1a3bae656e3867fe5e42c9f4133acfb0e6f2786b62c7e4d96ce9f691c2c25187

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2021-Feb-03 23:52:11
Detected languages English - United States
CompanyName Antwise Solutions
FileDescription Vimarun - Run VMware Machines automatically
FileVersion 1.0.0.68
LegalCopyright Copyright 2020 (c) Antwise Solutions
ProductName Vimarun for Windows
ProductVersion 1.0.0.0
ProgramID com.embarcadero.Vimarun

Plugin Output

Info Matching compiler(s): Borland Delphi v6.0 - v7.0
Microsoft Visual C++ v6.0 DLL
Suspicious Strings found in the binary may indicate undesirable behavior: Looks for VMWare presence:
  • VMware
  • vmware
May have dropper capabilities:
  • CurrentControlSet\Services
  • CurrentVersion\Run
Contains domain names:
  • 7-zip.org
  • embarcadero.com
  • forums.vimalin.com
  • http://support.microsoft.com
  • http://support.microsoft.com/kb/239114
  • http://www.7-zip.org
  • http://www.microsoft.com
  • http://www.microsoft.com/download/en/details.aspx?displaylang
  • http://www.microsoft.com/download/en/details.aspx?id
  • http://www.openssl.org
  • http://www.openssl.org/
  • http://www.sireasgallery.com
  • http://www.vimarun.com
  • http://www.vimarun.com/documentation/
  • http://www.w3.org
  • http://www.w3.org/2000/xmlns/
  • http://www.w3.org/2001/XMLSchema
  • http://www.w3.org/2001/XMLSchema-instance
  • http://www.w3.org/XML/1998/namespace
  • https://forums.vimalin.com
  • https://forums.vimalin.com/
  • https://sourceforge.net
  • https://vimarun.com
  • https://www.vimalin.com
  • https://www.vimalin.com/full-disk-access-requirement/
  • https://www.vimarun.com
  • https://www.vimarun.com/documentation/windows/select-a-virtual-machine-to-start/
  • https://www.vimarun.com/documentation/windows/start/
  • https://www.vimarun.com/updates/vmr-ws/1/latest.xml
  • microsoft.com
  • openssl.org
  • sireasgallery.com
  • sourceforge.net
  • support.microsoft.com
  • vimalin.com
  • vimarun.com
  • www.7-zip.org
  • www.embarcadero.com
  • www.microsoft.com
  • www.openssl.org
  • www.sireasgallery.com
  • www.vimalin.com
  • www.vimarun.com
  • www.w3.org
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to MD5
Uses constants related to AES
Suspicious The PE is possibly packed. Unusual section name found: .itext
Unusual section name found: .didata
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • LoadLibraryExW
  • GetProcAddress
  • LoadLibraryW
Functions which can be used for anti-debugging purposes:
  • FindWindowW
  • SwitchToThread
Code injection capabilities (PowerLoader):
  • GetWindowLongW
  • FindWindowW
Can access the registry:
  • RegSetValueExW
  • RegEnumKeyExW
  • RegEnumKeyW
  • RegLoadKeyW
  • RegDeleteKeyW
  • RegOpenKeyExW
  • RegQueryInfoKeyW
  • RegUnLoadKeyW
  • RegSaveKeyW
  • RegDeleteValueW
  • RegReplaceKeyW
  • RegFlushKey
  • RegQueryValueExW
  • RegEnumValueW
  • RegCloseKey
  • RegCreateKeyExW
  • RegRestoreKeyW
Possibly launches other programs:
  • ShellExecuteW
  • CreateProcessW
Can create temporary files:
  • GetTempPathW
  • CreateFileW
Uses functions commonly found in keyloggers:
  • MapVirtualKeyW
  • CallNextHookEx
  • GetAsyncKeyState
Memory manipulation functions often used by packers:
  • VirtualProtect
  • VirtualAlloc
Has Internet access capabilities:
  • WinHttpGetIEProxyConfigForCurrentUser
  • WinHttpSetTimeouts
  • WinHttpSetStatusCallback
  • WinHttpConnect
  • WinHttpReceiveResponse
  • WinHttpQueryAuthSchemes
  • WinHttpGetProxyForUrl
  • WinHttpReadData
  • WinHttpCloseHandle
  • WinHttpQueryHeaders
  • WinHttpOpenRequest
  • WinHttpAddRequestHeaders
  • WinHttpOpen
  • WinHttpWriteData
  • WinHttpSetCredentials
  • WinHttpQueryDataAvailable
  • WinHttpSetOption
  • WinHttpSendRequest
  • WinHttpQueryOption
Enumerates local disk drives:
  • GetVolumeInformationW
  • GetDriveTypeW
  • GetLogicalDriveStringsW
Manipulates other processes:
  • OpenProcess
Can take screenshots:
  • GetDC
  • FindWindowW
  • CreateCompatibleDC
  • BitBlt
Queries user information on remote machines:
  • NetWkstaGetInfo
Reads the contents of the clipboard:
  • GetClipboardData
Info The PE's resources present abnormal characteristics. Resource TFRMABOUT is possibly compressed or encrypted.
Resource TFRMABOUT_WINDOWS is possibly compressed or encrypted.
Resource TFRMUSERLICENSE is possibly compressed or encrypted.
Resource TFRMVMBACKUPSTART is possibly compressed or encrypted.
Resource TFRMVMSELECTIONLIST is possibly compressed or encrypted.
The binary may have been compiled on a machine in the UTC+1 timezone.
Info The PE is digitally signed. Signer: Antwise Solutions
Issuer: Sectigo RSA Code Signing CA
Safe VirusTotal score: 0/61 (Scanned on 2021-03-24 05:02:52) All the AVs think this file is safe.

Hashes

MD5 3fc6e911b90b5aa6eb4abf411919a8ce
SHA1 53ade58746c3e1573310aee61f98a0412edcc54f
SHA256 1a3bae656e3867fe5e42c9f4133acfb0e6f2786b62c7e4d96ce9f691c2c25187
SHA3 0ce3f81d4597fcd18b3bc8d8d246546f3c36de6fd70bfb889ac12b6dec742b59
SSDeep 196608:nb+/dePpnVl/96V68UR3OCdinBjf7nXf6x:nAepnV9cV9UR3WBjo
Imports Hash 10de42bd1e94880c6a3a98789a25691a

DOS Header

e_magic MZ
e_cblp 0x50
e_cp 0x2
e_crlc 0
e_cparhdr 0x4
e_minalloc 0xf
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0x1a
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 11
TimeDateStamp 2021-Feb-03 23:52:11
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0x960e00
SizeOfInitializedData 0x3efc00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00962A94 (Section: .itext)
BaseOfCode 0x1000
BaseOfData 0x963000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 5.0
ImageVersion 0.0
SubsystemVersion 5.0
Win32VersionValue 0
SizeOfImage 0xd73000
SizeOfHeaders 0x400
Checksum 0xd5794b
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x4000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 12decefbe0e3343aad293766445b342f
SHA1 db1e100f913688707b999e0e53b346048ec22e28
SHA256 3dc764e56d24efb3d55e9da72704b85bcfe60da9f7927a69f21bc99b41d11737
SHA3 146320355d94c12621ca95658dc92327e395c7aadc9a52fe64024170d7517c7f
VirtualSize 0x95d014
VirtualAddress 0x1000
SizeOfRawData 0x95d200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.48505

.itext

MD5 bbdf75532b992de214f19fac005715a1
SHA1 0a93bf129cf0c7425b8fe8e9b266d0c8000f7d33
SHA256 f5983532f87c6aebde319992421c795ec168f5f6580ba1be280cbe26f943adff
SHA3 b83483b6ca8fe9b1873d9cd376a23c35ad37bb861450c60f8a1c10ba231d0b9d
VirtualSize 0x3b30
VirtualAddress 0x95f000
SizeOfRawData 0x3c00
PointerToRawData 0x95d600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.49906

.data

MD5 979e98d2d4c91d25dd0969bbf6dacb05
SHA1 cc7763500d857999e95db628dbbb13d58f30f579
SHA256 b172fd6c3d1ff3e3fb741d947358f5469f5287ff0c051880dd358d57db21954e
SHA3 45ec40905800a31ea5bfa7f177eded333baca82c2cbcfd97fea1d3e379142ae9
VirtualSize 0x27f60
VirtualAddress 0x963000
SizeOfRawData 0x28000
PointerToRawData 0x961200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.83803

.bss

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x1bad8
VirtualAddress 0x98b000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata

MD5 f23628105a30bb3d35a0cbfdb2500151
SHA1 92373e9e9e53b393bdf41cc831551a207e6a9876
SHA256 a1a53c9190f7d2455621a1de03b964ca7b1e708e5a154cab22c48c9dc105275d
SHA3 4dd2af61c1906d8bfe8a01fe722cbe0a7c667664678f929cc4c1093004dede92
VirtualSize 0x2ed4
VirtualAddress 0x9a7000
SizeOfRawData 0x3000
PointerToRawData 0x989200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.1438

.didata

MD5 b73b633fb6e0002d39277f36ef4c4e93
SHA1 66c3c45439e9616cf1d061d6a6169100b5dbef2a
SHA256 3bc883ad7a0fb614568cdcfb9d8c475577994f351f6a34282d0b696bb049fecc
SHA3 0549e3b81a8a76a9bfd56504e4761fe3a23adf3a8cbedca30fa353013622d2d0
VirtualSize 0x6648
VirtualAddress 0x9aa000
SizeOfRawData 0x6800
PointerToRawData 0x98c200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.91609

.edata

MD5 c3e6a3f83c0d9d1f1c169f8027a75963
SHA1 4d821341069179b3eb739d909c6d8ca8267f7cca
SHA256 06dfdbc2725ac65fed167fe864577db069caa41b748ea17fec8c030f5809dbbd
SHA3 cd6aae6d77e5bed79524614b173469806700be962db73ac794fd146a04276203
VirtualSize 0x99
VirtualAddress 0x9b1000
SizeOfRawData 0x200
PointerToRawData 0x992a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.89654

.tls

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x1c4
VirtualAddress 0x9b2000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata

MD5 f1235bf15eff57c9843a12b337821808
SHA1 74dbba25ab74ac91d88523501321fa48de0f218d
SHA256 f6e391226b6005cd2379c76d73b05c450d96f393ec0abf574e6fe61dd2d51ee9
SHA3 1c2d4e000ae19beba969539d0bfa323d0452b475c5fd39f627d751b28d7571bd
VirtualSize 0x5d
VirtualAddress 0x9b3000
SizeOfRawData 0x200
PointerToRawData 0x992c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.38393

.reloc

MD5 2559addd07a997d01f3c1af9c8d9de3b
SHA1 226a1424e9cf1002cd281fc0c50c173a43bfab6e
SHA256 fbd53c72a51d3152cf9ba790a975b94d02638f6e441dba7fcc1605ca202ec786
SHA3 2a0e000ac5185dea9366571f9a17f88a778516ce677e786acc34900c937991a3
VirtualSize 0xe1ca8
VirtualAddress 0x9b4000
SizeOfRawData 0xe1e00
PointerToRawData 0x992e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.67882

.rsrc

MD5 c0e0e7d775338d35adfd2572d30db163
SHA1 67542aed259121c0745b557c843562ce8973618f
SHA256 b3127af24cbe018f82848447872ad66a71030ee16020b5dfe59bcd18675d7930
SHA3 2a4a017715d7f853434ed00102d8527519f5197f66b4beb363d7d85f6b10ea7d
VirtualSize 0x2dc200
VirtualAddress 0xa96000
SizeOfRawData 0x2dc200
PointerToRawData 0xa74c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.66482

