0152bdf87e13d3ba5699d200c1279fa8

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2007-Nov-19 05:16:02
Detected languages English - United States
Debug artifacts C:\a\b\a_VVG9OPZI\s\CSAdminKit\development2\bin\dll\klactgui.pdb
CompanyName AO Kaspersky Lab
LegalCopyright © 2021 AO Kaspersky Lab
LegalTrademarks Registered trademarks and service marks are the property of their respective owners
ProductName Kaspersky Security Center
ProductVersion 13.2.0.1511
FileVersion 13.2.0.1511
FileDescription Kaspersky Security Center Remote Diagnostics Utility
InternalName KLACTGUI
OriginalFilename KLACTGUI.EXE

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
MASM/TASM - sig1(h)
Suspicious Strings found in the binary may indicate undesirable behavior: Contains references to system / monitoring tools:
  • rundll32.exe
 Miscellaneous malware strings:
  • VIRUS
Suspicious The PE is possibly packed. Unusual section name found: .didat
Unusual section name found: .trc
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • LoadLibraryExA
  • GetProcAddress
  • LoadLibraryExW
  • LoadLibraryW
 Can access the registry:
  • RegDeleteKeyW
  • RegCloseKey
  • RegOpenKeyExW
  • RegSetValueExW
  • RegCreateKeyExW
  • RegDeleteValueW
  • RegQueryValueExW
  • RegEnumValueW
  • RegQueryInfoKeyW
  • RegEnumKeyExW
 Possibly launches other programs:
  • CreateProcessW
  • ShellExecuteW
 Memory manipulation functions often used by packers:
  • VirtualProtect
  • VirtualAlloc
 Can take screenshots:
  • GetDC
  • CreateCompatibleDC
  • BitBlt
Info The PE is digitally signed. Signer: Kaspersky Lab JSC
Issuer: DigiCert High Assurance Code Signing CA-1
Safe VirusTotal score: 0/65 (Scanned on 2021-12-13 06:13:55) All the AVs think this file is safe.

Hashes

MD5 0152bdf87e13d3ba5699d200c1279fa8
SHA1 da02b09082608f9db76e36abf26a3343b8ae5056
SHA256 e85c5d309b3870141df557014e2f6a8817b6cf182bd308388798911eb547c2a6
SHA3 1c09e3269675ec3c9a16dbb2e9ca4d39cb480c4e2ad762b5f3808b4715653a6a
SSDeep 12288:TcUdIk3PfMAg0Z59bGsG6tQz4z94HyBK1Fh6u+er7xZ+vj:ImCq9QYKHiK1Fh6u5r7qj
Imports Hash 37f1f10023e7ad6af1d4cd918506567f

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 7
TimeDateStamp 2007-Nov-19 05:16:02
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0x57800
SizeOfInitializedData 0x8fa00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00051F40 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x59000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 5.1
ImageVersion 0.0
SubsystemVersion 5.1
Win32VersionValue 0
SizeOfImage 0xec000
SizeOfHeaders 0x400
Checksum 0xf5959
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 e83ea926963bd7f2b669d8b10504e524
SHA1 213d65ab9480e3ff3ef3ca0a6f144569e83c04cf
SHA256 62cfff7edb99c9bb36e2a154327d63622366734d2f8a660b5f045a6d928e7b28
SHA3 efa7c51bc7a0748b0f7d1c097d3029ecd0d112a5ebe869e42aeaab5c44fb104b
VirtualSize 0x5772a
VirtualAddress 0x1000
SizeOfRawData 0x57800
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.37913

.rdata

MD5 7597e244109a72c29110a8485d3d5dfd
SHA1 cbeeef50147ae0cf32913cb862cfd735d0a47bb0
SHA256 39528aae545289b09ad345d1a7e48a1bf8f1936ccf8e27af7e0f95c054a879f7
SHA3 6f723e1ea32a2d60d85894ea4d367861374d8f51435500f6a45fcf5875a89d3f
VirtualSize 0x14c18
VirtualAddress 0x59000
SizeOfRawData 0x14e00
PointerToRawData 0x57c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.79079

.data

MD5 36069d1c47d90e0c20e42eb25eefa326
SHA1 87247f12336a1ef0611eb4f8f1e8777e895bc100
SHA256 1b046867312be30027a1b27c693a511b002de4a38697e7a0484c132046a9371d
SHA3 33592f0044eff9cb20279f883fec3ab118f35a05518412b3223482e7a6e8f33e
VirtualSize 0x32c8
VirtualAddress 0x6e000
SizeOfRawData 0x2a00
PointerToRawData 0x6ca00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.77414

.didat

MD5 6d725ccd818ef23f670127acdf8025f4
SHA1 471ad6eab85a5bf374578072fa40c2e372010e3b
SHA256 bc8f92d5c7c490d7ee3a5d4994a8426044612126b883473fdd4667715e8a5e91
SHA3 59b4e0b98e1d7de606d41a426af094f1663900ed8a51994d093ec606068e89ff
VirtualSize 0x38
VirtualAddress 0x72000
SizeOfRawData 0x200
PointerToRawData 0x6f400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.498551

.trc

MD5 0b1d5eb0a8b9bf0aaeb957e5ccfb9880
SHA1 0641016b6b1d9e09e9617c0676b3c344bb165092
SHA256 c5f5d71e1facf2062effea32a225408645f84452734813b8d8dbe69182a0e850
SHA3 f75930e8f22c334c505779b5f86ea59770c6528538cb027bd36b3c3117878d97
VirtualSize 0x5be
VirtualAddress 0x73000
SizeOfRawData 0x600
PointerToRawData 0x6f600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.26949

.rsrc

MD5 7bb7a4b3fdc7a5fef132a5bb1b1fef95
SHA1 fdf2930b0e9dabcc1e2eb51992ab4ecf45683309
SHA256 eb2ab2d0bc61309938af7b29e7fa94d32498d751bf5caa56eadc0aac29d2dd91
SHA3 1e1a6ced29e6c2cc358b07c35c4d7f1707c029455f09509945d565b9d48b1723
VirtualSize 0x70770
VirtualAddress 0x74000
SizeOfRawData 0x70800
PointerToRawData 0x6fc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.96943

.reloc

MD5 da0d95acc68e1236d8e043ef1b65111d
SHA1 836769bbe9b555516c101fed33c7607abb770804
SHA256 14cfa5f59f81a90b1af97620dbb916ef15d9e9263fade78e9df1863b9c837ece
SHA3 5298827bc516dc160413e26c10ac4b96f8f636b54d334384cb635edb21c48338
VirtualSize 0x676c
VirtualAddress 0xe5000
SizeOfRawData 0x6800
PointerToRawData 0xe0400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.70853

