072f06e76849e46fe832a258d62d1bdf

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 1992-Jun-19 22:22:17
Detected languages Chinese - PRC
English - United States
CompanyName Adasky.com
FileDescription eBook Workshop
FileVersion 1.5.0.0
InternalName book.exe
LegalCopyright Copyright (C) 2002-2004 Adasky.com
LegalTrademarks $$
OriginalFilename book.exe
ProductName eBook Workshop
ProductVersion 1.5.0.0
Comments Create Professional eBooks

Plugin Output

Suspicious PEiD Signature: ASPack v2.12
Suspicious Strings found in the binary may indicate undesirable behavior: Looks for Qemu presence:
  • QEMU
 Contains domain names:
  • Adasky.com
Suspicious The PE is packed with Aspack or Armadillo Unusual section name found: .aspack
Unusual section name found: .adata
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryA
 Can access the registry:
  • RegQueryValueExA
  • RegSetValueExA
 Possibly launches other programs:
  • ShellExecuteA
Suspicious The PE header may have been manually modified. Resource 1 is possibly compressed or encrypted.
Resource 2 is possibly compressed or encrypted.
Resource 3 is possibly compressed or encrypted.
Resource 4 is possibly compressed or encrypted.
Resource 5 is possibly compressed or encrypted.
Resource 6 is possibly compressed or encrypted.
Resource 7 is possibly compressed or encrypted.
Resource BBABORT is possibly compressed or encrypted.
Resource BBALL is possibly compressed or encrypted.
Resource BBCANCEL is possibly compressed or encrypted.
Resource BBCLOSE is possibly compressed or encrypted.
Resource BBHELP is possibly compressed or encrypted.
Resource BBIGNORE is possibly compressed or encrypted.
Resource BBNO is possibly compressed or encrypted.
Resource BBOK is possibly compressed or encrypted.
Resource BBRETRY is possibly compressed or encrypted.
Resource BBYES is possibly compressed or encrypted.
Resource BOOKBMP1 is possibly compressed or encrypted.
Resource BOOKBMP2 is possibly compressed or encrypted.
Resource BOOKBMP3 is possibly compressed or encrypted.
Resource BOOKBMP4 is possibly compressed or encrypted.
Resource CLOSEDFOLDER is possibly compressed or encrypted.
Resource CURRENTFOLDER is possibly compressed or encrypted.
Resource 4090 is possibly compressed or encrypted.
Resource 4091 is possibly compressed or encrypted.
Resource 4092 is possibly compressed or encrypted.
Resource 4094 is possibly compressed or encrypted.
Resource 4095 is possibly compressed or encrypted.
Resource 4096 is possibly compressed or encrypted.
Resource PACKAGEINFO is possibly compressed or encrypted.
Resource TADAXPFORM is possibly compressed or encrypted.
Resource TFRMABOUT is possibly compressed or encrypted.
Resource TFRMIMGABOUT is possibly compressed or encrypted.
Resource TFRMPASSW is possibly compressed or encrypted.
Resource TFRMSPLASH is possibly compressed or encrypted.
Resource TMAINFORM is possibly compressed or encrypted.
The resource timestamps differ from the PE header:
  • 2004-Feb-29 19:54:08
Suspicious The file contains overlay data. 6800931 bytes of data starting at offset 0x4a200.
The overlay data has an entropy of 7.99884 and is possibly compressed or encrypted.
Overlay data amounts for 95.7265% of the executable.
Suspicious VirusTotal score: 2/71 (Scanned on 2024-04-16 18:14:08) Trapmine: suspicious.low.ml.score
VirIT: Trojan.Win32.Generic.ACH

Hashes

MD5 072f06e76849e46fe832a258d62d1bdf
SHA1 64c42543afb7d85d8349d1f2e729ef968e219200
SHA256 cbbf6b259e60e170ff097abe03095ae4e5e9faf75f6230fa19bdff9259eba44f
SHA3 01332bad9e6f1f7b1bcaadc81fc74d891753edf9b17df9a9163c7432fc30e9de
SSDeep 196608:Kh4ilRkUXGq6a/3Al/vSB+kUXGq6a/3Al/vS1:Kh4ilbXG1aolX0+XG1aolXG
Imports Hash aa8750c775e1cc35304e6aee8ef04f9b

DOS Header

e_magic MZ
e_cblp 0x50
e_cp 0x2
e_crlc 0
e_cparhdr 0x4
e_minalloc 0xf
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0x1a
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 10
TimeDateStamp 1992-Jun-19 22:22:17
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0xa3800
SizeOfInitializedData 0x1c600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000C7001 (Section: .aspack)
BaseOfCode 0x1000
BaseOfData 0xa5000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 1.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0xca000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x4000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