Imports

winmm.dll timeGetTime
d3d9.dll Direct3DCreate9
winspool.drv DocumentPropertiesW
ClosePrinter
DeviceCapabilitiesW
OpenPrinterW
GetPrinterW
SetPrinterW
GetDefaultPrinterW
EnumPrintersW
comdlg32.dll PageSetupDlgW
GetSaveFileNameW
GetOpenFileNameW
PrintDlgW
comctl32.dll InitCommonControls
shell32.dll DragQueryFileW
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
ShellExecuteW
SHGetPathFromIDListW
ShellExecuteExW
user32.dll CreateWindowExW
SetMenuItemInfoW
GetMenuItemInfoW
PeekMessageW
MonitorFromWindow
GetUpdateRect
GetUpdateRgn
SetTimer
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
IsClipboardFormatAvailable
GetClassInfoW
SetScrollPos
GetActiveWindow
SetActiveWindow
IsMenu
GetKeyboardLayoutList
EnumChildWindows
ReleaseCapture
UnhookWindowsHookEx
LoadCursorW
GetCapture
SetCapture
MessageBoxIndirectW
CharLowerBuffW
GetSystemMetrics
PostMessageW
SetWindowLongW
SetParent
IsZoomed
CharUpperBuffW
GetClientRect
ClientToScreen
SetClipboardData
GetClipboardData
IsIconic
CallNextHookEx
GetMonitorInfoW
ShowWindow
CheckMenuItem
CharUpperW
DefWindowProcW
GetAsyncKeyState
GetWindowTextW
GetWindowTextLengthW
EnableWindow
DestroyWindow
RegisterClassW
CharNextW
GetWindowThreadProcessId
RedrawWindow
GetFocus
GetDC
SetFocus
EndPaint
ReleaseDC
mouse_event
TrackMouseEvent
MsgWaitForMultipleObjectsEx
ActivateKeyboardLayout
GetParent
DrawTextW
SetScrollRange
GetPropW
MessageBoxW
SetPropW
RemovePropW
UpdateWindow
GetSubMenu
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
IsWindowVisible
UnregisterClassW
SendMessageW
IsWindow
EnumThreadWindows
InvalidateRect
ScreenToClient
SendMessageTimeoutW
SetCursor
CreateMenu
LoadStringW
CharLowerW
SetWindowRgn
SetWindowPos
RemoveMenu
GetMenuItemCount
AppendMenuW
GetSysColorBrush
GetWindowDC
TranslateMessage
OpenClipboard
EnumDisplayMonitors
CallWindowProcW
CloseClipboard
GetScrollInfo
SetWindowTextW
UpdateLayeredWindow
GetMessageExtraInfo
EnableScrollBar
GetSysColor
DrawIconEx
PostQuitMessage
GetClassNameW
ShowScrollBar
EnableMenuItem
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
GetCursorPos
SetMenu
GetMenu
SetRect
GetKeyState
FindWindowExW
WINNLSEnableIME
MonitorFromPoint
SystemParametersInfoW
LoadIconW
GetWindowLongW
GetWindowRect
KillTimer
WaitMessage
IsWindowEnabled
GetWindowPlacement
FindWindowW
GetKeyboardLayout
version.dll GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
oleaut32.dll SafeArrayPutElement
SetErrorInfo
GetErrorInfo
VariantInit
VariantClear
SysFreeString
SafeArrayAccessData
SysReAllocStringLen
SafeArrayCreate
CreateErrorInfo
SafeArrayGetElement
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
VariantCopyInd
VariantChangeType
advapi32.dll RegSetValueExW
RegConnectRegistryW
RegEnumKeyExW
RegEnumKeyW
RegLoadKeyW
GetUserNameW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegUnLoadKeyW
RegSaveKeyW
RegDeleteValueW
RegReplaceKeyW
RegFlushKey
RegQueryValueExW
RegEnumValueW
RegCloseKey
RegCreateKeyExW
RegRestoreKeyW
netapi32.dll NetWkstaGetInfo
NetApiBufferFree
msvcrt.dll isupper
isalpha
isalnum
toupper
memchr
memcmp
memcpy
memset
isprint
isspace
iscntrl
isxdigit
ispunct
isgraph
islower
tolower
winhttp.dll WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetTimeouts
WinHttpSetStatusCallback
WinHttpConnect
WinHttpReceiveResponse
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpReadData
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpWriteData
WinHttpSetCredentials
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpSendRequest
WinHttpQueryOption
kernel32.dll SetFileAttributesW
GetFileType
QueryDosDeviceW
GetACP
GetExitCodeProcess
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TerminateThread
QueryPerformanceFrequency
IsDebuggerPresent
FindNextFileW
GetFullPathNameW
VirtualFree
HeapAlloc
ExitProcess
GetCPInfoExW
GlobalSize
GetLongPathNameW
RtlUnwind
GetCPInfo
EnumSystemLocalesW
GetStdHandle
GetTimeZoneInformation
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
TryEnterCriticalSection
GetDllDirectoryW
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
GetUserDefaultLCID
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
CopyFileW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
MoveFileW
GlobalAddAtomW
FormatMessageW
OpenProcess
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
ExpandEnvironmentStringsW
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
WritePrivateProfileStringW
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetLogicalDriveStringsW
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
CompareStringA
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
GetLocaleInfoW
CreateFileW
GetSystemDirectoryW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
WriteFile
CreateFileMappingW
ExitThread
CreatePipe
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
GetPrivateProfileStringW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale
SHFolder.dll SHGetFolderPathW
ole32.dll RevokeDragDrop
CoCreateInstance
CoUninitialize
ReleaseStgMedium
RegisterDragDrop
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
OleRegEnumFormatEtc
CoGetClassObject
CoInitialize
CoTaskMemFree
OleDraw
CoTaskMemAlloc
DoDragDrop
StringFromCLSID
secur32.dll GetUserNameExW
gdi32.dll TextOutW
GetTextExtentPoint32W
BeginPath
StartDocW
ExcludeClipRect
AbortDoc
SetWindowOrgEx
CombineRgn
CreateDIBSection
GetRegionData
SetMapMode
ExtCreateRegion
EndPage
EndPath
CreateFontIndirectW
EnumFontsW
SetAbortProc
SetTextColor
DeleteObject
SelectObject
CreateRectRgn
GetCharABCWidthsFloatW
SetBkColor
CreateCompatibleDC
CreateFontW
EndDoc
GetObjectA
GetTextMetricsW
GetWindowOrgEx
SetTextAlign
CreateDCW
CreateICW
GetStockObject
DeleteDC
EnumFontFamiliesExW
BitBlt
StartPage
GetPath
GetDeviceCaps
kernel32.dll (delay-loaded) SetFileAttributesW
GetFileType
QueryDosDeviceW
GetACP
GetExitCodeProcess
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TerminateThread
QueryPerformanceFrequency
IsDebuggerPresent
FindNextFileW
GetFullPathNameW
VirtualFree
HeapAlloc
ExitProcess
GetCPInfoExW
GlobalSize
GetLongPathNameW
RtlUnwind
GetCPInfo
EnumSystemLocalesW
GetStdHandle
GetTimeZoneInformation
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
TryEnterCriticalSection
GetDllDirectoryW
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
GetUserDefaultLCID
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
CopyFileW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
MoveFileW
GlobalAddAtomW
FormatMessageW
OpenProcess
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
ExpandEnvironmentStringsW
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
WritePrivateProfileStringW
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetLogicalDriveStringsW
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
CompareStringA
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
GetLocaleInfoW
CreateFileW
GetSystemDirectoryW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
WriteFile
CreateFileMappingW
ExitThread
CreatePipe
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
GetPrivateProfileStringW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

Delayed Imports

Attributes 0x1
Name kernel32.dll
ModuleHandle 0x9aa1c0
DelayImportAddressTable 0x9aa1f8
DelayImportNameTable 0x9aabec
BoundDelayImportTable 0x9ab5e0
UnloadDelayImportTable 0x9abfa0
TimeStamp 1970-Jan-01 00:00:00

dbkFCallWrapperAddr

Ordinal 1
Address 0x98e640

__dbk_fcall_wrapper

Ordinal 2
Address 0x1399c

TMethodImplementationIntercept

Ordinal 3
Address 0x769c0

1

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 2.6633
MD5 ff4e5862f26ea666373e5fab2bddfb11
SHA1 cfa13c0ab30f1bbd566900dee3631902f9b6451c
SHA256 b8e6fc93d423931acbddae3c27dd3c4eb2a394005d746951a971cb700e0ee510
SHA3 91dae12a9f43c5443e0661091a336f882fa1482f75fa9a57c9298d1d70c8ae69

2

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 2.80231
MD5 2e87b3c111e3073a841775c1f8ec5a90
SHA1 20292304fa2ef1bfdc4a1000e90a1c16d4765a96
SHA256 ce19ace18e87b572e6912306776226af5b8e63959c61cde70a8ff05b3bbdcc41
SHA3 9527f09e739c2064835800a7e5c317cb422bdd7237f00fca079a1c62f58a2612

3

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.00046
MD5 a04c3c368cb37c07bd5f63e7e6841ebd
SHA1 699300bceaa1256818c43fecfc8cad93a59156b2
SHA256 ee1c9c194199c320c893b367602ccc7ee7270bd4395d029f727e097634f47f8c
SHA3 58722e3138aad1382e284c1605ecd665ced536de4906749ac8d6e11252cc9558

4

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 2.62527
MD5 5ca217e52bdc6f23b43c7b6a23171e6e
SHA1 d99dc22ec1b655a42c475431cc3259742d0957a4
SHA256 11726dcf1eebe23a1df5eb0ee2af39196b702eddd69083d646e4475335130b28
SHA3 b358d8a5b0f400dd2671956ec45486ae1035556837b5289df5f418fe69348b3f

5

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 2.91604
MD5 6be7031995bb891cb8a787b9052f6069
SHA1 487eb59fd083cf4df02ce59d9b079755077ba1b5
SHA256 6f938aab0a03120de4ef8b27aff6ba5146226c92a056a6f04e5ec8d513ce5f9d
SHA3 0f1c6c0378a3646c9fbf3678bbeeccf929d32192f02d1ea9d6ba0be5c769e6ab

1 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.23502
MD5 9bd0313cdb6a91d0079a5afc121bf4f4
SHA1 86169685c8d31d45402afde4f9fc8553dbc3b245
SHA256 fec6973f8911a5197a6a40ddf1f684ab2f23cb1c38ef30d3b77a4414133438e7
SHA3 75a2c2faa32450af225cadfdf3bbad87bf754688ed91e2b990a587637fa80c2a

2 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.48764
MD5 b6108cd210f94c60914f0b700aaf0eed
SHA1 73dd10406688d6743c7ea7d61cc4d259ddbdf044
SHA256 db70f7ca3cc555b85683db94aed63a72dbab6925a45eb1851728a4ae2ca41232
SHA3 1a175dc879407f9318a6c6576c95e2174799fad0b1c468d06281616d325face1

3 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x6c8
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 4.78067
MD5 707989cb6c536082cf2544481fe5cc2d
SHA1 2333f188a08b0aed1028dfb4d3b2b82ba4746056
SHA256 e3294f3cbda4ee96271e3445a01758869c5b7c9a3c07eadf1f22705b939dc9e2
SHA3 47f4284fefdb9d155b460fcfa9bd270baaf04333cedf59a3123232d5f1f69306