Imports

klcsstd2.dll ?TmpGetRootFolder@KLSTD@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
KLSTD_WideToUtf8Helper
KLSTD_ChkOutPtr
?KLPARLOG_LogParams2@@YAXHPB_WPBVParams@KLPAR@@@Z
KLSTD_ThrowLastErrorCode
?KLSTD_GetHostAndDomainName@@YAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAV12@PAW4KlDomainType@KLSTD@@@Z
?GetArrayValue@KLPAR@@YA?AV?$CAutoPtr@VArrayValue@KLPAR@@@KLSTD@@PAVParams@1@PB_W@Z
?GetParamsValue@KLPAR@@YA?AV?$CAutoPtr@VParams@KLPAR@@@KLSTD@@PAVParams@1@PB_W@Z
KLSTD_CopyFile
?KLSTD_IfExists@@YA_NPB_W@Z
?KLSTD_CreateGUIDString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?KLSTD_Unlink@@YA_NPB_W_N@Z
?KLSTD_GetTempFile@@YAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
KLSTD_CreatePath
?KLSTD_PathAppend@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV12@_N@Z
?KLSTD_GetArgc@@YAHXZ
?KLSTD_GetArgvW@@YAPAPA_WXZ
KLSTD_StParseCommandineW
?KLSTD_SetupCmdlineDataW@@YAXHQAPA_W@Z
?KLSTD_ParseCmdlineW@@YAXPB_WPAPA_WPA_WPAH3@Z
?InitMain_DeinitCallbacks@KLINITMAIN@@YAXXZ
?InitMain_InitCallbacks@KLINITMAIN@@YAXPB_W@Z
?GetModuleTraceLevel@KLSTD@@YAHPB_W@Z
?assertion_check@KLSTD@@YAX_NPBD1H@Z
?TraceCommonNew@KLSTD_TRACING@@YAXHPB_W0PAW4TraceArgType@1@PAPBXI@Z
KLSTD_CreateCriticalSection
KLDBG_StartMeasureA
KLSTD_Check
KLDBG_EndMeasureA
?FileCreate@KLSTD@@YA?AV?$CAutoPtr@VFile@KLSTD@@@1@PB_WKKK@Z
?GetIntValue@KLPAR@@YAJPAVParams@1@PB_W@Z
KLSTD_DeletePath
?GetStringValue@KLPAR@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVParams@1@PB_W@Z
?CreateValue@KLPAR@@YAXPB_WPAPAVStringValue@1@@Z
?_GetParamsNames@KLPAR@@YAXPBVParams@1@AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?KLSTD_SplitPath@@YAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV12@11@Z
?SayFailure2@KLERR@@YAXHPAVError@1@PB_WPBDH2@Z
?klak_winver@@YIIXZ
?klak_winmajor@@YIIXZ
KLERR_CreateUnknownException
KLERR_ConvertExceptionFromStringA
KLERR_ConvertException
?KLSTD_SplitString@@YAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@2@@Z
KLSTD_ThrowLastError
KLPAR_CreateParams
KLERR_throwError
?DeinitTrace@KLSTD@@YAXXZ
?StartTrace@KLSTD@@YAXHPB_WH@Z
?CreateValue@KLPAR@@YAXJPAPAVIntValue@1@@Z
?InitTrace@KLSTD@@YAXXZ
?KLSTD_SetDefaultProductAndVersion@@YAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?KLERR_LoadModuleLocalizations@@YAXPB_WPBUErrLocModule@KLERR@@I@Z
?SetupServiceDirectory@KLSTD@@YAXXZ
KLERR_LocFormatErrorString
KLSTD_FreeWSTR
KLERR_IsErrorLocalized
?KLSTD_GetTraceInfoW@@YAXHPAPA_WPB_W1AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?CInitMainUt_Deinit@KLINITMAIN@@YAXXZ
?CInitMainUt_Init@KLINITMAIN@@YAXPB_W00@Z
KLSTD_Deinitialize
?KLPAR_Deinitialize@@YAXXZ
?KLPAR_Initialize@@YAXXZ
KLSTD_Initialize
klcstr2.dll ?KLTR_MakeLocation@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_WH00@Z
?KLPXG2_WrapConnection@@YAXPAVTransportProxy@KLTRAP@@PAPAVConnectionWrapper@KLPXG2@@@Z
??1TransportProxy@KLTRAP@@UAE@XZ
??0TransportProxy@KLTRAP@@QAE@XZ
?KLTR_SplitAddress@@YAXPB_WPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAH11@Z
klcskca2.dll ?DecodeFilePath@KLACDTAPI@@YAXPB_WPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PA_K@Z
?IsServer@KLACDTAPI@@YA_NPB_W@Z
?CompressFile@KLACDTAPI@@YAXPB_W00_NW4ACDT_ARTYPE@1@@Z
?GetProductVal@KLACDTAPI@@YA?AV?$CAutoPtr@VValue@KLPAR@@@KLSTD@@V?$CAutoPtr@VParams@KLPAR@@@3@PB_W1_N@Z
?CompressFolder@KLACDTAPI@@YAXPB_W00_N1W4ACDT_ARTYPE@1@@Z
?IsNagent@KLACDTAPI@@YA_NPB_W@Z
klcssrvp2.dll ?KLCSSRVP_Deinitialize@@YAXXZ
?CheckServerVersion@KLADMSRV@@YA_NPAVKLBaseQI@KLSTD@@J_N@Z
?KLADMSRV_CreateAdmServer4@@YAXPB_WPAPAVAdmServer@KLADMSRV@@ABV?$vector@UComponentId@KLPRCI@@V?$allocator@UComponentId@KLPRCI@@@std@@@std@@JPBH_N000PAVBinaryValue@KLPAR@@PBUproxyhost_info_t@2@4PAVKLBaseQI@KLSTD@@@Z
KLACDTAPI_ConnectThroughCifs
KLACDTAPI_ConnectThroughAdmServer
?KLCSSRVP_Initialize@@YAXXZ
klqrcgen.dll ?BufferFree@KLQRCGEN@@YAXPAUBuffer@1@@Z
?Generate@KLQRCGEN@@YAPAUBuffer@1@PBDHHPAH@Z
KERNEL32.dll VirtualProtect
VirtualQuery
LoadLibraryExA
IsDebuggerPresent
EncodePointer
HeapAlloc
HeapFree
GetProcessHeap
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
QueryPerformanceFrequency
MoveFileW
QueryPerformanceCounter
WaitForSingleObject
CreateProcessW
GetFileAttributesW
InitializeCriticalSection
GetEnvironmentVariableW
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetStartupInfoW
GetSystemTimeAsFileTime
GetSystemInfo
ExpandEnvironmentStringsW
GetWindowsDirectoryW
GetSystemDirectoryW
GetLongPathNameW
GetCurrentProcess
GetModuleHandleW
LocalFree
lstrlenW
FormatMessageW
SetErrorMode
SetFileApisToANSI
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetProcAddress
lstrcmpiW
RaiseException
GetLastError
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
CreateThread
CloseHandle
DecodePointer
LoadLibraryW
GetCommandLineW
MulDiv
VerifyVersionInfoW
VerSetConditionMask
SetLastError
lstrcmpW
CompareStringW
lstrlenA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetLocalTime
LockResource
GetTickCount
DebugBreak
OutputDebugStringW
GetCurrentProcessId
FindFirstFileW
FindClose
GetModuleHandleExW
TerminateProcess
USER32.dll IsWindowEnabled
GetSysColor
GetFocus
DrawFocusRect
GetClassNameW
GetDlgCtrlID
CallWindowProcW
UnionRect
LoadIconW
GetWindowDC
CharUpperW
CharLowerW
CreateDialogParamW
CheckMenuRadioItem
SetMenuItemInfoW
GetMenuItemInfoW
SetMenuDefaultItem
DestroyMenu
SetMenu
KillTimer
PostThreadMessageW
ModifyMenuW
GetMenuItemCount
UnhookWindowsHookEx
TrackPopupMenuEx
MonitorFromPoint
CallNextHookEx
SetWindowsHookExW
IsMenu
SetTimer
DestroyIcon
IsChild
LoadStringA
PostQuitMessage
GetSystemMetrics
TranslateAcceleratorW
InflateRect
AppendMenuW
LoadBitmapW
RemoveMenu
CreatePopupMenu
DrawEdge
WindowFromPoint
GetSysColorBrush
FrameRect
DrawFrameControl
GetKeyState
RegisterWindowMessageW
GetMenuItemID
GetScrollInfo
GetWindowThreadProcessId
GetClassLongW
SystemParametersInfoW
RedrawWindow
IsWindowVisible
SetCapture
ReleaseCapture
GetCapture
PtInRect
GetCursorPos
DefWindowProcW
InvalidateRect
ScrollWindowEx
SetScrollInfo
EndPaint
BeginPaint
SetRectEmpty
OffsetRect
SetRect
DrawTextW
DialogBoxParamW
IsWindow
PostMessageW
GetMessagePos
FillRect
SetCursor
SetFocus
ReleaseDC
GetDC
IsDialogMessageW
EnableWindow
GetActiveWindow
MoveWindow
ScreenToClient
CreateWindowExW
LoadImageW
LoadCursorW
GetClassInfoExW
RegisterClassExW
LoadAcceleratorsW
LoadMenuW
MessageBeep
MsgWaitForMultipleObjects
MessageBoxW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SetForegroundWindow
ShowWindow
GetWindowTextW
GetWindowTextLengthW
UnregisterClassW
SetWindowLongW
DestroyWindow
GetDlgItem
UpdateWindow
LockWindowUpdate
EndDialog
SetDlgItemTextW
LoadStringW
SetWindowTextW
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
SendMessageW
SetScrollPos
CharNextW
GetSubMenu
GDI32.dll GetDeviceCaps
CreateRectRgnIndirect
DeleteDC
GetObjectW
GetStockObject
SelectObject
SetViewportOrgEx
SetBkMode
SetTextColor
CreateFontIndirectW
DPtoLP
CreateICW
LPtoDP
GetTextExtentPoint32W
CreateCompatibleDC
CreatePatternBrush
CreateBitmap
PatBlt
CreateDIBSection
GetCurrentObject
SetBkColor
BitBlt
SetBrushOrgEx
CreateCompatibleBitmap
ExcludeClipRect
CombineRgn
DeleteObject
ADVAPI32.dll RegDeleteKeyW
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegEnumValueW
RegQueryInfoKeyW
RegEnumKeyExW
MSVCP140.dll ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Xlength_error@std@@YAXPBD@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
?classic@locale@std@@SAABV12@XZ
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?_Xout_of_range@std@@YAXPBD@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?always_noconv@codecvt_base@std@@QBE_NXZ
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
COMCTL32.dll ImageList_Draw
ImageList_GetImageCount
CreateStatusWindowW
ImageList_GetIcon
ImageList_LoadImageW
ImageList_Destroy
ImageList_AddMasked
ImageList_Create
_TrackMouseEvent
ImageList_DrawIndirect
InitCommonControlsEx
MSIMG32.dll GradientFill
UxTheme.dll DrawThemeBackground
GetThemeInt
OpenThemeData
CloseThemeData
VERSION.dll GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
gdiplus.dll GdiplusStartup
GdipCreateBitmapFromStream
GdipCloneImage
GdipDisposeImage
GdipAlloc
GdipFree
GdipCreateHBITMAPFromBitmap
VCRUNTIME140.dll memcpy
_CxxThrowException
_except_handler4_common
__CxxFrameHandler3
__std_terminate
wcsstr
wcschr
_purecall
wcsrchr
__std_exception_copy
__std_exception_destroy
memmove
memset
api-ms-win-crt-runtime-l1-1-0.dll _invalid_parameter_noinfo
_controlfp_s
_errno
_register_thread_local_exe_atexit_callback
_c_exit
__p__wcmdln
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
terminate
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_beginthreadex
__p___wargv
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-stdio-l1-1-0.dll fwrite
fgetpos
_fseeki64
fsetpos
setvbuf
fflush
ungetwc
fgetwc
fgetc
fclose
ungetc
__stdio_common_vswprintf_s
_set_fmode
__p__commode
fputwc
__stdio_common_vswprintf
api-ms-win-crt-locale-l1-1-0.dll _configthreadlocale
_wsetlocale
api-ms-win-crt-heap-l1-1-0.dll _recalloc
_callnewh
_set_new_mode
malloc
free
api-ms-win-crt-string-l1-1-0.dll _wcsicmp
wcsncpy
iswdigit
strncpy_s
wcsncpy_s
_stricmp
_strnicmp
wcscpy_s
api-ms-win-crt-convert-l1-1-0.dll wcstol
_wtoi
_wtoi64
api-ms-win-crt-filesystem-l1-1-0.dll _wmakepath
_wsplitpath
_unlock_file
_lock_file
api-ms-win-crt-math-l1-1-0.dll _except1
__setusermatherr
SHELL32.dll (delay-loaded) SHGetFolderPathW
ShellExecuteW

