52bb3bab9cb2b93279c327318d6ba976

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2014-Dec-16 10:48:00
Detected languages English - United States
CompanyName Maksim Arhipov
FileVersion 5.3.8.0
ProductName Open Server Panel
ProductVersion 5.3.8.0

Plugin Output

Suspicious Strings found in the binary may indicate undesirable behavior: May have dropper capabilities:
  • CurrentVersion\Run
Miscellaneous malware strings:
  • cmd.exe
Contains domain names:
  • http://open-server.ru
  • http://www.w3.org
  • http://www.w3.org/2000/xmlns/
  • http://www.w3.org/2001/XMLSchema
  • http://www.w3.org/2001/XMLSchema-instance
  • https://ospanel.io
  • open-server.ru
  • server.ru
  • www.w3.org
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to MD5
Uses constants related to DES
Suspicious The PE is possibly packed. Unusual section name found: .didata
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryExW
  • GetProcAddress
  • LoadLibraryA
  • LoadLibraryW
Functions which can be used for anti-debugging purposes:
  • SwitchToThread
  • FindWindowW
Code injection capabilities:
  • VirtualAlloc
  • WriteProcessMemory
  • OpenProcess
Can access the registry:
  • RegQueryValueExW
  • RegOpenKeyExW
  • RegCloseKey
  • RegUnLoadKeyW
  • RegSetValueExW
  • RegSaveKeyW
  • RegRestoreKeyW
  • RegReplaceKeyW
  • RegQueryInfoKeyW
  • RegLoadKeyW
  • RegFlushKey
  • RegEnumValueW
  • RegEnumKeyExW
  • RegDeleteValueW
  • RegDeleteKeyW
  • RegCreateKeyExW
Possibly launches other programs:
  • CreateProcessW
  • ShellExecuteW
Can create temporary files:
  • CreateFileW
  • GetTempPathW
Uses functions commonly found in keyloggers:
  • MapVirtualKeyW
  • GetForegroundWindow
  • CallNextHookEx
Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
Functions related to the privilege level:
  • OpenProcessToken
  • AdjustTokenPrivileges
Enumerates local disk drives:
  • GetVolumeInformationW
  • GetDriveTypeW
Manipulates other processes:
  • WriteProcessMemory
  • OpenProcess
Can take screenshots:
  • GetDCEx
  • GetDC
  • FindWindowW
  • CreateCompatibleDC
  • BitBlt
Reads the contents of the clipboard:
  • GetClipboardData
Checks if it has admin rights:
  • IsUserAnAdmin
Can shut the system down or lock the screen:
  • ExitWindowsEx
Info The PE's resources present abnormal characteristics. Resource AMAKRITS is possibly compressed or encrypted.
Resource AMETHYSTKAMRI is possibly compressed or encrypted.
Resource AURIC is possibly compressed or encrypted.
Resource CARBON is possibly compressed or encrypted.
Resource GLOSSY is possibly compressed or encrypted.
Resource LIGHT is possibly compressed or encrypted.
Resource LUNA is possibly compressed or encrypted.
Resource SAPPHIREKAMRI is possibly compressed or encrypted.
Resource SMOKEYQUARTZKAMRI is possibly compressed or encrypted.
Resource TABLETDARK is possibly compressed or encrypted.
Resource TURQUOISEGRAY is possibly compressed or encrypted.
Resource TFORM10 is possibly compressed or encrypted.
The binary may have been compiled on a machine in the UTC+3 timezone.
Safe VirusTotal score: 0/68 (Scanned on 2021-06-14 20:02:42) All the AVs think this file is safe.

Hashes

MD5 52bb3bab9cb2b93279c327318d6ba976
SHA1 a416a1e22279bf8b75bab4a1f880bef477079172
SHA256 277118908a1f2e5c6ab853aa46ed7a816e3b0c3bec73ec56ebc1386dec88dede
SHA3 f99c403c8fc0fe738729f29a429fbd82a4166771d2d1418d944b4dcd4196b633
SSDeep 49152:99Su8hRmqEHIcNJKK98YJgSAbblql+SYVpuRniN8CSi+EYP4JvJHDTrRT7h7wGT:nKKlKUIEFE8eYiRSgH2EYFygb
Imports Hash e7d8031e4580915be0a9b1b19adea629

DOS Header

e_magic MZ
e_cblp 0x50
e_cp 0x2
e_crlc 0
e_cparhdr 0x4
e_minalloc 0xf
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0x1a
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 11
TimeDateStamp 2014-Dec-16 10:48:00
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 8.2
SizeOfCode 0x625a00
SizeOfInitializedData 0x22fa00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000626700 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 5.2
ImageVersion 5.2
SubsystemVersion 5.2
Win32VersionValue 0
SizeOfImage 0x87a000
SizeOfHeaders 0x400
Checksum 0x859058
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x4000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x2000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 4465b2ba94682b0bb2bccaede123ff4c
SHA1 81bbfd79af4483f30ab88abedce10ad8fea2eb77
SHA256 d2c6978ccc2311b5a97dbeb3d8850a25ff6458c419898e97a6639212f22f66dc
SHA3 911d6c2c43e7dffbab47f79f4893d44a6e57db478a21e1205e7f2fbeaf6cde8d
VirtualSize 0x6258e4
VirtualAddress 0x1000
SizeOfRawData 0x625a00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.76795

.data

MD5 c886413339576f69ad237e486bd3635f
SHA1 fd72ecc3681f2c9b7ccd998bcbc99fd332a46274
SHA256 69afbff622d87f6765ef380fd67a76eccb0096f1eee46b8532bc6fa56fc2c9c3
SHA3 6d0183348b0580d9b3d0cfb94487017c6fae8be15877daf1344efa6e3fb6f99e
VirtualSize 0x74fc8
VirtualAddress 0x627000
SizeOfRawData 0x75000
PointerToRawData 0x625e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.99137

.bss

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x1ec48
VirtualAddress 0x69c000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata

MD5 62293b8272347d62a9403a5f50e05e51
SHA1 ebf8cedeed23eb92c6a5280387fe452b90062250
SHA256 dc7867a39b2e29078c42eca8bdc69477ff170d9c51c82782a8a103a424e03c3a
SHA3 8bc38f696c7c98826c61808e4300e0eafc5f6624b560237fdad85743c2ee0bfc
VirtualSize 0x59b4
VirtualAddress 0x6bb000
SizeOfRawData 0x5a00
PointerToRawData 0x69ae00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.40259