4 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.40128
MD5 bb87468c3caba595f008e72242a54b42
SHA1 0962330b9676e050124d01f33b9304f0a1bcb655
SHA256 b5063457a2972cf7c936dda008800c3039bc6c9f96c88587e93d40e05a2d0684
SHA3 2c7a901db72b38ac13b148ecb78cab2637088c177a2acc31bf3b67fad87d4634

5 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xb33b
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 7.95334
Detected Filetype PNG graphic file
MD5 9e6ad9b0fd756287dce5d35c2220610d
SHA1 3e948a8da3ca1ffd95de92e002f1a8838c934d22
SHA256 6c5b407d3041a2bc8f52c393eed6fce931cfe314be0075e13ff83c973460abb8
SHA3 5076a71b0317cb9b74a9fc0db226a469dafed461840984faf8f3c0a7dfc55b6e

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 4.97523
MD5 11268597b2916bcc66f865298addb4dd
SHA1 e2a106f9ad9275f9bea579ac5cb6881b8bb02500
SHA256 2b883b0b01c382b9f0923b282b63ef104437a42b3dfa5c2da1329ece9e1468e5
SHA3 d647b0e4399d71ff53d84d706c2df2126b73f35b4acba4e7eff648a6caf98abe

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.01072
MD5 44abf49cbedf234fc339738fb4138129
SHA1 c8f7bfa1538441f6f27ec638799d3acb840ab3b2
SHA256 97d85d8cb433e26441e818796331292a5a799ea944bc0083bdda6dac2f7e1eb7
SHA3 0b37dbc0c5ecb9d6e4e7a16f2641a38b16cc16c2a8e0384be85764bfb3a8d88f

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.42543
MD5 5f6247104d2d8d259a1363813ae9e501
SHA1 5e695f7cc953a798cb27f25dd1164bb36c2f8edf
SHA256 5c7f38e919093e564ba07f1c6283fde25eaf900008aa336fb9373b02b0a62a4d
SHA3 41c076d9e12252d64fa961b57b228a7649287c3a1007b669aab88d184bd47aff

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.8672
MD5 fdc4d03530f3e05769f10296d3e9fc50
SHA1 ade0d02fd4f998bb5cff21c1e78ad82a64fd9e95
SHA256 2a8ea9b47be9bfc4beae4d5df3bd06b941a08f5bce4b6173808229cc9ca8a925
SHA3 1563752ae9e207c834b89d3d24b934db462c55852bebbbad03424757f2883c6b

4041

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xa0
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 2.7357
MD5 6a28b8e6ac4708a1a505db89a0ba9b73
SHA1 84b2d6d2c05da7f9e59cb14aef15f7736ade7735
SHA256 b22e6b18da4981d20a23004258e341ab9a9018835a4c47e35bf73ef94195ce62
SHA3 41694b17730d849a78306480aff7fb000765cb85d80d1776b3bcc6b09a67b8d1

4042

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x450
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.24225
MD5 7a9ce77fc8f027b31fb8206283b7f5ac
SHA1 0434e2758c9d7de5ba2eebbd1ee90add15b4d6e4
SHA256 b7132d5462d0b02885519a72beed1413a77f4044c41fca0a68003b076b5ca03f
SHA3 2120604b1bfb581a29542db9327720e0a5a84e76c0c286cb5e8dbb0fbf9e85c8

4043

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x4b4
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.31318
MD5 7353c235efe9ff0a43cb1ee05dda3b3d
SHA1 a9b6ee733eceb735a103ec1c7ffc3c50bc79fdd9
SHA256 80eece4578c3a49cef62b8f5e5720d62447ec49b937d753470f784b9de499262
SHA3 166e0f4b47f22fd9ca37a100303a5f1607983721a2ae8072e9f145c4792f58fb

4044

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x350
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.39629
MD5 52cbf17330fa5d1ab719a535facdbeb9
SHA1 021a206aad4d2116b1b8a1ca8a264fadf6da1ecb
SHA256 612d889e557b39685cdac36aa0cf3e25afdf19c3b7623fd394a67fb308454a9b
SHA3 921d2f2242eb0447f4ab890c69a5fdf37d842b5f44e4bbd27fe8a514718b2b2f

4045

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x4e4
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.35355
MD5 ac2b056426d1c7e4cb148a0855c800fb
SHA1 031c2910edd8bf17deb7a97508c3eded351fa3c5
SHA256 19c4672582c9cb962dc4b67e6fe12bec60ef47be8d99937d7598305f7589197a
SHA3 3ef89ef570cde63312c83bffea2fc58333d91517a562be210b5371f703008083

4046

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x6a0
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.40534
MD5 5cf9083c862e78bd3a3ce299cf0a22e7
SHA1 ac8ea797aebbdade4240c08d00b1a7814b46afc8
SHA256 e41ff3e16ca550b3126fa23cc6eb7b8f8398923cf01b0c3c1c419c1a1676fccd
SHA3 44cd2063efb730083a4ea8f87176ee6fbd2a016324e0c3eae2796f2b05ae23a6

4047

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x7f4
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.53246
MD5 baabeb432e0242312224c8dc490b67f1
SHA1 0aec6e96b19a12ac4af1ca66fcc2c140de628847
SHA256 66812b580f53da5ef0b13911a6a2a56fa373d76201d965c031819208f169c666
SHA3 7ed3091bdaa7856df727583278a26495a330415c0e4edef187bedd418a27cdf5

4048

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x7a4
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.42717
MD5 fb66d466af6bd6c10e087d6a78fdf231
SHA1 ab350c9b8452f09065c8069a2182b678269fffad
SHA256 73c0bf095e8ef78661c237952ab601000959cae3f3eb9c0d73487d5f56927fb2
SHA3 ea6e7fdaf97d1bd561711e882b857bcc54d44f869ddaca8cd39fd2963cbc12f7

4049

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x5dc
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.42557
MD5 946f8ee6802893be2b612ded4552cb33
SHA1 696fd21f97d10e6e45f4211875446c1b283c3629
SHA256 c39edeed2c0c9a3f236dc2c4daa41fc591353f3fa382a109e1c90ac304712292
SHA3 2dfab144d24256e70a48d2da02288afb3817e7346fd42863b189d91ca0044537

4050

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x574
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.34781
MD5 7a7f20c1876342b91c040ef57a2e375a
SHA1 3f2c33828ec78482b5253fed3fdf1351587908ef
SHA256 6383d7a7639671366d28e44ee36039d4188c50d7d218bb8ab67f58503051dd29
SHA3 62680aa91b7d38031ba6c46f8c84f341a125f06437c28a657104fcd6aa5ac835

4051

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x590
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.27856
MD5 287ecd0675bdb85c390315d4ef26c0fc
SHA1 f6b5568024c762fc727dbe921ee9df2a65a42334
SHA256 febefbce1a2650a056e7dab4c7eaa8ea81e90c4efe398a78a7a5764681d3467f
SHA3 7023da85a146839f532618a3554b0e55ab467af92c2efad4faaf7402deadbab4

4052

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x888
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.22208
MD5 47986335db10950b6423bd305bf0467a
SHA1 4828163f7c74d00c3f53907c1ba48bbb34af3883
SHA256 a2b0640ce1edc360753fa3b980ccb81ba2e5b84f72a3ff900c4bc9792b9a27ca
SHA3 7525f17c77dcc9fc51c13828bcfdc0fe77bb60d2b9c6316548e4d22dac2c5dca

4053

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x554
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.30888
MD5 ff4b801636fa00d2e5880eec5b6b7519
SHA1 11ac9c8a7c1484c48fb987749443481243b50345
SHA256 00e503867ec192dda63e8e43eb5aff2080bdd62be25c35909539cd0a9492f02d
SHA3 67c6bc8eb5fcc7c6535b84fc93e6150f84538039575f4217af699ca6657c6d89

4054

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xc78
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.44173
MD5 99968d20fe964ff8af5eb9cc1ed70268
SHA1 77ad983d4b1415475cc1cacc2ce93c0bf2c5d1d6
SHA256 4d31a14349933741168e6078de5c732ef2719f35f96ecc320c383e2c2b323147
SHA3 3ec4cf10b851de6dc3fa18088d0f673ad120434bebb11afe19bd4b0ea7fbdbcd

4055

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x650
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.33998
MD5 1ffa46351eb3343deb3377097149f55b
SHA1 0378cf179b63fa96a7d78dcaa8d38f82f0a9d2a8
SHA256 52d409c17e070cb644de3e21e31ebe08166e30f62504fb94dc6950ec0983fe22
SHA3 0633389df9924feb7601d32ca966feb5a8b0d4a02cc2902b8d2309d158bdef48

4056

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x648
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.31832
MD5 779db86565cc10a45ec4ecd85edd34f5
SHA1 9083c4dd22fee5efe5843e5b65c89156d10c9a06
SHA256 f882021a52c6d7de12fc0aac897389a8e2e73d3df7474e206921bdce840c356c
SHA3 97b1759efeb545b771863b4e414515d1727f47ba258ca871624cb83dc6bbc833

4057

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x78c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.27113
MD5 dcf8e03539eea0ee38d3e3194207c269
SHA1 e23860df942a4b59bef8ac076df87147c213563f
SHA256 f5097f45a9b759115504018d863faf54a133edd9e91ce5179c786c7f40dc3329
SHA3 fe8386a1d5f4dd76d8d5fbad87b3e5349721520112e74f9357ef23a4dc24b42f

4058

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x768
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.26321
MD5 21f13a7281bdd31580eb36f10315add4
SHA1 64458a335f012e7e7450f4b2b2401d470102c9d1
SHA256 244cd01808a2b66bc71d1f96bda36ce45b8db8e9af48f9eae805cb9d007fff3a
SHA3 4f73c61c251b7ce3741f549692d3059f1100a7227a9c4b6b150ab78c55fc92b9

4059

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x490
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.34442
MD5 1e8a390143518e9148c2cae6f5cdc74e
SHA1 a2dd082f50f4b20b67e750fbea8143ba09d7c372
SHA256 c5036cb8e978d48b040cbc5c82f20033f445d250c455d030b27cb17df36eca6d
SHA3 a4af9633cf7fe927b3b800bae514a29c9d89b199e5ca20731a321f443553b4d1

4060

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x568
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.34827
MD5 4a39f1af3cac931582b037bfc2932f34
SHA1 00bbc78d6c88d2b0e3fc89db3d609527d0993429
SHA256 e351c1c2ddebabe1e9000420ce4fdf3b64cc07cb5276716a03ea37565c440164
SHA3 6e0e7eab678b933f5166e7b73554f7a4e72c86e8a9de5b8c4bd8d9e442b09d58

4061

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x52c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.23411
MD5 35644a0937e6bf571bc7a24e9289bee7
SHA1 acb565c5964b3059be909e94b83de5b074689eff
SHA256 4c7f0fe3fcda125163188bcb79a50ff95abb7ed9b0c635d8c6b22d372e6aebb9
SHA3 e891afd3a60dd8be685dec1039fb992945587bc6b1f0cb812bffe238ce5108db

4062

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x410
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.39381
MD5 8ec01d9dd99ff7b8b7ef738af5538cac
SHA1 8001f16a455dab2dda12b6b050c76033bf06316a
SHA256 8923e82ced94a930e015f633a2719083727ac275afd0b8f81bf8062fc3693dc0
SHA3 75ea50f57b23c494452dc798825dc8a2a7339a2b0a08ce4097f31d7bc11d8661