Delayed Imports

Attributes 0x1
Name SHELL32.dll
ModuleHandle 0x70940
DelayImportAddressTable 0x72014
DelayImportNameTable 0x69a24
BoundDelayImportTable 0x69af8
UnloadDelayImportTable 0
TimeStamp 1970-Jan-01 00:00:00

128

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x788
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.59532
MD5 01085f426e9c619fc1742c28163a3804
SHA1 71c09dea4bc6c5366b2ef85f5afd1ac73ea8f250
SHA256 12901939fbe8dd09f9494147d3cf83b48f7a05627aa875465b61d448d551ddbb
SHA3 a160eceebd2403dbbab12461f08d7d1086e1b55301f1d9de9b1f1be5942dc1bc
Preview

129

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x248
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.11304
MD5 069741b873edb270e87e021bf7c94a19
SHA1 d90998894099cd56ecf9ceefe76ff2f03bea1834
SHA256 d8c7acfb7291316b0f771f49e0e02acc2633ae7eb1f1f3147523d8f9b6667ebc
SHA3 05fc2bf411268071cc5447f6205168e2961ffc89dedb147869ccf4e794ef6c37
Preview

205

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x328
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.75668
MD5 594bf1c815c44f882c31b8422fe848e9
SHA1 d797671c1a0759a2c3cdec6a871e293252f2bd8f
SHA256 e02b48bbf7ded42179fe9c1d39cd412ddda9cf02dc53ea62f2e0753445a37182
SHA3 1425677e166c80445319998224f957d187453a5765009ca3c348caf584c35861
Preview

206

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x2b0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.81546
MD5 b95b33885a52404dd9d9e3aa1d1a07f9
SHA1 694b9b76fdd9beaf83dff082690d609967b6bd55
SHA256 f2d4b94e900f5c209e0907f3ed1aa9a9c76e13924bea98bd04162bfab51583b8
SHA3 73d44f1828491f1c65d89b07297ccb9ddade44499ba2c48f34b24ae25907b6c9
Preview

207

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x338
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.16422
MD5 504813ae861263caba4ed52b18d55233
SHA1 714b8483a71cd1cc3e90a16d63de3ad17f2ef6fe
SHA256 258b27eb36396287a95f6bcbb09173252e960a1e14bc4fdb63bd63d6e87c21ad
SHA3 54328851733dea0c68e0263f05e18bd5bfc8e18d9b664985e430ae43dccc0e6e
Preview

223

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x328
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.75668
MD5 594bf1c815c44f882c31b8422fe848e9
SHA1 d797671c1a0759a2c3cdec6a871e293252f2bd8f
SHA256 e02b48bbf7ded42179fe9c1d39cd412ddda9cf02dc53ea62f2e0753445a37182
SHA3 1425677e166c80445319998224f957d187453a5765009ca3c348caf584c35861
Preview

224

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x328
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01827
MD5 fb3013d42e4313ea91f25c4d69090234
SHA1 e317df1cf6df0364e6a3094e67465adc9cf785e7
SHA256 e9728d07a2e5172d0a6547fdb415c1a6145f356350d3915f82ed9379fd75d20a
SHA3 1c2a567f779e7017cdfb1f42667c1b45c33cd93dc4f7bbe79eeec2092d805607
Preview

230

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x328
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.81605
MD5 5c6f65b92073c152aa57c843d070951d
SHA1 de55c4ee14ac79e3c06a50abcbea91ccc703a319
SHA256 08107acda0d6ee375eb8838cb88b3a9c6400ea289e9595f4fb748168ea236c54
SHA3 8644f8cdbffa5c675a27d0f4af0df81f9fd8fc992e4870a1c44267da49ebce11
Preview