CODE

MD5 404d527ae959729fa50f3981703a9933
SHA1 b1b3637a12eeb002689b4f06353901a07d4f398a
SHA256 19ac7492ee58563b315c42986cb6ba236762de5a26f0a708cc249f838346dd40
SHA3 04a762be5b1814a9000b2ca10f2b962cc2955731bb5ec5e0ac9d902156b78d26
VirtualSize 0xa4000
VirtualAddress 0x1000
SizeOfRawData 0x41e00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.99889

DATA

MD5 20a67930ecd01660c3d892ae7f0dc061
SHA1 83af0342fc11a58df87880c62e663c46772be21d
SHA256 cd64f22d712b1971491642337192e943de9a4c30663c5643d44470595879d360
SHA3 24c3d9726c64db784e9a9c0f416b91a55397a5c9a8cc768da69a08095d871722
VirtualSize 0x3000
VirtualAddress 0xa5000
SizeOfRawData 0x1000
PointerToRawData 0x42200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.78124

BSS

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x2000
VirtualAddress 0xa8000
SizeOfRawData 0
PointerToRawData 0x43200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata

MD5 15a31758c2d4cb6f81c9543a8f98c216
SHA1 1922e5776f2fc0e138621e6df830c19e6647f541
SHA256 a4a2f744211b18059651f22d622323551f1346235e9d878dcfff4eaee82253a2
SHA3 e8c30ea64600a79c91c0362285980a84f9f6c45356102079ef0f260115a3215b
VirtualSize 0x3000
VirtualAddress 0xaa000
SizeOfRawData 0x1000
PointerToRawData 0x43200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.51801

.tls

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x1000
VirtualAddress 0xad000
SizeOfRawData 0
PointerToRawData 0x44200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata

MD5 627455bf04b52580d84e1598b1c36fe3
SHA1 d6654988fbb7d667220c6abfc5cd62e4bc75f3c1
SHA256 a2331ec222bad2047076c34af2076836ee063dcf3391ee1b986a02b42b21df3f
SHA3 3447cf75b0690d9d284decc0799a05b8007e5c9069769938e70852462873a9f0
VirtualSize 0x1000
VirtualAddress 0xae000
SizeOfRawData 0x200
PointerToRawData 0x44200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.200582

.reloc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0xa000
VirtualAddress 0xaf000
SizeOfRawData 0
PointerToRawData 0x44400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc

MD5 ea3fe5deb91dae4a1c175d2546f32bc9
SHA1 c265ccaf58e07a8fb952b5d19e9b29ddd4e6497b
SHA256 6451217b9b27d2feb86450c3fe117b85f9a70f7351ead46fd00ac70e462c1240
SHA3 a9d7fe6d6da47349398be4f51a994aea063a814f3c046780a643f8f0953c7f49
VirtualSize 0xe000
VirtualAddress 0xb9000
SizeOfRawData 0x3e00
PointerToRawData 0x44400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.15197

.aspack

MD5 98119739aca7091ec5dc1f881877debf
SHA1 d8e3b152868a9761e9ec69a79faf87865e6af8ea
SHA256 d9062e088ffabae00460a2564ea967171a5e7fcbd65ce7ac5c8e44769a3c54b6
SHA3 ab905413de0a327d99e5244586107a0fbbfe3a4a51f7926a5d81b1fecdfce595
VirtualSize 0x2000
VirtualAddress 0xc7000
SizeOfRawData 0x2000
PointerToRawData 0x48200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 6.06144

.adata

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x1000
VirtualAddress 0xc9000
SizeOfRawData 0
PointerToRawData 0x4a200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Imports

kernel32.dll GetProcAddress
GetModuleHandleA
LoadLibraryA
user32.dll GetKeyboardType
advapi32.dll RegQueryValueExA
oleaut32.dll VariantChangeTypeEx
advapi32.dll (#2) RegQueryValueExA
version.dll VerQueryValueA
gdi32.dll UnrealizeObject
user32.dll (#2) GetKeyboardType
ole32.dll CreateStreamOnHGlobal
oleaut32.dll (#2) VariantChangeTypeEx
comctl32.dll ImageList_SetIconSize
shell32.dll ShellExecuteA
urlmon.dll CoInternetCreateZoneManager
winmm.dll timeGetTime

Delayed Imports

1

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.23157
MD5 a703db7e6ae616de2bc0b27c2040c166
SHA1 64605aa54db7c9b1ebea98ee24c2c1407fa80a07
SHA256 da926b61c4714b6734e4c515ce9678bd95295a552976c54c31f81f458409ce04
SHA3 0a521a342b6b6b223b783a301d2c77452e67146148b51376ec8ea5ed8c624cd7

2

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.19143
MD5 2710ae1a01776a9a1f16ed3df9ad67ce
SHA1 2b4aa453055c131ca83fab8bc5bb54c1b8847b13
SHA256 122517014597cb16901accf7728a28e07fd2ba84a732fb8b67b39ffc87b4bee7
SHA3 07da0983ec6ce5c24364d42bfca1e22d7fd1e240bb2485d21d3d32193bcf8806