.didata

MD5 f82047342ebc9e4e43c93d556fe8f1ef
SHA1 21b5258cf4ae3a8ee8211bf6ad965277cc68e2e8
SHA256 7c3069ba0953a06c3668b9f2f48e7a8d9c070597df8f25b8600162e93018ecad
SHA3 be44b57aa5cef2888eb79d71f4b51c623209fa206344a30ddf0311eab44af809
VirtualSize 0xe4a
VirtualAddress 0x6c1000
SizeOfRawData 0x1000
PointerToRawData 0x6a0800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.10888

.edata

MD5 061d3fc2b064a50eba901e24f0197489
SHA1 4ca8b9b26a18324f18d7c12c7ff11aeb68f3266b
SHA256 330bd73a5ca60c54d9e4b6b8bf0c78cff231bd221a917f6035a1617e91c4835c
SHA3 0e244a78fc4c6a942d6d6fd1c2f70a6ac1ba12859ff8be5df668b5c6aadbab6e
VirtualSize 0x9c
VirtualAddress 0x6c2000
SizeOfRawData 0x200
PointerToRawData 0x6a1800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.88854

.tls

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x200
VirtualAddress 0x6c3000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata

MD5 8fdf82da2ee36106a9dde54dc8b2e68e
SHA1 da8336fc135d97ab421307d6b49ce3d41a07b27b
SHA256 1f0cf0f95d752e17f55a00d8882ef6773bbb693d722d9ab9cfb9a98a0d7c91e8
SHA3 157c7a706d0f04c3866f23a2578b1437dbc0b9ec5b30f912500b4dea063d2656
VirtualSize 0x28
VirtualAddress 0x6c4000
SizeOfRawData 0x200
PointerToRawData 0x6a1a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 0.194395

.reloc

MD5 7680c4270fb7f3b6b6f440b5859cb7bb
SHA1 eb7f119a9a2d24a3f347b37932873b6e02de7c7d
SHA256 5b470dcc61e2e3660207e716f82ec874b3415aab0c4b4232738b8c4acc0f83be
SHA3 4bd616e45ff3af45421b52907ce7206543d60d719dd77f944b821696d705cc3b
VirtualSize 0x40e80
VirtualAddress 0x6c5000
SizeOfRawData 0x41000
PointerToRawData 0x6a1c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.47852

.pdata

MD5 9a38e792e4f6c6091d159d6cdf0898ca
SHA1 72359e8a7c72fa35d2576c592c144b6fffebf59f
SHA256 93195156f1965ea4e222b2258d6b54eececec883d758043a4944c9397df252a7
SHA3 9f4995b8722a2d143e49fd7f7611773e6786d052ad28be7c20195423fc1e2c76
VirtualSize 0x45648
VirtualAddress 0x706000
SizeOfRawData 0x45800
PointerToRawData 0x6e2c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.43766

.rsrc

MD5 fce45cdc66b522f9ac768552bfadebb8
SHA1 8d11249a2df336400156b29ae510eb94630e149b
SHA256 e8d1cc9dfc1c54c5a799827acc276c50ad028e4cc622e3f783a9429dec9f4ad5
SHA3 c0eba597d4b6a5b53c788ca6b2ab2fb216b1bc1bd96933cd60d6fc262028f4f6
VirtualSize 0x12d2b2
VirtualAddress 0x74c000
SizeOfRawData 0x12d400
PointerToRawData 0x728400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.46105

Imports

oleaut32.dll SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32.dll RegQueryValueExW
RegOpenKeyExW
RegCloseKey
user32.dll MessageBoxA
CharNextW
LoadStringW
kernel32.dll Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
SetCurrentDirectoryW
GetCurrentDirectoryW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
kernel32.dll (#2) Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
SetCurrentDirectoryW
GetCurrentDirectoryW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
user32.dll (#2) MessageBoxA
CharNextW
LoadStringW
gdi32.dll UnrealizeObject
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWorldTransform
SetWindowOrgEx
SetWindowExtEx
SetWinMetaFileBits
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetMapMode
SetGraphicsMode
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyPolyline
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetViewportOrgEx
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetTextColor
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetCurrentObject
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExtCreateRegion
ExtCreatePen
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
Chord
BitBlt
ArcTo
Arc
AngleArc
AbortDoc
version.dll VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32.dll (#3) Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
SetCurrentDirectoryW
GetCurrentDirectoryW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
advapi32.dll (#2) RegQueryValueExW
RegOpenKeyExW
RegCloseKey
kernel32.dll (#4) Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
SetCurrentDirectoryW
GetCurrentDirectoryW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
oleaut32.dll (#2) SysFreeString
SysReAllocStringLen
SysAllocStringLen
oleaut32.dll (#3) SysFreeString
SysReAllocStringLen
SysAllocStringLen
ole32.dll OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoCreateInstance
CoUninitialize
CoInitialize
IsEqualGUID
comctl32.dll InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls
user32.dll (#3) MessageBoxA
CharNextW
LoadStringW
msvcrt.dll memset
memcpy
shell32.dll SHGetFileInfoW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
FindExecutableW
shell32.dll (#2) SHGetFileInfoW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
FindExecutableW
comdlg32.dll FindTextW
GetSaveFileNameW
GetOpenFileNameW
winspool.drv OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
winspool.drv (#2) OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
kernel32.dll (#5) Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
SetCurrentDirectoryW
GetCurrentDirectoryW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
winmm.dll timeGetTime
timeEndPeriod
timeBeginPeriod
wsock32.dll inet_ntoa
dnsapi.dll DnsFlushResolverCache
kernel32.dll (#6) Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
SetCurrentDirectoryW
GetCurrentDirectoryW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
kernel32.dll (delay-loaded) Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
SetCurrentDirectoryW
GetCurrentDirectoryW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle

Delayed Imports

Attributes 0x1
Name kernel32.dll
ModuleHandle 0x6c11a0
DelayImportAddressTable 0x6c1208
DelayImportNameTable 0x6c1408
BoundDelayImportTable 0x6c1608
UnloadDelayImportTable 0x6c17a8
TimeStamp 1970-Jan-01 00:00:00

dbkFCallWrapperAddr

Ordinal 1
Address 0x6a0f58

__dbk_fcall_wrapper

Ordinal 2
Address 0x17890

TMethodImplementationIntercept

Ordinal 3
Address 0x96540

AMAKRITS

Type VCLSTYLE
Language English - United States
Codepage UNKNOWN
Size 0xfbdc
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 7.94943
MD5 83e56b6b8fb432d7113ad8b3ff2a94b1
SHA1 b1c3092e972b38c745b2767c045949e6b3bf70d2
SHA256 465a24244058740efdd81ab9977d0dce83f3fa4dd79fa8d018e21f05241e7b3e
SHA3 d0f60e730515fd669feb61c195fd19353c4ba007bea02de07d227aa54893a0ec

