Manalyze report for 0111fcd7b44a4bdc2b70a97fbed3ed4f77d3a338ae39fac1e3b043c68ef19509

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-Jun-06 03:36:31
Detected languages	Chinese - PRC Italian - Italy
FileVersion	`1.0.0.0`
FileDescription	HOPE
ProductName	HOPE
ProductVersion	`1.0.0.0`
CompanyName	HOPE
LegalCopyright	HOPE
Comments	HOPE

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C++ 6.0 - 8.0` `Microsoft Visual Basic v5.0 - v6.0` `MASM/TASM - sig1(h)` `Microsoft Visual C++` `Microsoft Visual C++ v6.0`
Suspicious	PEiD Signature:	`nSpack V2.x -> LiuXingPing` `PolyEnE 0.01+ by Lennart Hedlund`
Suspicious	Strings found in the binary may indicate undesirable behavior:	`Looks for Sandboxie presence: sbiedll.dll` `Contains another PE executable: This program cannot be run in DOS mode.` `Miscellaneous malware strings: cmd.exe` Contains domain names: adobe.com aia1.wosign.com android.googlesource.com api.ruikeyz.com cacerts.digicert.com command.com crl.microsoft.com crl.trust-provider.com crl3.digicert.com crl4.digicert.com crls1.wosign.com digicert.com dywt.com.cn eyuyan.com googlesource.com http://aia1.wosign.com http://aia1.wosign.com/ca1-class3-code.cer0 http://aia1.wosign.com/class3.code.ca1.cer07 http://api.ruikeyz.com http://api.ruikeyz.com/NetVer/webapi http://cacerts.digicert.com http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0 http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0 http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C http://crl.microsoft.com http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0 http://crl.trust-provider.com http://crl.trust-provider.com/UTN-USERFirst-Object.crl0 http://crl3.digicert.com http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0 http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0 http://crl3.digicert.com/DigiCertTrustedRootG4.crl0 http://crl4.digicert.com http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0 http://crls1.wosign.com http://crls1.wosign.com/ca1-code-3.crl0Q http://crls1.wosign.com/ca1.crl0o http://ns.adobe.com http://ns.adobe.com/xap/1.0/ http://ns.adobe.com/xap/1.0/mm/ http://ns.adobe.com/xap/1.0/sType/ResourceRef# http://ocsp.digicert.com0 http://ocsp.digicert.com0A http://ocsp.digicert.com0C http://ocsp.digicert.com0X http://ocsp.digicert.com0\ http://ocsp.trust-provider.com0 http://ocsp1.wosign.com http://ocsp1.wosign.com/ca106 http://ocsp1.wosign.com/class3/code/ca106 http://www.digicert.com http://www.digicert.com/CPS0 http://www.eyuyan.com http://www.usertrust.com1 http://www.w3.org http://www.w3.org/1999/02/22-rdf-syntax-ns# http://www.wosign.com http://www.wosign.com/policy/0 https://android.googlesource.com https://android.googlesource.com/toolchain/llvm-project microsoft.com ns.adobe.com ocsp1.wosign.com provider.com ruikeyz.com trust-provider.com wosign.com www.digicert.com www.dywt.com.cn www.eyuyan.com www.w3.org www.wosign.com
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32` `Uses constants related to MD5` `Uses constants related to SHA1` `Uses constants related to SHA256`
Suspicious	The PE is possibly packed.	`Unusual section name found: .vmps0` `Unusual section name found: .vmps1`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: LoadLibraryA GetProcAddress LoadLibraryW` `Functions which can be used for anti-debugging purposes: CreateToolhelp32Snapshot` `Can access the registry: RegQueryValueExA RegOpenKeyExA RegSetValueExA RegCreateKeyA RegDeleteValueA RegDeleteKeyA RegQueryValueA RegCreateKeyExA RegCloseKey` `Possibly launches other programs: WinExec CreateProcessA ShellExecuteA` `Can create temporary files: CreateFileA GetTempPathA CreateFileW` `Uses functions commonly found in keyloggers: GetForegroundWindow CallNextHookEx` `Memory manipulation functions often used by packers: VirtualAlloc VirtualProtect` `Has Internet access capabilities: InternetCanonicalizeUrlA InternetCrackUrlA InternetConnectA InternetSetOptionA InternetOpenA InternetCloseHandle InternetReadFile` `Leverages the raw socket API to access the Internet: WSAAsyncSelect closesocket select WSACleanup WSAStartup inet_ntoa recvfrom ioctlsocket recv getpeername accept ntohl send` `Enumerates local disk drives: GetVolumeInformationA` `Manipulates other processes: Process32First Process32Next WriteProcessMemory` `Can take screenshots: GetDC CreateCompatibleDC BitBlt` `Reads the contents of the clipboard: GetClipboardData`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`4d55751adbd27d11415ac76399916dde`
SHA1	`e254598694617cadee2255f68099ac5d71790f63`
SHA256	`0111fcd7b44a4bdc2b70a97fbed3ed4f77d3a338ae39fac1e3b043c68ef19509`
SHA3	`231ed22da5c688a4fe79a09fae50c622160a518ade11e6b67171aeb99add9248`
SSDeep	`196608:Zw3mkD39m+MlB8VfqXxhI3Yia4pegjgWq4PwVb4U4hke:UDg+NR8xW3YiZpeYgSPwuUte`
Imports Hash	`3ea602dc9ac4aca19cb8071aecc3b8a5`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`6`
TimeDateStamp	2026-Jun-06 03:36:31
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LINE_NUMS_STRIPPED` `IMAGE_FILE_LOCAL_SYMS_STRIPPED` `IMAGE_FILE_RELOCS_STRIPPED`

Image Optional Header

Magic	`PE32`
LinkerVersion	`6.0`
SizeOfCode	`0x124000`
SizeOfInitializedData	`0x155000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x00A50C0A (Section: .vmps1)`
BaseOfCode	`0x1000`
BaseOfData	`0x125000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x1000`
OperatingSystemVersion	`5.0`
ImageVersion	`0.0`
SubsystemVersion	`5.0`
Win32VersionValue	`0`
SizeOfImage	`0xb52000`
SizeOfHeaders	`0x1000`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`d8b97e29e569f50037c1fff48ff675fb`
SHA1	`6afac3fdb285ffeaad8b225cf23b9f067f6460a1`
SHA256	`dfe0b0a7e3f220c4a32d697c2d2ae8ab1b141b3e13aadc4657641622d62404b3`
SHA3	`39d57d147353e4584423cdd99f4679f8176f1aa2147df7a51e18a56bf186334f`
VirtualSize	`0x123962`
VirtualAddress	`0x1000`
SizeOfRawData	`0x124000`
PointerToRawData	`0x1000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.7891`

.rdata

MD5	`2df121f121c754304c3dcd458b36f057`
SHA1	`baba2f8c4f71c6630e6a12d3365a96894b144e2a`
SHA256	`5f1cdc6061b47fac87747006042af2ef43b6529739bdfabf65fe9b6b85e8161c`
SHA3	`4f547cbfed6c16dfc0be341fec38fea461d34fa261e5b83270148a2038b7718e`
VirtualSize	`0x12b76c`
VirtualAddress	`0x125000`
SizeOfRawData	`0x12c000`
PointerToRawData	`0x125000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`7.02688`

.data

MD5	`cd3477b47d69eba613ab6ee80da3187b`
SHA1	`b3e29bce8ad68b0460a99e081245666ac0541e95`
SHA256	`628248709ae428478f5241c264076d19cc9d9b7fd74e8a73228e7ecf8418928e`
SHA3	`73cdb717ce536af3b58eaff63087bc7545aaffd357188dfe5110105848f99a7d`
VirtualSize	`0x80a2a`
VirtualAddress	`0x251000`
SizeOfRawData	`0x21000`
PointerToRawData	`0x251000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`5.53355`

.vmps0

MD5	`e98782d33357a7c0e90af1bf790d473e`
SHA1	`0fc055de68ea4617bebbd3a6bf89953936de1806`
SHA256	`6bb3f08d67b558e384fe3b169d49a1659a9ace7bbee44cb92f9e93020a82a9c5`
SHA3	`5f630428f2bda1920747b4b16116dbd07aa987de94bea773da9ef81e158379a1`
VirtualSize	`0x6856d3`
VirtualAddress	`0x2d2000`
SizeOfRawData	`0x686000`
PointerToRawData	`0x272000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`7.9093`

