filename | StartHDS.exe | |
---|---|---|
size | 156672 (0x26400) | |
md5 | e9ea8bac58df9fc766e635c3fe084acd | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xf0 |
Rich Header
lib id | version | times used |
---|---|---|
95 | 4035 | 10 |
93 | 4035 | 28 |
125 | 50727 | 26 |
109 | 50727 | 148 |
4 | 8447 | 3 |
1 | 0 | 567 |
110 | 50727 | 159 |
114 | 50727 | 9 |
124 | 50727 | 1 |
120 | 50727 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
UPX Modified >> *$igBy Ahmed18 This file is packed with UPX. Analysis will be incomplete without unpacking. |
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
data | 0x1000 | 0x35000 | 0 | RWX UDATA | |
data | 0x36000 | 0x25000 | 0x24a00 | RWX IDATA | |
.rsrc | 0x5b000 | 0x2000 | 0x1600 | RW- IDATA |
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0 | 0 | |
IMPORT | 0x5c184 | 0x33c | |
RESOURCE | 0x5b000 | 0x1184 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0x5a914 | 0x48 | |
Bound_IAT | 0 | 0 | |
IAT | 0 | 0 | |
Delay_IAT | 0x40d08 | 0x40 | |
CLR_Header | 0 | 0 |
id | lang | string |
---|---|---|
96 | 2052 | e8 dc 75 f0 dc 4d 04 fa 09 b3 5b 6d 16 5d f8 d9 |..u..M....[m.]..| 1a 08 12 05 7a 20 c1 ec 89 b7 08 06 f9 2b 02 2b |....z .......+.+| 9d 51 15 68 b0 9b 88 16 0f 2e 05 42 d0 c3 b3 ee |.Q.h.......B....| 50 18 69 b6 bf ce 48 d3 34 89 2e 28 10 0c 91 88 |P.i...H.4..(....| 26 33 08 b6 |&3.. | |
61440 | 2052 | c3 f2 35 b7 76 4d 10 c6 0f 03 d1 0c 16 5c 93 88 |..5.vM.......\..| 77 e6 52 54 47 d1 e9 d1 db 4f 41 2a 95 a6 c9 f3 |w.RTG....OA*....| 14 10 7b ff a4 9a 0c 0f ee 76 09 4e 2b 30 1b 24 |..{......v.N+0.$| f1 3c 25 2d ae 12 08 0c 4e 4a 67 12 65 8b ca 9a |.<%-....NJg.e...| 45 9c 04 b9 d9 cf c4 d0 5a 2e 3d 5f 18 e8 a2 06 |E.......Z.=_....| 02 56 02 43 01 2f 77 2c d2 54 20 0c 12 25 b7 ae |.V.C./w,.T ..%..| 06 a9 92 82 75 d2 c1 b8 61 a1 84 66 3e 2a 50 85 |....u...a..f>*P.| aa db ca 2b f0 d7 d2 12 8a 26 6a 02 88 c6 b4 42 |...+.....&j....B| 43 ff |C. | |
61456 | 2052 | f9 c6 45 fa 00 59 6a c9 16 f8 e4 0b c4 dd f9 00 |..E..Yj.........| 41 92 64 14 23 88 3b 63 51 74 8e 09 88 5d 20 02 |A.d.#.;cQt...] .| ca 45 f4 07 da c8 05 ca f0 14 |.E........ | |