AMETHYSTKAMRI

Type VCLSTYLE
Language English - United States
Codepage UNKNOWN
Size 0x12df4
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 7.9662
MD5 c41341836aa4de04022bba69be6a58d3
SHA1 3147d3a4fd53294804c9614601762a70b4630cec
SHA256 b894052c954c4176f7c5e019c773e31977560c3c4d02d80ea160e67911c945a0
SHA3 27dc3538902b2f3af3e64203dc4fe314a2417053375d51ff07a562fcedb24b13

AURIC

Type VCLSTYLE
Language English - United States
Codepage UNKNOWN
Size 0x108ec
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 7.95726
MD5 40153d1cb97567460b0dae79af24e0e9
SHA1 7db103d39766d762682030c46cb55dc83b1220cd
SHA256 8afe8d6cc101bc4c7da5c226c3b9908e38ee1035c68e4ec3cb43ffa683d82e0c
SHA3 f347fdde37bcf2ed13e771f8ab483533b6834c0510c7bc62e512c9fb4670aca6

CARBON

Type VCLSTYLE
Language English - United States
Codepage UNKNOWN
Size 0xc633
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 7.93173
MD5 13295209eb9923b442132780dd7bdd07
SHA1 bc81c2f880a1a09ca2429e75447a749af0062512
SHA256 9853ac08af495b8ccb15d1bd93564264da47435d763617c6710b0ba8d1152ec3
SHA3 c2d13aeebe3e6be61fd5b9eb84ee72bb665a680d48f8017cbd57d3592c28a433

GLOSSY

Type VCLSTYLE
Language English - United States
Codepage UNKNOWN
Size 0x1032c
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 7.95349
MD5 2ba9ae11d489c8201b1670699d617cbd
SHA1 faa15c07969a2374efb42944692b91991e302488
SHA256 d395a698224a233145a4cb057505f9719a1d0bb29ec60e258f5942e45fc7de75
SHA3 fd3b2f7086739f80c1e99b94102da273be8e80cd23e4e05dbb98523101f05ce7

LIGHT

Type VCLSTYLE
Language English - United States
Codepage UNKNOWN
Size 0x13448
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 7.9097
MD5 3e038fd979871e95ee8e2d8808cc27f6
SHA1 61dd9bbad8eb9efb744c408f38acd6674207c949
SHA256 8c0ac92cc229f941aa09a3db6e0602fb8dea7c97bf48a8762896b8ef86ca10ba
SHA3 504189a32f35d5d60c6b72bf6052dd601dbd4553fde49f8ba59ac98f04c5e805

LUNA

Type VCLSTYLE
Language English - United States
Codepage UNKNOWN
Size 0x1210a
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 7.96293
MD5 7cce3cc6f74d44a308877dbd8be93acc
SHA1 c15103afdb895a367949dc3dad9e616b8c3aecb5
SHA256 a419509cff5e30f654714ba8a37c92956eed1e9cd5b6a7496c66ea188ea865e9
SHA3 121443e88355ec26612a5800588dc239df855f9aaacdeca264251f0fa0c1c5fc

SAPPHIREKAMRI

Type VCLSTYLE
Language English - United States
Codepage UNKNOWN
Size 0x12e63
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 7.96788
MD5 8c70743b41981919c909410cf535efab
SHA1 3bbb0ce7a19b8d3f746a7a5d33cd4335393e36db
SHA256 21eede4f2480ff7df74ecfc9145290d0a442f66db4ad2f2ad5a81292f143bbd8
SHA3 6d6f998c736f3822faa6da6cacefb1a054184aa1e743c46af70fc2fa8860e104

SMOKEYQUARTZKAMRI

Type VCLSTYLE
Language English - United States
Codepage UNKNOWN
Size 0x12d01
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 7.96188
MD5 9dab2d993e72492791ee3f3970e9553f
SHA1 5cf185b4c5d8a8e53ff62c78773882d34ed0a750
SHA256 75590a8d3d0ddb722ce26864e14a5784bf0aa1f1e983941b19b17075fa59c38a
SHA3 ef2c23137080a42f97834c6769c4213a3b369d6896b9e760420707f34361725c

TABLETDARK

Type VCLSTYLE
Language English - United States
Codepage UNKNOWN
Size 0xa07f
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 7.92938
MD5 6015096cadbe4872a956ad8b42895397
SHA1 25ee564cc8b15eb4f04f1f250bd7b360326be400
SHA256 56dadad3e54e73b672c48786ada4e3604907532e91c79eafb7a6ae90c0e72f87
SHA3 6f4a7a11524970c76a24065518eefb5caca70738e5518d381f8fe2cca0678e30

TURQUOISEGRAY

Type VCLSTYLE
Language English - United States
Codepage UNKNOWN
Size 0xec9d
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 7.93881
MD5 d8cc827772704970e03da5537a48330c
SHA1 5884bcdd350db8c421492fc2264f74348f346b98
SHA256 e6847cd3835f6a39f2178ea1d5f956c25842e7e15dba296363e039e369720c76
SHA3 67dfb5de6f3fa690e7b5182bf07bcf8ca659b943c1b8da0b7417aca335f43de8

1

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.61679
MD5 c68fb06fd82eca9bfbf1ac7bd2c9140c
SHA1 ed6692f8bc77ea73fad92d754ede56781769ea23
SHA256 30df4ddb7d7ff020b05c161b16bafa7002c89871d8b05d132b9c06af0a21b693
SHA3 82c58a119e8e2a673482c184b659246eef0213f392df7af92269c62ff73d66a8

2

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.80231
MD5 2e87b3c111e3073a841775c1f8ec5a90
SHA1 20292304fa2ef1bfdc4a1000e90a1c16d4765a96
SHA256 ce19ace18e87b572e6912306776226af5b8e63959c61cde70a8ff05b3bbdcc41
SHA3 9527f09e739c2064835800a7e5c317cb422bdd7237f00fca079a1c62f58a2612

3

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.00046
MD5 a04c3c368cb37c07bd5f63e7e6841ebd
SHA1 699300bceaa1256818c43fecfc8cad93a59156b2
SHA256 ee1c9c194199c320c893b367602ccc7ee7270bd4395d029f727e097634f47f8c
SHA3 58722e3138aad1382e284c1605ecd665ced536de4906749ac8d6e11252cc9558

4

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.56318
MD5 9929115b21c2c59348058d4190392e75
SHA1 626fba1825d572ea441d36363307c9935de3c565
SHA256 9d9edf87ca203ecc60b246cc783d54218dd0ce77d3a025d0bafc580995a4abd8
SHA3 fea156e872544252c625076a6bf3baa733ee5b3d5399716e156734af7a841369