3

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.30121
MD5 5e8b971b625d7a520102845b36f41fc8
SHA1 e53f7657d40a7317a8d2daebccaa0cc9e161f550
SHA256 f2fb4d3d76432bd40420a6eea567dd727aeec82c828ca1e0bd8fe7d2d5880e41
SHA3 8ea727581fb8566818911d6e64cbbd1870072e9b12a940d7345675d76607d5c3

4

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.3162
MD5 acb89769fa46890402c4da8861e29052
SHA1 c38f3f8e23893b9a89560c8de232a5db216b0838
SHA256 bfad375ed38435449fd88a788ee33b5b774280584a29af8216c7ef634f90b4e4
SHA3 b1ff20d63718c68871065cd0752de1f062a4404361f27eeb208ee4246d93471f

5

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.20091
MD5 564692cc5293d58246afb4a417a05c4f
SHA1 1ca9452fa44bd660bbd0c523b63275c959e087da
SHA256 6a8b37b266fa3d2cc98c956c6796c21a58de63046f871037ea27964f60e7552b
SHA3 784808888fa130a2d4d6839c5c3602f6920546da7f4436cbacb79c2a4c34e2a3

6

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.12536
MD5 ea9f4fc0a236aef9621cdd2a2b58f533
SHA1 8a4949c2261090b5007627ffbce07cf61f8fa176
SHA256 9c3792f97d59411d391a3fa98978c03d79270be72d04d0e6ceb1e1f995f14b9a
SHA3 e829b6e53ccdc32c20f69efef86e67c421f94c153aee7c692a230b1e1745f6ef

7

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.23497
MD5 b690a34abca1058210675b11d2f3b85a
SHA1 816a9ea5e87d5c10448150a279fb30e531bebb6c
SHA256 b131348c066b2f0950836788d7f6b9da08317cd7a7f12f539c2d1060b289ef6c
SHA3 96a6e50f5395f9b7d122e20f56cb39164c7941ac76025b0f66a92913f3193cf2

BBABORT

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.44399
MD5 30204f984742de04c5565ad20f18e293
SHA1 f0c180a79e6647bd7e76c6cb43e8d8fcd671c94b
SHA256 2dc97a7cab19effdd949f2d9e4c57c1b408ace776150e3bb81a82b4e6504bba2
SHA3 4b000edebdeb433843cfc2542aab3acb6408a2c378907a3d630e5cc53b18c2eb
Preview

BBALL

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e4
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.52238
MD5 22165784e950b8c78521a887bda12177
SHA1 b0533b2aee69c25570c8a2774ef1be0eef7ac781
SHA256 a319692f1c05c3b05f4d967098631787fae4a13f8145a13005f21da08eb43c0d
SHA3 47aae66fe364d9602298178fb9978d2eb28f71189ff9b488b7e99c15c9fa87f8
Preview

BBCANCEL

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.56849
MD5 d0b281eac51cacfab5b57597403c735c
SHA1 775d602a895838fee63565562fb0bc8e8f4a6bce
SHA256 4883955673b8b010230e18b785c0fbe11e3f9952711f71398069ec7697a9d233
SHA3 38c0fa2155cb1c789207dd7dfb9c7dbbe18ad4937c6c409d987f703736c8256d
Preview

BBCLOSE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.51934
MD5 adff424f64081356014efd448683d756
SHA1 f99b738bf271bbb78d7381b2be980990f849bfcc
SHA256 02e7ce9120c26e12078f6e5f86004322f839ea6e4dfbc9c860164be467d78c47
SHA3 8a8d76cb71725d38acf4e7ecb676e784d61e1f975ea6d44a585611198fb10666
Preview

BBHELP

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.57281
MD5 97642d7cf99a10e2dc21d95dcd69f60b
SHA1 2004e25d80563a600075bb81dea767d1d363dcaf
SHA256 060deea27977fb49f9104b5ffc9ce49ca647d85e1b18173b14b2f7fdb6937b75
SHA3 b645a576333eb60974a4ccb7b81a5000f56334916fa30ce41e742ab4169e6593
Preview

BBIGNORE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.47912
MD5 4e2e8b6390b772d99426d7144b493133
SHA1 2d735384e3a83967bdd1fad14ec0d43c2406ee7e
SHA256 e47fd15263a69a48250e05b2a411aa47721bf47b16166517b639232db74d5ef5
SHA3 8eb9b003e7513ed289fe08ebaf5d011dda7437f11730ec996d321ce0ca8b7441
Preview

BBNO

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.54844
MD5 b22807044fa2069a75811d9f4f3aed97
SHA1 981b6e3cbfe759d7b5935ccfa9463afc03cdb4c6
SHA256 879b222fea553497ab5da49241132b66f0c5ab8452d5759926b450fec3ff713a
SHA3 602156878f9e211fe555dba759d633ed73eeee38067e75733f4368ef67f30f05
Preview