.vmps1

MD5	`965e6c1068adf4e08bfa15fbcdc17f1e`
SHA1	`147e87638dd93e71ab670c351b069aeaf52e289b`
SHA256	`9bfb1b94e9909f663f530121ece696f54eab07ab1877c9d6927fec9eea7d3d7d`
SHA3	`02db49f83f790f93a8fde2ea5b67ed8087b62b9237c4accbb456f1c98d563b6a`
VirtualSize	`0x1f1800`
VirtualAddress	`0x958000`
SizeOfRawData	`0x1f2000`
PointerToRawData	`0x8f8000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`7.67098`

.rsrc

MD5	`38f3946be9eeeec6817e1e25fb3d07f9`
SHA1	`9023f7fab8d93c39a1969407f64c0af087c1c181`
SHA256	`0878836c57af0f793eb4b60d283ec54562e914dd3a4c4683f2fb79a94d1abc71`
SHA3	`8a47a3e852cc81671d36fb25cabb7df6bfc92d7bcb5728845cca0746eb583a00`
VirtualSize	`0x7765`
VirtualAddress	`0xb4a000`
SizeOfRawData	`0x8000`
PointerToRawData	`0xaea000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.19814`

Imports

WINMM.dll	`midiStreamOut` `midiOutPrepareHeader` `midiStreamProperty` `midiStreamOpen` `midiOutUnprepareHeader` `waveOutOpen` `waveOutGetNumDevs` `waveOutClose` `waveOutUnprepareHeader` `waveOutPrepareHeader` `waveOutWrite` `waveOutPause` `waveOutReset` `waveOutRestart` `midiStreamStop` `midiOutReset` `midiStreamClose` `midiStreamRestart`
WS2_32.dll	`WSAAsyncSelect` `closesocket` `select` `WSACleanup` `WSAStartup` `inet_ntoa` `recvfrom` `ioctlsocket` `recv` `getpeername` `accept` `ntohl` `send`
RASAPI32.dll	`RasHangUpA` `RasGetConnectStatusA`
KERNEL32.dll	`GetWindowsDirectoryA` `GetSystemDirectoryA` `SetLastError` `GetTimeZoneInformation` `GetVersion` `FileTimeToSystemTime` `CreateMutexA` `ReleaseMutex` `SuspendThread` `GetProcessVersion` `SetErrorMode` `GlobalFlags` `GetCurrentThread` `GetFileTime` `TlsGetValue` `LocalReAlloc` `TlsSetValue` `TlsFree` `GlobalHandle` `TlsAlloc` `LocalAlloc` `lstrcmpA` `GlobalGetAtomNameA` `GlobalAddAtomA` `GlobalFindAtomA` `GlobalDeleteAtom` `lstrcmpiA` `SetEndOfFile` `UnlockFile` `LockFile` `FlushFileBuffers` `DuplicateHandle` `lstrcpynA` `FileTimeToLocalFileTime` `LocalFree` `InterlockedDecrement` `InterlockedIncrement` `CompareStringA` `CompareStringW` `IsBadReadPtr` `IsBadCodePtr` `InterlockedExchange` `TerminateProcess` `GetCurrentProcess` `GetFileSize` `SetFilePointer` `CreateToolhelp32Snapshot` `Process32First` `Process32Next` `CreateSemaphoreA` `ResumeThread` `ReleaseSemaphore` `EnterCriticalSection` `LeaveCriticalSection` `GetProfileStringA` `WriteFile` `WaitForMultipleObjects` `CreateFileA` `SetEvent` `FindResourceA` `LoadResource` `LockResource` `ReadFile` `RemoveDirectoryA` `GetModuleFileNameA` `GetCurrentThreadId` `ExitProcess` `GlobalSize` `GlobalFree` `DeleteCriticalSection` `InitializeCriticalSection` `lstrcatA` `lstrlenA` `WinExec` `lstrcpyA` `FindNextFileA` `GlobalReAlloc` `HeapFree` `HeapReAlloc` `GetProcessHeap` `HeapAlloc` `MultiByteToWideChar` `WideCharToMultiByte` `GetFullPathNameA` `FreeLibrary` `LoadLibraryA` `GetLastError` `GetVersionExA` `WritePrivateProfileStringA` `CreateThread` `CreateEventA` `Sleep` `ExpandEnvironmentStringsA` `GlobalAlloc` `GlobalLock` `GlobalUnlock` `GetTempPathA` `FindFirstFileA` `FindClose` `SetFileAttributesA` `GetFileAttributesA` `DeleteFileA` `CreateDirectoryA` `SetCurrentDirectoryA` `GetVolumeInformationA` `GetModuleHandleA` `GetProcAddress` `MulDiv` `GetCommandLineA` `GetTickCount` `CreateProcessA` `WaitForSingleObject` `CloseHandle` `GetCPInfo` `GetOEMCP` `GetStartupInfoA` `RtlUnwind` `GetSystemTime` `GetLocalTime` `RaiseException` `HeapSize` `GetACP` `SetStdHandle` `GetFileType` `UnhandledExceptionFilter` `FreeEnvironmentStringsA` `FreeEnvironmentStringsW` `GetEnvironmentStrings` `GetEnvironmentStringsW` `SetHandleCount` `GetStdHandle` `GetEnvironmentVariableA` `HeapDestroy` `HeapCreate` `VirtualFree` `SetEnvironmentVariableA` `LCMapStringA` `LCMapStringW` `VirtualAlloc` `IsBadWritePtr` `SetUnhandledExceptionFilter` `GetStringTypeA` `GetStringTypeW` `TerminateThread`
USER32.dll	`GetKeyState` `CopyAcceleratorTableA` `PostQuitMessage` `IsZoomed` `GetClassInfoA` `DefWindowProcA` `GetSystemMenu` `DeleteMenu` `GetMenu` `SetMenu` `PeekMessageA` `IsIconic` `SetFocus` `GetActiveWindow` `GetWindow` `DestroyAcceleratorTable` `SetWindowRgn` `GetMessagePos` `ScreenToClient` `ChildWindowFromPointEx` `TranslateAcceleratorA` `IsWindowEnabled` `ShowWindow` `SystemParametersInfoA` `LoadImageA` `EnumDisplaySettingsA` `ClientToScreen` `EnableMenuItem` `GetSubMenu` `GetDlgCtrlID` `LoadStringA` `GetMenuCheckMarkDimensions` `RegisterClipboardFormatA` `SetRectEmpty` `DispatchMessageA` `GetMessageA` `WindowFromPoint` `DrawFocusRect` `DrawEdge` `DrawFrameControl` `TranslateMessage` `LoadIconA` `GetDesktopWindow` `GetClassNameA` `UnregisterClassA` `GetDlgItem` `GetWindowTextA` `CopyRect` `WinHelpA` `KillTimer` `SetTimer` `ReleaseCapture` `GetCapture` `SetCapture` `GetScrollRange` `SetScrollRange` `SetScrollPos` `SetRect` `InflateRect` `IntersectRect` `DestroyIcon` `PtInRect` `OffsetRect` `IsWindowVisible` `EnableWindow` `RedrawWindow` `SetMenuItemBitmaps` `CheckMenuItem` `IsDialogMessageA` `ScrollWindowEx` `SendDlgItemMessageA` `MapWindowPoints` `AdjustWindowRectEx` `GetScrollPos` `RegisterClassA` `CreateWindowExA` `GetClassLongA` `RemovePropA` `GetMessageTime` `GetLastActivePopup` `RegisterWindowMessageA` `GetWindowPlacement` `GetNextDlgTabItem` `EndDialog` `CreateDialogIndirectParamA` `DestroyWindow` `EndPaint` `BeginPaint` `CharUpperA` `GetWindowTextLengthA` `GetWindowLongA` `SetWindowLongA` `GetSysColor` `SetActiveWindow` `SetCursorPos` `LoadCursorA` `SetCursor` `GetDC` `FillRect` `IsRectEmpty` `ReleaseDC` `IsChild` `TrackPopupMenu` `DestroyMenu` `SetForegroundWindow` `GetWindowRect` `EqualRect` `UpdateWindow` `ValidateRect` `InvalidateRect` `GetClientRect` `GetFocus` `GetParent` `GetTopWindow` `PostMessageA` `IsWindow` `SetParent` `DestroyCursor` `SendMessageA` `SetWindowPos` `MessageBoxA` `GetCursorPos` `GetSystemMetrics` `EmptyClipboard` `SetClipboardData` `OpenClipboard` `GetClipboardData` `CloseClipboard` `wsprintfA` `WaitForInputIdle` `GetSysColorBrush` `CreateAcceleratorTableA` `CreateMenu` `ModifyMenuA` `AppendMenuA` `GetForegroundWindow` `SetWindowTextA` `GetCursor` `DrawTextA` `SetPropA` `CallWindowProcA` `MoveWindow` `FrameRect` `SetWindowsHookExA` `CallNextHookEx` `UnhookWindowsHookEx` `GetWindowDC` `EnumChildWindows` `WindowFromDC` `TabbedTextOutA` `GrayStringA` `DrawStateA` `GetTabbedTextExtentA` `GetMenuState` `GetMenuStringA` `GetMenuItemID` `GetMenuItemCount` `CreatePopupMenu` `CreateIconFromResourceEx` `CreateIconFromResource` `DrawIconEx` `LoadBitmapA` `GetPropA`