61472 | 2052 | ae a5 17 88 2f 7a f4 13 f0 a0 d3 74 8d 11 ff a1 |..../z.....t....| 70 a0 06 22 0e ce 56 46 43 5b 70 57 82 3a b7 5e |p.."..VFC[pW.:.^| 55 6d 38 59 ab c2 94 4a d2 7c 93 a1 35 70 83 34 |Um8Y...J.|..5p.4| ac f7 75 09 0e a3 29 05 89 cf 91 97 9d 53 cf 00 |..u...)......S..| c7 00 e8 00 18 3c 87 54 2e 07 18 20 10 37 4f 0e |.....<.T... .7O.| a9 0c 18 ab 00 3c 81 ff 26 eb 42 11 1a 7f 77 34 |.....<..&.B...w4| 4b d6 1a d6 28 79 69 b0 b7 0d 87 8c 3f e8 01 e0 |K...(yi.....?...| ac ce 0d 57 e5 de a1 d2 c6 34 70 c2 b8 66 d9 61 |...W.....4p..f.a| 7d 58 07 dd b2 53 c8 32 28 c2 a1 70 1a 82 41 33 |}X...S.2(..p..A3| 81 12 79 14 1c 98 93 14 0e eb 94 94 93 b0 54 b6 |..y...........T.| b7 f3 47 3b 28 72 14 96 c1 fd 7e 10 51 c6 99 1d |..G;(r....~.Q...| 88 5a 03 a7 fe 9c 3b ed 02 93 de f3 80 e8 90 36 |.Z....;........6| c1 3a 1a 02 e4 32 96 39 4a fe d3 c7 8d 65 ec 24 |.:...2.9J....e.$| 12 f2 03 0c cd b5 a7 83 c4 1c 26 5c cc 00 ff 56 |..........&\...V| 1b 4d e0 4c 5c 00 8e bd e2 93 da 16 02 0a 2a c2 |.M.L\.........*.| 68 ab 04 24 eb d4 19 2d 33 aa d2 24 2e bc 69 be |h..$...-3..$..i.| d5 1c 8a 06 35 c6 a3 72 ee 8b c1 13 c0 4c 78 e4 |....5..r.....Lx.| f2 9f 73 6b 03 a0 21 5b 38 13 f4 00 e9 4f b8 f3 |..sk..![8....O..| 8d 00 be 4b 2e 57 72 75 8d 7b 9a 76 8a c4 87 8c |...K.Wru.{.v....| 6e a1 0a c0 25 1d 90 04 a6 24 d3 dc bc ff 52 3a |n...%....$....R:| 51 fc 75 4d 8a 50 fd 16 3c fd 75 37 fe d5 3c cd |Q.uM.P..<.u7..<.| cd 26 fe 75 21 ff 10 ff 16 ba 41 88 b6 3e 39 ef |.&.u!.....A..>9.| 1d 30 ee 82 c2 eb 3f 8f eb 46 12 fe f3 fc 3c 3f |.0....?..F....| fe eb 3c fd fd eb 32 fc 1a 7e 76 f6 fc eb 28 db |..<...2..~v...(.| eb 0f de 8a 14 3a 11 c0 40 a1 39 56 22 a2 06 8a |.....:..@.9V"...| ec 7f |.. | |
61696 | 2052 | 52 12 9c 45 2b c1 eb 91 a4 01 88 f2 37 10 40 9c |R..E+.......7.@.| 28 00 2b bb 38 5d c2 39 08 29 45 d0 cb 53 32 03 |(.+.8].9.)E..S2.| 5b 99 10 2a 00 e1 84 8c 62 35 26 f1 e5 67 c1 0a |[..*....b5&..g..| 7f a3 77 9b 53 21 7c a1 95 38 33 e1 05 15 0c 20 |..w.S!|..83.... | 9e f5 b1 04 46 8d 81 62 99 0f 20 fe 4e 31 f7 fb |....F..b.. .N1..| 8d 79 ff 6a 64 56 4d 09 85 3a 4e 22 b6 99 92 0f |.y.jdVM..:N"....| 12 31 12 40 a0 d8 3d 1d 84 46 c6 fc 03 02 20 ee |.1.@..=..F.... .| 12 36 c0 03 ef 20 8d 41 ba f5 1c 20 1c 7a 97 2b |.6... .A... .z.+| c7 1b c6 d6 ee 26 a6 bb 80 51 92 53 25 7c a4 be |.....&...Q.S%|..| 50 66 03 f8 11 55 f4 66 7f 4d 6b f0 ad 10 3c 2c |Pf...U.f.Mk...<,| 73 47 8c 81 c7 0b 83 2e 16 c0 cb 50 00 d8 ba 1b |sG.........P....