5

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.6949
MD5 f321ad13d1c3f35a05d67773b4bc27d6
SHA1 30aded8525417e2531d5eb88bf2f868172945baa
SHA256 99676c52310db365580965ea646ece86c62951bfd97ec0aae9f738a202a90593
SHA3 04c839da98a8c50a36697076af5bc6d527560a69153b2f718f065908fd4fe3ad

6

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.62527
MD5 5ca217e52bdc6f23b43c7b6a23171e6e
SHA1 d99dc22ec1b655a42c475431cc3259742d0957a4
SHA256 11726dcf1eebe23a1df5eb0ee2af39196b702eddd69083d646e4475335130b28
SHA3 b358d8a5b0f400dd2671956ec45486ae1035556837b5289df5f418fe69348b3f

7

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.91604
MD5 6be7031995bb891cb8a787b9052f6069
SHA1 487eb59fd083cf4df02ce59d9b079755077ba1b5
SHA256 6f938aab0a03120de4ef8b27aff6ba5146226c92a056a6f04e5ec8d513ce5f9d
SHA3 0f1c6c0378a3646c9fbf3678bbeeccf929d32192f02d1ea9d6ba0be5c769e6ab

8

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.6633
MD5 ff4e5862f26ea666373e5fab2bddfb11
SHA1 cfa13c0ab30f1bbd566900dee3631902f9b6451c
SHA256 b8e6fc93d423931acbddae3c27dd3c4eb2a394005d746951a971cb700e0ee510
SHA3 91dae12a9f43c5443e0661091a336f882fa1482f75fa9a57c9298d1d70c8ae69

BBABORT

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.92079
MD5 c987e709cafd3a191333610e4c44914d
SHA1 901e4db5d379a222dd416776633ca9738db32e14
SHA256 c0ede68a98bd2bc58c78564dfb42f1640dc29766d3ab2782ab8b5ed28c6fd414
SHA3 7b14efd89b642988834daf08c97db5bb847f941d75f44a3915e3e5dca2510c53
Preview

BBALL

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x1e4
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.16995
MD5 f8a9b4a8f4097cea6a482026484c4d12
SHA1 2057a63edce2cbb165512bfad326728cf1053d60
SHA256 46cfc44afa8ab31ae3da35fa8346e4c085c441659d9992b09fc8ad517f2b289a
SHA3 f3852a8bcb1b38f498231cca2b0427af6c4c52886f92f980968d40fd8e8c5337
Preview

BBCANCEL

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.92079
MD5 c987e709cafd3a191333610e4c44914d
SHA1 901e4db5d379a222dd416776633ca9738db32e14
SHA256 c0ede68a98bd2bc58c78564dfb42f1640dc29766d3ab2782ab8b5ed28c6fd414
SHA3 7b14efd89b642988834daf08c97db5bb847f941d75f44a3915e3e5dca2510c53
Preview

BBCLOSE

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.68492
MD5 6c2fba077bd332b3a48d6b5e43fe4a22
SHA1 e7d12e9fd5659881742773884db8ca537765dc81
SHA256 f8e1696801fe89b88936ac4226cea03bfa5aa345aa33ca982822ae7fbc6557e2
SHA3 39193ea4b2ffb32f16c75ca88ca20465a374cd928aac9b4b3ba5739bbb6222de
Preview

BBHELP

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.88085
MD5 1021657335ba4838db07f5231723df3b
SHA1 68f04f6ecbf628029e4e0061392029edec2b0e43
SHA256 cb7421b5c6af74c3159c361f3bb78bba8a488d8979d1250e106fa96cbf928789
SHA3 888ed4f8473561552d848c3d6624e2331c4ec7795bc5001237cb752b96e4929c
Preview

BBIGNORE

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.29718
MD5 098b5f6c87471f5a83a4e55a6a036d6c
SHA1 e16d9186ffa72cc3e373cdf8e40f9e570f0082e7
SHA256 41f05a4df5f42d92b879493d51941de342d36460fe15c0f3b63b2b706b928fef
SHA3 7939e94342a45e6742dbf7c93f5b42fb861ac81b1fe5e8e04e49c0421338b2cf
Preview

BBNO

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.58804
MD5 8832519641f28981f87e1b3006896eef
SHA1 916eaafcf9ffb12bfd6338419bdd22764778ebbd
SHA256 81265e63c89ee5c2e5126452e22f84e9be9452449f3e5959ab6d346cb58b2bde
SHA3 39743ce838b215420cbb732e107e4c45f63384dcdd5b830d15097fa06cf32cc2
Preview

BBOK

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.67459
MD5 4b349737af0b7e5a5308dff7b93b274b
SHA1 b3d36a94fa9a57ad7a68a3b30be92947e811e760
SHA256 6b97877cdd547e6ba6467f86055f1fc7b06660b034439f0da4c137538ef14a83
SHA3 b9e9646067eae58ad9aded92130651d090a92771bae94676003e9aba47f77cd6
Preview

BBRETRY

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.53344
MD5 7daf7522622a4fe823701fd2ff6f4996
SHA1 89f40bad3052afafbd71e80c07b928ec1aa7f4e5
SHA256 c925e4a8cbf6d42dbb1220a510614df725558f8d843338982bab8c4e020f6429
SHA3 95aa592de7b91edb5889cf5f9a7b042d3b6f6910bbd657ba85632f0d0ed557fb
Preview

BBYES

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.67459
MD5 4b349737af0b7e5a5308dff7b93b274b
SHA1 b3d36a94fa9a57ad7a68a3b30be92947e811e760
SHA256 6b97877cdd547e6ba6467f86055f1fc7b06660b034439f0da4c137538ef14a83
SHA3 b9e9646067eae58ad9aded92130651d090a92771bae94676003e9aba47f77cd6
Preview

CDROM

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.78825
MD5 6bb98462b4b00776fd17038cbf1fb4bd
SHA1 f40205d022d824e0b7d930151138991504af3dc6
SHA256 4f72c53f3bac49ce0b7c248152479a14e383a90c9fe95edbddec9f03784ca698
SHA3 2e951c0dc6c1e7540825793fbf48393c33a7156ba8a9ce6343a06323ef1716aa
Preview

CLOSEDFOLDER

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.01477
MD5 7a7f1740c64d8b5af56ef7611410255c
SHA1 df7641fd3a5588e182515b337dcbbd28f2de12ab
SHA256 d20c1e7cdff419e1efe08e1b91b4c0d772f7436de618045f7e0fdb3afb662849
SHA3 111928d2405474821d76f758f1ba2dfb15368f64bbfde0644c9ec7acc5f56c9f
Preview