231

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x328
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.85232
MD5 7be8f1078b2758c15aa552e1d2c5d503
SHA1 c7ff6b6c73ad636c8e9dff27537f3a526eb4585b
SHA256 95f7cb6f774c3791f94ecd076c5cb7f677200c544a1e9fb3818791baec0ef71d
SHA3 0162f60de9846274cf13e6a372e19d451b3eee739d1dae84be86f6fcea26b283
Preview

257

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x328
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.1224
MD5 f6f908c4e137b08c09dfc6c16a7b9e3d
SHA1 bf3b2996a9181a6cf4f04f90b9a25f3dc754b841
SHA256 8d5c51d16cf50254045e0f98fb6f0174e6958d98d7804be3d42e880da045b2a1
SHA3 d99a75825708c4bd1f1db391e89233990466c0956ed6099bd672e6dedaef381d
Preview

258

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x528
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.37803
MD5 6dd26e93a8b7b0cfde2d061b87f2bcf2
SHA1 9671374465106c8139c20b4e989a2bb8e0b207ad
SHA256 ed3d2c92bec4060f09a03502739f3771803a0e3e0c522d74cd193c729b3ff6cb
SHA3 3a14e214e5763213a8cf14b2fa2d88fe62690d9661232d0048f78ffb47fd5b59
Preview

259

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x528
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.08591
MD5 a842b56285c5e756657cc34c7aeb83db
SHA1 58f54a38ec5ad11586af2c8a4358fa1373e828c4
SHA256 119a9bf53f79884c05a30874315dce754158041d3c4e379ea43d3d14cf852f50
SHA3 14a292bb4bb83f3f85045ba9482453eaaac31684de75129cb22abd668d3bbdae
Preview

260

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x528
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.37803
MD5 2324327ce83a057dbe3c43850baf25cd
SHA1 ea0a74bbf6773b46e7a37f2e5e44f2f1a10e687c
SHA256 fc804fffbf31fa9bf6a4fb4cfc77df767d995bbc4f3a0826901aa1cc9178f0a3
SHA3 5832c02918c7c9202067ca45def86571238338b3da649383498c1e0c55873ae2
Preview

261

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.12995
MD5 de73d3dfffa13286cdf7f33a5defc1f6
SHA1 7a96f6d8b4b4ec75fe53a0583bc36515afd8793c
SHA256 9aac45fdfe7e0c50e81bd0a86b3d27b43af6085b52c74e520b7b0d60b3dcf394
SHA3 7c6934f3e41832001b07705a19c03f672e5d34fca4330cc1f6d4ba93c18bed2b
Preview

262

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x528
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.37803
MD5 2324327ce83a057dbe3c43850baf25cd
SHA1 ea0a74bbf6773b46e7a37f2e5e44f2f1a10e687c
SHA256 fc804fffbf31fa9bf6a4fb4cfc77df767d995bbc4f3a0826901aa1cc9178f0a3
SHA3 5832c02918c7c9202067ca45def86571238338b3da649383498c1e0c55873ae2
Preview

263

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x528
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.08591
MD5 a842b56285c5e756657cc34c7aeb83db
SHA1 58f54a38ec5ad11586af2c8a4358fa1373e828c4
SHA256 119a9bf53f79884c05a30874315dce754158041d3c4e379ea43d3d14cf852f50
SHA3 14a292bb4bb83f3f85045ba9482453eaaac31684de75129cb22abd668d3bbdae
Preview

264

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x528
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.37803
MD5 6dd26e93a8b7b0cfde2d061b87f2bcf2
SHA1 9671374465106c8139c20b4e989a2bb8e0b207ad
SHA256 ed3d2c92bec4060f09a03502739f3771803a0e3e0c522d74cd193c729b3ff6cb
SHA3 3a14e214e5763213a8cf14b2fa2d88fe62690d9661232d0048f78ffb47fd5b59
Preview

265

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x528
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.7242
MD5 b34b54987dbb4ac1b3474ae47a98c2c6
SHA1 0ae6fb3dbb3a560bd61ddb76f69192232d710bdd
SHA256 c071d9a5537a77a7c2244e427e1abc8a2c7dbbf735e7ec35f79c743d95528740
SHA3 edb49d40a3661a77689638880374661fc14f763fe4b70cb5f8bfef31e2ce7cd4
Preview

266

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x528
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.55907
MD5 3980a28a3b7aa0f1d5b5734b2a067e89
SHA1 f8c4d630e22c70397fe055364692c418935bfebc
SHA256 10a26ee8c0fb6cd41d091e304f9b21c8d02decbac328d9deaf5f4f70dc63b181
SHA3 6df46bd865ef9d42a44ff6a9ae82065bd446e5ff9974c957451cef19a4aef536
Preview

273

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x528
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.79733
MD5 64909e356bff34d62cdcc7a458cb4af0
SHA1 48d22116f1bbef8a574a6619464491311eb80823
SHA256 287f8f90ebe924c2fd814bfcb1d7094c3b0e5cd2b3db6d5f6192c08cfae785a6
SHA3 d7111052eb32c4c156d4033ec4dbfa53e5eda88b100e0608cec91e5a50495617
Preview

1

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.37686
MD5 5836d3de1af88bf23cf669c7bb94201c
SHA1 e9a566a0b40ebc87d5fb36b27e9d5109377468a2
SHA256 2e0fb1385b517cf73d466e00b46b5e92b6abd0d8ecfc095a2333b61096a3f645
SHA3 29fe3f9a32b0c8d6ce8171757242cff1392043b1ee7c47b7f3cc7adef1fcaf53

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.44176
MD5 f424defc86ed4501df577aa7a14d6527
SHA1 4f95dfcf78a817d7adae58687fe6c96d36ebfca2
SHA256 5f456741783e77713cdc5c0949073409bfbb907dd29142eeda6a7d206f64571b
SHA3 7b1df79830e2d0a88420d6d2cc71fbc1991942fb44ccfa8167ff703e85c3532e

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.53005
MD5 ef7e773865635ae2b8b7f5c5ddf8afc7
SHA1 a21d0848e7ff4dccd35bdadd91abfecfe0073a7c
SHA256 c209557961d1fdb22b5e28dac377174fad82e00948c96e8f6edf89b474bf3cbb
SHA3 0c7c7f3ae0b1ea7655738f1ef7e1c437dd432175c880a441bc52c92ce5d6732a

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.58578
MD5 71c7ed7cb0e8a0f616ed124fe17a27ea
SHA1 17f90c3981c1b6777ace1943c2aedf8dc6de6bf5
SHA256 c002af591692e247e5a4622468bf531ff295df94012e7faf7f34977a1947af4b
SHA3 88fcdb8239a9533ad6b36c6063fd0e19c7fb570d0d726d31147cd5c9b1d9fd34

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.69481
MD5 57b45560b05cf34049df84c6fa01eba3
SHA1 9079b3785cbb6a1426209d87ac4c2541cfdafdc4
SHA256 cd40da713c3f2ae978b9e63905b241404637e9ead425dabb3e6147c0891ffa1a
SHA3 fb58ef0a94ea529edea572a2a9198d6c71892aba2a0d8da87b480a7aa685a997

6

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.84081
MD5 3ad932c0f240b4a06d544fa9042367d5
SHA1 f8576cabd63a4de50022c0e931e3acb4ff34b786
SHA256 18465437d3c08a73a0820dfd3ac37121473581e1322763391e8865c1df02b4be
SHA3 f367332538c609f5f100ee61a28278e54f3f2a27364e142cd122eedcd96d460f

7

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.06799
MD5 0e66c79f2d6dc25e4efba52260726117
SHA1 877d3cc9d0309374aea43b6a5ebed7138e682f48
SHA256 56e577035ea692faa4b24da777e5d77426ca32a0b0607f98e0e9fbf66fef8a27
SHA3 ab8c408ecea417c6500ac51fc6b4260294dcf22cce7c50cf7a1239893271c99b