GDI32.dll	`LineTo` `MoveToEx` `ExcludeClipRect` `GetClipBox` `ScaleWindowExtEx` `SetWindowExtEx` `ScaleViewportExtEx` `SetViewportExtEx` `CreateBrushIndirect` `CreateDCA` `CreateCompatibleBitmap` `GetPolyFillMode` `GetStretchBltMode` `GetROP2` `GetBkColor` `GetBkMode` `GetTextColor` `CreateRoundRectRgn` `CreateEllipticRgn` `PathToRegion` `EndPath` `BeginPath` `GetWindowOrgEx` `GetViewportOrgEx` `GetWindowExtEx` `GetDIBits` `SelectPalette` `StretchBlt` `CreatePalette` `GetSystemPaletteEntries` `CreateDIBitmap` `DeleteObject` `SelectClipRgn` `CreatePolygonRgn` `GetClipRgn` `SetStretchBltMode` `SetPixel` `CreateRectRgnIndirect` `SetBkColor` `SetBkMode` `SetTextColor` `SetWindowOrgEx` `SaveDC` `RestoreDC` `CreatePenIndirect` `PtVisible` `RectVisible` `TextOutA` `ExtTextOutA` `Escape` `OffsetViewportOrgEx` `SetViewportOrgEx` `SetMapMode` `SetROP2` `SetPolyFillMode` `ExtSelectClipRgn` `GetViewportExtEx` `GetTextMetricsA` `GetDeviceCaps` `GetTextExtentPoint32A` `RoundRect` `GetCurrentObject` `DPtoLP` `LPtoDP` `Rectangle` `Ellipse` `SetPixelV` `CreateCompatibleDC` `GetPixel` `BitBlt` `StartPage` `StartDocA` `DeleteDC` `EndDoc` `EndPage` `CreateFontIndirectA` `GetStockObject` `CreateSolidBrush` `FillRgn` `CreateRectRgn` `CombineRgn` `PatBlt` `CreatePen` `GetObjectA` `SelectObject` `CreateBitmap` `RealizePalette`
MSIMG32.dll	`GradientFill`
WINSPOOL.DRV	`DocumentPropertiesA` `OpenPrinterA` `ClosePrinter`
ADVAPI32.dll	`RegQueryValueExA` `RegOpenKeyExA` `RegSetValueExA` `RegCreateKeyA` `RegDeleteValueA` `RegDeleteKeyA` `RegQueryValueA` `RegCreateKeyExA` `RegCloseKey`
SHELL32.dll	`SHGetSpecialFolderPathA` `ShellExecuteA` `Shell_NotifyIconA`
ole32.dll	`CLSIDFromString` `OleUninitialize` `OleInitialize`
OLEAUT32.dll	`LoadTypeLib` `RegisterTypeLib` `UnRegisterTypeLib`
COMCTL32.dll	`ImageList_GetIcon` `ImageList_GetImageInfo` `ImageList_GetImageCount` `ImageList_SetBkColor` `ImageList_Draw` `_TrackMouseEvent` `ImageList_AddMasked` `#17` `ImageList_Destroy` `ImageList_Create` `ImageList_DrawIndirect`
WININET.dll	`InternetCanonicalizeUrlA` `InternetCrackUrlA` `HttpOpenRequestA` `HttpSendRequestA` `HttpQueryInfoA` `InternetConnectA` `InternetSetOptionA` `InternetOpenA` `InternetCloseHandle` `InternetReadFile`
comdlg32.dll	`ChooseColorA` `GetOpenFileNameA` `GetFileTitleA` `GetSaveFileNameA`
WTSAPI32.dll	`WTSSendMessageW`
KERNEL32.dll (#2)	`GetWindowsDirectoryA` `GetSystemDirectoryA` `SetLastError` `GetTimeZoneInformation` `GetVersion` `FileTimeToSystemTime` `CreateMutexA` `ReleaseMutex` `SuspendThread` `GetProcessVersion` `SetErrorMode` `GlobalFlags` `GetCurrentThread` `GetFileTime` `TlsGetValue` `LocalReAlloc` `TlsSetValue` `TlsFree` `GlobalHandle` `TlsAlloc` `LocalAlloc` `lstrcmpA` `GlobalGetAtomNameA` `GlobalAddAtomA` `GlobalFindAtomA` `GlobalDeleteAtom` `lstrcmpiA` `SetEndOfFile` `UnlockFile` `LockFile` `FlushFileBuffers` `DuplicateHandle` `lstrcpynA` `FileTimeToLocalFileTime` `LocalFree` `InterlockedDecrement` `InterlockedIncrement` `CompareStringA` `CompareStringW` `IsBadReadPtr` `IsBadCodePtr` `InterlockedExchange` `TerminateProcess` `GetCurrentProcess` `GetFileSize` `SetFilePointer` `CreateToolhelp32Snapshot` `Process32First` `Process32Next` `CreateSemaphoreA` `ResumeThread` `ReleaseSemaphore` `EnterCriticalSection` `LeaveCriticalSection` `GetProfileStringA` `WriteFile` `WaitForMultipleObjects` `CreateFileA` `SetEvent` `FindResourceA` `LoadResource` `LockResource` `ReadFile` `RemoveDirectoryA` `GetModuleFileNameA` `GetCurrentThreadId` `ExitProcess` `GlobalSize` `GlobalFree` `DeleteCriticalSection` `InitializeCriticalSection` `lstrcatA` `lstrlenA` `WinExec` `lstrcpyA` `FindNextFileA` `GlobalReAlloc` `HeapFree` `HeapReAlloc` `GetProcessHeap` `HeapAlloc` `MultiByteToWideChar` `WideCharToMultiByte` `GetFullPathNameA` `FreeLibrary` `LoadLibraryA` `GetLastError` `GetVersionExA` `WritePrivateProfileStringA` `CreateThread` `CreateEventA` `Sleep` `ExpandEnvironmentStringsA` `GlobalAlloc` `GlobalLock` `GlobalUnlock` `GetTempPathA` `FindFirstFileA` `FindClose` `SetFileAttributesA` `GetFileAttributesA` `DeleteFileA` `CreateDirectoryA` `SetCurrentDirectoryA` `GetVolumeInformationA` `GetModuleHandleA` `GetProcAddress` `MulDiv` `GetCommandLineA` `GetTickCount` `CreateProcessA` `WaitForSingleObject` `CloseHandle` `GetCPInfo` `GetOEMCP` `GetStartupInfoA` `RtlUnwind` `GetSystemTime` `GetLocalTime` `RaiseException` `HeapSize` `GetACP` `SetStdHandle` `GetFileType` `UnhandledExceptionFilter` `FreeEnvironmentStringsA` `FreeEnvironmentStringsW` `GetEnvironmentStrings` `GetEnvironmentStringsW` `SetHandleCount` `GetStdHandle` `GetEnvironmentVariableA` `HeapDestroy` `HeapCreate` `VirtualFree` `SetEnvironmentVariableA` `LCMapStringA` `LCMapStringW` `VirtualAlloc` `IsBadWritePtr` `SetUnhandledExceptionFilter` `GetStringTypeA` `GetStringTypeW` `TerminateThread`
USER32.dll (#2)	`GetKeyState` `CopyAcceleratorTableA` `PostQuitMessage` `IsZoomed` `GetClassInfoA` `DefWindowProcA` `GetSystemMenu` `DeleteMenu` `GetMenu` `SetMenu` `PeekMessageA` `IsIconic` `SetFocus` `GetActiveWindow` `GetWindow` `DestroyAcceleratorTable` `SetWindowRgn` `GetMessagePos` `ScreenToClient` `ChildWindowFromPointEx` `TranslateAcceleratorA` `IsWindowEnabled` `ShowWindow` `SystemParametersInfoA` `LoadImageA` `EnumDisplaySettingsA` `ClientToScreen` `EnableMenuItem` `GetSubMenu` `GetDlgCtrlID` `LoadStringA` `GetMenuCheckMarkDimensions` `RegisterClipboardFormatA` `SetRectEmpty` `DispatchMessageA` `GetMessageA` `WindowFromPoint` `DrawFocusRect` `DrawEdge` `DrawFrameControl` `TranslateMessage` `LoadIconA` `GetDesktopWindow` `GetClassNameA` `UnregisterClassA` `GetDlgItem` `GetWindowTextA` `CopyRect` `WinHelpA` `KillTimer` `SetTimer` `ReleaseCapture` `GetCapture` `SetCapture` `GetScrollRange` `SetScrollRange` `SetScrollPos` `SetRect` `InflateRect` `IntersectRect` `DestroyIcon` `PtInRect` `OffsetRect` `IsWindowVisible` `EnableWindow` `RedrawWindow` `SetMenuItemBitmaps` `CheckMenuItem` `IsDialogMessageA` `ScrollWindowEx` `SendDlgItemMessageA` `MapWindowPoints` `AdjustWindowRectEx` `GetScrollPos` `RegisterClassA` `CreateWindowExA` `GetClassLongA` `RemovePropA` `GetMessageTime` `GetLastActivePopup` `RegisterWindowMessageA` `GetWindowPlacement` `GetNextDlgTabItem` `EndDialog` `CreateDialogIndirectParamA` `DestroyWindow` `EndPaint` `BeginPaint` `CharUpperA` `GetWindowTextLengthA` `GetWindowLongA` `SetWindowLongA` `GetSysColor` `SetActiveWindow` `SetCursorPos` `LoadCursorA` `SetCursor` `GetDC` `FillRect` `IsRectEmpty` `ReleaseDC` `IsChild` `TrackPopupMenu` `DestroyMenu` `SetForegroundWindow` `GetWindowRect` `EqualRect` `UpdateWindow` `ValidateRect` `InvalidateRect` `GetClientRect` `GetFocus` `GetParent` `GetTopWindow` `PostMessageA` `IsWindow` `SetParent` `DestroyCursor` `SendMessageA` `SetWindowPos` `MessageBoxA` `GetCursorPos` `GetSystemMetrics` `EmptyClipboard` `SetClipboardData` `OpenClipboard` `GetClipboardData` `CloseClipboard` `wsprintfA` `WaitForInputIdle` `GetSysColorBrush` `CreateAcceleratorTableA` `CreateMenu` `ModifyMenuA` `AppendMenuA` `GetForegroundWindow` `SetWindowTextA` `GetCursor` `DrawTextA` `SetPropA` `CallWindowProcA` `MoveWindow` `FrameRect` `SetWindowsHookExA` `CallNextHookEx` `UnhookWindowsHookEx` `GetWindowDC` `EnumChildWindows` `WindowFromDC` `TabbedTextOutA` `GrayStringA` `DrawStateA` `GetTabbedTextExtentA` `GetMenuState` `GetMenuStringA` `GetMenuItemID` `GetMenuItemCount` `CreatePopupMenu` `CreateIconFromResourceEx` `CreateIconFromResource` `DrawIconEx` `LoadBitmapA` `GetPropA`
KERNEL32.dll (#3)	`GetWindowsDirectoryA` `GetSystemDirectoryA` `SetLastError` `GetTimeZoneInformation` `GetVersion` `FileTimeToSystemTime` `CreateMutexA` `ReleaseMutex` `SuspendThread` `GetProcessVersion` `SetErrorMode` `GlobalFlags` `GetCurrentThread` `GetFileTime` `TlsGetValue` `LocalReAlloc` `TlsSetValue` `TlsFree` `GlobalHandle` `TlsAlloc` `LocalAlloc` `lstrcmpA` `GlobalGetAtomNameA` `GlobalAddAtomA` `GlobalFindAtomA` `GlobalDeleteAtom` `lstrcmpiA` `SetEndOfFile` `UnlockFile` `LockFile` `FlushFileBuffers` `DuplicateHandle` `lstrcpynA` `FileTimeToLocalFileTime` `LocalFree` `InterlockedDecrement` `InterlockedIncrement` `CompareStringA` `CompareStringW` `IsBadReadPtr` `IsBadCodePtr` `InterlockedExchange` `TerminateProcess` `GetCurrentProcess` `GetFileSize` `SetFilePointer` `CreateToolhelp32Snapshot` `Process32First` `Process32Next` `CreateSemaphoreA` `ResumeThread` `ReleaseSemaphore` `EnterCriticalSection` `LeaveCriticalSection` `GetProfileStringA` `WriteFile` `WaitForMultipleObjects` `CreateFileA` `SetEvent` `FindResourceA` `LoadResource` `LockResource` `ReadFile` `RemoveDirectoryA` `GetModuleFileNameA` `GetCurrentThreadId` `ExitProcess` `GlobalSize` `GlobalFree` `DeleteCriticalSection` `InitializeCriticalSection` `lstrcatA` `lstrlenA` `WinExec` `lstrcpyA` `FindNextFileA` `GlobalReAlloc` `HeapFree` `HeapReAlloc` `GetProcessHeap` `HeapAlloc` `MultiByteToWideChar` `WideCharToMultiByte` `GetFullPathNameA` `FreeLibrary` `LoadLibraryA` `GetLastError` `GetVersionExA` `WritePrivateProfileStringA` `CreateThread` `CreateEventA` `Sleep` `ExpandEnvironmentStringsA` `GlobalAlloc` `GlobalLock` `GlobalUnlock` `GetTempPathA` `FindFirstFileA` `FindClose` `SetFileAttributesA` `GetFileAttributesA` `DeleteFileA` `CreateDirectoryA` `SetCurrentDirectoryA` `GetVolumeInformationA` `GetModuleHandleA` `GetProcAddress` `MulDiv` `GetCommandLineA` `GetTickCount` `CreateProcessA` `WaitForSingleObject` `CloseHandle` `GetCPInfo` `GetOEMCP` `GetStartupInfoA` `RtlUnwind` `GetSystemTime` `GetLocalTime` `RaiseException` `HeapSize` `GetACP` `SetStdHandle` `GetFileType` `UnhandledExceptionFilter` `FreeEnvironmentStringsA` `FreeEnvironmentStringsW` `GetEnvironmentStrings` `GetEnvironmentStringsW` `SetHandleCount` `GetStdHandle` `GetEnvironmentVariableA` `HeapDestroy` `HeapCreate` `VirtualFree` `SetEnvironmentVariableA` `LCMapStringA` `LCMapStringW` `VirtualAlloc` `IsBadWritePtr` `SetUnhandledExceptionFilter` `GetStringTypeA` `GetStringTypeW` `TerminateThread`
USER32.dll (#3)	`GetKeyState` `CopyAcceleratorTableA` `PostQuitMessage` `IsZoomed` `GetClassInfoA` `DefWindowProcA` `GetSystemMenu` `DeleteMenu` `GetMenu` `SetMenu` `PeekMessageA` `IsIconic` `SetFocus` `GetActiveWindow` `GetWindow` `DestroyAcceleratorTable` `SetWindowRgn` `GetMessagePos` `ScreenToClient` `ChildWindowFromPointEx` `TranslateAcceleratorA` `IsWindowEnabled` `ShowWindow` `SystemParametersInfoA` `LoadImageA` `EnumDisplaySettingsA` `ClientToScreen` `EnableMenuItem` `GetSubMenu` `GetDlgCtrlID` `LoadStringA` `GetMenuCheckMarkDimensions` `RegisterClipboardFormatA` `SetRectEmpty` `DispatchMessageA` `GetMessageA` `WindowFromPoint` `DrawFocusRect` `DrawEdge` `DrawFrameControl` `TranslateMessage` `LoadIconA` `GetDesktopWindow` `GetClassNameA` `UnregisterClassA` `GetDlgItem` `GetWindowTextA` `CopyRect` `WinHelpA` `KillTimer` `SetTimer` `ReleaseCapture` `GetCapture` `SetCapture` `GetScrollRange` `SetScrollRange` `SetScrollPos` `SetRect` `InflateRect` `IntersectRect` `DestroyIcon` `PtInRect` `OffsetRect` `IsWindowVisible` `EnableWindow` `RedrawWindow` `SetMenuItemBitmaps` `CheckMenuItem` `IsDialogMessageA` `ScrollWindowEx` `SendDlgItemMessageA` `MapWindowPoints` `AdjustWindowRectEx` `GetScrollPos` `RegisterClassA` `CreateWindowExA` `GetClassLongA` `RemovePropA` `GetMessageTime` `GetLastActivePopup` `RegisterWindowMessageA` `GetWindowPlacement` `GetNextDlgTabItem` `EndDialog` `CreateDialogIndirectParamA` `DestroyWindow` `EndPaint` `BeginPaint` `CharUpperA` `GetWindowTextLengthA` `GetWindowLongA` `SetWindowLongA` `GetSysColor` `SetActiveWindow` `SetCursorPos` `LoadCursorA` `SetCursor` `GetDC` `FillRect` `IsRectEmpty` `ReleaseDC` `IsChild` `TrackPopupMenu` `DestroyMenu` `SetForegroundWindow` `GetWindowRect` `EqualRect` `UpdateWindow` `ValidateRect` `InvalidateRect` `GetClientRect` `GetFocus` `GetParent` `GetTopWindow` `PostMessageA` `IsWindow` `SetParent` `DestroyCursor` `SendMessageA` `SetWindowPos` `MessageBoxA` `GetCursorPos` `GetSystemMetrics` `EmptyClipboard` `SetClipboardData` `OpenClipboard` `GetClipboardData` `CloseClipboard` `wsprintfA` `WaitForInputIdle` `GetSysColorBrush` `CreateAcceleratorTableA` `CreateMenu` `ModifyMenuA` `AppendMenuA` `GetForegroundWindow` `SetWindowTextA` `GetCursor` `DrawTextA` `SetPropA` `CallWindowProcA` `MoveWindow` `FrameRect` `SetWindowsHookExA` `CallNextHookEx` `UnhookWindowsHookEx` `GetWindowDC` `EnumChildWindows` `WindowFromDC` `TabbedTextOutA` `GrayStringA` `DrawStateA` `GetTabbedTextExtentA` `GetMenuState` `GetMenuStringA` `GetMenuItemID` `GetMenuItemCount` `CreatePopupMenu` `CreateIconFromResourceEx` `CreateIconFromResource` `DrawIconEx` `LoadBitmapA` `GetPropA`