CURRENTFOLDER

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.97986
MD5 53466cf475196c6a883514140b1253c1
SHA1 02f577f238ea87b3400ec0ced2315d53cddfc7d1
SHA256 0f5248f16fe2b1e73aa9be760a6f0bef933dc09e3cc6d8a8958eae1ce0bd0f97
SHA3 e38ae4779212d26cd9f3f9298910aa52dbbbce2527673aa9ada7de9deb1a817c
Preview

EXECUTABLE

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.96393
MD5 d623fd4c67881a744b9783e77cdaa9a3
SHA1 07fd1454decb874d847cb6e3a847391e3b03865a
SHA256 4a217ca811d9c29363ead1d67b7ffa0f6e8b8e1d1a068730f4f7d557c3710b44
SHA3 2aa8c8713c75f32e131b449444a6b570ee7be8da50c2f7e8a499cef693339e85
Preview

FLOPPY

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.63812
MD5 c3a2737f14f437f54cbf251782ae0a45
SHA1 e0a402c41f62804664b9d9cb9bae9615bf60f5ed
SHA256 2cb60d7d674640457497f54b82b42afaa8a2cbd7c28a1aae35f128b4471cfaaa
SHA3 eb1bb0ae168e1645292c6759be7ba322451b7035d87f01f8bf0f548290bb1830
Preview

HARD

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.62043
MD5 47957e26414e5a0cf93c9049b1a7f2a2
SHA1 08a70125bb3cf069d224c94dd4f4632b8f671a61
SHA256 a36fee3ac0a24b86169997e112d55de38ae2080815d2104c73bc90ad4eff5cbe
SHA3 59409ff1a314a69758371a1dafa7f175812eb3821240ff5b25b7b881b9d58deb
Preview

KNOWNFILE

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.83217
MD5 7a6c4028ea8bdbe916a592614cb67a33
SHA1 e84fa7f028b79b4c641a2d66ad1ad296b7e6a262
SHA256 d8444a0e4c91df51a151d4c64256e5d5f62a3e4a5b17ccb9778422f0e01223c3
SHA3 de4dcc10f2110aa3f30104c8ef6a447c8fb22789a236072e61e38d5e16d0e0c9
Preview

NETWORK

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.73457
MD5 30e739f7ed3dd033117260d97bb67e99
SHA1 b97adf513dd432cf039cd9425caf9b3241d7d233
SHA256 caf10784d936136cddde6b4489d7ffdc6098f8050a81c7e02d1ebdd9878cff15
SHA3 1511f9fa160bee36e6099269dade08d1a5709a22360ccbd4060fa6b54b8fb7d4
Preview

OPENFOLDER

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.0519
MD5 9b7d7f0031cfa6a137ff6436e59986fb
SHA1 20eb56f55581540919b119113b567bec618c3f95
SHA256 e086586402b8c51192766a01a37dd2f2b4b657bbd4d5b721f1eed692678f6ef6
SHA3 86a19763883baaae65d79b7e3c64525f16b942bd1187792bab8f56f7efaa2c56
Preview

RAM

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.73213
MD5 0ad765e61ab984673ce3db3a91fc6182
SHA1 2b67d4f1eec717c3aa2472db56ab4472c96b742f
SHA256 5bea8ae9edb158f767d478703ce5153b8773e1e0390fa2c4af83f063c6c2f1fa
SHA3 deda4d692b33e267292ba10effd899736e090a1af7f55028cdaa0ef850a85945
Preview

UNKNOWNFILE

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.50975
MD5 307c6180ecb5efadfc8d59bb7dc28a5c
SHA1 8cd2e11eefecccd0c1414ce2b548c4fa82621dd4
SHA256 6af26f85073e8fce3b9ab49acbde0b702f68ec078be72e8aeca66086947a885e
SHA3 3e2f18021c6974600d7e8fc8064bb225657e4aeb0e28b7fdae034c6e938e264f
Preview

1 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xd1b
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.62363
Detected Filetype PNG graphic file
MD5 d712cdd019164682460aa610a25e94a0
SHA1 74fd287c0dbcbfcbe51ac56460547fdf0f48be94
SHA256 887db83b49cd6730dde433fc370e5169d803ddcb8681ff67506c418a1a654083
SHA3 b9e6f7fada0da78fc7ba03c2ce6261c79c04981c6a37dbc224ac5fd60dde3929

2 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.28429
MD5 c06114c7790ac343ad7d7059b8be4f1f
SHA1 234fe6d7f3b09017d58d30fe3ee46411eefcf33f
SHA256 70ddfd36a1d2f1b8d646f00320512b44b0b3409ec68109960759e5a410d72774
SHA3 258fc27265ffabc68f68aeddae8e50ae740b8ded981f580fee278c1b3b2d439c

3 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.41657
MD5 be0664101b55eeba2569e4267ce246a4
SHA1 30041a3864146ffb9e59cee7a0966da3feabd397
SHA256 3d4f8b971480e9b1f9ad15b1789a3a973e074846364bce3905f4c23f59aa79b7
SHA3 48a377929f21af1aff86ab4e762edba2d1ad7b77b5b0910fc06e4ea423f7dfa9

4 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.68225
MD5 483da5fc9cd05910c09e55090ace5a24
SHA1 9746437099bcb569a162b7747106ce9ebde48f66
SHA256 21e999426ad29512936c7fe54e1129b75f7700d98c0f66362350e0d7419ab81e
SHA3 315d33eee4241772f4b0712da7e938866e7454512b8a6ecda465485cb4f731d9

5 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.86661
MD5 e0e28dfc157795741d8750eb14622e9d
SHA1 6add400bc6ce81819e76bbbeb91757c1f41df2bc
SHA256 23321463c95d55ffb990cad6eccd96c9b7149ecf11fe4400aee97e1d2ff5cdc0
SHA3 8bd39e63f40aa742d6b7f1725db4f9409ff4a7609ed7f2a4710abad4a85be897

6 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.13163
MD5 0400bc826457da7c34c1dd8c7e4c8b61
SHA1 c5e19c7ce5de3e3dda0564154fc0c64485dea58f
SHA256 5244df05eb0a93c9645447b4bd113f41bbe51608b57f0dbb544c842d086e0a7c
SHA3 01b7205601c47f62a9f65ee44ddee741c6d9a8cfd379b857528550c225b58de7

4066

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x754
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.28275
MD5 51c4c614655f3435add110f3c54a2fab
SHA1 ca393ac262f4fa56c300d422d1cc978a4da991f7
SHA256 8385747fb6ea1483a3c651c45ea4aff57748abe0497c0aa09cf3dcb2d1e1dead
SHA3 e372e3e06cfe3893449c5fb04d4c5441ab744406f1f0061e969287d92b8ac6ea