8

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.07395
MD5 ddca988cc6a3ca8180ab0ba6c33be66e
SHA1 39a28fdd8ee2c9280abf8e8dc433a4ca04d29292
SHA256 43cea0458e1b863fedef8a0d5141a7f4914785a607ee2908cabece6498516f23
SHA3 20fac347149c7b339b5501af694c75ccef98df62f1723aed891d788cc32c84c9

9

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.63391
MD5 9019ea8530bd58861e9030ef9d20dab3
SHA1 d7c48e9f8f86166fa3edf5c639c87fe0d6443acc
SHA256 47c803d396585490a70e59064318405f0a9467a6c0bbbe66a17e70684e9d3fc8
SHA3 7ca97ef75b1c9d3b7485cc4a4081af5cbccb221002836cfede6301a21c926aa7

10

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.76814
MD5 f2db1fc70eec0aebc58686cb13ce745a
SHA1 01eaf3a2ae1797ccc8d3c83f0b972f9cb7af83c8
SHA256 c41f6a469d99c395c2424dbfa125ecf3874012ebe464a41c1fb88cd88e161066
SHA3 c7c074770a7b26eb1b89d568911024244c8e0a8d7c6dd96fff4741a0285a7a56

128 (#2)

Type RT_MENU
Language English - United States
Codepage UNKNOWN
Size 0xd2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.10677
MD5 2a1b1492d179053c33d4655715fb8d6a
SHA1 f6305d64f1aa1e1684635a5d9f953bf4b5e544db
SHA256 f14a60bf15e90dde67671fbfab28a70dd74ffba281a909a90078df60c0e9406c
SHA3 f1adc527c97d59704786be543e72bed5cd0e7b4eb3a8e808c3f67d7c54054bfa

129 (#2)

Type RT_MENU
Language English - United States
Codepage UNKNOWN
Size 0x20e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.25138
MD5 1eedb2ee35cb1050d35b587848af073c
SHA1 79d9f8308fa0f2a05dcb0dab610e3dd30737ae2a
SHA256 106e08b18272ff861af0d9b7728ef666993e3175d48bb4f13a947066a497b01f
SHA3 df99d3b9783152a8973ea9f8500dae8a011fa045cc6cf330cae6ce7511590fd3

130

Type RT_MENU
Language English - United States
Codepage UNKNOWN
Size 0x1ba
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.30777
MD5 6ff12173389a32ec5dd6a60fed634cad
SHA1 6f939895cce9270ab22fca8e1fcab4861f6f55f8
SHA256 60d70dec5d3a5e5b322d3d5874b17b3a285bdd93545f85835edf76e4f4134ff0
SHA3 dac64d747b4140dfdcc0f2cf794e5d385bb38de443e9a48150ed743882f90f26

213

Type RT_MENU
Language English - United States
Codepage UNKNOWN
Size 0x70
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.88428
MD5 a03e9c4b8fa9a12aeeb5588dfb174c26
SHA1 c3580262ca3b0ce1985a8ff5456e3224f146702a
SHA256 1702b8677c4e2b56d42edc5caca77f77e7fb6cf6f8015751c28cb6d07c560d70
SHA3 20130de9a7e92a525d2a0b3e0dfd7c391ac43e747db0c0c5b2aa2d476724334d

100

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x88
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.81532
MD5 e9c7a45c572ba9935df4a0d12d67d9ea
SHA1 422ba1b28a0dff48f483cfb413216151dd863910
SHA256 676350ce2266b81cc27b6eead56d76b4f940e201d5caedd98a4ce126232004e3
SHA3 4812d9a64abe2bc5b85cef415614b82e183bf5b5d8be8e5e49788e4ca3b1d6ec

129 (#3)

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x104
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.96866
MD5 37d48644ca5213c62400142ef3564e56
SHA1 f2489c03652fbd24303aca9993df871fccb2d467
SHA256 06f03894edee63a295e5f3f509b67c82d8b8e1bce025f037cc080d1121777f53
SHA3 bfde6f5351939cf4056241cd65c97c299965aacf372a1cfac5a8db06ab2fe22d

202

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x274
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.92459
MD5 36a7272df8b78c92aadf00e6c837c48a
SHA1 4546fe2888d5ab59fe50e052395c14fe74bab3d4
SHA256 5123ea255e880c98b3dbdebf87b8f72172ee0296a168cd65b634dab0c49b4ec2
SHA3 4213ffbd4c7d42cf2809d4ec8571123de1f7ae2bdaadfa37e195c59da78395fc

203

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.63846
MD5 932a49280e99d3646268bd8b5ad687a6
SHA1 7c51533981f4c8610f11fbc5a7c5d68ccda83464
SHA256 11a9ec175c36527aac8d9933f1c7053658dee8daceb713fac54642ba22a9f1f9
SHA3 3bf683793c496744fcab657980e87540c831b9765a271cafc02859352f5e8de0

204

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0xb8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.94484
MD5 5d3333d2b373fe02ff053c4e93bc0c0f
SHA1 e811b6b340b691f5e9f812722729cb4bee9bee54
SHA256 04f95af1a3e4178003abbd804f5cbcc0042017037ce08963615c95f4f0da8b79
SHA3 00f0859bb4782816b7f9d217cff3773976b10c1970e943a7de0cacc6408d5c79

205 (#2)

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x258
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.86481
MD5 f853c457ba4f5e5c1a616a25c9b3304a
SHA1 f2a425f2355f4778e3943105f30b3f60ac06bd3d
SHA256 917d06362baaf4fef0d6a839a51aec21e3f77077a0192966ee65bb4481437568
SHA3 d4fafcc7db85749da6c6c4e4fae3d8430456af3a9ec9a734f016320c90f78b5a

206 (#2)

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x138
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.89349
MD5 a852fb3d3afcc095119f2e572bfdbe21
SHA1 b3a4ac07b99cc3a974c76e035755b2389de29bd4
SHA256 d3114fcdae2b405df39cb904c28843514e1cf9adee2c46fff257ca8916ce9d14
SHA3 604e3965fc1ab9e152e8a80a1b3000112a98ad40c8cc515b94d0be3d818cf130

269

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0xa2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.78846
MD5 e7724af14da8148bfe3b26a039d6ae4e
SHA1 12c1bbc83c84239b50f565dc1919eae14ff68080
SHA256 4400fa440d96fdd1aa5eb7deb9696fe2b473ad9776e489988ab11cf3561ca00b
SHA3 174d30e005f112afbac96d776d9c2fece2c798c9a2641c855117dd004969d822

270

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x12e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.94299
MD5 8ebc1a193fc09d161a770942384df684
SHA1 68e2652de2c6bcc01d6940e5f8559e21df2e3485
SHA256 52ad1d2396c564804f77e71a929c7ef4ac1553f209750676322ad7de8fcb6542
SHA3 e7addc8e386a9841e128156b1a3e982d719fda4165d39adceda9e96c60550a04

271

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x124
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.82787
MD5 682b869c98137df600dea6d8bfc04f4e
SHA1 aedf36997977bd1c6680b14055ab6d2e3c860fc0
SHA256 7628d238dbb277f069ec5b8a7f2a9b6e5e142aafdcf93ac3b59778e43ba6e4c7
SHA3 69e9476a0eb9329487a60cf72adba87a87a1b08f06ba03e827eede97e5b74866

272

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0xc4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.76514
MD5 49fbd409a8d31a1fd0fe6fc4fef175f6
SHA1 9a22aa71df89f8e40b023f9aa1b4c247ab628543
SHA256 dc28819178fc67e69533616e67e29540d884ef33f518661c47c0dae5ad02f1ce
SHA3 46ae9748eb45549bd0624feb0d97bc712bacffadccbc43781583d7ef6137dd4a