| 2b 6e b4 ee 79 05 49 ea fc 41 b1 0b c4 46 36 64 |+n..y.I..A...F6d| 99 14 85 d2 58 81 30 14 85 1c 0c ee 6e 29 3a b9 |....X.0.....n):.| 27 41 03 fb 6f f2 41 32 2c ec 36 79 73 0a b1 ba |'A..o.A2,.6ys...| cc c6 07 89 34 c4 4d f0 f0 27 58 46 14 57 0f c2 |....4.M..'XF.W..| 14 1c 82 05 82 86 99 32 ae cc 6f 69 1f a4 05 d0 |.......2..oi....| f6 60 52 c2 ba 94 8b 0d 27 71 0c ee 94 39 42 de |.`R.....'q...9B.| 0c 6e 0b 9e 36 0e 1c 8a 7c fa ec 0e 48 0f d9 49 |.n..6...|...H..I| e2 2b 04 8a a8 0b 71 e1 a2 00 34 53 25 9b 84 fd |.+....q...4S%...| 78 b0 07 f6 59 99 fc 39 e4 cf 3e 1a 10 0e f6 ea |x...Y..9..>.....| 57 89 56 18 08 cf fd 06 b9 f0 f1 ff 53 ed 6a 3c |W.V.........S.j<| 4b 45 8e f1 8a 6f 40 04 6b c0 3c 2b 1a 5e 20 89 |KE...o@.k.<+.^ .| 3e 87 f8 10 44 34 a9 8b 0d b4 51 4c c1 16 d1 99 |>...D4....QL....| 67 b8 73 87 5c 85 b0 b8 e5 0a 6c 9c 97 4b b8 b0 |g.s.\.....l..K..| 40 52 da 54 10 5a 6e d8 09 25 c8 04 d4 19 9a a6 |@R.T.Zn..%......| 69 e4 dc d8 e0 4e 94 f8 42 61 a1 10 bb ea 36 52 |i....N..Ba....6R| 60 7b 16 e5 16 a4 59 72 90 4b 1b 84 2b 34 dc 3c |`{....Yr.K..+4.<| bc 94 5c 06 d8 70 0e dd 28 03 88 22 8a cc aa 4f |..\..p..(.."...O| 1b 6c 58 22 83 cf fa 3d 54 36 0a 48 68 67 eb 06 |.lX"...=T6.Hhg..| c6 0c 9c ed ed 75 59 1a 77 31 d4 80 c4 fc 7c d4 |.....uY.w1....|.| 78 a1 28 56 62 f9 68 7c 94 21 50 5a 6b ec 62 2b |x.(Vb.h|.!PZk.b+| ec 29 e6 33 e3 7d 64 ed d4 ad 6d 59 a3 8b c8 9e |.).3.}d...mY....| 96 3d 56 1d 56 39 dd 46 b9 6f 6c 35 2f e3 3f 04 |.=V.V9.F.ol5/.?.| d8 e6 20 38 4f e9 be 13 bb ed 42 40 60 0d 0b 21 |.. 8O.....B@`..!| 68 78 c0 93 6a 20 fd 98 db ef 03 74 44 e9 b6 0d |hx..j .....tD...| 24 36 a1 bd d1 78 28 58 62 66 39 1d be 54 bb cd |$6...x(Xbf9..T..| c0 18 ac 15 cc 29 d2 3c 64 41 cc 7e ce 2d 12 84 |.....). |
61712 | 2052 | b4 1e 0f be e7 ba b9 be 49 b9 9c eb 2e ef 53 19 |........I.....S.| 32 13 05 08 53 da ed ba df 13 ca 31 27 6a 05 81 |2...S......1'j..| 56 2d 0a 58 c3 0e 2d be 5f 48 8b 0d 83 a1 a7 3b |V-.X..-._H.....;| c8 32 a6 cc f6 7f 1c 7d 16 3b d1 7c 22 3b d0 7f |.2.....}.;.|";..| 1e 0e 7e 1e 6c 0f 0b 4d ca c3 2a 22 7c f6 71 8d |..~.l..M..*"|.q.| 66 db 7f f2 0e 7e 08 7d 2e e8 4e 75 65 12 7a d6 |f....~.}..Nue.z.| 03 12 0b 74 00 5b 8a 07 97 36 75 0d 20 05 26 83 |...t.[...6u. .&.| 0c 78 23 a2 72 88 72 e9 74 19 5c 18 41 93 2a a3 |.x#.r.r.t.\.A.*.| 58 b4 e2 f8 8e f0 87 27 48 2c 32 75 2a 6a 06 af |X......'H,2u*j..