegOpenKeyTransactedW` `RegQueryValueExW` `RegCloseKey`
oleaut32.dll	`SysFreeString` `GetErrorInfo` `SetErrorInfo` `SysStringLen`
bcryptprimitives.dll	`ProcessPrng`
ntdll.dll	`NtOpenFile` `NtCancelIoFileEx` `NtCreateFile` `NtCreateNamedPipeFile` `RtlGetVersion` `NtDeviceIoControlFile` `NtReadFile` `RtlNtStatusToDosError` `NtWriteFile`
user32.dll	`OffsetRect` `TranslateAcceleratorW` `GetMenuBarInfo` `DestroyMenu` `CheckMenuItem` `RemoveMenu` `CreatePopupMenu` `CreateMenu` `SetMenuItemInfoW` `AppendMenuW` `RegisterClassExW` `InsertMenuW` `TrackPopupMenu` `PostQuitMessage` `CreateAcceleratorTableW` `DestroyAcceleratorTable` `GetMenuItemInfoW` `DrawMenuBar` `SetMenu` `DrawIconEx` `CreateWindowExW` `CreateIcon` `GetAsyncKeyState` `GetKeyboardState` `MapVirtualKeyExW` `ToUnicodeEx` `GetKeyState` `GetMenu` `GetWindowDC` `SystemParametersInfoA` `SetPropW` `SetWindowLongW` `EnableMenuItem` `GetSystemMenu` `ClipCursor` `GetClipCursor` `ShowCursor` `DestroyWindow` `MonitorFromPoint` `SetWindowPos` `GetMessageA` `SetWindowTextW` `GetWindowTextW` `GetWindowTextLengthW` `SetWindowDisplayAffinity` `SendInput` `SetForegroundWindow` `DestroyIcon` `GetRawInputData` `GetKeyboardLayout` `DrawTextW` `RegisterRawInputDevices` `ReleaseCapture` `SetCapture` `MsgWaitForMultipleObjectsEx` `DispatchMessageA` `IsWindowVisible` `SendMessageTimeoutW` `RegisterWindowMessageA` `SetParent` `MapWindowPoints` `GetWindow` `SetFocus` `ShowWindow` `ReleaseDC` `GetWindowRect` `SetWindowLongPtrW` `TranslateMessage` `EnumChildWindows` `GetParent` `GetWindowLongPtrW` `PostMessageW` `FindWindowExW` `SetWindowRgn` `FlashWindowEx` `EnableWindow` `VkKeyScanW` `AdjustWindowRect` `IsWindowEnabled` `IsProcessDPIAware` `GetDC` `MessageBoxW` `EnumDisplayMonitors` `RedrawWindow` `SendMessageW` `GetForegroundWindow` `IsIconic` `RegisterTouchWindow` `IsWindow` `AdjustWindowRectEx` `GetActiveWindow` `UpdateWindow` `InvalidateRect` `SetCursorPos` `GetMessageW` `InvalidateRgn` `GetWindowPlacement` `SetWindowPlacement` `ChangeDisplaySettingsExW` `GetUpdateRect` `MapVirtualKeyW` `ValidateRect` `SetCursor` `LoadCursorW` `CloseTouchInputHandle` `GetTouchInputInfo` `TrackMouseEvent` `SystemParametersInfoW` `FillRect` `GetSystemMetrics` `GetMonitorInfoW` `MonitorFromRect` `MonitorFromWindow` `GetCursorPos` `ClientToScreen` `GetClientRect` `GetWindowLongW` `ScreenToClient` `DefWindowProcW` `PostThreadMessageW` `PeekMessageW` `DispatchMessageW`
api-ms-win-core-synch-l1-2-0.dll	`WakeByAddressSingle` `WakeByAddressAll` `WaitOnAddress`
ole32.dll	`CoTaskMemFree` `CoUninitialize` `OleInitialize` `CoTaskMemAlloc` `CoCreateFreeThreadedMarshaler` `CoInitializeEx` `RevokeDragDrop` `RegisterDragDrop` `CoCreateInstance`
comctl32.dll	`RemoveWindowSubclass` `DefSubclassProc` `TaskDialogIndirect` `SetWindowSubclass`
shlwapi.dll	`SHCreateMemStream`
gdi32.dll	`CreateRectRgn` `GetDeviceCaps` `DeleteObject` `SetBkMode` `CreateSolidBrush` `SetTextColor` `BitBlt` `CreateCompatibleDC` `CombineRgn` `DeleteDC` `SelectObject` `CreateDIBSection`
dwmapi.dll	`DwmEnableBlurBehindWindow` `DwmGetWindowAttribute` `DwmSetWindowAttribute`
shell32.dll	`SHGetKnownFolderPath` `ShellExecuteW` `DragQueryFileW` `DragFinish` `SHAppBarMessage` `SHCreateItemFromParsingName`
ws2_32.dll	`bind` `connect` `WSAIoctl` `freeaddrinfo` `WSACleanup` `WSAStartup` `shutdown` `WSASocketW` `ioctlsocket` `getaddrinfo` `WSAGetLastError` `closesocket` `setsockopt` `send` `WSASend` `recv` `getsockname` `getpeername` `getsockopt`
secur32.dll	`ApplyControlToken` `DecryptMessage` `EncryptMessage` `AcceptSecurityContext` `InitializeSecurityContextW` `AcquireCredentialsHandleA` `FreeCredentialsHandle` `FreeContextBuffer` `DeleteSecurityContext` `QueryContextAttributesW`
crypt32.dll	`CertCloseStore` `CertDuplicateCertificateChain` `CertFreeCertificateChain` `CertGetCertificateChain` `CertVerifyCertificateChainPolicy` `CertFreeCertificateContext` `CertDuplicateStore` `CertOpenStore` `CertAddCertificateContextToStore` `CertDuplicateCertificateContext` `CertEnumCertificatesInStore`
bcrypt.dll	`BCryptGenRandom`
iphlpapi.dll	`GetExtendedTcpTable`
api-ms-win-crt-string-l1-1-0.dll	`_wcsicmp` `wcscmp` `strcpy_s` `strlen` `wcslen`
api-ms-win-crt-math-l1-1-0.dll	`pow` `roundf` `round` `__setusermatherr` `trunc` `floor`
api-ms-win-crt-convert-l1-1-0.dll	`wcstol` `_ultow_s` `_wtoi`
api-ms-win-crt-runtime-l1-1-0.dll	`_initterm` `_initterm_e` `_get_initial_narrow_environment` `_exit` `__p___argc` `__p___argv` `_cexit` `_c_exit` `_initialize_narrow_environment` `_configure_narrow_argv` `_register_thread_local_exe_atexit_callback` `_set_app_type` `_seh_filter_exe` `_crt_atexit` `exit` `terminate` `_initialize_onexit_table` `_register_onexit_function` `abort`
api-ms-win-crt-stdio-l1-1-0.dll	`_set_fmode` `__p__commode`
api-ms-win-crt-locale-l1-1-0.dll	`_configthreadlocale`
api-ms-win-crt-heap-l1-1-0.dll	`_set_new_mode` `_callnewh` `malloc` `calloc` `free`