273 (#2)

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0xe2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.85458
MD5 05c49a0713c4dba13168e2795e1703cf
SHA1 ff8b9b21caf2f9296ae04e95438e4c29ae669d62
SHA256 1a07e825d608cd83e2c57ac12796bfa773609729eb61c735c370b56a21d5a38f
SHA3 69edf24e51502b1a2cf37b373d3ffc1e231823a18944c6a8c8f7b816c47b71eb

281

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x238
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.99119
MD5 6f56d3501fb9295b299adb959e072c63
SHA1 bdf75853b03802e1d5f3e66316ca07b92811f864
SHA256 11aef1072452ff1f81069727e68458bcbee89c08d1703a0f597f4524a16b7e2b
SHA3 aa635db297a6aa62bda56d25bd6b8cfbb21fd143fb9e574b64f51b2f7f187397

282

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x27c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.99465
MD5 32e89c9303634c05973099dfe56a4446
SHA1 4ccc5ca19458e3271daf972a6e73be16f395ed8a
SHA256 2e221bb6d278d66ef2e2d0f5ecbf7934302e9e731f3edd00b87dc4e267092d61
SHA3 d18607b987d15e974c9fa7d0d7d35e57a3a3469d59c301a61ef3f722e04ad6a2

293

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.88182
MD5 06c24f0177bef183bd84872a4c489846
SHA1 aedc38645be444f03adca30ae41166a36c284b86
SHA256 35e73ec3366c74167fcc84ee32ed7dc2734ed8f3a8467b1cd433b79178c7f9f5
SHA3 ba8675d5372139a73b17ac5215ed469a9ee5cd85938c5473c6db58550ed58bef

294

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x21c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.89353
MD5 8e3b70e08386ee7ab8d23b41540e9813
SHA1 5c9f0c570b25db4844798b747453b9f2cf1a2036
SHA256 36eacd0ccd96fe156548c068a140e892ad93bf2eef66ca569a61b98342dc815f
SHA3 a984890ab99d0656a8576c2650e375cf4deb8d744a9e778c3f9917307c8bf704

307

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x140
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.70782
MD5 bf6f4580aabf01572b16e6e09d795cb4
SHA1 3d32a559a2ccef6e59350a809a100249ba99a4eb
SHA256 9e197da8049ff61566477615751548be3eaa672f65e90593f995a37260d24222
SHA3 734fb812a99662ec6f48e1d375e83130e122b2c56796ba8ac041d6640b52a52e

408

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.59969
MD5 bf1a6f0e59e1b4132e12dd9bef6b77cf
SHA1 3cd01692d717bfaaa338bc4cb0e6dfa9e96ff925
SHA256 198e85f35587de8687a1d6050fdaa4f612b63e8318b085aa0bd49ec73522c48e
SHA3 c7a768a58b02b31e168327893c25748677ad87abb28577f63e5530f1c8c8fbcf

1 (#2)

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x34
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.56819
MD5 16f7e3d9a24f6dafe6493c9f1d4d8c01
SHA1 a6acfd25216c0c9e2ef3e5f3f5c3ef1b5f959c41
SHA256 f9ecd483852c2a2ff7c191ce2afadeacd2f5d244094a8b40af26cef008ebdad4
SHA3 8fcc7bbc14e54d947cf1d7afed41f9847c31c260be555d7aa1a773b298990756

9 (#2)

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x148
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.20903
MD5 abaae7cb9d1d2544cbc15d6434f054ba
SHA1 01ca3bd4e7ee04a572d32e8bad42e32a4f999bfa
SHA256 990de3d0222e8c0d4411bbed8b0f232a366be365923eedb7d426ee05eaa50ce3
SHA3 0df38f4503823729fa7eb4ae0713e4ccaa40bfd9c94593c6f86c2b8b8a881ff7

10 (#2)

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x1da
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.30076
MD5 b0d6b205710d5f1dfa5b2e83bc30384c
SHA1 691d37b654da9aaac0ea1d6cf9d7cfe4d71ee44f
SHA256 2c927e7b85d7e723f002b11c2b147af60698926cc82ac38d0a4448c2dd3278af
SHA3 5afc0c40e213ff1b9f5a22d72e97cc7456bba57ccfcabe6afc0bde7b0e19b485

11

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x22c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.46155
MD5 ef918861128cbfb196a66f2315c25a1c
SHA1 17802d9bb86dac09d173abc6f87cc011836a1bfb
SHA256 a6faaf60b2e40ee672af2a37ec1ec724a8c96cf7e2b3a118be1b747fe85dd047
SHA3 80aeacb7eb6da9577fb7952edd45adb9cfe0339234f772f24eb67c9eb2cdfb74

12

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x286
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.49626
MD5 41561ddf955b3d61a1c33496d3c8babf
SHA1 f9a3c55f233f3de28cc9e819a374d93acb989e05
SHA256 dae6974b407dccdb2239ad62fe571807a4be065ee50b140228ea857a5d961f7d
SHA3 d790bd896191b8d74dd264e4a282e7bf9d9890d66977f3e4a4b54ee1bad26a25

13

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x35a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.40344
MD5 c23c71725fbc8ca95665a7ed30600997
SHA1 e5c459a045bca4509348c7c9e2ce3889bb66abb3
SHA256 fac73c8558c54222b7cff1ea759a159be32896d2b684093192cd211d614675da
SHA3 66ccdee96d80b79e1cfab1c286860387480086b27a9d10e6f7e965acdc0d2aad

14

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x1f2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.47303
MD5 edc32c08295353b007bbac2a852cead1
SHA1 5663bb7fe06ade1c60922d283c74571c9dece273
SHA256 8f8342b07d5a888f09ee3e7a8790b42b68dc2654543e8878630e1dcc4d8a0f97
SHA3 a315c4af6fb738fe76b098b6a36d3652d5d5adc74e2d66c222972b3cf8df8df3

15

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x258
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.41277
MD5 03903532d565e833a5e745093a107b4e
SHA1 f46bbc9bb9d32039647f24314cad3eece48fb503
SHA256 f202ea39ad265776268452340dc7bf709bc2725da7b41feda9ef8d7ac31e5b4f
SHA3 f1225086a891729c480898f74cf8374f6f48f190676a17f9b87a092bb85a098c

16

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x53c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.3489
MD5 62d929b9e6efcc28bf3f5c6990540529
SHA1 b512939280038eb8df2a61803abe410c42e7539b
SHA256 4632d48c50805a5beaa8b64e3d8e77e4fa0bc156038a62d1cf8160e5bcdeb7ca
SHA3 c8724c464a8f2e873f02a77dd2ba31af75d4159e8708cb687e16be81929c0c0a

17

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x3e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.74712
MD5 c8849025d7020840d128c6b45627a972
SHA1 0b612d41e0c66803fc234067c52f9dfaa99361a5
SHA256 c6673f41fdd72d6e9d99e085a8502488218838a7dfb1b8f415158cdefdc60826
SHA3 0dbc113a28c0aadc79b9ed90fb952793884c529b4858ea7dbb6b6c065417fbcf

18

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x272
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.36173
MD5 c2246d686a3a952d5d27c03667555737
SHA1 40fed2a14caaadc8b9a70ff7209a57756754bb9a
SHA256 da3422b6500431d6ca403472a5ff818e69dcc1b9fefad8ed512011f09035fe07
SHA3 a475ff74709d98b673412d082d7c107a0f979a837c6edb87fa5283219142090b

19

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x280
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.35235
MD5 0a55c3e8792d3db18e88eea6988155e1
SHA1 e601f77458823eb8ecb171d9b540155b40e6344c
SHA256 4a4376784d763db46332c989c6b406e53c31a843ab6d811211214c0cb4105f45
SHA3 16433e052cb464cd2ddce22b57a0ee5fe78f39c4ad12674a6d9985b4eb37ce64