4063

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3ec
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.19472
MD5 8f3a87c6a0c60483f8efebf9dceaf316
SHA1 74ad8ff2ece5d5fb2dbbb4a53ff59bf0f3eb6a01
SHA256 e1c03c10f7011542646b7219db1267c77488db755b6788d051ea5e173c5d2a14
SHA3 163c1e697b02980e5fc7726b7536ddc7105e305b98a7ed5e3742c4b79305e5e2

4064

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x48c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.27937
MD5 091b6769926945459d76358e37ec5fde
SHA1 c44cb219ee256b266fa22f58680547e00b5989df
SHA256 f6b06900fe420ef9efb54153f5b4de686720abd7c666adf00cb20e3a62ecb1d4
SHA3 0bd0f1b89584e848f7c939303c8d1d67d4eacb6345a9b9172a56ddebc6bc8659

4065

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x46c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.20981
MD5 54fe99a973944e41f81c2285dd35caa6
SHA1 dee4be39dc5080cc3e9cd32db5e70b65bb3a4da7
SHA256 2d170e60e1978b2d0388f13cd4fe6a58cd3b2ebb024f37a0c8d536c15d4c5073
SHA3 2d16604741266b54403ccccf8f4fc7ff19f3d24c2b434b1d6f0274df6adf3420

4066

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x41c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.35714
MD5 67b3f407a86f76e165f1c7f758ef84ae
SHA1 d8dfc80375a81184ee7fa22edc9dc6bdee428f61
SHA256 b04eadbd9ca81800b438781f7f46d4a7c0176a9d9972ebfecd95082011f13a53
SHA3 3cde221560b5fa3e62fe41ea16c3fb2c58d869b82fe55759151262fe205b5980

4067

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x430
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.33757
MD5 e686026317c6186c5db15149e70ad319
SHA1 d42b50a221f52353ea8df7707a7aec0a11d882eb
SHA256 e51a8414c507d8a89af4a57534121b33c4839889539eed1352cc5a08a864a7a7
SHA3 ed736384ba51be1c7a63a8e0804d7d29276804a797cf67ca61bea5542802d9a4

4068

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x494
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.28551
MD5 64c55d0636db46522dd1d2eec7bf0ba3
SHA1 a4bf5eba0f7ad3edee3a35acfe4f3db87db7cca6
SHA256 8b6ebc53f5d05be5a7b1db7e3f0a492542ad706970ab59536b3b876fab09c196
SHA3 e5628c9e5b2d3bd62cc3a78eebf0cd74490a85bf81d16118a8315a8d1a5ce749

4069

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x4d4
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.38171
MD5 b5536966bf234e8d8bf0001aaed629fd
SHA1 3b1e6b1bf4fb0260e5270172575767fefc0bd395
SHA256 1f1049bc4ab9a4feaa29cca59f6f36c211bc8966a07cbe4522cf9731e85518c5
SHA3 251f104cfac46b41f341f3dfb6cafc033ab1da90172cb4b6bde058723c869ad0

4070

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x954
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.23354
MD5 a0e476c81ceae894e9bebf6d2857fe5d
SHA1 bc4225d00def0be2144d7e91d1330ca10e18bfb9
SHA256 a6d9ad155fe50c9911494ce74cbfc323ff0d7923537561a0baabfa8a12b03f3e
SHA3 5bed1cf7f3ddf30fd0be1ff0fc09588773bb70438238381723d64cda9e084eb8

4071

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x318
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.34708
MD5 1d40536b0e46c0f30d87a31b528f03d6
SHA1 10cb1145332acd7a4b0382fd0b36a47620ee5b3b
SHA256 c9f773f2b0310f502cae4ced7470ecdbd2b431c0611ea7f6962eff5ec906abe2
SHA3 08060581f602badb4e93f8d485a007149c9001c3f7357ad06f917bcb7e8452c8

4072

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x564
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.32098
MD5 f2068c3c1bb6ffa991bc0cf2ece8a3ca
SHA1 e69e94f9e42a9ef0e8785deb5e233356c63f434f
SHA256 4deb4abe554ec32e52915cb0ca099d3abf5d83c7d7dacd83c74ecab0876b93dd
SHA3 709ce5405f853bc6cde8ca1007447efe755f2036c1e48c080d3aef63554998f3

4073

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x464
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.34203
MD5 0f82e7cc4669157d5fb7eeb6ad22836e
SHA1 cc297f7f8c370acc580c84f588af8d4a517120be
SHA256 a6ded6038df64844fb92a071c04effde5df83da00729725f72df8e79193fb603
SHA3 1a9ad038c0f1e97433920f8ae8c6bb950c76ace85dc5ef22f0ffc79877d793cf

4074

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x278
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.37331
MD5 c428224759df990863d61d47848695ac
SHA1 f92753bfc4f384ee06938de325b3c6ad370f5a54
SHA256 38894370ea6fcbb9b6a8769e84df1025ed6816f3a580baf4bd2138693ae0b8e6
SHA3 7c693f88807d003e51c45ff7d794a64442595525ab12ea183586a8fe9000f69e

4075

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x12c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.41127
MD5 d4cd3f3ab23b2de839c062ee8c04ad37
SHA1 a469a42edac546c8ac459a1988899d794fa6f77b
SHA256 61ce216376b9aab536ad824f74eb82b3a068687d7c2f50b114a7a2b2a6350391
SHA3 c302c84ee88322386f2d56374686eb8c0129dbc4067e67909251838fe5bf7071

4076

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x384
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.35592
MD5 1b5ab4f6f04bc32f8c021240ec7182a7
SHA1 43258d4c567cb3150479bd3e5253c0bb7ec419ff
SHA256 663a09bdc1ccfb668f0281a859efd7aa66f707089547d70dc709051a016e2631
SHA3 c4156c52dab6e98d9b4a91620db12cdeed9605b886b9d57036d883932dd76d48

4077

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x520
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.32039
MD5 f946d9d64612ce6a528e48542c2d6159
SHA1 05446bfe435d342dcbe77d082600a0395bcb90fe
SHA256 a705e057789eaea7e8f0d3b0f3250af95aa5a192467d1c24e9de0b5152c9d06d
SHA3 33490221563c59cf3b0c1cfea5cc698efce6c32ec324b1a57edcc5254811e7d6

4078

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x4b0
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.3583
MD5 29e48fff344eefca9b6f16747589a583
SHA1 0be049cb486b31a1a71ccaf3bcf8ac70a4e5bf49
SHA256 3bfceea1f9a0c445375e7f2a7d952c4df70332ae3715162055f58c578728fdf6
SHA3 a5048015bca0c4030be61b54b6566eb2062e5a39dfe777a73b3751975b0df364

4079

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x59c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.17472
MD5 885d9609493846dfa998c1be03afd0d1
SHA1 2a500071bef13075d97c63e2c128d3035fcd5105
SHA256 63324f2af0374563a474235d7a634010bf5545bfb505ec5a0f234f1b13f64afc
SHA3 2641f8f5ca15da56fb6544336eac33892dd8bc6676c93f5eae2a6c401cc57d8f

4080

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x544
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.28341
MD5 6687e2427ef9a0478646398ba292005e
SHA1 f5192a8002d13fd33f3ee9a4b71d245874538299
SHA256 963d5de4a603f9b668e06f2e59393f05427be5f0f05f41c71330c13b00809310
SHA3 110d33463559fc60fb9ef2e3163262d807f662ee1840bafaed2f21a0c49bde01

4081

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x29c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.31763
MD5 e0baecd2bca4dae8973030c64d1e63b6
SHA1 88c6ef873252f357ab238cee4013a444ee7e8a7f
SHA256 1492e5615d2535aca3866bfec03e8c6cd1de873aef61c0a65907727c1bbd041f
SHA3 c7eaf08084ed31d126d05bfc4f7aaa3bb946201ad74dfbe61543960ce4369604

4082

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x410
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.44332
MD5 0c317fac889699e2a7d9224c892a44fc
SHA1 cd0251c0e87b90f067dd1923daf323ddfeab7f83
SHA256 9c231fb71c1671788d7ffcff1afdbfcbc5b1b3c022d88a806d51a914cf00f165
SHA3 177e380ab10ee260b49b871283fec4d98969895110417baf8dee99f63474c5f6

4083

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x4e8
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.30629
MD5 4b9d4da4d6492f26814c636795d4af75
SHA1 a458faad6b0b0c8717d2cb6ef52cbe3d4fee9184
SHA256 e0d88d4256c44a95fd221b0790edf0e5cb4135422920caddf710444efe398854
SHA3 9cdcdc989e40d458f5e6ad5ca75c88f5b7e1bd5dddf25ae4fac3b10c8964d227

4084

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x660
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.34308
MD5 7f621d8ce5e5f757da3a6561e0d62115
SHA1 5b364e5e82a4b2beeff8a0978bc04f2e101bd2de
SHA256 ac255b994a6581350e010e8f2bedf78e4166c6a4b6a98bd4acd9319719464aff
SHA3 011ccb191eed7299f73f2eac6c209d7c466990dab8a2318611d7bf4e376a2b5e

4085

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x478
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.20762
MD5 03cd3ced38625d72a5bc28dd410786f2
SHA1 dd9f69e980b0dc2105a67fac19b54e1e9d4fdb38
SHA256 8b47b6ee0e84cd641d53c27e1262e72fb3e8ac51c0600d2c9e0bf5255b0b346a
SHA3 f97e111237c50b46adc52b7ec4a9085da88948de8549237c7604f7398959159c

4086

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x34c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.32278
MD5 3a909a74533fe765fa036e74e5702dec
SHA1 9eead97963f3e15e4a5119f2acdaefd3df0bad47
SHA256 fadab8940a04abcca7bea6ba476da1c3c016245840271ca4266c68b2abcfbfeb
SHA3 3693a62bfb55f73d30a801ea72eee03e92577a809d388df417b43073ee60ec7b

4087

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x34c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.28336
MD5 9d47b642ace2e206256998ff4a366812
SHA1 2e2ec69872d44272753ea925c909ca5c500b9489
SHA256 6ee67577dcfc4ef49f6ff26d2fdd174ce367c71af9bffa957c1f50af26d83d5b
SHA3 9b165c818b998bd40f65b65c8d1b630b3bd2eafdb8c2fe3e7ed7840ed88c9b2e

4088

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x404
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.29418
MD5 a3d56174b19279274e338f91444989bb
SHA1 8354db0000ccf42d4c2ade8114e2feeb65e8aedc
SHA256 4a785d451d5b398802582158ebc62ab65f63c1ca188c93faa5308b1d62be0f23
SHA3 2038fbfea3560d96b2fbb5b130d0f1e599754ce86b8508f1979596eff639d801

4089

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x308
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.33434
MD5 b73f1ebd1ba63e0b9cf6d80d92679e89
SHA1 cf2304b214d451b63afe44918aa305386d5c8b02
SHA256 41959196f9dc11ceda2c4ad35d5921e3aadfdf3672129f0a85434c4403feab11
SHA3 6dcd518e23173eb6fdd4215703c4b67cc51932ae4e8c4198ca1bc0e0b650092b

4090

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xc4
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.35559
MD5 a1ca00ec328db542a832c9ab1a565792
SHA1 6aaf4d733d7ed4cda5256566b2a260ba08b0cec1
SHA256 afd1f896ae0d38aedffdd98740369ac274b3e3e4033a3b72bc6f30ce7e8c2861
SHA3 d09f1075508b9c49842a43e7874e9f6dd70936720d8ce6b701be573d61854cc5