Delayed Imports

1

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x650`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.8551`
Detected Filetype	PNG graphic file
MD5	`bee553592384d355079cf1872fb4939b 🔍`
SHA1	`dc05f736b3c1a03a753182e96597ad20697e46fd 🔍`
SHA256	`9773daf3fcc1722aa9b9dd23fa4b43a4d6977089aaa2fc58e78ccfc3db0c1afe 🔍`
SHA3	`fe4109ac86bec0013e897c0f3b83eeff366963658558227057df2d20dcf778a3 🔍`

2

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x285`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.53236`
Detected Filetype	PNG graphic file
MD5	`3267fe598faeaf896da1b93f177613e0 🔍`
SHA1	`0b22791b17360498497f1f9b785db61afe1e0174 🔍`
SHA256	`00165456bc673b44abe76b8388fce0136adddb400e3b1ade9b90efe2439dde97 🔍`
SHA3	`97a6784297d8bd8a31c8be574c49af63b8576f18517d00f84bf34683607c1cd0 🔍`

3

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x358`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.6339`
Detected Filetype	PNG graphic file
MD5	`788226e00001d61f221f47cc805bd32a 🔍`
SHA1	`4fde6aa49fa179334aa0abdc2a223fa45e8f26f4 🔍`
SHA256	`d1d371056ae3e769e37af4e4f79caa693f6533a2cd3b4356a39e7b64badf6b84 🔍`
SHA3	`4caac3dca91bf7098c018dd0503190ca7dd0c1a4ae567be2bdb6369f4c5b07d6 🔍`

4

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x46c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.73446`
Detected Filetype	PNG graphic file
MD5	`d58fd02774540e7b877000d152f5c04c 🔍`
SHA1	`ff462ac3c2d419699bdc783c81dfe5484636315e 🔍`
SHA256	`6a09de1c21f215dc1cc5e8ff7717ccacbcd7ed691faaa7e99d6fc47c048528f6 🔍`
SHA3	`0bd897d63e56d71d839ff1d376603e26960096776f1e32bd0460360f1e81f803 🔍`

5

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x8b1`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.87938`
Detected Filetype	PNG graphic file
MD5	`263ce1df08241714c043a58813199813 🔍`
SHA1	`1b4542b6d65a05bd4a87659b9682d067fa565e11 🔍`
SHA256	`3a2cd0a1461ae5057fe2c23617bd568d84fc51c28c55efe90963eb129271ca41 🔍`
SHA3	`7121173e89adc8aa17c940513c9ee36339f65b89c42ee929d9343711e6f17f06 🔍`

6

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0xb10`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.91092`
Detected Filetype	PNG graphic file
MD5	`65aa5f5399f4abd57cf88a491b84cc25 🔍`
SHA1	`d6dbe349d5c619c749198b3ba7e37e45d0d2500e 🔍`
SHA256	`df7cbe57e1421b6839af856478f7ac639440ddf4b538a41016e5e93682baff57 🔍`
SHA3	`356ee5cac00fe6630497408a545bd4b1eada23ff9842402df4e8cd22951efdff 🔍`