| 53 b4 b8 2d 80 25 0b 91 f0 d8 18 5b 4e 13 80 7f |S..-.%.....[N...| c3 18 5f e4 15 80 d7 f0 56 18 0a 44 40 94 e4 06 |.._.....V..D@...| 3c 26 d6 01 d9 7c c1 24 c3 59 ca 81 48 a7 48 2c |<&...|.$.Y..H.H,| 5f 27 1d 26 9c c4 84 10 0c de f3 ee 21 10 89 1c |_'.&........!...| 36 18 13 34 14 a0 27 9d 49 18 8a 1b 49 27 b9 13 |6..4..'.I...I'..| bc 7d 8a 94 06 de de 9a 0a c2 16 4f 79 4e eb e4 |.}.........OyN..| 0e 13 4f fa 39 54 cd c1 49 27 6d 26 c8 18 91 7a |..O.9T..I'm&...z| 9a f4 99 99 6b 10 0e 50 76 08 54 14 30 61 cf 6b |....k..Pv.T.0a.k| 18 0e 0c 10 9a 6c 64 09 ef d1 5f 5b 27 0c 89 e9 |.....ld..._['...| c2 07 c9 9c 38 0a 6b 22 be 2a 10 ed 6a 03 5f 11 |....8.k".*..j._.| 2f 2d 6c 86 3b 3d e4 7d 57 a3 02 e1 25 b5 11 b4 |/-l.;=.}W...%...| 30 a5 85 44 e5 0f 3f 0c 54 ae 9c 01 d7 a7 03 f2 |0..D..?.T.......| ff 14 32 4c 20 de 7c 28 4d f7 d0 f0 50 05 62 41 |..2L .|(M...P.bA| 47 eb 9e 65 60 92 d3 c5 c4 bc 01 6d e9 49 57 11 |G..e`......m.IW.| 28 1e f6 20 f0 61 ca 78 bc f0 04 37 f0 16 91 e8 |(.. .a.x...7....| 88 5d fe 7a c4 e6 42 2c 16 c0 5f 74 09 c6 45 32 |.].z..B,.._t..E2| 0a 78 01 dc 07 ce ab 95 d1 3e ff a2 a4 f7 56 7d |.x.......>....V}| 13 43 21 85 e8 d7 f3 a2 84 a9 35 b8 1b d8 5b 0f |.C!.......5...[.| 4c 61 75 12 d2 40 07 35 a8 f5 db 1c 90 74 04 80 |Lau..@.5.....t..| 4d ff 80 2a 26 5a 1b 42 3b 49 a6 c3 b9 f3 3e 48 |M..*&Z.B;I....>H| a9 3f 28 d8 74 32 04 b7 89 18 8f 28 0d a7 70 3f |.?(.t2.....(..p?| ca 1f 4f 52 67 1b 58 f6 b0 54 b2 b2 0c 11 22 f3 |..ORg.X..T....".| 2e 12 70 da c4 c7 74 35 06 28 d2 4d 16 ce 1b 24 |..p...t5.(.M...$| 40 75 ad ac 7b 50 a6 18 38 99 f8 eb 1a cb 48 09 |@u..{P..8.....H.| 8b 38 eb 15 ed 7d 44 e8 19 84 2d d0 07 f0 60 dc |.8...}D...-...`.| 20 ba 00 4c c2 aa 09 9f d8 4b 7f 3e 74 33 0a 2f | ..L.....K.>t3./| a7 00 67 1b e7 74 1f 0c 66 24 98 6d 09 e8 69 14 |..g..t..f$.m..i.| 03 85 1c 94 f0 95 a7 f2 2e 2f 10 04 26 03 1d 69 |........./..&..i| 3f ed 69 6e 05 0f 0c 06 64 3b c2 60 1f 29 41 2d |?.in....d;.`.)A-| 17 e5 b0 6d 18 18 2f dd c8 83 91 80 82 da f6 15 |...m../.........| d8 50 53 d0 02 54 f8 55 be d2 78 4b f0 58 c0 d0 |.PS..T.U..xK.X..| 64 17 81 74 45 58 48 1a 60 b5 70 16 f0 59 8c e8 |d..tEXH.`.p..Y..| 02 f8 04 0d b3 80 62 4a 1c f8 02 b9 55 de df 11 |......bJ....U...| 3b 08 eb 14 f4 05 a2 2a 10 74 06 4b 10 5e 6b 66 |;......*.t.K.^kf| d1 84 97 a1 c5 f0 8b 17 b9 27 3c 09 58 2a 66 84 |.........'