BBOK

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.45275
MD5 4308736a7ff65417e2e3f3a6ee296231
SHA1 bf2eb03f4e5e222e87ad1fc1d89b2edc79edc77e
SHA256 3740f2bc1599d58510eba4d0b37d796ac61b6909a1890f6ad6178d64120adadc
SHA3 07767db58cea693ad67e478c2d69cfe0319922cca40544bb9321321eb9f38d0a
Preview

BBRETRY

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.4846
MD5 a04acbe8755bd2bbaef629abf2d8386e
SHA1 0611382d91ef1629b3c1afacf7b9048c5c5a5f02
SHA256 262bc54e9a5f505e73b8ed46fa5e0dbf6fab4be5affce32e1930ff2e728a2df2
SHA3 1cce97cc66a69deea65c6c631f1a8cc152ed348d6e7fad8e900aa62b600c87c8
Preview

BBYES

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.50481
MD5 8f1cc9dc6347a0d51db0a8b217a8b947
SHA1 f2b8acc8946236b9b989d9b351bd6156a4e314bd
SHA256 c09812ec31c757b1e6392738d95c10dfb59165b8de3d8a3f459a8404ac6070e0
SHA3 f97f33fe474b2e69c5fa6c5991bd0fa567c10160ec9706649a42a3b3b81fe470
Preview

BOOKBMP1

Type RT_BITMAP
Language Chinese - PRC
Codepage UNKNOWN
Size 0x1e0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.55154
MD5 5d8c5d8d3df39f64f1f8a2f88170ae4c
SHA1 734c26b900bb60ec764d9e52c926209670cdd213
SHA256 75c4f5dc1d89410fe125aa591afc2100623cb6956150f4b2c925b1191140a16f
SHA3 4b21ca65461d490b4f739330e2657f7e8de4b572c8379d09b29e14b7ce873c93
Preview

BOOKBMP2

Type RT_BITMAP
Language Chinese - PRC
Codepage UNKNOWN
Size 0x1e0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.53802
MD5 921ea6da771d453a1f4510455e12cc14
SHA1 7547d90468f640f1af80d88570c5a5d5cf8efd1b
SHA256 8f6a4cde23606c654abd5b511eb45990830b70964c4d955219f18f227619b82f
SHA3 abacb36ed036e68610e524a53687a7c85da1931f7fa1aa72ceafa67713b9d4a2
Preview

BOOKBMP3

Type RT_BITMAP
Language Chinese - PRC
Codepage UNKNOWN
Size 0x1e0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.56469
MD5 b3e3cea37dfef7f28e8d14b92cdbee30
SHA1 dabd233a4027a5ef48d500ecbcc343f8efbaad50
SHA256 cd6d8d330b093082d8cfb2ffb3c268cdce7f22ec613ee1a03c6903c7e52f1524
SHA3 477f3e2f984170a249924dd0b2e19a26683a0d2560895b99ba25b5bea818618e
Preview

BOOKBMP4

Type RT_BITMAP
Language Chinese - PRC
Codepage UNKNOWN
Size 0x1e0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.5141
MD5 70432f58e5e2feda0d23d582e483fa87
SHA1 1c57481945ea1f7b52c26ea6f744c6bd0654de49
SHA256 a000842902039f93535e942f9e2b5ced2ae33361873eeaa045ba0b60fb8cc349
SHA3 511bcff8c8f2db9d9dc98804facb4841c5f27d264f7104069d73edc17c2b7d8f
Preview

CDROM

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.93382
MD5 c348171a4659a1ffef0ba506a33f4b39
SHA1 af678317d1ddd12748d75bf324071035e5115e4f
SHA256 0651a139a7c7381f283a0722c892bf451200c103c5d277f7bc0aa23cdf34f27d
SHA3 15beadc9c255845e652daacbb6c7ef06aa8ef56b52fa88568b5cf93b306a0513
Preview

CLOSEDFOLDER

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.03651
MD5 42013b246475b93d0dd254ebb682d19f
SHA1 9c462b1ee49ea54120482b8038e7787efe30b607
SHA256 bed75215b6687df1647b55ffb72d8c1d922b44fbecf515abcd144568725ce304
SHA3 4df7e61e94be8fe95e8a88d26f3597df0330a35d45a11306809e1377ca740467
Preview

CURRENTFOLDER

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.02977
MD5 66766fff886f3a054d8541e9aaa740f0
SHA1 196c61d9d5a4fe12645badf8d31080a068251c72
SHA256 d32af7ca71a6081a0bd144aae8c42727cfc2938b198a330f97135cbd691d1ad9
SHA3 89a2df603714e3378bba6d8e5a6e9d6dcb1cbbe30ef9164422cbdb7c3457f9dd
Preview