20

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x76
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.57664
MD5 fdfa2262a8e6b9fa77edd8dddda2c365
SHA1 7d40e3240c05b27bdbaab387f2375ce92304b272
SHA256 1c2a09e0059cc6dffeb1b1454538495b694ab85296899217f234feb1ba1ee7d3
SHA3 9e6be804eacb52cec6a62f6fe8b43484d3034a93f0c8af2e163642b73a8b5836

26

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x186
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.1111
MD5 9a45fd513792e78b2dac45e7f91d02b5
SHA1 17d5d5677fdbd3ae44d25d67974ab0dbeed70df4
SHA256 c8bb93fd5b34029be97cdcb5757db97d25794950b4820c0619498b0c4ebb3e72
SHA3 fe0ba39d911b55de0fb10c02d19b11082a70b9daa630f10609e63a12894f75a1

2049

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x88
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.52262
MD5 5a8f66f89aa42c47963fc6138ed62f92
SHA1 8bc38ca5177cbed1024c76ac4dec6fd33052667f
SHA256 7feac4d6fe39827998e5e54bbd99566a4a659aad085e975cece8b1b26e70d1ed
SHA3 c47c5ae5a262d2c653335862fe17a07921b0b4d992dd22eeb2ee254408622d74

2050

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0xbc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.81214
MD5 969e68a30dd03aea6eade281c76349ef
SHA1 d857f82f33ab812fb441628d8ad2be70ec3b5c17
SHA256 d770bf95cf2fc8d35ccbd6f84b3245f2724e86aceb75dd13feafff603ac7abfc
SHA3 5745bb9bb3acc80f51e4e23c9928940cc654c4473f1e1378b26b8b74865567f5

3585

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x2a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.960953
MD5 aafa5ef370ac2381a1fd0e31018b4cd8
SHA1 330cc36d16e3f57176bdbfb4d70f28790d34c2f2
SHA256 16152d0e4b46613de57df670b3396bfd8f45877fecfa949f6f33082eaabdace2
SHA3 90bdfd5e7733f55ca1436a4d696fd9951167a524b979d6434b91cc90e23d3da7

3603

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x35a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.22951
MD5 3ff82d88eda4a370a812295decfbe907
SHA1 c4e838f8f24a4d89f6024704ad9e3ee389fd66dc
SHA256 b1b2860a679aaf416a48238e89d92c9eeaff328a3743f6bb689a11b4ae81b172
SHA3 461c5babb5ef84937acbe7f98651e4f9683a5db87cb7d4233a9401a423a5ae10

3605

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x106
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.99043
MD5 fec8e1b460825c18cb521771be463033
SHA1 da23982da2da4da2f37eaaab723615d20a035b61
SHA256 5b8e0bfb7c789c6bfdc4be2af9f36346c0e41e7ad22c8edcc661af0e8b53dbd2
SHA3 7b86c6cd1a0a3df09d80db4ebaa5fb785da3df9228b39db214233545ba4d745f

3606

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0xda
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.83557
MD5 2a450fc19a27fc2e3c519b56c448763f
SHA1 c5fff493b3264c9058855d1642e146f4a6cf66e0
SHA256 f4d2054bad5a30d07ffde08fafdf7a0deed4e343526816a67ecbbd068b84ad81
SHA3 612c621a553741864d1b823de4ac6aa953fceb8ad68f7ec419ca4dd035f5db1b

3713

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x108
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.90699
MD5 3ff7447dde366156c4b3875bce147b8d
SHA1 31648ecf1b001e31008bba76a8c4e80b70011d79
SHA256 f3aa028463e9ceee126424612c3bbc67eb62b92ff2e328d29543d62154e7fc4a
SHA3 852d5231b53eb5b1a420fe0ed52c8602ce592d6aa0722ab47d51fb821b274ac4

3825

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x1f8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04777
MD5 e0d2d9d8a0bf3bbd508e8282f458cdec
SHA1 9ac6aeaed327d8cbfec6a735f700676a8bc01607
SHA256 0cce65df387f67147c75ac921bc6512fb5fc8dc86d3a60a2e0c2ba2d4845539b
SHA3 2beb42630a13e63841d88462346139c8690eab66df2f0da4fd53a96e753a9d6c

3826

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0xae
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.77295
MD5 1395536b8eeb3e9a41172fc129faa8e9
SHA1 fa92508a54f1eb856881a9311c167310102e8805
SHA256 1981ad13f198af2761bff700f4efe7ec35f717041f9290b5005a22a07c6b45d9
SHA3 d66127cdc3524b2cace7fcba1ee625b207f08af062c28d504a52c48d034647fb

3838

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x44
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.92392
MD5 af6d78d601d2232fb1459c98ad905312
SHA1 45669d5630d6f4f44bda1da7b78c31c91e5c2749
SHA256 9e6c52a92a02ae957fecfc81726b6a5a93b5c687f57d2985fc2b66ef3be215b8
SHA3 2fdd97d5d26dc1590a151fa178dc5481e5f45bba9fdf5df93ad23676d90e159f

128 (#3)

Type RT_ACCELERATOR
Language UNKNOWN
Codepage UNKNOWN
Size 0xc8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.27496
MD5 cdd2b99bbb38d90fa133498268061fec
SHA1 72e9f0baaf9bf8aa1234930399e6e6f212269ec8
SHA256 15ce98b676f1ed0639e74e135fbda3f41e9360968c05f6a730834866a204c83b
SHA3 d5152ee8e81b8bb85db7020ec82d0b5f449139dad21cceb7e821aacb4bec4729

128 (#4)

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x76
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.94794
Detected Filetype Icon file
MD5 313adadcfee1c47c5d6e3810d1cb70de
SHA1 46e1afa6463fe66d8c0f85a975bc1bcd1466c804
SHA256 4c595caa56db3d45bc1af4328294cf1327ac3608acef6b5cfb5d70819a747ec5
SHA3 f82943d2a810fd2d1f7cfc23b502233003bfc2b5311cc346b3abbcae1bfadff2

275

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x22
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.36486
Detected Filetype Icon file
MD5 2f185f239d996d2d39299128b0b92a0a
SHA1 c71c00c3e5005859bbdb7555f027efef7f7a98d4
SHA256 78a7803716b19e07ae9b2544319972ca0e5eb5522e5d72eae27409454c761070
SHA3 85a5044784ce5954122489cebffc9db8a4d16c3d64ec6f6d5c8020473bce85b3

1 (#3)

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x418
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.49571
MD5 593217b7b2b5c34ac5f4eb87dec24df9
SHA1 db9d52c7a049be4ffc5a287ec4624cbb3afddd92
SHA256 96e3a4d8c65e28e6c9a3196a69a28db74017640af2123beaad376d200b33cbbe
SHA3 8eb4b1d5dd554bc3e560e46037c9bdc1652216421f551c8e122274eab689545d

1 (#4)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x280
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.07176
MD5 0f3b71d0fa474d73aff7de9cdf842732
SHA1 7990f81c60b8ab722c5ad7367f69c85106be5ed5
SHA256 5055de34114f55b1bfafbbbda68ec60c4291109780b9c197557b7c222c9a4e09
SHA3 c819cff55bde393211a32de2e92c070f295200f1b580ba63c6d18be15e762375

128 (#5)

Type UNKNOWN
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.08925
MD5 7b3fea3d0d3be672fc8bbb6bf5959dbe
SHA1 7c703429136355fa99813f6df03134514cc3dff5
SHA256 3559d40630ae6d89d8982ddc34bc9152b8eb17048a652a02a0a62b98a5c332b9
SHA3 b0418719f87608599579425fbee0ae38a5c7c97e45279f9dcd70bbc04fce5a70

129 (#4)