<.X*f.| f0 57 04 f0 4d e5 83 4c 2a 85 80 f8 21 84 80 67 |.W..M..L*...!..g| e9 4a 85 88 14 81 a8 6e 36 9b a8 0c 20 11 97 e2 |.J.....n6... ...| 3a 4d 26 56 9c 20 fe ff 69 59 96 2e 16 12 47 52 |:M&V. ..iY....GR| fe 2b 56 41 65 e5 34 24 7d 96 ce 65 12 27 eb b8 |.+VAe.4$}..e.'..| a3 f1 4d be 1f 4d ff 14 08 57 7b cd 9a b8 aa cf |..M..M...W{.....| 7c 06 8b d0 69 7e fa 80 1f 57 ||...i~...W | |
61728 | 2052 | 95 59 59 8a 96 c9 01 9b 6f b5 11 52 3f be 02 24 |.YY.....o..R?..$| 80 88 32 5c a1 fd 4d fd 80 65 fd 48 0c ff 95 3e |..2\..M..e.H...>| fc d3 a2 13 e6 b1 70 12 02 74 71 6a 02 46 12 64 |......p..tqj.F.d| 66 bc cd 38 53 f1 07 63 53 27 5d 81 38 83 60 7a |f..8S..cS'].8.`z| f0 6b 3f 4d 3b 2f d3 a8 c7 2d a4 41 5b a3 9d b8 |.k?M;/...-.A[...| 22 88 fd ef aa ba 50 a1 52 7b 2a 1a 92 f8 d1 23 |".....P.R{*....#| fd 1c c0 5d ed f6 ed c3 80 cf 41 3b 30 b9 74 b3 |...]......A;0.t.| ec ff 00 30 b9 0f 11 8e 4e 2d 85 18 a5 4a e0 05 |...0....N-...J..| 0c 8c ec 23 d6 05 aa da c0 09 7d f6 09 8d 6d 7d |...#......}...m}| e6 13 1c 60 44 3d a1 29 23 23 ef 69 0c 40 22 1a |...`D=.)##.i.@".| 02 02 04 f1 aa ed 34 07 0c 75 1d 72 fe 01 eb 17 |......4..u.r....| de 3f 12 e1 bd a6 23 c8 3b c8 75 09 26 02 05 a6 |.?....#.;.u.&...| d5 ca 9e cc 0d 00 f6 b5 68 18 19 94 01 cc ee 22 |........h......"| a8 ce 5a 3d 8b 7f 0f c0 dc 9c 53 ab a5 c8 92 ce |..Z=......S.....| b7 33 77 14 98 dd b8 34 46 84 f0 02 86 79 34 c2 |.3w....4F....y4.| dc 5e 4e 76 0e 08 04 76 30 3c 66 94 c8 9c 44 0f |.^Nv...v0 |
61744 | 2052 | 딌滗與뿬驷᪢˰῍䴈曽ࡦ晎섃붺䰔싒ผ跑ԩ蘭ᵁ䓄圴摻ࣂዲ턦톼Ƀ唌㮀ᾂ줍棫䮍凿儑臰ᘫ䠐蘉鸈ʂ䏈줅薁嘖曊Ⳏ䡮ꃌ橱Ո⓫ |
61824 | 2052 | c9 33 18 01 e2 01 18 ec 0f 51 1e 5e 18 e6 44 61 |.3.......Q.^..Da| eb cb ed 87 88 df 90 6e d7 55 f5 a0 1b 05 bd 38 |.......n.U.....8| de 42 00 63 5d a3 49 c4 81 cf 57 93 88 ad a8 32 |.B.c].I...W....2| b1 48 fc 57 db 4a 50 18 0e 28 52 06 24 52 12 61 |.H.W.JP..(R.$R.a| 16 40 1a ce 81 c4 63 5c 68 55 c2 a8 55 50 54 22 |.@....c\hU..UPT"| 56 93 f4 40 de ef 08 33 f2 5f 50 8d 44 24 04 64 |V..@...3._P.D$.d| a3 28 d3 40 81 95 e3 50 3a 95 88 cd ad 3e 2c 0c |.(.@...P:....>,.| 06 3b 74 76 2d e2 39 03 c2 26 20 b3 89 dd 78 a9 |.;tv-.9..& ...x.| 12 b1 3c 7c b3 e6 17 44 b3 83 87 5d 89 e9 11 50 |..<|...D...]...P| eb b7 6d 4a c4 85 20 65 30 f8 db b0 e9 08 64 8b |..mJ.. e0.....d.| 1f 81 79 04 07 70 03 80 41 12 ae 07 |..y..p..A... | |