4091

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x9c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.19471
MD5 cd5c0339f30d3487a1b6f88572462f66
SHA1 2cdae5a9242ce57ebc0be42e0a2b31bec42c94ad
SHA256 b1550e05c136745546e714f8056dc806c4a7d785146254ea4c1453c9585c3941
SHA3 db721e8a1c49a3804b4aaf340c626e311165945f33c3756b4391e012755f2f76

4092

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x318
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.34999
MD5 f8e798af73f6731e70c0f3c7db376e48
SHA1 2f61cb420621c96baa4ecd8c64e83fa54d04121b
SHA256 d2b45989e012a4a1a225f26b50ef67c0281ea0dc2c94ef27e59ef473de072310
SHA3 730aa053be928e37b588394332297aadfcf880c176d45be41eb0e0219813f6f0

4093

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x46c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.31163
MD5 512ba4d45387f12b230dc19abd9645ec
SHA1 4264e019e5578b1c5603b461556e36f51da0ea02
SHA256 575a38a40e51c0e3cb50523264f10b41050142418cf516aa5f9bb79f8fcf1a9f
SHA3 d4711f082b198137d259db99c2683ef5df3f0f20b48c9a3ce80d3cec5c1d92e8

4094

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2f8
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.3639
MD5 4b1e566567677b57949ccfc3c6644c13
SHA1 01f43485808cc38ff85f1872970156e7994021db
SHA256 43a6684c077814088049381e86aa11d62423fcfcb41fcfc13db84bf8b5e60239
SHA3 c8f4bf582addc2ce288858306aa84429ad04bc007627235f96cb1530ef4a80bf

4095

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2f0
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.27523
MD5 69b05a1059abfab1fb807100835a14b2
SHA1 a7d1e57ccb2722a5cd3408374abe35dce48cc19f
SHA256 c3fc8feca00c2d956d727b0f39badfd64f32650aad839c2cdf462ea57419b541
SHA3 de558dc584e34ffdba507b161fc56e761c626f5f5bb19eebaeeb3fafc1873b1b

4096

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x390
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.18906
MD5 972b4721824b5c05120d411b7cf6b2ea
SHA1 cd25bdfaa162943c500831e7a821d9738ecf4527
SHA256 f0a982e49b27834246958b41d78edf13d310f02e9a31561113d5f0c0a7c96a81
SHA3 3d34f87cd4e81e7b075d8d1cd4310d42cf16ae6481fbdd2646a99c035b769224

CLOUDS

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x627e
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 7.95047
Detected Filetype JPEG graphic file
MD5 a9a76e657c68bbe61b0667afc071f558
SHA1 432306f9fbfe2d950122a5bbb4437dee603a7af8
SHA256 7d48ed9d28f88cb99894f602ba05dc847d78c54094c7add1247c9d1b20136387
SHA3 a24864a546abf0bfcbb2d57e38cb7dcf0824d309aa7327674960acbc4f27b2e9

DVCLAL

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x10
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 4
MD5 a40263c75fde7440b1086b7da9c51fc2
SHA1 139a84f87110fb5cb16a386adade21f30cae98b0
SHA256 e7dbe99baa5c1045cdf7004edb037018b2e0f639a5edcf800ec4514d5c8e35b5
SHA3 d3a734fa7d36868d301f9569de92e1bfc551e4b5cf6d7c59eace8d0a554093c0

PACKAGEINFO

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1a3c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.50572
MD5 b91db8f12685c1ee7bb31eed9ef644ee
SHA1 92b0791ec83545a4c75d92a2e9eb86a40d507124
SHA256 356b04d7a29278418afb8616ed6e86c47853c2e3fe1947c152dd9b9073b2b7f3
SHA3 be3b0fafc26c2e83bba4fc7e24efd5ab2bc62a9d4fd07e707f6df20ecfa310da

PLATFORMTARGETS

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 1
MD5 ca985a283c229929adc4100c3c42f4ab
SHA1 a447baa003b88e3106611913c49e48261544f684
SHA256 b8ce192fec479e51b95a746611010a1c45c336949d218e75c634b034eca0c0d6
SHA3 6a64552330368a56d2861298c524e018dc7add659dd07694c3f0fbec01976dab

TCODEGENERATEFRM

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x2aca
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.28057
MD5 a7469309155a9388447e2a513246724e
SHA1 46973232b23650c244dd0a8c3777692a3b4583a8
SHA256 55b5b0cc9fdffee8ead2626427663e0647c59f7f8b7e7ee088dad5c2cf0535b0
SHA3 f69ba470e20f8564120a379d6f5f941a112ba59614ae068f53327c6ebad361c0

TEDITPRODUCTFRM

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x777
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.27171
MD5 b3d339a63e34f61824c76414cc04e3ec
SHA1 892f82193d8f61180ad5785366ba274d2cb97cc1
SHA256 9bb77b82f681b7a4df364fe692b28a56f6ff15980f1347e3eedc26c77bd383e9
SHA3 e2f16f879d0db3f66f49fd1032e1c69633145fb6a01208b42d142c61a3d4da39

TFRMABOUT

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xd296
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 7.95048
MD5 c94127a82f0c739534ce8669b0824e60
SHA1 07840128d11f0002ad8b51663cc8bb32c25c861d
SHA256 52528d056b9f80db0484cfdd27a707937fbbc9e3c17b8b7ca40dadc69478b6d2
SHA3 6d6c9fbb2f7bb42ee9ce8c6748960831f1021c1cb882ee2004cff6c2e16fb8e3

TFRMABOUT_WINDOWS

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xcd65
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 7.96479
MD5 fafdee97f64c8befb7353025f96c2d1c
SHA1 6b81b5f668574d1e451026facba821713910b828
SHA256 70371949d94c86e81e6c3e3045fbe46a85cec97229de50fed2dfaf136865b940
SHA3 ef5a9b314551577c3883b3031e7d9f5f8158053cfae98ee325146898c799ccbe

TFRMFULLDISKACCESSGUIDANCE

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xdd8
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.2729
MD5 ed016fb1b508a084d1c1e995ec33cd71
SHA1 c39108397f79c22ec0111780175c580c9e35584e
SHA256 e008a0ffd791f9760f24b18d1a4e18befa66b84183d2a95cba328fb58d0a8586
SHA3 7d1827740eb1e477cc16f67006871f888889ef04304a402693e8430d4a56bda2

TFRMPREFERENCES

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x248
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.36172
MD5 d09fb3541f1f9e16a5f463f11abc5cdf
SHA1 7375a4b1869cfb2cdde285068ed597c0fa3af199
SHA256 fa75267a3f2e9a48b72e5b8c03867950a0509c8b4bcb692edccdfbef66682e08
SHA3 f9a4ac8a8005c964780b0c99054a34c9e8261bb051983ca370bd246992b916f2

TFRMUSERLICENSE

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x66ef
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 7.82082
MD5 03d496a2faae603b5009c36dac22b0a6
SHA1 91f3bdf1a6b53ca40692d2fd9e780dc3d3a88104
SHA256 22f35ef0fcd7e459fa8b679663cb4a77c72d04c2ac6aed29857de6e6e5b100cc
SHA3 afc7bb2dfb6eec6e5f291f1d4f483f6a0df2c4043e64a04f68c1d7d7ec089ee9

TFRMVMBACKUPSTART

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x13f52
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 7.85985
MD5 3112ae9a291a08c7fe6211bd3358fe45
SHA1 021815eaecf58c7b1e41a4f6bddc4603a4c866ac
SHA256 746e2c77a86230e73a756d1f8e1d37d80b750881d47a48820135f8af3ea24d10
SHA3 0ae209e495404d0e09801aef6c3f1cb8c4fd06bf209f6e8fd6cf5348a6eedfd2

TFRMVMSELECTIONLIST

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x128a8
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 7.78565
MD5 8679e5c59a3b341d64a69a76e201c002
SHA1 da55e8272b8c0a75e45da554e594da67fca3f6cd
SHA256 3337b3864e9a908db7fd599c8cbc19718720972e7bdac82be95a8810674838d4
SHA3 2c74fb68241d4d8b68869d54f5f572107c3d02d533417ff1ac34d684e9118c27

TKEYGENERATEFRM

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xbfc
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.34817
MD5 f62a268dbcf8d3f4dd46961da5e89cc1
SHA1 980b978f6acf3eeba2b4e679baa6e9baf2be220e
SHA256 92cabaf6b7bf4e00f07812c431476a849c4c4e7846e142a3c90635e1e439e5b9
SHA3 08ab4707194276f2fc178d7179fb901fab72bb7ac294ee8e6a3e9169efaa590d

TKEYMAINTFRM

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x106f
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.35629
MD5 6f8f2caefb9f19a7d641fb7eb4b2a3cf
SHA1 1ad706c2a7672d6ae68cf3f6ace4a8009f9e1cbe
SHA256 a7ea5d336845212a8eb7288e9a374c12fdf04eb5d43cabab3a4ae6ddff95971f
SHA3 24b63f3b645ff325c6208611a12c702cd9605b8aa50d2d004fa34cd80b8c768d

WIN10STYLE

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xd78e9
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 6.57002
MD5 93c9b4d795cbfdc2ff1477961837bb72
SHA1 02f2e6e3b639ab3e6b83589526bfeb18b27c40a3
SHA256 6f0fdbd494927946aa2dc2a337e10764e1f91f55d85fe1f6ab9181b0b9c667fa
SHA3 f6691861c92e072b985985b26a064fab765a5dfb79177bf08a5f074610e61fc3

WIN7STYLE

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xb5ff4
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 6.15771
MD5 fd50d6167f86eabae3d13d14d3595081
SHA1 98464d8659df6f7a6c9e7a2b2881e4be8ed734d4
SHA256 a43fe4b9d41b9209f5690e8094ff56ec34b07900a4ad86d555530e6490762f56
SHA3 a953d9018d07eab0fbce0dff0cdfb41eea05058c23608e7f7f6a5adfac1188fb

WIN8STYLE

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xd5583
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 6.55249
MD5 afbe30476bae1b1af0847d9b069ec19d
SHA1 ebbbd07bcc3e2e6ffe87a90ebae3bf82f30de31a
SHA256 d3a0718d135504d46669f2cdb5eacce582ce9c98bc09e48131ab2bec4800201f
SHA3 a6f4cd04774f62f06b117302da31ba8d771d3b7eabb0ff9768a06deaef55788b

32761

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 1.83876
Detected Filetype Cursor file
MD5 a2baa01ccdea3190e4998a54dbc202a4
SHA1 e8217df98038141ab4e449cb979b1c3bbea12da3
SHA256 c53efa8085835ba129c1909beaff8a67b45f50837707f22dfff0f24d8cd26710
SHA3 8874564c406835306368adf5e869422e1bb97109b97c1499caa8af219990e8dc
Preview

32762

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 1.91924
Detected Filetype Cursor file
MD5 aff0f5e372bd49ceb9f615b9a04c97df
SHA1 e3205724d7ee695f027ab5ea8d8e1a453aaad0dd
SHA256 b07e022f8ef0a8e5fd3f56986b2e5bf06df07054e9ea9177996b0a6c27d74d7c
SHA3 9cb042121a5269b80d18c3c5a94c0e453890686aedade960097752377dfa9712
Preview