4067

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xa64
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.28969
MD5 a3a1886f46befca63e88ca18134beb67
SHA1 c46e0a24f4992632f23a4f5ba2a02bf53a95825e
SHA256 a731e3080d00ce4827267a0ba19a17f1534d2ce05e0b5423eb280e0ac740edab
SHA3 a6bcb9cbeae7169fc91d1532f2e5411017416b0326f9f54de2af3e0c7d0089ea

4068

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x1f0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.56146
MD5 82976ddd0315cbe38c84c241105c9f87
SHA1 bc136f8f0515271aa1b741c286b72cab942332d9
SHA256 8b10f3ca256f741ffc2459347076805aa55915f6c6274abdade84e2d83d82910
SHA3 6f29e4029669d36ea6999971347e35503decdeaa8ac1df2fc09188c3e91a1fb9

4069

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x290
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.58501
MD5 10ef6ed65af20fcd6c7480a2dbfc5eee
SHA1 6cf1045a4b92c497685ea73ef07260573ea35889
SHA256 9c5765770fa56778af97e7467e43d9f670155e5e460e8d23675cdcb75c1e4307
SHA3 42f1df62ecac750ba34b1c667ece7a40ce188579d972e0e15680c7d91be1c404

4070

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x498
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.2961
MD5 bd5a5d1fc6e0e595413d0dd6b6121275
SHA1 3d8e33ac0907dbdee575b402993cd72159a0395d
SHA256 4a7a2ac35d488cbdab386cea392c9928c82821d7da7c655a5cae1a7f58e4e369
SHA3 d978612b99723eabcbeb1df1e56f120385c568054a70139597dddd62cd063987

4071

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x504
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.3235
MD5 8e1e26f955b8530044671a252b7914b7
SHA1 6dcb66d3dde1aaaadc96eae31d89a2f016530763
SHA256 cecd613d8b493a273be1247e43d9f29b22bb42264e4f1c77424453e806f56072
SHA3 f87a0575e5e02ad9b5df4d5a10ac059107c4048db14e7ba1c1218d9f4dd05b4c

4072

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3ec
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.244
MD5 f5c774698f9a864b473b4e5a0a7a78b2
SHA1 0faddf312ca15d13de73c3cbb78e211d53079e41
SHA256 46120bcf4450b260bc44dcef25bb700f328e7561802947e6aba6b5847ddb3584
SHA3 246a6f7e45a2e4fdb0e9325cb5034c2b1c75a5ee8ff5e2a71f8ecfeefcff0cc7

4073

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2fc
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.3483
MD5 3e6d4a180dede9cd62b4fde92a632646
SHA1 14c05e7d317847f0fa85a890edcc723acea05c34
SHA256 2b27acc085e9c6c50a91fc1c85b6d6abcd6ef6915e43a1ddf89304d77086ae1b
SHA3 32bbc87c6f185be0c9536cc0b1aff2931a2baf5361b58b17274b57881a60b26e

4074

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x468
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.28317
MD5 23b1aae722c1af887163a397a1e76765
SHA1 4d9c8e444e73c52ff0f76c6fb0b449fe3c816058
SHA256 6474f0b886c5b36bd9221d42ee0073f75ed1b84e9101dba40216cdd08e5195ec
SHA3 e09144d91bc4282bfd9c11200831866e580a0371be60baf0c7517e18f0467742

4075

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xf4
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.58385
MD5 104978f5be574f0e47dec068e85f998e
SHA1 e612f4066d17709c812c99a867e0568fb24525f9
SHA256 70f8e4f91373706ef4471fa61d2fd82742dddf3866de030b038800f4445899a2
SHA3 5349ce94b54210658910779a486f50a4f5d145afb6bec4768af97f43afcda611

4076

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xcc
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.36858
MD5 1b5a115e708d11f3bc1af142043149bc
SHA1 d3b3327e8f8d0ac48c78fc043fa31d33748a3667
SHA256 c3c4943f0dc2fe246dfe076ed158ad5250d4c723605b275d8eb110b94581c4f0
SHA3 9e76b8e838cde49ea4102986fd4bef639ef220ecace8408b5e0f0e99375b09c1

4077

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2ec
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.29938
MD5 97cb7cdfc065f7445a1b850baa256c5d
SHA1 eb8efe93f7af78185edcb4127f1c781801e7b0b4
SHA256 a9298ff3791f6500263de5972fac7c274ee443d2ee999088d1feb50058bcee47
SHA3 dd2bdbdc39fadf243c1c794c882e190370772f154c5666d029c29510c2cfaf57

4078

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x254
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.3723
MD5 7885e651216df39407af403c052c39ff
SHA1 e014c6448205cb2e07e89d359b2aa8fa8e89b28d
SHA256 96e0bde63d6bb35b8bcfe472afbc667bb83ad4747b757f384a76a51bf9dd21e9
SHA3 52ebf48c103f42407c7e9c24de12c49c3f00ba0670a9a39d716916ce45afade3

4079

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x388
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.27797
MD5 f207fbd0df704d644fea0349081aa86b
SHA1 07e1bf482e3358af7185c66a87db3e0c21ab95ec
SHA256 d295da32b9554f32034e44c75c049e467d60236d5f78765ae6d931d31c299b22
SHA3 cc1a40270f031d7677d06113c4831040b4890b3712bc4ecfc1b494ca54bd49eb

4080

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3f4
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.30885
MD5 14fe18094bff43d10e2b35aac0cbf669
SHA1 2a5a8ee64d5c102388a70780f57ab6dc381693b5
SHA256 85e7db21f51167433a22941cfc90349db0918e700c4a3ab9f2aeb51140c880a4
SHA3 bd6c59aefa8f44bee99cfb39388d4516f57993411afbe4905fed1a04110562b2

4081

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x4c8
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.23052
MD5 3583cfd632feb651dbf2b19fd4aaa0d3
SHA1 c0b566d5e97bd3f97d880d419548043174fe8415
SHA256 94cb76e3870eeaaa328bf75c30682832e98e7dd302f1256b66d72ef3289eb0c9
SHA3 3c933322752aab24d2bbd4d13830766546e61c84f8305176977c301eed5d648a

4082

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x390
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.35277
MD5 d832874d167eec709b6f3ab46c692b37
SHA1 30e4da9a770673f7126255020ce72b482e8b44fb
SHA256 ec3650227c2d84afe4307af5379dd221f9a1059638fa4ce029e644a39dfee723
SHA3 c37bb65f2145c099b3a1c3d3fda90990244d6f25e78f4bd7831f49020fe411a0