61840 | 2052 | ҂ṑ䲵뭑俐 뮢謑䯗襒Ⱬു兕塐끙ꐖ熆퀬겉婼슘ᓇ珽빒ꎰ㳋茏逼耴餶颂¸ᐖﹾ̧前樐፵橓┈퐆ࣜ룎왥耱ᨇ㏸許촩鴁ਬ要韉ﻛ㭛匍ꌜᆅ┾ំ讀听琁搵훝ꜰ⬝Ë摉២䥈ಃ&탖慌쿲漘܊ୗ㣻2逎쌗冑ᦁ︔ᨵᚣٜᚦ䘭䒚镌৭ஓ䁞⩸ |
61856 | 2052 | 3c 9a c7 ce f7 33 a5 89 95 d0 01 13 f5 56 2c e0 |<....3.......V,.| 36 67 1e 1a 4b 18 47 83 2b 75 6a 78 14 30 58 30 |6g..K.G.+ujx.0X0| 39 d1 59 49 bc 03 00 80 1d b9 45 bc 03 09 41 95 |9.YI......E...A.| 38 0c d2 69 0b b9 71 a3 d8 2d e2 0d 0e cb 1d c1 |8..i..q..-......| e9 02 44 6f 6f f4 82 c4 55 42 7a 18 68 98 0a b9 |..Doo...UBz.h...| ff d8 40 e2 49 a6 0b 3d 44 bc 77 08 83 d3 14 27 |..@.I..=D.w....'| f4 66 c2 9e cf 04 da 40 0f 8d 41 f4 2c c1 6d c9 |.f.....@..A.,.m.| 34 bd a5 30 bf 75 9f a0 b1 f5 e0 38 23 05 02 87 |4..0.u.....8#...| 4f 74 28 48 d2 9c 32 46 aa 30 f4 30 85 5c c1 39 |Ot(H..2F.0.0.\.9| 05 e1 fb a6 84 0d 27 1c 83 c2 a0 ab 0d 05 6a fa |......'.......j.| 10 93 e0 19 a9 2f d2 57 83 30 b4 df 41 85 a8 76 |...../.W.0..A..v| 53 e7 a9 74 94 5b ff bc 1b 18 f4 83 c6 28 eb 82 |S..t.[.......(..| 52 ba df 08 c4 c6 fb 61 e6 c6 4c e0 09 3e c9 62 |R......a..L..>.b| c6 2b 31 99 6a 28 8a 4f 5a 2e 3a 1a 05 dc 1e 41 |.+1.j(.OZ.:....A| 1a 52 86 82 79 47 84 54 59 0f c8 d1 b8 d3 02 f2 |.R..yG.TY.......| 2a cb 3e d8 61 8d 0c bd 54 d6 a3 b2 8d 73 17 e1 |*.>.a...T....s..| 97 90 c1 4a 7a 86 dd ca b8 30 c1 c1 e7 76 a6 5d |...Jz....0...v.]| 14 3c 48 c5 b4 60 c9 c6 44 08 16 57 16 0e 3e 2c |. |
61872 | 2052 | d7 01 da 02 5f 2c 0f 04 ac 03 c6 77 9e cc 03 01 |...._,.....w....| 8c 6e e2 d3 2b d1 da 03 e8 a3 41 88 09 3e 13 a6 |.n..+.....A..>..| 3e 85 af f0 40 f3 a4 5e 53 da 22 09 85 56 35 a4 |>...@..^S."..V5.| c1 10 94 e4 ee 8a 6e 18 13 e4 36 98 03 20 7a dd |......n...6.. z.| 2a f5 b2 93 2b 84 52 51 c3 89 41 30 86 23 eb 1a |*...+.RQ..A0.#..| 6d 22 38 65 c1 65 a4 90 9c 07 ed 1d 5e 03 a9 ec |m"8e.e......^...| fc c5 f4 60 00 0b 25 19 a4 ad 32 f0 19 7f 0e 08 |...`..%...2.....| e4 e4 e4 e4 0c 10 14 18 93 93 db 6d 36 1d 20 0f |...........m6. .| 24 28 93 93 93 93 2c 30 34 1c 36 a7 84 93 38 3c |$(....,04.6...8<| 21 40 24 27 27 b7 93 40 44 0f 48 4c 50 45 12 27 |!@$''..@D.HLPE.'| 27 54 58 a4 20 90 cc 2b 5c 04 6c e4 e4 e4 e4 70 |'TX. ..+\.l....p| 74 78 7c 93 b4 f7 31 1b 1b 14 84 88 4c 32 c9 24 |tx|...1.....L2.$| 8c 90 94 32 c9 24 93 98 9c a0 8c 20 93 4c a4 a8 |...2.$..... .L..| e1 94 b0 06 b0 39 4b 58 08 0b d6 3b 05 da 74 58 |.....9KX...;..tX| 58 b4 0f 04 22 b4 8b 5c fe 40 76 08 3b 35 b8 56 |X..."..\.