Delayed Imports

1

Type	`TEXTINCLUDE`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0xb`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.0958`
MD5	`0174b80aba6359d1011cd22b880f1a72`
SHA1	`9be77da1b2e1d6f4c0c77630334cf0f2a5a17ce6`
SHA256	`7791d56b6792eb1836f2e46ea02d208ffb1343ae922d6c696ad04de2e2c09441`
SHA3	`63aab311030110ae8c92e8229c5b4b6e6d796612f10c3fcfb448b681b4b3577a`

2

Type	`TEXTINCLUDE`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x16`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.27761`
MD5	`983c1066b8da83907ccb829dc9c725e6`
SHA1	`e5e00901ed07ee44b324ec54a39dbc7f998d1872`
SHA256	`4b345f7ee4c62582d946797d37a7dd8498af15f4afda496999d1ac54c108714a`
SHA3	`9e6e95da2a15de691b8d8369e4c0d15e125f5ec30cad35137ef9d61533b893a1`

3

Type	`TEXTINCLUDE`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x151`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.2478`
MD5	`2ed134514e374e40a710bd61d5190a86`
SHA1	`60ffcba570e819f041c84d7f1f2c0624daeada18`
SHA256	`6b993c9dc325863302d0ea34e4287822286f7fdf8e023320b9a520b5c9dcfa47`
SHA3	`b81bcaa3dc85c917820ef48bd60ee97d74a58b23c9d9d54b91e34e4fd097929b`

1 (#2)

Type	`RT_CURSOR`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.16959`
MD5	`dd516f96a352053618af66614c7ee23d`
SHA1	`ac9f852776d2a94c6676a83d55b52d8ae4f6e75f`
SHA256	`d27dd42f6f0db9536d3d59a42c61f4049f73c3373c00afa0554e3e7f85f9a92b`
SHA3	`c5e1a2860e8ca5ce99813b88a1e892ac55347b029506db40f0918be4a6550267`

2 (#2)

Type	`RT_CURSOR`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.61097`
MD5	`5e4306d342f15693f982320008298649`
SHA1	`2f48a547a1427833013f1ccc5d3119ab36c1cb11`
SHA256	`ba8a8cf5ecd16690d37ba7f41f107973656c617488a880538e1e33821929d3a3`
SHA3	`59e7368ccafa1b3b925e68b2a015f7d8153e999ed3daaec8d48008e2f70c984a`

3 (#2)

Type	`RT_CURSOR`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.02695`
MD5	`cab67e9ca149fb79ab4473998412b951`
SHA1	`2e793d35537bfb5d3f042ed0626d3b119d50519a`
SHA256	`fbeb3be87e80cb8e1d2af3d8140796c1bb80c6c7056f60897088ff9e355c3867`
SHA3	`0e72f5537421764effb2ed98e536358bb7e86eed7b0936e606e8d45559685684`

4

Type	`RT_CURSOR`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0xb4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.74274`
MD5	`9fa8a914823ac7e5370652146901f4f1`
SHA1	`eb3224109abb341b6e464d2606fdbed1a7160bc6`
SHA256	`f64ccc0582bc7c66af8b40049e485e8e241335261ec95ace909293ba50b2e4a3`
SHA3	`bb348af06514e27cd1fa21ad524dfd037edcd3b36ef4cc6ab24c4a8ec38995ff`

5

Type	`RT_CURSOR`
Language	Italian - Italy
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.47449`
MD5	`7b57f02e9eca7fb9b58d873bcc001ce5`
SHA1	`69b8c316bf27b87a23b06fcfaa775ce31792a185`
SHA256	`8d9d3f85a18b491014a8c90108cfe8b14b8b2abff86a6c6cd738ecf22f6f3a55`
SHA3	`2b91564efeeaf4a3a5ae42b78eab94d885f806055b12d663e67a97029bc1004d`

6

Type	`RT_CURSOR`
Language	Italian - Italy
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.23258`
MD5	`74a41ca647a7c41addc31b8414770f5d`
SHA1	`5ca7bd049a0277877b4f3cbf959a34e45a263ea2`
SHA256	`f6f26034d64d1fdc9cbfe58b95e6f727cc5339200a88e118d466bcec1dd9830b`
SHA3	`de04f0fd266a2d8ce6703f01751712761d6a9a348d4f4db3a936ea853762aaad`

7

Type	`RT_CURSOR`
Language	Italian - Italy
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.06644`
MD5	`14a3a4d44354d66de50d562790310039`
SHA1	`31172bff2154189d30839e645fb857b1265f2107`
SHA256	`5be49b7ee25d5380107a933d98faa6c64ae2182d5808f4bcf5b2d1006d7ae0d2`
SHA3	`e669be55e6db992ad8d3b4d8b8cbe587ce77c76e00a68527c026d6a8627b60e8`

IEXT3_IDB_SCROLLBTNS

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x1002`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`6.58206`
MD5	`093f6348bb924baa8e42dd07fe7930c0`
SHA1	`a1d638eb58f2c942f93d03d62f7eab4f324ed4a2`
SHA256	`4fff383f5f49b08c00a069398523f428781d1528af9279dd2247f9410e36b8f4`
SHA3	`4cf5da017392b315eb3dd502198a9ef777a3b8a0b6b9abfc8e58f8a6b77788fc`
Preview

IEXT_IDB_STATEIMAGES

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x16c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.01326`
MD5	`ded443f27639a176aaa4704438ec7e61`
SHA1	`d801573f4096cc54b22d6d1b7bdd105c9c75b877`
SHA256	`dfa96714879957a8228ff002d6330d5e72dc5fba242058435e17aba60ec87650`
SHA3	`55f782b0c7f52b52a89c67f4971fb8a7a4047f29a3f29bdc99ccc10d41435427`
Preview

1031

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x248`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.67246`
MD5	`4e68d48e0b5c427c7ab78cf473741530`
SHA1	`f1594c91aaddbea1e6f65d387f9bae32a1bc564c`
SHA256	`040a6280de380f6dfcf9335e7789c109fe6dca63b7875dfdf53b94e58444bc35`
SHA3	`1529b7b296eeadc4916f4556fe8f26a7af91b48effab377d02847269405bc4cc`
Preview

1038

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x144`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.23563`
MD5	`4f5d3abeaf37aa12daf334577d763cf8`
SHA1	`e9eab315798bb74fc12b0950011265e0e994876e`
SHA256	`5df58f862fdad1191048c43102b19d2f0a2a072dca2d4a15e0ff410cff74d1e3`
SHA3	`2ad2879352c2e7e50fc772d46bc3a50999e43ed35d478082527c0b5a0b3b6a36`
Preview

1138

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x158`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.06778`
MD5	`801d95f64abdf551c76057465d9855ba`
SHA1	`187cd89b980aa8bd7d67a0b56a95f48a3ffc08d5`
SHA256	`f8608530637848da94fd3bcd6080ea29d165c5d6aa96bb8d7244175652d44e7d`
SHA3	`c42e3989ce955d83fe60e08d28c83f4df3aa94af382f5f96a068f7948b80cf4d`
Preview