EXECUTABLE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.94723
MD5 70957bf204d8da8012de3a1fe17fc1e4
SHA1 8e66eb8436da1a1f2ef531e91cb114df7ceb10bb
SHA256 686e10b4d42d8e9573acc28db790c4557dd49b8285b9a29b2fe3b8a1256b8482
SHA3 c93cbedc86561a4a79d1df92419614238c1fc0c7158f0d802b7590b9805c2fc9
Preview

FLOPPY

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.86463
MD5 13a1b9d7ec83cbf345974cd2d832b26e
SHA1 ba2347d1ae1cc89cca5cdaf3c72ae8f2d11f16b0
SHA256 b06b0048516f53801e30fb6cbaa10a7a94c6fd06a5d96b73b8385613fbb7cdf4
SHA3 c59252122261d5a8a913501f462f569825cad586534092229a128fa82ff2b7f7
Preview

HARD

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.79353
MD5 880b1c9a7f7013b6d05f3f4db8036251
SHA1 5fb5bb5cdd74b536d66a46baab0c91696d633843
SHA256 17818857060e3df76e2523d204b4310e9a16dcebf47379c1e556cb4a6dadee86
SHA3 06fa62b5bd36d8260c671ed9ad5933ba554615acf89da1c9f8494a82517c43fe
Preview

KNOWNFILE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.9885
MD5 5f9588ec5b1a9701db9a928b5d71f723
SHA1 62d87c94c5a34154a79f1c7bc592f4363e02cc6a
SHA256 a4e9e43dc4843cd53ef89d28671f2ef5d9ee3e6411519f39c66719ac3213b67f
SHA3 0fb6907d869781ba18d401bb82e84e46cec2984322aca674d04f46135a8ac578
Preview

NETWORK

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.80364
MD5 10c61c3d40bd099843f005dbe245d9a7
SHA1 162b94113a1e2faa20fe39e24e1309e14bd4a8a2
SHA256 fb3f839b8f35d7aa77058df3b30137858c249b2b17a1b123c97a71f3c7298598
SHA3 d3fc05192eae5c4fbbab56cb3c005493ae70976ab733164bc5f66e92fcf056ff
Preview

OPENFOLDER

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.9689
MD5 bb5ef3e2e4785b51e10b9751be70bc09
SHA1 122ed07b0e2b74e7788f7fe6dfdb6039c42bf307
SHA256 e75e7219bba122d1944b4be0f11e84dfe32df674392f6d11a37c1a2bfbe22027
SHA3 8d1bd140e7db311d1b0ea4f421d91a9b8f98a81f8f488e5d1feb4ca4e96d4a6e
Preview

RAM

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.93499
MD5 02b0664f3cb68a0c81be0545466d4723
SHA1 1b4159ce77b8149f977279d47aa90c8a339bf667
SHA256 15a7df7d9a78b85dd34e09392985b5dbfe820f0bbc4232f0fb3cb985d9a70620
SHA3 37480a48f14b2b2f57265ac61c638c0176794ae02d4626aba59844864796a2c0
Preview

UNKNOWNFILE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.79426
MD5 7286a0e5d2eeaa4d84272342b91921c6
SHA1 9ebfca3ac656b62efdd8e1acab5efb22924fc1d4
SHA256 d0ea49c66f6918f65bd31cd9ba4b720d0f8b582da556eb2172b156077080115f
SHA3 03f1f3464962ded8961c5172c23935daff1e7a6e91bea5fa4be72fa16e5e2362
Preview

1 (#2)

Type RT_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.48
MD5 6cda0a79849380100ed1bbe6cc1b805c
SHA1 8132066ed3690e28ce936b915cc37ad4df9dc85d
SHA256 7e2ef532d953f57c7e18485c2c0f1a14cbbb3c394be73a7aa8bb6be586d0e60c
SHA3 14fde095c5b6ddb4135a01a5d0480e3cc4b41f11ef0afb3fc3db4ca8d5245a15

4081

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x584
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 5.41173
MD5 d6ba6949c863866084acf6598722efed
SHA1 c6a2ddf0ec05a18ff805ead6dd087a8b13343a20
SHA256 cd1566bf503043b95ae09e2161c120050cb79b3d173de7c16a00f2e18dcc85ae
SHA3 44edcc28c63792c933110815e58cac51e43b53884ebad2c40685abeb2a82aec2

4082

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2a0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.07203
MD5 92e3f2b862c00538ec987e9bc09ffc9d
SHA1 9fc3620154851bc45fae0d5d6a911226405db013
SHA256 e461d0c1b9a16f0f6b899e127e8aa34d88088358560b787109a231514ae9001d
SHA3 84edb1de0f5d1228d84bfe87070fc40d4bc3dc83014b0999b118a699155b1750