@v.;5.V| 7f 36 21 ad 4d 7e 5c 0c 80 bc 10 22 26 a4 99 90 |.6!.M~\...."&...| c0 14 c4 18 90 82 09 69 c8 1c 10 cc 69 26 a4 99 |.......i....i&..| 20 d0 24 d4 36 1d 53 09 ef 56 41 6c 57 6e 2d c9 | .$.6.S..VAlWn-.| 58 45 10 8b 15 51 70 75 c4 4a 22 94 05 e0 0b e2 |XE...Qpu.J".....| 04 14 df 8b ff d1 20 44 c6 49 0c f1 a4 78 71 49 |...... D.I...xqI| ba d3 87 6a 06 c4 cb 85 17 22 68 04 fe f2 b1 88 |...j....."h.....| 24 8e 00 99 5c 09 ee a5 bb 0a 3d 23 dd c4 d0 44 |$...\.....=#...D| 27 34 99 b1 04 34 60 16 18 d7 42 8f 34 b0 14 53 |'4...4`...B.4..S| 42 00 36 2c 08 3b ea 18 23 a9 b1 04 ec c6 4d cc |B.6,.;..#.....M.| ef d4 0c 29 1c a8 6e 5f d8 35 48 5f 84 a3 0c 13 |...)..n_.5H_....| 0c 8b a1 0c 6c 80 1d c9 74 5e 59 c4 12 4b a0 58 |....l...t^Y..K.X| 62 06 29 21 7c 5f 3e 4b 25 45 36 25 12 0a 2e 5e |b.)!|_>K%E6%...^| b5 3c c8 98 88 d0 d8 45 59 23 6f 48 bc e6 7e 5b |.<.....EY#oH..~[| 81 fe 4d 53 8d 44 36 2f 90 c4 c8 27 c7 74 38 2d |..MS.D6/...'.t8-| 41 7d d6 1d 4a dc 74 b7 d3 90 d8 42 e8 91 c3 d9 |A}..J.t....B....| e0 13 f6 6b 2c 99 85 c7 2d 7d e4 39 04 60 aa 13 |...k,...-}.9.`..| d2 74 d8 6c 50 1d 0c 76 d7 bd 56 16 9d 58 7f ed |.t.lP..v..V..X..| 8a 61 74 50 cc b4 1d d1 1c 53 ef 09 6b ca 43 24 |.atP.....S..k.C$| 0f 3c 60 4e d0 16 03 70 eb 5b 9a d4 dc 23 83 b1 |.<`N...p.[...#..| 53 53 60 00 4b 1f b0 a0 22 85 80 bd 0f 1a e4 cf |SS`.K...".......| 14 72 74 2b 44 50 e3 5a 80 a5 49 2c 70 e0 a1 d0 |.rt+DP.Z..I,p...| b1 94 67 ea 0b 36 17 00 dc 06 8c 02 01 2d 24 94 |..g..6.......-$.| 74 4a 7d 42 ab 90 58 de 65 c0 8b 04 b8 a8 2b 89 |tJ}B..X.e.....+.| 64 0a 34 25 |d.4% | |
61888 | 2052 | 큸敎㴁궅즄짳쑠䲬霸龅㞾겸甧荎瑳릘 |
62176 | 2052 | c7 bc a8 27 a3 9d 30 29 a0 7b c9 e5 94 7c a3 80 |...'..0).{...|..| 18 1a b8 06 3e f9 1f 77 6b 48 8b 21 eb 2c 68 78 |....>..wkH.!.,hx| c5 2c ec 24 b6 69 ac a3 88 5a 68 81 fd ce 14 68 |.,.$.i...Zh....h| 60 2f 2a 84 03 60 82 dc 4c 09 ba e4 c1 2a e9 77 |`/*..`..L....*.w| 6d 39 |m9 | |
module_name | hint | ord | function_name |
---|---|---|---|
KERNEL32.DLL | LoadLibraryA | ||
KERNEL32.DLL | GetProcAddress | ||
KERNEL32.DLL | VirtualProtect | ||
KERNEL32.DLL | VirtualAlloc | ||
KERNEL32.DLL | VirtualFree | ||
KERNEL32.DLL | ExitProcess | ||
ADVAPI32.dll | RegEnumKeyA | ||
COMCTL32.dll | InitCommonControlsEx | ||
comdlg32.dll | GetFileTitleA | ||
GDI32.dll | Escape | ||
iphlpapi.dll | GetAdaptersInfo | ||