1139

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x158`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.06778`
MD5	`cc4c8954ba21f7265d2e34af683822a7`
SHA1	`0cd5b70d6a36690e6b359917716ad20aaaeb1142`
SHA256	`0e0636237e784b7fdf6ee15903dd33ad0eac7f6de2411dc47de7426f61af573d`
SHA3	`7735bf1c6013300bb12ea4551b06952fc0289eff58ca65ee4cf0d686dbc0aded`
Preview

1140

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x158`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.82327`
MD5	`3fdb32df423939b6be9ef7ea2edc82de`
SHA1	`024376a1fe6db7d3f624a2e104b9281654682d23`
SHA256	`52b0d8794067fbb5b88c73f5875d3347d586fc6e92a79155d5f687c01afcdd2a`
SHA3	`592da405c94eaed47c9b7c84eec9728d98802a544cc0049b79e7de475ea29abe`
Preview

1141

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x158`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.87572`
MD5	`4fae4fdd7257306abf84838c723f521b`
SHA1	`76d5338f7be0ae0c5d479fa27f064858a35d4e7d`
SHA256	`f5214c0bb68205062476dae1ae48c7aac9b1a7b06af025247cdf1610a8b739b0`
SHA3	`d77023013488df3c8bdd13907dfd2a5775e5fded4b525514de4453fc2678d763`
Preview

1142

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x158`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.7844`
MD5	`aa147e1a1b27e664ee25ba1b761eb97d`
SHA1	`56ee86aa9618a346803983cfab333a1bb81ebe36`
SHA256	`bb87a47da4781dac354f71427b0461f8a4234e4c18cc9a167cb54960c5ebb742`
SHA3	`d34d69d3d4c123206aae799fd1cbd17ea22f3d4fa1021d00e9b7e3f3f14da6a5`
Preview

1143

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x158`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.57855`
MD5	`d2d7419aa33ed86048015fbfe27359a4`
SHA1	`3b8b10ecb2068f21a9fc466a69164c28ae7a1571`
SHA256	`00b25fcbf267a0945d6fe3612dbdbad6640d1c99a9cb443f06d016bd44f51eab`
SHA3	`1c5f91189689ddb079d8274281229a45737f716b4253912ba94265c44abececb`
Preview

1144

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x158`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.53371`
MD5	`a06c1fd9091b6f3ccba80f3dcdabf19e`
SHA1	`21a3a87f764727c69c85728346b1d05d97869807`
SHA256	`5b7335372b1be5486f289d5e7ee01155c1d7fb8df76d8495bf15b7cee3f94585`
SHA3	`048b0c8d2d44b34fea51e6ff4e2ae4f5c73b5f7c1211741cdc4fe6796000ad22`
Preview

1145

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x158`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.41101`
MD5	`d9851b0845656cb1b1f5c586547b83bf`
SHA1	`fbcf280c7ec369d349b10d31ecbf261758e1ef14`
SHA256	`a6b89465e793bf0f0001f27440617590039a7fb34a16bcb551ce4b10b49eb7db`
SHA3	`7472827cfb2a9b2f7537971c617d231e75e471c3502299bde2184d23f55d22f3`
Preview

26567

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x5e4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.09838`
MD5	`055505a1940f27993d40e136bc915615`
SHA1	`f6223d2c97df05fa6b6ca54b47c92438777eae79`
SHA256	`a9bb58f43df34b3dc05b79015210b5a1ca84f8ff97555cf7344ef8bb662e1a6d`
SHA3	`cf77404babde2509159cac5542bdbc409a869e1633222f15e62ccb39bb8ad59b`
Preview

30994

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0xb8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.23666`
MD5	`8cf65be17e506ff24c2177078f88b56e`
SHA1	`3e397dc7597caeb844df0ea760b64231c8ce3dbf`
SHA256	`e7c0005285d1ab59732d5f99f77a9bdd6342b01cf44437ebd7a07611a227e272`
SHA3	`7da4c7aab356574679f0f9107740f01647864c846c04f699deef67577fd6aded`
Preview

30995

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x16c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.20022`
MD5	`a2153b6134d93fd17964b36be4821db4`
SHA1	`43d43980d7e6c1f080cc3eca82d84dc2ab8241b1`
SHA256	`4406c7739acdebe7be0510fb2cf7043ebec1f3dfd4fd876e1b6d0eb29fa79a14`
SHA3	`c6bfd5b740368d3cc00322a1d1ed6905cefec2b5a411b2100444a37e72f79fe6`
Preview

30996

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x144`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.87621`
MD5	`5a9c81cdbf480cf01daa71ba0e233c5f`
SHA1	`28e04c01584654e1974347d1baa462b2784e9c47`
SHA256	`abdf36bde89a26349f5741c17c235dacea88d441d8662ba16a598dc50c3c4864`
SHA3	`99dec83590ac444359a5a6f8924dae5615d93f4df527e10a8a61319ce3a5beaf`
Preview

1 (#3)

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x2e8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.12749`
MD5	`0cb42696bae18798cb7086367e1c8648`
SHA1	`c8c1ea6ee6ae4285986c9ef7e3df213a32d76150`
SHA256	`c70bbabb35024b71265ad0cbc6b6553146b8417e6469c7031b292f87ac7f027c`
SHA3	`6f2d62a1fa986d2ef581c9c32b9e13c28f1689842f0bb999dd64e6ad58ac8fd3`

2 (#3)

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.18858`
MD5	`f7689df1f1046fd3a9329c2bed028a7a`
SHA1	`5c81380f4db520c34783768d528a1223ccc10298`
SHA256	`bfd6b9443d835d48f4872879c901fd73a9cb1dcd85ceb44ab769410cf282b756`
SHA3	`d8707398afb787b830b3e9fdd416041d648fd4ba2e0988a16906f692a85b7dc1`

3 (#3)

Type	`RT_ICON`
Language	UNKNOWN
Codepage	Latin 1 / Western European
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.43082`
MD5	`9fda20b7d596343a085a36740ff7de71`
SHA1	`4eda85fcb4ca7bd354ed5889c9d2175f8cb495c6`
SHA256	`6e41a2957773e72c72982e3bdb99c06cd410aff74c706fc2dfc49b4af4c9007c`
SHA3	`d9c3ce18ae30f90e6b3d0a57ae90ba2295c3db2c64a5972a5e271daea487099c`

127

Type	`RT_MENU`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0xc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.4183`
MD5	`c01d4cd5bb1b57b835a1c2fba8e21e69`
SHA1	`be4bef44f1fce0552bee077b50211ebc04a5a777`
SHA256	`7dd1a3835eca622418f5fc87a53d3404b2b4766b8c0df00ee59ba679b35c70bc`
SHA3	`d1a9883d25af151238872bedfae8daade1eab0dcf9a4d516d8a000faab836a63`

1039

Type	`RT_MENU`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x284`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.27721`
MD5	`c8422eaddf07a9bee95c726c8426fcfc`
SHA1	`33056ecf914eebbd3029f658c22447e516747d4e`
SHA256	`7a7d7c4216cc704f4d47ea69d74851dab873624e47a6d40190e1a239db35715d`
SHA3	`c31c82b719ad6e62f6fc0e06e5fb0f61c126b8588ece4ee358543fe710229aeb`

150

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x98`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.06278`
MD5	`44526224da99d6c18599dd024d03690c`
SHA1	`1ee6fbfe9206aaa8d4f0e3c00a79203d6832067b`
SHA256	`512c93356c834770fca27fb18e6271ede046e5679587c3448ef9be8fec2e3bba`
SHA3	`24a7af9dc861ffdfe9f1231bfd9c8b7a831cca871e5a2ddf8607965b46fcdbba`

286

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x17a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.5561`
MD5	`7680df3f58cc47c46b99d84b10112194`
SHA1	`f4fe13962765e8c117f19f0e6bf01d64b0a23420`
SHA256	`2dc26197331d3f1e46b99f0fe7cc2e6868d25b655f12e960f57bd7e1056cb06c`
SHA3	`5ed31f740eb95cbef0eba3a691239cd02b9a4e3428bc1155ed660425320189e2`

554

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0xfa`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.78697`
MD5	`da7ba785cdcd261b11c0eb9e21645e33`
SHA1	`7e1d6e23f5ebd67f14e08b1435d8f0ef03c7ca97`
SHA256	`b9f9f75f7931892d9db0418d496c7d5845b7710ecffe2117250d99d61da59fd3`
SHA3	`5e23ddfcc02b150d79a0f5e731d5cd584648dbd3a857934ea42ea98dbe5ea4d4`