7

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1054`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.94011`
Detected Filetype	PNG graphic file
MD5	`850579abac7612b753cb78f4292680b5 🔍`
SHA1	`52558a1fa84dc80faaf68752a681280a1623db20 🔍`
SHA256	`3afbf8275eed624539ced795e2f8d0f6993cf73019ae7cadb0c2f49844794fd7 🔍`
SHA3	`4fe40ce351070246704a71bef11d552e810a0dac1b816a3e7acf6695605a289c 🔍`

8

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x3379`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.96963`
Detected Filetype	PNG graphic file
MD5	`5384f702ebebcd03a7014085f1bc93df 🔍`
SHA1	`2a0a3e22e49d79d56aec69d7b5afab7fee3d0084 🔍`
SHA256	`e72c606a37762d3861bece2510958e695486e4ede85877818b0441b9d8a3fd82 🔍`
SHA3	`78a0a6da3a1cfa493271799610b0de905b9b0a81396f37ae8e4065d1d172a8cd 🔍`

9

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0xbcce`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.97772`
Detected Filetype	PNG graphic file
MD5	`5b3623b5573a37ab0bdccfe0ec1752b7 🔍`
SHA1	`a6d1be2ce632b3ebb8820281f52ef8177994630e 🔍`
SHA256	`b35fed8b4f7fe549b5cf9c557bb4f005c33ab2a1dd290055f56b625716eb428a 🔍`
SHA3	`c899ce41b96b0dcb359ba4dad1f50a47c628a15e4c78d19de30a01c304c51b6e 🔍`

32512

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x84`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.03231`
Detected Filetype	Icon file
MD5	`b1b7105ef8e9c243aafc55df0d9a0992 🔍`
SHA1	`33f04876c7d3b3dd25714e835d486a77a1fb6bf5 🔍`
SHA256	`4928013273b3b9cb739d35b75b6e526fe88765b6b9331fee09e5331ef6deb763 🔍`
SHA3	`d88d07f2909d8e7bf785b2658ca5e14bce9d81c27d303cdac26428229061c16f 🔍`

1 (#2)

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1e4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.17453`
MD5	`a9cf2b3f17e70c467fdbdbc3743599c5 🔍`
SHA1	`3aef78e4f3b679247dcde1442be30811ee2b1bf4 🔍`
SHA256	`0f3e9addb69b4066198be11d99e7f380d85680b3e8045ac7dacd09df740db5d6 🔍`
SHA3	`3e69fca292abf0b5ca459928b72a8edd18db60a402c5dd731963d8ae194f785d 🔍`

1 (#3)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.96056`
MD5	`01e4c8c046a47771f13cd120b53303e7 🔍`
SHA1	`2a4224d31c916a5cff4f2636a3cb47fdd84a5cc9 🔍`
SHA256	`b1cb832f790c153aa0e9a66f76e75460263cf1d41971d2dbcc9a4d87ec18b7d8 🔍`
SHA3	`680120ec819e7ba66519d9a8a3e446973c4cb28aa0146c91cceaa8c8fadc90ae 🔍`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	0.1.0.0
ProductVersion	0.1.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT` `VOS_NT_WINDOWS32` `VOS_WINCE` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
CompanyName	CMD Softworks
FileDescription	Solara V3
FileVersion (#2)	0.1.0
ProductName	Solara V3
ProductVersion (#2)	0.1.0

Resource LangID	English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2026-Aug-21 06:48:15
Version	`0.0`
SizeofData	`37`
AddressOfRawData	`0xed274c`
PointerToRawData	`0xed134c`
Referenced File	SolaraV3.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics	`0`
TimeDateStamp	2026-Aug-21 06:48:15
Version	`0.0`
SizeofData	`20`
AddressOfRawData	`0xed2774`
PointerToRawData	`0xed1374`

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2026-Aug-21 06:48:15
Version	`0.0`
SizeofData	`1048`
AddressOfRawData	`0xed2788`
PointerToRawData	`0xed1388`

TLS Callbacks

StartAddressOfRawData	`0x140ed2be8`
EndAddressOfRawData	`0x140ed2dec`
AddressOfIndex	`0x1411a1420`
AddressOfCallbacks	`0x140c9cd60`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_8BYTES`
Callbacks	`0x0000000140C3EB20`

Load Configuration

Size	`0x140`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x14119ee80`

RICH Header

XOR Key	`0xae99ce38`
Unmarked objects	`0`
Imports (VS2008 SP1 build 30729)	`14`
ASM objects (35721)	`9`
C objects (35721)	`13`
C++ objects (35721)	`46`
C objects (36251)	`12`
Total imports	`504`
Unmarked objects (#2)	`785`
Resource objects (36256)	`1`
Linker (36256)	`1`

Errors

Leave a comment

No comments yet.