4083

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x4ac
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 5.24352
MD5 62725019e2d37f374cf4696b94f43d4e
SHA1 8039084554377ad8e8144b7597345f988a6fd1a0
SHA256 e520ac2aa627d5f081de55ea6c20771b2e709c881041dab1622c99eedc5ef548
SHA3 274e51cab45793ea19eb96ba3b95ad92f34f09305cb5ca8f9e0097a35d157bbe

4084

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3bc
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 3.77493
MD5 9db06c5619a1b67d7d437f634b1157b7
SHA1 163cf9d7d0fa783dffbfd5cd74252627a8ff1762
SHA256 f26aae22fe035183824174b81f858825c8b1096436f346489ae2561656a6c2cd
SHA3 701ce12199b45d6644b60e37fe91675aa3b1cbbfbaf64e027a6d2cfb2a9aa67a

4085

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x1ac
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 4.93248
MD5 d0a3d60c3c22601724aefc509ded855a
SHA1 d8579d0e56dc17bf8d5829f7f4f5352b49cadc21
SHA256 65dbcda57aff4ad3eedf36f1ed46b7a5999d6ee05933f2d09953496b4973595c
SHA3 978509e92c5d22103a69858ffa2127b2fb4d48e6e5b2e4bdb7cb2b400c33111a

4086

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xec
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 5.48969
MD5 fc06454de2284542b40b87a9c6f2019c
SHA1 be28b08d6992bb0b72662ed75162dafab3591433
SHA256 e4330c6525c7327cfb58dcd2ee6c9253c1ce08e77171858728827872d1d7e3a4
SHA3 547c7a1431ebf1f05291f973ea494b42960e79c14cf2fa5bd6a6c166053cbfc2

4087

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x154
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 5.44325
MD5 b4a906aa3142482efb3c42736d8539f0
SHA1 b0b4388fe4d4ab24db962b800d0947203d274b9e
SHA256 6b83a3a1e7167a383aaeeac68f2066a521229b85e2906196cfbebca97f626329
SHA3 08b802f650cc53a942ba297bca83b1a1ec4793b32476c4fe4a445982df4976c1

4088

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x330
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.52605
MD5 4fc790adc08a533808f8fe3d25797a8b
SHA1 0f53fa46953cef638d170042db029596d6e7f62d
SHA256 5aa791d5d9e40cf62d260dc88b1c5ca33084cb3a329ca93839b78be6d697497f
SHA3 56b3ceebfee2f7139962e48f3d75c7f924fc2054fc667c7662cd1c23bf1e57d5

4089

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3f8
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 5.25257
MD5 21fb03315ca3ce6f8bcce8e9422282f5
SHA1 fa7baf0a4bc1bdaf7b8eb751f9cd5720ff785356
SHA256 8b549e74000d8b6958f8b9603722a74976237d1a7f6c6ae4585e6fdcf2e333f5
SHA3 d386ef64e5eeeda766b984fde9fb14f2ecd10638181169ceb0ba62a637df6f68

4090

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3ac
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.74069
MD5 7489654e635dc6eb8cbe76d6607d7d26
SHA1 43e43eb67adaca433f3f41a27510fb6fcb015382
SHA256 0e8f117a5988ee8ab25d3a0d3334ae56890739f9337fc094bfb6059968c7f3b9
SHA3 0eecfd464a38e3ba91856344581f4cdce360bd086f330281439a56ef41b4873b

4091

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x30c
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.61526
MD5 41b90f44f99af28cf02ef17c5c0d90d6
SHA1 8e451c75097c33a2d36c51ac9c111410fda7f480
SHA256 7e5dace63f5981067e9c59b3ca72754837634613e8d7052441a7698de98dfd05
SHA3 8d5d5c7e648db63ec49ad5bfd6df3e5aee4af6e14e69ac44f8cb3694cd3fbabc

4092

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xf0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.07171
MD5 4e92fe1114a51cd9a7b25c797210b552
SHA1 e344699563eac23e36ccefe0f11358a6a644f56c
SHA256 2a07b27f5b3041b979c3b74dc01fa92fce43d6880fca81202ea348ab40c20018
SHA3 4c5167085e32d28662aab356e3f88c810f6822093dd737fa944cc83916a5d5b9

4093

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 6.86018
MD5 5c6557c4e838cd0d97dbd9857d45aacb
SHA1 d1d8dad047c0941c1922207785e057331c542889
SHA256 3b91711eb0751952a055808c916a5ea6eea0d0e711d1d0361e01e2605ee2cfe9
SHA3 8993d9f9f4665d629e273c5ec097eab88884ad8b3dfcec4c0fd01a4c9e4217b7

4094

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2d8
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.68323
MD5 ef8747c316d606333856347e8bcdc8a1
SHA1 548bdffa39684c48937fb991e0f460071d9d22bb
SHA256 fff10714a68a7c249fed136b8b1121d804a4a0d5d50022a590895b0da66c9b35
SHA3 d1951224af07c8f7516c2f5093456befb2a09e7eea729a041c6eb5d2fee11a5d