32763

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 2.01924
Detected Filetype Cursor file
MD5 48e064acaba0088aa097b52394887587
SHA1 310b283d52aa218e77c0c08db694c970378b481d
SHA256 43f40dd5140804309a4c901ec3c85b54481316e67a6fe18beb9d5c0ce3a42c3a
SHA3 38753084b0ada40269914e80dbacf7656dc94764048bd5dff649b08b700f3ed5
Preview

32766

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 2.01924
Detected Filetype Cursor file
MD5 1ae28d964ba1a2b1b73cd813a32d4b40
SHA1 8883cd93b8ef7c15928177de37711f95f9e4cd22
SHA256 ff47a48c11c234903a7d625cb8b62101909f735ad84266c98dd4834549452c39
SHA3 a85dadd416ce2d22aa291c0794c45766a0613b853c6e3b884a2b05fc791427b8
Preview

32767

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 2.01924
Detected Filetype Cursor file
MD5 0893f6ba80d82936ebe7a8216546cd9a
SHA1 0754cbdf56c53de9ed7fbd47859d20b788c6f056
SHA256 a0adcedb82b57089f64e2857f97cefd6cf25f4d27eefc6648bda83fd5fef66bb
SHA3 ce6148ade08ef9b829f83cb13b4c650d9d4a7012bfd1ab697a7870a05f4104f8
Preview

MAINICON

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 2.86299
Detected Filetype Icon file
MD5 125ad5535137d962bb20a477f96c39cd
SHA1 3a888412cb3e48e54b4ea639a1197d571a9e6d6a
SHA256 d59564a979c079eeb803793aa5db905cbbef84e96e5f1063d54684b5352a796f
SHA3 399be9d883ba038ed332d6f7363adccf1efe62e5f0e57641e66e835e723851e8

1 (#3)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x30c
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 3.38514
MD5 cd40ca4ad8073fa511d8620e2a0a813f
SHA1 1ce91ef5d17c05b20941c5bd3c953cb1a9ddc927
SHA256 f7c679dc99e08294ae473e9be1a48148bc173d58b4b2f723ec62bb9ccc834089
SHA3 31a04a9f82d3343cae1ed41fadda7fbe26294e4101569f53d7ac475cbeeca69b

1 (#4)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x5d7
TimeDateStamp 2021-Feb-04 00:52:10
Entropy 5.25898
MD5 8987187dc1c08fbc811bc645f53b0d16
SHA1 5f4bc866b210b402b3dbfdfa2abb841bb653bbca
SHA256 7ec65b0312c33ba88e3a18b3f611651f4db480766f67272400c9e25344b424d0
SHA3 592ec05bc6284e81ee6703f6ee84049aa0a77461bcf415bf24e6f95f9030ee38