4083

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3c0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.48635
MD5 6d8e815756821995e1c03ebdc599c105
SHA1 830faa7932844478e40144b978a167d5435628aa
SHA256 1eb3ab8a875cf3a87090c73e51f8292af5b2793909f4c5541ceabe4be0572ba3
SHA3 e7bf7c80152dfb22d6df15f8f6dc163d5e3e693a34e2d3294ba8b7cbde3fea11

4084

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x438
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.2859
MD5 85f267ff41f2df22d9294e2b75aeebff
SHA1 f23435bb045e3509e286c3dc30df8dc299263fee
SHA256 e0ce8d47057866be920b9f9bd32fc921fb537cc2930399f1761b1b7ea4abe23b
SHA3 73d17ac3705de2506470223ac14157932de4ea9da7ea3f85550d2f3142cef27a

4085

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x64c
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.2865
MD5 af977fdd7dc11b9576d78fa09e6bf383
SHA1 5750b0e14bcbea0c232fc3d9c39971af5da90567
SHA256 5065745cf0ad983ee593f7a5fbd9af08db0e93074dcda016523872ba0c310cf9
SHA3 32b028c67a32ebd6f2819da43053de2a5ff9ec9776ee27b0bcebaef66afb63ac

4086

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3e4
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.20982
MD5 f9bb72b22344f3fa9be891d309d3ad54
SHA1 c39f7812ea29f5f668555e5e3a39421447ce7d8e
SHA256 0930c2e7540a8b1f2e045cd8adffc40e75a747add3b2ef38498b2956eb11378e
SHA3 cc9947d1f47d3c9285f180a1219d87d4c50539699eafaffb6a6ebd8260c0af1b

4087

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x34c
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.35533
MD5 cbee30c83161475b4059cf10a1fad1f2
SHA1 8a1071b9f6f877c51627f4900523d5fe9484c78b
SHA256 0ff1466cb2ee9459854877495bc7fc9ea0b0e3c7622ecaaac121c1a1e2efebdc
SHA3 a029919b91887eb69fcb501c15c0e5bce79d41f6be53bfb8630148d214071733

4088

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x378
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.29434
MD5 095b48fa2f2511865d2cf005748af086
SHA1 e2b440cad52d7191d1022dced24171db1b5fb093
SHA256 32d9be427a56e7cce66d24f845cbffca073f95998661b611e1f1cb46490c3ada
SHA3 01d31a4b096316bf41f72d05e25959411eeca355b83dea95cd126f26a8db4581

4089

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3fc
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.33411
MD5 8b5afb7690e3baac102d41dd56ae867b
SHA1 276ba601d46a6ffd4e80e05c8a392fcd2e5bfd7a
SHA256 26a2965c6fbcbfc89c137a6954d8ce718c8eeef1cb52ceb831fdb03bab7eb599
SHA3 d1a3b3105dd798997719847e0439a5d96031d72f1ad7673cd0f8f40ce6892baf

4090

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xf4
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.2374
MD5 cd81617ad807ef03c4b746f37c0f2ce5
SHA1 7e7e44827ed4d206a8d5c129cd0ec0b61febe503
SHA256 8e2d5857957d20ec5aa11c8dc8cdbb172acf94657f075159d252350f6213290d
SHA3 9477595a61ad52d293373710aa8b30e2af42b821d083efae08e2dcbd08a49927

4091

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xc4
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.34269
MD5 62810907e7b23a396bd760ac66e05fff
SHA1 770c9eaee9795b7a88330d03f4237ea99fff17c1
SHA256 125ebf3d2ac46fce44b67cf20f794c2e00469b914797b7f0f4a4493ffee6f032
SHA3 9db19dd09d08b97172a4dba0186da341ed05b6d21741f42f88c0a4c70f44ef6e

4092

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x268
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.36509
MD5 28a4fd939e665abf56c6c90b82565581
SHA1 b38b26657b48bf4810da231f748fd331ef95335a
SHA256 a0cb00cfad7518f622b59dc841113ce2670d90810062a7548179e940b4e551b3
SHA3 a28d062d2b072c1f0199853f0ee5e4cbecc47e79940ff0ab18c9d0004c84f4ae

4093

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x434
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.32447
MD5 68303e64e30781029563b91abf90fcc5
SHA1 9315ab33dfb5e998e8b250b6d98601e120eb29b0
SHA256 509dadc9bfcae7562d3675bfa84145214b77c7c395f3b85b47c020345fabf504
SHA3 6d720919e3098b992279522a2cadc8970921c884562cddf6ddb8dd78ce867c5d

4094

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x360
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.3138
MD5 a0c9a7f73214d9f0580532653d081e3e
SHA1 87a95922ba27aaac672d5526dbee88491cbc1ebf
SHA256 8f6425dc0e2262e98a8b227c883fd0f14d7fd0ba249210a3536cd86ecc3e4a09
SHA3 649c62a4b09bcdae1fbe9d6be368def4ce9267ddc46114ea9f1ec7c395907480

4095

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2dc
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.30273
MD5 2296ca841f813b1d0507e8b5e92dd278
SHA1 8755bfe02084305bae93d96096b1c30ae9bc9660
SHA256 ec29aad9abf12a64725105f7b9bf251e5a4d52d7c6a0a6d233767fb86b2f50af
SHA3 8996c3c547fcf7ef441735886e550c57fbc94c7b68e8fb47c32399ac3b8e4b5b

4096

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x34c
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.208
MD5 d99214d24d564c862e61e56b6f9551be
SHA1 fe068fe3d0aea59b2d6f8fc9a4609a13f32a6a9d
SHA256 96db67f367a96edf31a4aaff9d9d686be242204cb719f5b69f2209b8daf17905
SHA3 be59d80926f9b917a7c70008a4f5b6c5acba97f0dea058b58047d5f13c580b34

DVCLAL

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x10
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 4
MD5 d8090aba7197fbf9c7e2631c750965a8
SHA1 04f73efb0801b18f6984b14cd057fb56519cd31b
SHA256 88d14cc6638af8a0836f6d868dfab60df92907a2d7becaefbbd7e007acb75610
SHA3 a5a67ad8166061d38fc75cfb2c227911de631166c6531a6664cd49cfb207e8bb

PACKAGEINFO

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xc80
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 5.36677
MD5 605851f23bde7c9e38d005a27e335e48
SHA1 961045d131d7b4116d49c4bce8a0b2d253135df8
SHA256 7dd1953b7bba41227dc708bc737ae7babcc699034b5d80a6b4400f4015f64542
SHA3 8756474b1cdf56c1c09b66056e48c4d6b8fc8b48a2c71241489ac7c6e5002bc5