Type UNKNOWN
Language UNKNOWN
Codepage UNKNOWN
Size 0x10
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.07782
MD5 553e4ca4452820d9ed52ffe81a58e954
SHA1 325f2e9d581cc041328927d92d722dd42957700b
SHA256 f951cf34774e764f7997c6903ef2b8797e28a007cdd9c0676b09ffc8090be0f2
SHA3 7779b97dce11ce3f29d60c87692c8c68df736a20a9c1dc6018009fffa8dd5f81

String Table contents

&OK
&Cancel
Kaspersky Administration Kit Remote Diagnostics Utility
&Logon
&Next
Error while accessing target computer !
Error occured while processing '%1':
'%2'.
%1
Version %2 Build %3
%4
Access through Kaspersky Administration Server
Access through Microsoft Windows Network
Connect using provided user name/password
Connect as current user
Target computer
User name
Product state: Running
Product state: Stopped
Tracing: Turned on, Trace level %1
Tracing: Turned off
Trace file: Exists (%1), %2 %3
Trace file: Not exists
Diagnostics logfile: Exists, %1 %2
Diagnostics logfile: Not exists
bytes
Kb
Mb
Gb
Version: %1
Start Product
Stop Product
Restart Product
Settings
Acquire file
Acquire last %1 %2 of file
Make dump...
Execute command...
Delete file
Turn on tracing...
Turn off tracing
Change tracing level
Crash dumps
Crash dump %1. Size: %2 %3.
Acquire System Eventlog
Acquire Application Eventlog
Acquire Kaspersky Eventlog
Execute diagnostics
Downloads folder
Downloaded into file(s):
Starting product "%1"...
Stopping product "%1"...
Restarting product "%1"...
Running diagnostics for product "%1"...
Changing trace level for product "%1"...
Refreshing...
Deleting remote file "%1"...
Saving Eventlog "%1"...
Making dump for process "%1"...
Running custom utility '%1'...
Saving settings...
Downloading remote file "%1", saving it as "%2"...
Operation completed successfully
Pasword
Administration Server
Use SSL
Compress traffic
&Browse
Slave Server
Target computer belongs to a slave server
Compress CAB-files
Error %1 occured (%2).
Acquire %1
Acquire Settings
Trace files
Eventlogs
Display name
DNS name
Windows name
Windows domain
IP address
Select computer
Select slave server
&Select
&Find
Name mask
Executable name to make dump
Make dump
Run utility
Upload whole folder
Command line arguments
Trace level:
Select trace level
About
Delete downloads folder '%1' with all contents ?
Acquire system information
System information
Saving system information...
Executable name
The utility is expected to write into stdout or into the folder %KLACDT_SAVE_SETTINGS%.
At least Kaspersky Network Agent 8.0 is required to be installed on the target computer.
Another instance of Remote Diagnostics Utility has already connected to the host.
Host must have Network Agent installed. The Network Agent must be active and must connect to the specified Administration Server.
Delete files...
Select files to delete
File name
Deleting selected files...
Remote installation logs
Installation logs
MSI logs
Attention! Trace file may contain confidential data!
Windows Update logs
Changing rotation trace level for product "%1"...
Base tracing
Rotated tracing
Download...
Start
Cancel
Tracing: Turned on (without rotating), Trace level %1
Tracing: Turned on, Trace level %1, Rotating using %2 x %3 MB
Parts count:
Max part size (MB):
Xperf tracing: Turned on (without rotating). %1. %2
Xperf tracing: Turned on. %1. %2. Rotating using %3 MB
Xperf tracing: Turned off
Xperf tracing: Turned on, Trace level %1
Xperf files
Turn on Xperf tracing...
Turn off Xperf tracing
Change Xperf tracing level
Light level
High level
Basic type
On reboot type
Changing base xperf trace level for product "%1"...
Changing rotation xperf trace level for product "%1"...
Xperf file: Exists (%1), %2 %3
Xperf file: Not exists
Trace level
Trace type
Setup TOTP
Scan this QR-code by TOTP-application on your mobile device
Or use this secret string in your TOTP-application
Enter the validation code generated by your TOTP-application
Open a new window
New window
Close session
Disconnect
Immediately stop execution of current action
Cancel Current Action (Alt+Break)
Ready
Erase the selection
Erase
Erase everything
Erase All (Ctrl+Shift+Del)
Copy the selection and put it on the Clipboard
Copy
Cut the selection and put it on the Clipboard
Cut
Find the specified text
Find
Insert Clipboard contents
Paste
Repeat the last find
Repeat last find
Replace specific text with different text
Replace
Select the entire document
Select All
Undo the last action
Undo
Redo the previously undone action
Redo
Display program information, version number and copyright
About
Quit the application; prompts to save documents
Exit
Switch to the next window pane
Next Pane
Switch back to the previous window pane
Previous Pane
Show or hide the toolbar
Toggle ToolBar
Show or hide the status bar
Toggle StatusBar
Refresh workstation state
Refresh
Change the window size
Change the window position
Reduce the window to an icon
Enlarge the window to full size
Switch to the next document window
Switch to the previous document window
Close the active window and prompts to save the documents
Restore the window to normal size
Activate Task List
Activate this window
Open this document

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 13.2.0.1511
ProductVersion 13.2.0.1511
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName AO Kaspersky Lab
LegalCopyright © 2021 AO Kaspersky Lab
LegalTrademarks Registered trademarks and service marks are the property of their respective owners
ProductName Kaspersky Security Center
ProductVersion (#2) 13.2.0.1511
FileVersion (#2) 13.2.0.1511
FileDescription Kaspersky Security Center Remote Diagnostics Utility
InternalName KLACTGUI
OriginalFilename KLACTGUI.EXE
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2007-Nov-19 05:16:02
Version 0.0
SizeofData 89
AddressOfRawData 0x62d8c
PointerToRawData 0x6198c
Referenced File C:\a\b\a_VVG9OPZI\s\CSAdminKit\development2\bin\dll\klactgui.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2007-Nov-19 05:16:02
Version 0.0
SizeofData 20
AddressOfRawData 0x62de8
PointerToRawData 0x619e8

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2007-Nov-19 05:16:02
Version 0.0
SizeofData 1060
AddressOfRawData 0x62dfc
PointerToRawData 0x619fc

UNKNOWN

Characteristics 0
TimeDateStamp 2007-Nov-19 05:16:02
Version 0.0
SizeofData 36
AddressOfRawData 0x63220
PointerToRawData 0x61e20

TLS Callbacks

StartAddressOfRawData 0x463254
EndAddressOfRawData 0x46325c
AddressOfIndex 0x470d40
AddressOfCallbacks 0x459834
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_4BYTES
Callbacks (EMPTY)

Load Configuration

Size 0xa0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x46e00c
SEHandlerTable 0x4629b0
SEHandlerCount 247
GuardCFCheckFunctionPointer 4560876
GuardCFDispatchFunctionPointer 0
GuardCFFunctionTable 0
GuardCFFunctionCount 0
GuardFlags (EMPTY)
CodeIntegrity.Flags 0
CodeIntegrity.Catalog 0
CodeIntegrity.CatalogOffset 0
CodeIntegrity.Reserved 0
GuardAddressTakenIatEntryTable 0
GuardAddressTakenIatEntryCount 0
GuardLongJumpTargetTable 0
GuardLongJumpTargetCount 0

RICH Header

XOR Key 0x987df931
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 16
199 (41118) 1
C objects (VS 2015/2017 runtime 26706) 12
ASM objects (VS 2015/2017 runtime 26706) 8
Imports (VS 2015/2017 runtime 26706) 4
C++ objects (VS 2015/2017 runtime 26706) 38
C objects (26213) 1
Imports (26213) 18
Imports (27040) 13
Total imports 545
C++ objects (LTCG) (27040) 13
Resource objects (27040) 1
151 1
Linker (27040) 1

Errors

<-- -->