String Table contents

Value name cannot be empty
Quality weight is out of range
unknown
Unspecified certificate from client
Client rejected the certificate
Execution of request terminated with unknown error
Client not assigned to request component
Error querying headers: (%d) %s
Error obtaining session handle
Error sending data: (%d) %s
Error receiving data: (%d) %s
Error connecting to server: %s
Error opening request: (%d) %s
Error adding header: (%d) %s
Error removing header: (%d) %s
Error reading data: (%d) %s
Error setting timeout for the request: (%d) %s
Pair of extension and mime type already exists
Mime type cannot be empty
EratosthenesSieveSize value (%d) too small for required number of pre-computed small primes (%d primes)
Scheme "%s" already registered for %s
Scheme "%s" is not registered
Credential without user and password
Platform-dependant function not implemented
Scheme-dependant function not implemented
Method already assigned
URL already assigned
Parameter index (%d) out of range (%d..%d)
Invalid URL: "%s"
Parameter "%s" not found
Maximum number of redirections (%d) exceeded
Error getting Server Certificate
Server Certificate Invalid or not present
Server Certificate not accepted
Empty certificate list
Data type mismatch of [%s] item. Current type [%s], new type [%s]
Field [%s] is not found
Tail event alerter supports only single event name
Not accessible.
Connection definition parameters
Client info
Session info
Failed to load DBMS client !
Failed to connect to DBMS !
Not connected to DBMS.
Checking session ...
<not found>
Unnamed
Warning:
Error:
Warning: The client [%s] and server [%s] major versions difference > 1.
VTab: DataSet [%s] is busy by another result set
Cannot perform action. DBTOOLn.DLL is not found
Cannot open a FileStream without a transaction
Cannot open a FileStream using empty path
FileStream access error. %s
Query Notification subscription error. Info [%s]
[%s] method failed
Failed to parse URI
Cannot modify read-only document
Failed to get BSON for the document
Failed to manage bulk operation
Cannot get cursor from this object. Use other [%s] overloaded method
Cannot execute this object. Use other [%s] overloaded method
DBRef [%s] is invalid
DBRef [%s] is not found
Cannot open dataset [%s]. %s must be assigned
Variable [%s] is not array
Direct execution does not support type of variable [%s]. Only simple types are supported
SQLite library initialization failed. Main code [%d], extended code [%d]
Database specified by [%p] handle was not found
Invalid password specified
SQLite library linkage [%s] is not found. Hint: If static linkage is requiested and supported, include [FireDAC.Phys.SQLiteWrapper.Stat] into your project
VTab: Invalid number of arguments at VTabCreate. Expected [%d], got [%d]
VTab: Dataset [%s] is not found
VTab: Operation is not supported
VTab: Savepoint [%d] is not found
VTab: Dataset modification failed
VTab: Explicit ROWID at INSERT is not supported
VTab: Dataset state was changed. Cannot perform operation
VTab: Specified row does not exist
VTab: Invalid cursor
TFDLocalSQL must be attached to an active SQLite connection
Maximum length (%d) of GTRID exceeded - %d (NOE18/TX)
Maximum length (%d) of BQUAL exceeded - %d (NOE19/TX)
Maximum length (%d) of transaction name exceeded - %d (NOE20/TX)
Too many close braces in names file after alias [%s] (NOE105/DB)
[%s] is not a callable PL/SQL object (NOE130/SP)
[%s, #%d] is not found in [%s] package (NOE134/SP)
Parameter with type TABLE OF BOOLEAN/RECORD not supported (use TFDQuery) (NOE135/SP)
Parameter with type RECORD must be of named type (use TFDQuery) (NOE142/SP)
Cannot convert Oracle Number [%s] to TBcd
DBMS_PIPE event alerter supports only single event name
Cannot start a trace session, when there is an active one
Stored procedure [%s] is not found
Array-typed variable [%s] dimensions [%d] are not supported. Only sigle dimensional simple type arrays are supported
Array-typed variable [%s] unsupported element type [%d]. Only sigle dimensional simple type arrays are supported
Array-typed variable [%s] item index [%d] is out of bounds [%d, %d]
Cannot describe type [%s]. %s
No script to execute for [%s]. Possible reason: SQLScriptFileName and SQLScripts both are empty
Connection parameter [%s] must be not empty
DbExpress driver configuration file [%s] is not found. Possible reason: dbExpress is not properly installed on this machine
Unsupported MySQL version [%d]. Supported are client and server from v 3.20
Port number cannot be changed
Error in parameter [%s] definition. %s
Failed to initialize embedded server. See MySQL log files for details
Field [%d] data type [%d] is not supported
Variable [%s] C data type [%d] is not supported
No cursors available
Cannot initialize OCI with character set [%s]. Possible reason: %s
Cannot assign value to BFILE/CFILE parameter [%s]
No cursor parameters are defined. Include fiMeta into FetchOptions.Items
OCI is not properly installed on this machine (NOE1/INIT)
Unsupported OCI library [%s] version [%s]. At least version 8.0.3 is required (NOE2/INIT)
Bad or undefined variable param type (NOE12/VAR)
Class [%s] is not registered
Unknown storage format [%s]. Hint: To register it, you can drop component [TFDStanStorageXxxLink] into your project
Cannot move file [%s] to [%s]. %s
Invalid date interval format [%s]
Invalid JSON storage format. Position [%d]
Cannot execute host command [%s]. %s
String size must be of 1 character length
Character cannot be alphanumeric or whitespace
Invalid SET command argument
Invalid command [%s] syntax
ACCEPT statement must specify a variable name
DEFINE requires a value following equal sign
VARIABLE has missed right brace
VARIABLE has unsupported data type
Cannot execute command. Not logged on
No script commands registered. Possible reason: FireDAC.Comp.ScriptCommands unit is not linked to the application
JSON field [%s] is not found
JSON field [%s] name is Duplicated
Mapping of source to destination fields is not defined
Timeout expired
Cannot get access to BLOB raw data
Cannot perform nonblocking action, while other nonblocking action is in progress
Macro [%s] is not found
Parameter [%s] value index [%d] is out of range [0..%d]
Cannot acquire item (connection) from pool. Maximal number [%d] of simultaneous items (connections) reached.
To register it, you can drop component [%s] into your project
To register it, you can include unit [%s] into your project
Invalid binary storage format
Cannot read [%s] property
Cannot read [%s] object
Cannot read RAW data of [%s] object
Dictionary overflow
Dataset parameter value must be of TFDDataSet or TFDDatSTable type
Text field [%s] is not found
Source dataset not set
Destination dataset not set
Destination text data file name or stream must be specified
Source text data file name or stream must be specified
Text field [%s] size is undefined in Fixed Size Record format
Text field [%s] name is duplicated
Bad text value [%s] format for mapping item [%s]. %s
Undefined source field or expression for destination field [%s]
Key fields are not defined
SQL table is not defined
CommitCount must be greater than zero
Text fields are not defined. Hint: Use TFDBatchMove.Analyze
Destination for JSON output must be specified
Source of JSON input must be specified
Connection [%s] must be active
Connection [%s] establishment is canceled
Connection [%s] cannot be pooled. Possible reason: connection definition is not in the FDManager.ConnectionDefs list or TFDConnection.Params has additional parameters
Connection [%s] is not found Possible reason: [%s] ConnectionName property is misspelled or references to nonexistent connection
Command [%s] must be in active state
Command [%s] must be in inactive state
Dataset [%s] must be in cached update mode
Connection is not defined for [%s]. Possible reason: Connection and ConnectionName property values are both empty
Connection [%s] must be online
Table adapter [%s] cannot be assigned to [%s], because it is already assigned to [%s] and cannot be shared across few datasets
Dataset connection does not match to called connection
Table [%s] must have primary key
Local SQL engine misusage by [%s]. Hint: activate connection before activating dataset
Table [%s] index [%s] must be existing non-expressional index
Dataset name must be not empty
Dataset name [%s] must be unique across Local SQL [%s] datasets
Internal streams cannot be used in Array DML
To perform operation DriverLink must be specified
To perform operation service must be active
Cannot deinstall a SQLite collation, while there are active connections
%s command %s [%d] instead of [1] record. Possible reasons: %s
update table does not have PK or row identifier, record has been changed/deleted by another user
Operation cannot be performed without assigned SelectCommand
Update post failed
Row editing disabled
Row inserting disabled
Row deleting disabled
Application must have only single FDManager
FDManager must be inactive
FDManager must be active
Connection name [%s] must be unique
Connection [%s] must be inactive
Parameter [%s] data type is unknown. Hint: specify TFDParam.DataType or assign TFDParam value before Prepare/Execute call
Parameter [%s] data type is not supported
Param [%s] type changed from [ft%s] to [ft%s]. Query must be reprepared. Possible reason: an assignment to a TFDParam.AsXXX property implicitly changed the parameter data type. Hint: use the TFDParam.Value or appropriate TFDParam.AsXXX property
A meta data argument [%s] value must be specified
Cannot set default transaction
The set of parameters is changed. Query must be reprepared. Expected number of parameters is [%d], but actual number is [%d]. Possible reason: a parameter was added or deleted
Data too large for variable [%s]. Max len = [%d], actual len = [%d] Hint: set the TFDParam.Size to a greater value
Database [%s] does not exist
Required OLEDB provider is missing on client machine. Hint: set exact DBVersion value or install respective MS Access Database Engine: Access 2003 or earlier: http://support.microsoft.com/kb/239114 Access 2007: http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=23734 Access 2010: http://www.microsoft.com/download/en/details.aspx?id=13255
JRO.JetEngine class is missing on client machine. Hint: install latest engine from: http://support.microsoft.com/kb/239114
Database format is not recognized. Possible reason: DBVersion value mismatches database version.
Specified database password is invalid
Unknown OLE error [%s]
Object value for [%s] parameter of [ft%s] type is not supported
Column [%s] is of unsupported data type [dt%s]
Cannot %s stream for variable [%s]
Hint: check it is in the PATH or application EXE directories, and has %s bitness.
Cannot get vendor library entry point[s]. [%s]
Connection must be inactive
Too many login retries. Allowed [%d] times
To perform operation driver manager, must be [%s]
Character [%s] is missed
Too long identifier (> 255)
Parameter [%s] ArraySize [%d] is less than ATimes [%d]
Cannot perform the action, because the previous action is in progress
Escape function [%s] is not supported
Define(mmReset) is only supported for metainfo retrieval
Cannot generate update query. WHERE condition is empty
Cannot generate update query. Update table undefined
Cannot parse object name - [%s]
Syntax error in escape function [%s]. %s
FDPhysManager shutdown timeout. Possible reason: application has not released all connection interfaces
Correct driver ID or define [%s] virtual driver in %s
Driver ID is not defined. Set TFDConnection.DriverName or add DriverID to your connection definition
Connection must be active
Capability is not supported
Transaction [%s] must be active
Transaction [%s] must be inactive. Nested transactions are disabled
Cannot change command state
Command [%s] text must be not empty
Escape function name must be not empty
Cannot open / define command, which does not return result sets. Hint: use Execute / ExecSQL method for non-SELECT commands
Command must be is prepared state
Cannot execute command returning result sets. Hint: use Open method for SELECT-like commands
Command must be open for fetching
Exact %s [%d] rows, while [%d] was requested
Meta information mismatch
Cannot load vendor library [%s]. %s
Bookmark key fields [%s] are incompatible with dataset [%s] key fields [%s]
Record editing for dataset [%s] is disabled
Record inserting for dataset [%s] is disabled
Record deleting for dataset [%s] is disabled
Field [%s] specified within %s of DataSet [%s] does not exist
Cannot set dataset [%s] to offline mode. Hint: check that FetchOptions.AutoFetchAll is not afDisable
Cannot turn off cached updates mode for DataSet [%s]. Hint: dataset has updated rows, cancel or apply updates before action
Cannot make definition [%s] circular reference
Cannot %s definition [%s]. It has associated connection
Cannot make definition persistent
Cannot load definition list, because it is already loaded
Definition [%s] is not found in [%s]
Definition name [%s] is duplicated
Driver [%s] is not registered. %s
Driver [%s] cannot be released. Hint: Close all TFDConnection objects and release pools
To register it, you can drop component [TFDPhys%sDriverLink] into your project
Arithmetic in filter expressions not supported
Operation cannot mix aggregate value with record-varying value
Empty expression
Error evaluating expression. %s
Bookmark is not found for dataset [%s]
View [%s] is not a sorted view
Adapter interface must be supplied
Cannot set MasterSource for dataset [%s]. Nested datasets cannot have a MasterSource
Cannot set MasterSource for dataset [%s]. Circular datalinks are not allowed
Cannot refresh dataset [%s]. Cached updates must be commited or canceled and batch mode terminated before refreshing
Cannot open dataset [%s]. A DataTable or a DataView must be supplied. Hint: if that is TFDMemTable, use CreateDataSet or CloneCursor to open dataset
Index [%s] is not found for dataset [%s]
Aggregate [%s] is not found for dataset [%s]
Index [%s] definition is not complete for dataset [%s]
Aggregate [%s] definition is not complete for dataset [%s]
Cannot perform operation on unidirectional dataset [%s]
Cannot merge because [%s] %s
Column or function [%s] is not found. Hint: if the name is a function name, then add FireDAC.Stan.ExprFuncs to uses clause
Expression unexpectedly terminated
Expression must be aggregated
Expression cannot be aggregated
Type mismatch in expression
Expression is incorrect
Invalid use of keyword
Invalid character found [%s]
Name is not terminated properly
String constant is not terminated properly or is too long
'(' expected but [%s] found
')' or ',' expected but [%s] found
')' expected but [%s] found
IN predicate list may not be empty
Expected [%s]
Cannot perform operation for row state
Cannot change updates registry for DatS manager [%s]
Too many aggregate values per view
Grouping level exceeds maximum allowed for aggregate [%s]
Variable length column [%s] overflow. Value length - [%d], column maximum length - [%d]
Invalid foreign key [%s]
Invalid unique key [%s]
Cannot change column [%s] data type
Invalid relation [%s]
Cannot create parent view. Relation [%s]
Cannot change table [%s] structure, when table has rows
Found a cascading actions loop at checking foreign key [%s]
Record already locked
Record is not locked
Assigning value [%s] is not compatible with column [%s] data type. %s
Value [%s] is out of [%s] data type range
Row is not in editable state
Column [%s] is read only
Cannot insert row into table
Column [%s] value must be not null
Duplicate row found on unique index. Constraint [%s]
Cannot process - no parent row. Constraint [%s]
Cannot process - child rows found. Constraint [%s]
Cannot compare rows
Data type conversion is not supported
Column [%s] is not searchable
Row may have only single column of [dtParentRowRef] data type
Cannot read data from or write data to the invariant column [%s]. Hint: use properties and methods, like a NestedTable
Cannot set parent row
Row is not nested
Column [%s] is not reference to other row
Column [%s] is not reference to row set
Record not found
BCD overflow
%s is not a valid BCD value
Could not parse SQL TimeStamp string
Invalid SQL date/time values
FireDAC Login
Name [%s] is duplicated in the list
Object [%s] is not found
Column [%s] type is unknown or undefined
No columns defined for table
Check condition violated. Constraint [%s]
Cannot begin edit row
Cannot create child view. Relation [%s]
Cannot delete row
Column [%s] must have blob value
Fixed length column [%s] data length mismatch. Value length - [%d], column fixed length - [%d]
DataSource cannot be changed
Cannot perform this operation on an open dataset
Dataset not in edit or insert mode
Cannot perform this operation on a closed dataset
Cannot perform this operation on an empty dataset
Cannot modify a read-only dataset
Nested dataset must inherit from %s
False
True
Parameter '%s' not found
Unable to load bind parameters
Field '%s' is of an unsupported type
SQL not supported
Execute not supported
Operation not allowed on a unidirectional dataset
Unassigned variant value
Type mismatch for field '%s', expecting: %s actual: %s
Size mismatch for field '%s', expecting: %d actual: %d
Invalid variant type or size for field '%s'