1037

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0xea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.45041`
MD5	`4b9b12aa24c41c52fe6e59c420fe8708`
SHA1	`339dcf23d4e8361fc78919cb2a00f89353277a70`
SHA256	`d2c7f254d83c3122744bc35895a946a2e3c9f0c9545ccae2289fe10a8a214a1b`
SHA3	`3d9023d40c905b660f421967e6b40b087bd2d9c7f11f7042889d7c99f62bea2f`

1084

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x8ae`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.18397`
MD5	`3b69402c70fa480ec16568dd6b708e13`
SHA1	`e94831a62793cd4588263af60de9a78ffcf4eb8f`
SHA256	`09dd636320023e367b16b8992bdc09803f50eae040b33ab29df1d33e425568e1`
SHA3	`47aadf425b780072ffe63df8f37ab4465de00054aecd2c0f20c3acd844c82bae`

1124

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0xb2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.51845`
MD5	`26c2bcd4e5333a75a1408c4e59711022`
SHA1	`c7fdff5b229cdf7882e81300285081b469d80755`
SHA256	`096a66c479bf64312d10d27270bf793aca7e14a0a731ea8af8b2eaaa91114117`
SHA3	`a39b0d306ee4cd54d1854deadadbfd63440982b3e6037fdd8022e595a73fe519`

1134

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0xcc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.73942`
MD5	`be90a3c4f4988eaa4f1498ba66e25c8c`
SHA1	`95ab8be47f1c29af2ccebccd4f0b98322012f4bd`
SHA256	`5bdbd189b596b2b6658d2e7d0e7e9bb203ca7749da598f0343abcd2cd0e7a1e6`
SHA3	`38b0804ccdf19b3a754ee8aa96f33333b2a6438318d18a7b48e49ae26d6059ed`

1150

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0xb2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.45225`
MD5	`5228e05f53b7eee70cdae8bfe4e116b7`
SHA1	`59952cfa6cf756626c57c641c85f752ea8997d80`
SHA256	`963d2d391d6ba60a6ac73c0041d23a862046afd9c446f4112b90ae290839a806`
SHA3	`258d162737232b01a90bfb86fb3de0d4cd3a935bb3e2f8a2a55d721037cf573d`

30721

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0xe2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.38941`
MD5	`085d5f15dba87cc77a4cad2d555d6c8c`
SHA1	`5299e0b15c862d118bed43251fd6ebde8d9f824d`
SHA256	`95681f43fb8cf9ff17d7a15cb0c12d9cb2b92282097283ec7388b18fe5d32f11`
SHA3	`c2751bef9db649f88eb88b6437728cbb74df17704c17242f5ebd14d96e6ee4aa`

30722

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x18c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.74445`
MD5	`ccf1e3cf6acded3c2c63ee305170de36`
SHA1	`c2b9c6b8fe4980da2513c20e85f2b8d78c9b1afc`
SHA256	`d20fbeb2fa69c10f2516fc4f545597734464e68bf7388c2c3325343be22f25ca`
SHA3	`8a595d24997078113f7b966fce4dd7b3b0d5bf4f068341973b55389fbb8cb566`

3841

Type	`RT_STRING`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x50`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.68399`
MD5	`27e992d5cd65b0ca3d129106cc1e542b`
SHA1	`f38d0d22b7abdb0dc389790027f8baa65342c931`
SHA256	`8b568f62cc221d621d3c624e7363d59c4bf36a72bda8e147eda5374c232a41a5`
SHA3	`7c0b2073f7d8639e08933edd26259d17c657a3a8bd10c220b28dc36bf991db1a`

3842

Type	`RT_STRING`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x2c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.37932`
MD5	`da86a7575ac8286809dd9481ec498fd8`
SHA1	`603b9d5525180b1dd7f12747c6686548abc3eb32`
SHA256	`0b985f127b9074f92daf51979d1228e8d0657682ed064beed98015d6775e51d0`
SHA3	`dfe329fb5f9e5b8c99125d3a6e59c3b7c9d3f58ceb00eddf3a2efe5c901decd8`

3843

Type	`RT_STRING`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x78`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.07447`
MD5	`7c859626451a41d43bdb6e834b14377f`
SHA1	`da7c436fc04f4634e78d0e082ec2bd58df0d834f`
SHA256	`302aebc37216997e819a40d01fcf7bb9e167086ada2ebb0dd0e66ddfd01214b5`
SHA3	`579bfffbce971576d9259f238c3ba65c7dddab341ad697b96f24febf131b6a0c`

3857

Type	`RT_STRING`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x1c4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`6.10651`
MD5	`ae6a056cefffe26b23eac60d04989987`
SHA1	`647f69e40048510c7bc2a85c56c31d3c5c93520e`
SHA256	`de0534ff3bbef338455e8429094952e27f2d32d55251eb0d06ff038a0712847a`
SHA3	`011f50fe2cdebe31e0f64c965e4764d31c9e8b301d36c77187675702c95eae4c`

3858

Type	`RT_STRING`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x12a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.07121`
MD5	`7b9eb7d6204e8b40c165056d4f913aaa`
SHA1	`d6f0d252ab0d8a61a3b3bfa8d1d8f15b6b5980b4`
SHA256	`2ffbc578d90a3e38bdad4ec77d3af58a8658d50525c0181d367ecca3caa90343`
SHA3	`cfec62ae95d5501d7215671ed599e2836a1a68da564e36d75cec7714c40f0ffa`

3859

Type	`RT_STRING`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x146`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.85681`
MD5	`8f0987ae2b73f266a0e1c3a542c98605`
SHA1	`5f255288183c4540cd3d17e77610727cc0abfec7`
SHA256	`d3d61705e766fd9a7fa182de39d008036d5806197e5f94069fb9639b7f8b3a7e`
SHA3	`b5960118e4788f9f9cfb34c06b009dcfb5aefd17cf426a2f83e57e021cf04bbd`

3865

Type	`RT_STRING`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x40`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.16865`
MD5	`4231654bdf85b678bb14449fdbfc7551`
SHA1	`52a66153e54242d310b717fe2ceb53985355fc63`
SHA256	`bd48ebe7d5151a7972cf4ef7398aa32197c09c043018152b275e194079e6cb36`
SHA3	`62e4d63095a5b69fbf08e4210c0c7595bbd3d9fd7762ff6ad7d68f6c43e9d3ce`

3866

Type	`RT_STRING`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x64`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.15663`
MD5	`161e87eb73081d55a22eca8a7599cec9`
SHA1	`cbf8b9f13b16195df9f6f5fafebad37512189db1`
SHA256	`90acf703f238b79f43ed45dd995adb3a9aed92a4e2898a542960390a79986247`
SHA3	`86b3a428d12470b7143b3824c56db5fb856b417f42c299561be4c6307a73612c`

3867

Type	`RT_STRING`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x1d8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.71189`
MD5	`ffb2c960432dbc57036b37f0dc4f1801`
SHA1	`f4fc7c61b2081e62cd7dc0aa0bc87c6d9c4ae4fb`
SHA256	`4bcda3f9066ac6438067470cc7619e93d205234c739e6def0fd9b1c17d8da3e8`
SHA3	`9de813c33aad1aa2a1de01e596223e4a72af5427e781f518052a0e8c558ad1e6`

3868

Type	`RT_STRING`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x114`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.40365`
MD5	`2d219af23f43c40235ddae8924570225`
SHA1	`3d5261d86f26957dedb0ec73ceece9ebee2321d4`
SHA256	`7f3e8f1e71164263cf0ea5b7483a0c96fb880d008edbf7f5fc8452b41d72cd74`
SHA3	`6e37f0ee58bc4fd6a882903d21d1c60f24396c49917488eb23b51c51012811b6`

3869

Type	`RT_STRING`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x24`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0.903812`
MD5	`3aeb0d04983923c5f3db08ff872ea9ea`
SHA1	`4464d409df76c913c59f2763bb0deb0eb2306e2b`
SHA256	`ae61f0cc506d48077e2c1df743ade849ee40e74ea228514f109782c78f402283`
SHA3	`98082029421f0596d00e3ce7c9599250fbb32c8ed767a6e8d132aeb329f4c377`