4095

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x380
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.71831
MD5 6799914757550952e5951a6c1172ea5e
SHA1 ca3f89ad39eefd9d199b105094d872cc6656cf38
SHA256 771f5869412891604e996871277a624d6cdad5458734eeb9bcb70f06a1cc4112
SHA3 48ed49ee03ec9eca2af88b7b7fe23048624badfa2f6ea0ee813c94e51916b84f

4096

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2c4
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.66108
MD5 d572d555ab2449664753cffd975ea237
SHA1 092554a38c90756117ef139197852b64b6875845
SHA256 56e3be278d5c418ba7a0862807d6d01a6427876b17b28f4ffcdfdbd20617b279
SHA3 e0d0225a25af1bac233eca4038af6f4607969e9521eefa56bc0b3a2a2da919ee

DVCLAL

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x10
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 4
MD5 717ec0d1fdc3e633fa908a3118b0d318
SHA1 8fbdf0a152e91d4bf8ebd8b5ce1339894ea03ea3
SHA256 79e1fc1bdd087c2beb44e47a67d5dbbd35ee80a7d89423b37a111ea19a6961cb
SHA3 2ee1bb8bca58a34ff5032ac876aacc44c722693900396a9e34e78158297cfe0c

PACKAGEINFO

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x348
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.78704
MD5 ba9f583ac773c3edc94ccd9d614f3b8c
SHA1 c0402bc032d66b9b59c54ccc9a4d2afe3e658679
SHA256 e0f7d066769783d139c405c176a1c10d839f40b2f9e25f8d8292ff11217d89f9
SHA3 635d4f6e7477e3bf5165a99f0d300d6f18b5e50acafea8c3e44796cca449b8c3

TADAXPFORM

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x207
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.58661
MD5 262007456ed948bb117f23fd7dca9386
SHA1 c0a9afc99a3d891e046d8e102cafd687eb09cbca
SHA256 1dc6068cffb2fa4659b2b8da3cb89a4241d18e01e03a08214e11a3c0cd4c1f92
SHA3 ffca27840428f79a9f4cb6513b369ebdbe4f2e6bd4e4b9d36de27128e79f74f7

TFRMABOUT

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x32c
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.72189
MD5 0b5b75e68bffd5ab96c9b7f229905394
SHA1 9f811110546ce43308e4dc337d6a6a243872a405
SHA256 c0fbf61bea71266e03a9bd6a9ec4c36e5a108d9850a1702b170951be58ae8334
SHA3 6c683cebc266312ade719bf0ff6b4d5754c177f3f5e7b92475b630dfb63ceac8

TFRMIMGABOUT

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x17e
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.46319
MD5 cf01c83a54cfcb436c0616d6708c7982
SHA1 d7e62ba8721cc8f3b80e1fecb9533dd533f9fc1a
SHA256 fbae260f06c5500b811a220dbe9d143c143bec55228c728b874f234673c5caca
SHA3 446f2ba78bb4c16e71289471d30412515b7b2d582a935cd3c0610e7f1e96552d

TFRMPASSW

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x43d
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.80984
MD5 4e5a9daee76acb0f68a942a3c2851af1
SHA1 590d84945435537da95ddcb63bb3000bad75eae5
SHA256 fa4ccfb7505dae21a2cd8ac59a47294adad94754a24f91477698b0df66bdac7a
SHA3 059733a0a1827af530e16935029869cbe714dff45ba89e4ef12bb242bfad0f03

TFRMSPLASH

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1c4
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.52977
MD5 988052e976f5e099e1c1fe96a3a42302
SHA1 e5d5ff4d65025e80b3fc16b77752ae845f9ef0a6
SHA256 e8658dd412bf9165876fc17b73071a24298ffb102aafdf311d6ce038c3cffac8
SHA3 e659c6df7eda23196555518e0444efebf6116ebca943203c0c0ef70a45d16216

TMAINFORM

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x577a
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 7.97366
MD5 318219528d5851de7f2e1042c6005139
SHA1 b5919636fb700807133929b4bbf97fb4aca63864
SHA256 bb031aa2bc04cf9855864052dfb9e060b8f05bbeb31362fd47b0ce98f4c91424
SHA3 74308cd88ab28560343945188f054053fc92fa47dd3ede75854e9324f37eb3df

32761

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 4.22193
MD5 aadc9d4c501f5cd81b18a3df66568d92
SHA1 706222c39a53982c15d7db884998b3f05429f2e0
SHA256 430b2f090fc0d97de8ea83d232c739e57a4502fa470d287a55319b9016ca580c
SHA3 a2138ee18285b58af8990592a4bc59b06f3fe07c146535f4421989a717b5d9f2

32762

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 4.32193
MD5 b24f98315abf0c196d3035d4b7e0e0ba
SHA1 a4843c7d3ddb1eaf7412b59482caf778000c443b
SHA256 4e563e9312188d4b2a0199be4603f482d3312ecda473318da7aec153f8c1def0
SHA3 fc277d76c82c47ce79988ef95b8fba1bc18d85c26adf87e6b3a71077ecb15ec4