ole32.dll | OleInitialize | ||
OLEAUT32.dll | 150 | ||
oledlg.dll | 8 | ||
SHLWAPI.dll | PathIsUNCA | ||
USER32.dll | GetDC | ||
WINSPOOL.DRV | OpenPrinterA | ||
wpcap.dll | pcap_close | ||
WS2_32.dll | 21 |
StringTable 080403a8
FileDescription | HDS Start |
FileVersion | 1.0 |
InternalName | StartHDS.exe |
VS_FIXEDFILEINFO
FileVersion | 1.0.0.1 |
ProductVersion | 1.0.0.1 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[!] string size(113104) > stringtable size(68). truncated to 66
[!] cannot convert "u\xF0\xDCM\x04\xFA\t\xB3[m\x16]\xF8\xD9\x1A\b"... to UTF-16
[!] string size(124294) > stringtable size(130). truncated to 128
[!] cannot convert "5\xB7vM\x10\xC6\x0F\x03\xD1\f\x16\\\x93\x88w\xE6"... to UTF-16
[!] string size(101874) > stringtable size(42). truncated to 40
[!] cannot convert "E\xFA\x00Yj\xC9\x16\xF8\xE4\v\xC4\xDD\xF9\x00A\x92"... to UTF-16
[!] string size(84828) > stringtable size(402). truncated to 400
[!] cannot convert "\x17\x88/z\xF4\x13\xF0\xA0\xD3t\x8D\x11\xFF\xA1p\xA0"... to UTF-16
[!] string size(9380) > stringtable size(1250). truncated to 1248
[!] cannot convert "\x9CE+\xC1\xEB\x91\xA4\x01\x88\xF27\x10@\x9C(\x00"... to UTF-16
[!] string size(15720) > stringtable size(794). truncated to 792
[!] cannot convert "\x0F\xBE\xE7\xBA\xB9\xBEI\xB9\x9C\xEB.\xEFS\x192\x13"... to UTF-16
[!] string size(45866) > stringtable size(732). truncated to 730
[!] cannot convert "Y\x8A\x96\xC9\x01\x9Bo\xB5\x11R?\xBE\x02$\x80\x88"... to UTF-16
[!] string size(13486) > stringtable size(138). truncated to 136
[!] string size(26514) > stringtable size(172). truncated to 170
[!] cannot convert "\x18\x01\xE2\x01\x18\xEC\x0FQ\x1E^\x18\xE6Da\xEB\xCB"... to UTF-16
[!] string size(1354) > stringtable size(222). truncated to 220
[!] string size(78968) > stringtable size(1220). truncated to 1218
[!] cannot convert "\xC7\xCE\xF73\xA5\x89\x95\xD0\x01\x13\xF5V,\xE06g"... to UTF-16
[!] string size(942) > stringtable size(612). truncated to 610
[!] cannot convert "\xDA\x02_,\x0F\x04\xAC\x03\xC6w\x9E\xCC\x03\x01\x8Cn"... to UTF-16
[!] string size(24956) > stringtable size(44). truncated to 42
[!] string size(96654) > stringtable size(66). truncated to 64
[!] cannot convert "\xA8'\xA3\x9D0)\xA0{\xC9\xE5\x94|\xA3\x80\x18\x1A"... to UTF-16
[!] refusing to read CURDIRENTRY beyond resource size