IEXT3_IDC_DRAGGING

Type	`RT_GROUP_CURSOR`
Language	Italian - Italy
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.21924`
Detected Filetype	Cursor file
MD5	`648e90fcde0a7bce25c021e55f541ddb`
SHA1	`d90deb192c9e844a668d05c2ce1305a37945f75d`
SHA256	`53229a9311d51b0742a8db3da72b57ee3157375ef31f657135e7084865c4e504`
SHA3	`83f7c15d111a93189c72de916e97d278892e91e021fdc9a3fd1016d8b2b3f80a`
Preview

IEXT3_IDC_HANDCUR

Type	`RT_GROUP_CURSOR`
Language	Italian - Italy
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.21924`
Detected Filetype	Cursor file
MD5	`0d7a138b7e0a5c108ba543a90e0ef583`
SHA1	`580e7ae71b8f071303ee414d290831f3427894a4`
SHA256	`3d22727dcc37a00d4e8d1e756278ee453d5d1b94f537ac1856dbb723c78db4d4`
SHA3	`cdc56fa701c0fc92838da40ca9de9e83af43e5de0e0e8650caafa678cd5ade2e`
Preview

IEXT3_IDC_NODRAGGING

Type	`RT_GROUP_CURSOR`
Language	Italian - Italy
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.21924`
Detected Filetype	Cursor file
MD5	`8447bca6244c7d30fda7592d8ef7bbba`
SHA1	`41221ebb08af4a1d55c3448dcad94318abbceca7`
SHA256	`5a504b5dd607ccb67e2314cb365c91e3236c422f4482f55ea20cb28fcf678fe5`
SHA3	`64305ce7f9f8843be9a0b90a18567ba6d90bb5c56468a72a37ed61f19e4147a7`
Preview

1032

Type	`RT_GROUP_CURSOR`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.91924`
Detected Filetype	Cursor file
MD5	`aff0f5e372bd49ceb9f615b9a04c97df`
SHA1	`e3205724d7ee695f027ab5ea8d8e1a453aaad0dd`
SHA256	`b07e022f8ef0a8e5fd3f56986b2e5bf06df07054e9ea9177996b0a6c27d74d7c`
SHA3	`9cb042121a5269b80d18c3c5a94c0e453890686aedade960097752377dfa9712`
Preview

1033

Type	`RT_GROUP_CURSOR`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.83876`
Detected Filetype	Cursor file
MD5	`a2baa01ccdea3190e4998a54dbc202a4`
SHA1	`e8217df98038141ab4e449cb979b1c3bbea12da3`
SHA256	`c53efa8085835ba129c1909beaff8a67b45f50837707f22dfff0f24d8cd26710`
SHA3	`8874564c406835306368adf5e869422e1bb97109b97c1499caa8af219990e8dc`
Preview

30977

Type	`RT_GROUP_CURSOR`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x22`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.25451`
Detected Filetype	Cursor file
MD5	`ab177b955c2f330b053b1fe0a5618dc6`
SHA1	`4195f1dd0f34a982c8e5c95ac43412cec1462715`
SHA256	`58531242c8bcc3c5858701ac8b7e50aa34a2fcedaad81ce5dc0aa99effb79a7d`
SHA3	`576c511275899104d47c90f4087757f5ed8cac33415255dd0e5b773058c61461`
Preview

DEFAULT_ICON

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.94375`
Detected Filetype	Icon file
MD5	`84c3cc2a9e3bd387754b60b052e63efe`
SHA1	`23bc2baff4dc0afe221240187fa7c6cc478591aa`
SHA256	`e30dc85dc21227ef94c3452d2c60b9cc6407e146e398ca1ee54b10cdc902f003`
SHA3	`4a99c48084141ff7c92f1731894df05e896b627a2af841c1474f93036cc2deaa`

1151

Type	`RT_GROUP_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.16096`
Detected Filetype	Icon file
MD5	`42cf62b780813706e75fb9f2b2e8c258`
SHA1	`a022d5c1cfdd8aace0089f3e72f2eedd41bda464`
SHA256	`a0c9d012e2bf6b2fe05c2d97cb5594d97cf2f539e97935c12abd7a3562f4d9bf`
SHA3	`0aafc8e3d8b6bde595537da4ffe0efc5fe53f01dafe336a2a5828b6a71283d3c`

1152

Type	`RT_GROUP_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.02322`
Detected Filetype	Icon file
MD5	`7a9605cb416b1a091d889b9d9f37ec66`
SHA1	`866c01641d672b6cd69901c1e055f174f47b35bb`
SHA256	`6bcce1250099cc08d574211b3debabb0244cd2641f6d960538e7ddc97d319164`
SHA3	`af43e622bf6c842d1ada2985f8e68920ff7b22d8a0b1a12871968c23b5065651`

1 (#4)

Type	`RT_VERSION`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x220`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.12312`
MD5	`36201a62801515c871fc2ca2c5a0db3a`
SHA1	`f3303a047148a81c5aae49890a318980b6a2eaf3`
SHA256	`b46e1923aa35e3bb86ef0d5f615f0e68c34d9fc68dc4f13b2c6ecb418993eea9`
SHA3	`143314a3b883719ede02c370798473bd7183339f7bf3cdfddade23010721527d`

1 (#5)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	Latin 1 / Western European
Size	`0x2b9`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.02094`
MD5	`81bb5086381a0ba0ec82f9f535d4da09`
SHA1	`76cd4dc3c6cb2b87915fbc045bff77970b35bb59`
SHA256	`70b7f6ec24cf159809467626ceade9ba45e1c46660c86257e85db8caa6b1926b`
SHA3	`76b7110a1f59d6dc9cb205115491a75442c3246bdfee48e362a63c338fb5ac6f`

String Table contents

打开
保存为
所有文件 (.)
无标题
一未命名文件
隐藏(&H)
得不到出错信息。
试图执行系统不支持的操作。
必需的资源无法得到。
内存不足。
出现了未知的错误
无效的文件名。
打开文档失败。
保存文档失败。
将改动保存到 %1？
建立空文档失败。
该文件太大，无法打开。
无法启动打印作业。
启动帮助失败。
内部应用程序出错。
命令失败。
没有足够的内存执行操作。
系统注册项已被移除并且相应的 INI 文件（假如存在）也被删除。
不是所有的系统注册项（或 INI 文件）都被移除。
在系统中没有找到此程序需要的文件%s。
此程序连接到文件 %s 中丢失的输出 %s 。此机器可能有一个 %s 不兼容的版本。
请键入一个整数。
请键入一个数。
“请填入一个在%1和%2之间的整数。”
“请填入一个在%1和%2之间的数字。”
“请填入不多于%1个的字符。”
请选择一个按钮。
“请填入一个在0和255之间的整数。”
“请填入一个正整数。”
“请填入一个日期和/或时间值。”
“请填入一个货币值。”
非预期的文件格式。
无法找到该文件。
请验证给出的路径和文件名是否正确。
目的磁盘驱动器已满。
无法对 %1 进行读操作，它已经被其他人打开。
无法对 %1 进行写操作，因为它是只读文件或已经被其他人打开。
在对 %1 进行读操作时发生了一个非预期的错误。
在对 %1 进行写操作时发生了一个非预期的错误。
无法读只写特性。
无法写只读特性。
无法装入邮件系统支援。
邮件系统 DLL 无效。
传递邮件未能传递信息。
无错误发生。
在对 %1 进行访问时发生了一个不明错误。
没有找到 %1。
%1 中包含无效的路径。
无法打开 %1 因为太多文件已被打开。
对 %1 的存取被拒绝。
一个无效的文件柄与 %1 相关联。
无法删除 %1 因为它是当前目录。
该目录已满，无法创建 %1。
对 %1 进行查找失败。
在存取 %1 时一个硬件输入/输出错误被报告。
在存取 %1 时发生共享违例。
在存取 %1 时发生锁违例。
在存取 %1 时磁盘已满。
试图越过其尾端对 %1 进行读写。
无错误发生。
在对 %1 进行访问时发生了一个不明错误。
试图在对 %1 进行读操作的同时对其进行写操作。
试图越过其尾端对 %1 进行读写。
试图在对 %1 进行写操作的同时对其进行读操作。
%1 格式错。
%1 含有非预期的对象。
%1 包含错误的模式。
象素

Version Info

Signature	`0xfeef04bd`
StructVersion	`0`
FileVersion	1.0.0.0
ProductVersion	1.0.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	Chinese - PRC
FileVersion (#2)	1.0.0.0
FileDescription	HOPE
ProductName	HOPE
ProductVersion (#2)	1.0.0.0
CompanyName	HOPE
LegalCopyright	HOPE
Comments	HOPE

Resource LangID	Chinese - PRC

TLS Callbacks

Load Configuration

RICH Header

Errors

[!] Error: Could not read the exported DLL name.

Leave a comment

No comments yet.