32763

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 4.22193
MD5 9a05a3fc87892bd3a8145d4556eb99e4
SHA1 7bf3b7f5693f975332da849e589d835a605aa7c9
SHA256 9d66bdc3deb7cb9a73cb54193bf3d1aba0f7ad9f0b0433b2f59e5de3ac0598c3
SHA3 81f67fccc1939251b9797df22aa7c750983409403917a8347513c883bdbe7686

32764

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 4.12193
MD5 bda476d25a4cb5e1d0773f935f6d66ad
SHA1 927efe270230c874a0d4f4ffab67529fa0964fa2
SHA256 e255619cc80919d640629501fdf6fef43fb823aad646ae6b3b1f7d1b9be4ea2b
SHA3 bd77bbdcb05f6b50f436738a76e51341003108d36f9f44f0c10ae7220e3dc0ae

32765

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 4.22193
MD5 ce3b3ae2a64fad579a6759afd039d59a
SHA1 a86a6cd923639a614309f64d9472d3e4185a9112
SHA256 17fc6a8c15544236e590169a32c282ee26efbb523060536bbdb17d4eb38ef716
SHA3 77cfb67b57e91919f50c48000e6b1029117e2f723d7b0972e75aa69de78398a7

32766

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 4.22193
MD5 9cfa0ceec536c6bec5da715b81ba5bf1
SHA1 31068fb91c950266b8c48230345a5667e16dfb73
SHA256 d7486f64c83c344810be209a9409a12f6a3bbcaa6e7cd3217b057637d2ab5a88
SHA3 8402646be8b61962f1fc59b9eb588aa0051d37661d4a57db8206aa2b34d46352

32767

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 4.32193
MD5 d7bb51dc14a11ea3a6331cc279cc1f65
SHA1 1606bc1edbfac1031067e5e982164584508117fe
SHA256 fbd69ce57332ae69161419fe3c009bbc608168b2b22e6d9e8cb777642bc3b2a1
SHA3 b52ce2a993a96493e31a4522197426c6fcc10de4029de88323125d6a79b2faed

MAINICON

Type RT_GROUP_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 1.81924
Detected Filetype Icon file
MD5 cbee427fa121aba9b9b265ff05de5383
SHA1 24fcae33001c8e0f5ec795c6edf076a69d59589f
SHA256 494e4fd717fa1ee0c5c7bb3b4e28fdab4b7f6e95b4f9865f5ab86f03f62ae62c
SHA3 a3fa35d56632275ba55716a4964f02031270f61f06a903fc460ac2dd6bebde85

1 (#3)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x35c
TimeDateStamp 2004-Feb-29 19:54:08
Entropy 3.37354
MD5 8ab727f66d97ecdd390da84a5ba8eb3a
SHA1 32518215c0e1e232e8d9bcdbd2f4b107839f8c74
SHA256 dc2a48c3f442c74525dd30e2339194b29ed649edab6a8f619bbb85b51d9082be
SHA3 e10cafdc1b1391297e28b1e1b7b85b5d078c73a056db439e8c97ac9e44f4968b

String Table contents

Books DVarFileInfo$TranslationЉӤ†ࢨ( @ᤜýᰝÿᰤþḥÿ⨫ü⬬ýⴳþ⼴ÿㄵÿ㠴ý㠺ý㨻þ㬼ÿ䍃ü䑄þ
컆फ़඄ћ߾橪⾢嶞厯팳⹠韩ख䊟冃5勏˼ꔡ䞷菉գ脛7

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.5.0.0
ProductVersion 1.5.0.0
FileFlags VS_FF_PRERELEASE
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName Adasky.com
FileDescription eBook Workshop
FileVersion (#2) 1.5.0.0
InternalName book.exe
LegalCopyright Copyright (C) 2002-2004 Adasky.com
LegalTrademarks $$
OriginalFilename book.exe
ProductName eBook Workshop
ProductVersion (#2) 1.5.0.0
Comments Create Professional eBooks
Resource LangID English - United States

TLS Callbacks

StartAddressOfRawData 0x4ad000
EndAddressOfRawData 0x4ad010
AddressOfIndex 0x4a84d4
AddressOfCallbacks 0x4ae010
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks (EMPTY)

Load Configuration

RICH Header

Errors

[*] Warning: Section BSS has a size of 0! [*] Warning: Section .tls has a size of 0! [*] Warning: Section .reloc has a size of 0! [*] Warning: Section .adata has a size of 0! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 32761 is empty! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 32762 is empty! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 32763 is empty! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 32764 is empty! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 32765 is empty! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 32766 is empty! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 32767 is empty! [*] Warning: Raw bytes from section CODE could not be obtained.
<-- -->