Value of field '%s' is out of range
Field '%s' must have a value
Field '%s' has no dataset
Field '%s' cannot be a calculated or lookup field
Field '%s' cannot be modified
No index currently active
Field '%s' is not indexed and cannot be modified
Duplicate index name '%s'
No index for fields '%s'
Index '%s' not found
Duplicate name '%s' in %s
Circular datalinks are not allowed
Lookup information for field '%s' is incomplete
Error downloading URL: %s
Unable to load %s
NativeNode cannot be null
Invalid field size
Invalid FieldKind
Field '%s' is of an unknown type
Field name missing
Duplicate field name '%s'
Field '%s' not found
Cannot access field '%s' as type %s
Invalid value for field '%s'
%g is not a valid value for field '%s'. The allowed range is %g to %g
%s is not a valid value for field '%s'. The allowed range is %s to %s
'%s' is not a valid integer value for field '%s'
'%s' is not a valid boolean value for field '%s'
'%s' is not a valid floating point value for field '%s'
Node Not Found Error.
Wrong Owner Error
Specified input encoding does not match byte order mark.
Default Encoding not specified.
Character encoding scheme not supported.
Stream not specified.
Index out of range
Unicode code point $%x has no equivalent in %s
Cannot convert $%8.8X to %s
High surrogate not found
$%x is not a valid %s code point
Invalid %s encoding
Low surrogate not found
Surrogate value $%x found in %s. Values between $D800 and $DFFF are reserved for use with UTF-16
%s encoding out of range
UTF-8 error %d
FileName cannot be blank
Line
Cannot Read WideString from odd byte position
Cannot Write WideString to odd byte position
Capacity cannot be less than size
Odd size not valid for WideString
Negative stream size invalid
Odd byte position not valid for WideString
%d is not a valid ISO-10646-UCS4 code point
String list does not allow duplicates
List Index out of bounds (%d)
Operation not allowed on Sorted string list
Hierarchy Request Error
List index out of bounds (%d)
No Modification Allowed Error
Parameter Node Not Assigned Error
Selected DOM Vendor does not support this property or method
Property or Method "%s" is not supported by DOM Vendor "%s"
No selected DOM Vendor
Node cannot be null
Microsoft MSXML is not installed
No active document
Node "%s" not found
IDOMNode required
Attributes are not supported on this node type
Invalid node type
Mismatched paramaters to RegisterChildNodes
Element "%s" does not contain a single text node
DOM Implementation does not support IDOMParseOptions
ItemTag property is not initialized
Node is readonly
Refresh is only supported if the FileName or XML properties are set
Successful match required
Strings parameter cannot be nil
Invalid index type
Index out of bounds (%d)
Invalid group name (%s)
OLE error %.8x
Method '%s' not supported by automation object
Variant does not reference an automation object
Dispatch methods do not support more than 64 parameters
License information for %s is invalid
License information for %s not found. You cannot use this control in design mode
OLE control activation failed
Could not obtain OLE control window handle
This control requires version 4.70 or greater of COMCTL32.DLL
"%s" DOMImplementation already registered
No matching DOM Vendor: "%s"
[%] parameter cannot be nil
AControlClass cannot be nil. Factory cannot generate presentation name.
Cannot create presentation proxy with nil model or PresentedControl. Use overloaded version of constructor with parameters and pass correct values.
APresentationProxyClass is nil. Factory cannot register presentation with a nil presentation proxy class.
APresentationName is empty. Factory cannot register presentation with an empty presentation name
Presentation Proxy class [%s] for this presentation name [%s] has already been registered.
A descendant of TStyledPresentationProxy has not been registered for class %s.
Maybe it is necessary to add the %s module to the uses section
|AOwner| should be an instance of TCustomPresentedScrollBox
Could not create styled presentation because CreateAniCalculations returned nil.
Key cannot be empty. Data model cannot set or get data by key with an empty name.
Custom clipboard format with name "%s" is already registered
Custom clipboard format with name "%s" is not registered
Cannot find parent by specified criteria
A regular expression specified in RegEx is required
Error in regular expression at offset %d: %s
Error studying the regex: %s
Column index, %d, out of bounds
ControlItem.Control cannot be set to owning GridPanel
Cannot delete a column that contains controls
You cannot delete a column by default
Cannot delete a row that contains controls
Member
Size Type
Value
Auto
Percent
Absolute
Column%d
Row%d
Date exceeds maximum of "%s"
Date is less than minimum of "%s"
Model is not valid class. Expected [%s], but received [%s]
Invalid calling conditions for '%s'.
Cannot find a suitable pixel format for '%s'.
Cannot find a suitable shader for '%s'.
Cannot determine Direct3D support level.
Cannot create Direct2D Factory object for '%s'.
Cannot create DirectWrite Factory object for '%s'.
Cannot create WIC Imaging Factory object for '%s'.
Cannot create rendering target for '%s'.
Cannot create Direct3D device for '%s'.
Cannot acquire DXGI factory from Direct3D device for '%s'.
Cannot create texture for '%s'.
Cannot create render target view for '%s'.
Cannot create a swap chain for '%s'.
Cannot add columns or rows when ExpandStyle is TExpandStyle.FixedSize
'%d' is not a valid span
Row index, %d, out of bounds
The "%s" cannot be modified (Fixed = True)
Duplicate scale value %s
Other scale
Normal
Cannot register bitmap codec. Codec file extension cannot be empty.
Cannot register bitmap codec. Codec class cannot be nil.
Cannot register bitmap codec. Codec for specified file extension "%s" has already existed.
Incorrect size of bitmap parameter(s).
Loading bitmap failed.
Loading bitmap failed (%s).
Bitmap size too big.
Invalid call of GetParameter.
Loading thumbnail failed (%s).
Saving bitmap failed.
Saving bitmap failed (%s).
Could not retrieve surface contents.
Cut
Paste
Delete
Select All
Cannot create a circular dependency between components
Active printer DPI cannot be changed while printing
Error occurred while reading printer settings: %s
Error occurred while writing printer settings: %s
All Files
Bitmaps
Icons
TIFF Images
JPEG Images
PNG Images
GIF Images
WMP Images
Cancel
Help
Abort
Retry
Ignore
All
No to All
Yes to &All
Close
%s requires Windows Vista or later
&Username
&Password
&Domain
Login
application
Copy
Presentation received nil Content from TPresentedControl. Content cannot be nil.
Point not in layout
TCaretPosition.Line has incorrect value
TCaretPosition.Pos has incorrect value
Invalid IScene.DisableUpdating/IScene.EnableUpdating call pair
No platform styles found
No platform style found for the current platform
Required IDeviceBehavior is not registered
Messages must be shown in the main UI thread.
Warning
Error
Information
Confirm
Yes
No
OK
Invalid gesture ID (%d)
Value must be between %d and %d
Unable to add IStylusAsyncPlugin: %s
Unable to add IStylusSyncPlugin: %s
Unable to remove IStylusAsyncPlugin: %s
Unable to remove IStylusSyncPlugin: %s
Unable to get or set window handle: %s
Unable to enable or disable IRealTimeStylus: %s
Unable to enable or disable IGestureRecognizer: %s
Unable to retrieve initial gesture point
Unable to set stylus gestures: %s
The main menu can be only a single instance
A main menu only supports TMenuItem children
No %s implementation found
Bitmap size must be equal in copy operation
Cannot create %s, because |CreateScrollContent| must return not nil object
Cannot change this property when using LiveBindings
Invalid printer class: %s
Length of value array must be >= length of prompt array
Prompt array must not be empty
Invalid FMX Handle: %s%.*x
Unsupported platform service: %s
Service %s already registered
Unsupported OS version: %s
Instance of "%s" not created
Class of flashing control is not registered
Class %0:s does not support interface %1:s
Handled null exception
Cannot create timer: systemErrorCode=%d
An unknown combination of keys %s
You can use only the inheritors of class "%s"
Cannot create menu ID. All IDs have already been assigned
One or more errors occurred
Must wait on at least one event
Cannot call BeginInvoke on a TComponent in the process of destruction
Operation not supported on selected printer
Selected printer is not valid
Printer index out of range
%s on %s
There is no default printer currently selected
Printer is not currently printing
Printing in progress
Cannot focus this control
The function '%s' must not return nil value
The style you have chosen is not available for your currently selected target platform. You can select a custom style or remove the stylebook to allow FireMonkey to automatically load the native style at run time
Cannot load style from stream
Cannot load style from resource
Cannot load style from file %s
The object does not implement the observer interface
No single cast observer with ID %d was added to the observer collection
No multi cast observer with ID %d was added to the observer collection
Observer is not available
Invalid date string: %s
Invalid time string: %s
Invalid time Offset string: %s
Manual construction of TDeviceInfo is not supported
Attribute '%s' already exists
Device '%s' already exists
Error decoding URL style (%%XX) encoded string at position %d
Invalid URL encoded character (%s) at position %d
Cannot construct an ITask in this manner
At least one task in array nil
Cannot start a task that has already completed
One or more tasks were cancelled
Windows Vista
Windows Server 2008
Windows 7
Windows Server 2008 R2
Windows 2000
Windows XP
Windows Server 2003
Windows Server 2003 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows 8
Windows 8.1
Windows 10
Observer is not supported
Cannot have multiple single cast observers added to the observers collection
Timespan element too long
Argument out of range
Argument must not be nil
Unbalanced stack or queue operation
Item not found
Duplicates not allowed
Insufficient RTTI available to support this operation
Parameter count mismatch
Type '%s' is not declared in the interface section of a unit
VAR and OUT arguments must match parameter type exactly
Specified Login Credential Service not found
%s (Version %d.%d, Build %d, %5:s)
%s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s)
32-bit Edition
64-bit Edition
Windows
Source and Destination arrays must not be the same
Class %s is not intended to be constructed
Invalid Timeout value: %s
SpinCount out of range. Must be between 0 and %d
Invalid Reset Count: %d
Invalid Count: %d
Invalid Decrement Count: %d
Invalid Increment Count: %d
Decrement amount will cause invalid results: Count: %d, CurCount: %d
Count already max: Amount: %d, CurCount: %d
Countdown already reached zero (0)
Timespan too long
The duration cannot be returned because the absolute value exceeds the value of TTimeSpan.MaxValue
Value cannot be NaN
Negating the minimum value of a Timespan is invalid
Invalid Timespan format
The specified path was not found
The path format is not supported
The specified directory is not empty
The specified directory name is invalid
The drive cannot be found
The specified file was not found
?
The given "%s" local time is invalid (situated within the missing period prior to DST).
Invalid argument
Index out of range (%d). Must be >= 0 and < %d
String index out of range (%d). Must be >= %d and <= %d
Invalid UTF32 character value. Must be >= 0 and <= $10FFFF, excluding surrogate pair ranges
High surrogate char without a following low surrogate char at index: %d. Check that the string is encoded properly
Low surrogate char without a preceding high surrogate char at index: %d. Check that the string is encoded properly
Argument, %s, must be >= 0
Length of Strings and Objects arrays must be equal
%s expected
%s not in a class registration group
Property %s does not exist
Stream write error
Thread creation error: %s
Thread Error: %s (%d)
Cannot terminate an externally created thread
Cannot wait for an externally created thread
Cannot call Start on a running or suspended thread
Cannot call CheckTerminated on an externally created thread
Cannot call SetReturnValue on an externally create thread
Parameter %s cannot be nil
Parameter %s cannot be a negative value
Input buffer exceeded for %s = %d, %s = %d
Invalid characters in path
The specified path is too long
List index out of bounds (%d)
Out of memory while expanding memory stream
%s has not been registered as a COM class
Number expected
ANSI or UTF8 encoding expected
%s on line %d
Error reading %s%s%s: %s
Stream read error
Property is read-only
Failed to create key %s
Failed to get data for '%s'
Failed to set data for '%s'
Resource %s not found
%s.Seek not implemented
Operation not allowed on sorted list
String expected
Class %s does not support the action
Invalid binary value
Invalid filename - %s
Invalid stream format
'%s' is an invalid mask at (%d)
''%s'' is not a valid component name
Invalid property value
Invalid property element: %s
Invalid property path
Invalid property type: %s
Invalid property value
Invalid data type for '%s'
Invalid string constant
Line too long
List capacity out of bounds (%d)
List count out of bounds (%d)
Ancestor for '%s' not found
Cannot assign a %s to a %s
Bits index out of range
Can't write to a read-only resource stream
''%s'' expected
CheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
A class named %s already exists
List does not allow duplicates ($0%x)
A component named %s already exists
String list does not allow duplicates
Cannot create file "%s". %s
Cannot open file "%s". %s
Identifier expected
Unable to write to %s
The client can not be an instance of class %s
Wednesday
Thursday
Friday
Saturday
Unable to create directory
Invalid source array
Invalid destination array
Character index out of bounds (%d)
Start index out of bounds (%d)
Invalid count (%d)
Invalid destination index (%d)
Invalid code page
Invalid encoding name
No mapping for the Unicode character exists in the target multi-byte code page
Invalid StringBaseIndex
Operation Cancelled
July
August
September
October
November
December
Sun
Mon
Tue
Wed
Thu
Fri
Sat
Sunday
Monday
Tuesday
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
Dec
January
February
March
April
May
June
External exception %x
Assertion failed
Interface not supported
Exception in safecall method
Object lock not owned
Monitor support function not initialized
%d exception(s):
Feature not implemented
Method called on disposed object
%s (%s, line %d)
Abstract Error
Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
%s%s
A call to an OS function failed
Jan
Feb
Variant or safe array is locked
Invalid variant type conversion
Invalid variant operation
Invalid NULL variant operation
Invalid variant operation (%s%.8x)
%s
Custom variant type (%s%.4x) is out of range
Custom variant type (%s%.4x) already used by %s
Custom variant type (%s%.4x) is not usable
Too many custom variant types have been registered
Could not convert variant of type (%s) into type (%s)
Overflow while converting variant of type (%s) into type (%s)
Variant overflow
Invalid argument
Invalid variant type
Operation not supported
Unexpected variant error
Stack overflow
Control-C hit
Privileged instruction
Operation aborted
Exception %s in module %s at %p.
%s%s
Application Error
Format '%s' invalid or incompatible with argument
No argument for format '%s'
Variant method calls not supported
Read
Write
Execution
Invalid access
Format string too long
Error creating variant or safe array
Variant or safe array index out of bounds
Too many open files
File access denied
Read beyond end of file
Disk full
Invalid numeric input
Division by zero
Range check error
Integer overflow
Invalid floating point operation
Floating point division by zero
Floating point overflow
Floating point underflow
Invalid pointer operation
Invalid class typecast
Access violation at address %p. %s of address %p
Access violation
<unknown>
'%s' is not a valid integer value
'%s' is not a valid integer value for %s type
'%s' is not a valid floating point value
'%s' is not a valid floating point value for %s type
'%s' is not a valid date
'%s' is not a valid time
'%s' is not a valid date and time
'%d.%d' is not a valid timestamp
'%s' is not a valid GUID value
Invalid argument to time encode
Invalid argument to date encode
Out of memory
I/O error %d
File not found
Invalid filename

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.0.68
ProductVersion 1.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName Antwise Solutions
FileDescription Vimarun - Run VMware Machines automatically
FileVersion (#2) 1.0.0.68
LegalCopyright Copyright 2020 (c) Antwise Solutions
ProductName Vimarun for Windows
ProductVersion (#2) 1.0.0.0
ProgramID com.embarcadero.Vimarun
Resource LangID English - United States

TLS Callbacks

StartAddressOfRawData 0xdb2000
EndAddressOfRawData 0xdb21c4
AddressOfIndex 0xd63c48
AddressOfCallbacks 0xdb3010
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks (EMPTY)

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0! [*] Warning: Section .tls has a size of 0!
Leave a comment

No comments yet.