PLATFORMTARGETS

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 1
MD5 598f4fe64aefab8f00bcbea4c9239abf
SHA1 688934845f22049cb14668832efa33d45013b6b9
SHA256 9b4fb24edd6d1d8830e272398263cdbf026b97392cc35387b991dc0248a628f9
SHA3 2951e8c89ecc8e8aa730f646caa10afd48f0be1353aaf5cc35815497dc6ba0db

TFORM1

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1fc
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 5.34187
MD5 b2c142c097dc8a3d99502ef657f84826
SHA1 445e3c1645997b6a5243ef714b496b78069d2769
SHA256 ff8a6592730513fe6142d2c554059f5d4e7dbc57d6e6ddf67d939a76b21c59b1
SHA3 225f2b777222db729ef98ea2911676825357637861225bb4e0149723a332b01a

TFORM10

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xcdd
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 7.23977
MD5 bd2835fa701bc63373eb048b7c3d945e
SHA1 dcb293d79cc9ca1208e8618c4f9f147336295f7b
SHA256 c0d14f1765af22435ec8d10338263803f934504523abd0c6e4825118de182b83
SHA3 30a372141f1f6a3ca9607c96e9caff0f0e2a5053ea0cec391a73a30f846c3a51

TFORM13

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x39b
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 5.41519
MD5 5244e757134f214f401755893323148e
SHA1 06c1357566f19931f105195cdde9e524cb3f4881
SHA256 295256e267492777739677794904a143622142b5727ef16bf6d785431e91fe12
SHA3 12b3ecba9775ca367608af1ae5a236e3580079ee490763c9e3a7f363466f1f70

TFORM15

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x251
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 5.36789
MD5 d62eb79cbc6fa46c421f9de9b99dc64a
SHA1 fe8ffb737058e6b88c965e12bd75cab3dc177e23
SHA256 05bac8694fa23fd509285d78945ea0381ab7ee28848865fda1d6645e1f6a014b
SHA3 390abd6b727cdfece74f7ae455d2f967592761aef9da0a7499e367f4c48fc28c

TFORM3

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xcb3
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 5.60286
MD5 74d17f7bc3eadf000bbcab78f8040f83
SHA1 ab87d235c27a84a6ce1f16ae342d26b491376125
SHA256 c2e8e47329470498f298d69f82b844f6253ee9c4e038c6f035b0e6eceac0913f
SHA3 63c89980584ac14aef467cea8657538f2dc884fbdf764fab4645e51bdffe17f5

TFORM4

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x48882
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 6.06388
MD5 4d7f28fc3fae2584c91795da8acf65b8
SHA1 bb3450ce82388d9d7ec4f107a073a253c8dbe3ed
SHA256 039457297c9b2b3b6184758ee6f23c834c206cc45832f5c22f8613a6fd6addb7
SHA3 6f87630eca18fd52dabee30643b424146467d891c7fdb8b29a7e20b93a1d657e

TFORM5

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x19d1
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 6.04894
MD5 dd242c824a8f7792f7b0ed8f58586fab
SHA1 fd87c37213777e1879ebb701578d23f71f23bc3c
SHA256 79dc6cdfd1550f8522b633a607f5efe2c77b3ee96784a6063ea7c3fe5baef907
SHA3 72c98cca8d10aa8fc7bdd024ba0e4e66f1309910eabf5ca74ac442fd66751464

TFORM7

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x8350
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 5.71862
MD5 81202769f2f7a060bb877a796d1a70f2
SHA1 77aec9494b4f21f1a4fbc80f6a75f961d2373f5b
SHA256 1416fb55bafb002a4db756ef6e85047292ed794a7d8eef4dec99a9cb452858e2
SHA3 3696ca8af1c6d7b654f60f1f421ece1a02480ae8b9761de9f98ad9e3461aa26f

TFORM8

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1ce0
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 5.45224
MD5 f17afc88b31bd2249c6d5849caa52fa4
SHA1 c036f7b3e6ac77b707add18f1524bc40c98ee7ee
SHA256 f963a22c44cd793e09d907d31b73abbd4faaab1b527bf8c123f0aac62b3dde09
SHA3 e8df9342f1cd0701331e2dfb81c69ff5cf54ce5d5a5cc2c2d1d354fbd37d04b6

CAT_DRAG_COPY

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 1.83876
Detected Filetype Cursor file
MD5 a2baa01ccdea3190e4998a54dbc202a4
SHA1 e8217df98038141ab4e449cb979b1c3bbea12da3
SHA256 c53efa8085835ba129c1909beaff8a67b45f50837707f22dfff0f24d8cd26710
SHA3 8874564c406835306368adf5e869422e1bb97109b97c1499caa8af219990e8dc
Preview

32761

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 b3dbdfe1835416bbc3f5065baca9aca9
SHA1 334d5af1355f6a13c35be4ad16e76baaecf209f1
SHA256 ec26c438d10e3e84ec855c47f07a176e6c11bbfae1557d526490711b80f087fe
SHA3 2409b439f48a139d3764b226eda46c6a629d5bd208991369ae0c85e37c17c71d
Preview

32762

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 1.91924
Detected Filetype Cursor file
MD5 aff0f5e372bd49ceb9f615b9a04c97df
SHA1 e3205724d7ee695f027ab5ea8d8e1a453aaad0dd
SHA256 b07e022f8ef0a8e5fd3f56986b2e5bf06df07054e9ea9177996b0a6c27d74d7c
SHA3 9cb042121a5269b80d18c3c5a94c0e453890686aedade960097752377dfa9712
Preview

32763

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 48e064acaba0088aa097b52394887587
SHA1 310b283d52aa218e77c0c08db694c970378b481d
SHA256 43f40dd5140804309a4c901ec3c85b54481316e67a6fe18beb9d5c0ce3a42c3a
SHA3 38753084b0ada40269914e80dbacf7656dc94764048bd5dff649b08b700f3ed5
Preview

32764

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 1ae28d964ba1a2b1b73cd813a32d4b40
SHA1 8883cd93b8ef7c15928177de37711f95f9e4cd22
SHA256 ff47a48c11c234903a7d625cb8b62101909f735ad84266c98dd4834549452c39
SHA3 a85dadd416ce2d22aa291c0794c45766a0613b853c6e3b884a2b05fc791427b8
Preview

32765

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 0893f6ba80d82936ebe7a8216546cd9a
SHA1 0754cbdf56c53de9ed7fbd47859d20b788c6f056
SHA256 a0adcedb82b57089f64e2857f97cefd6cf25f4d27eefc6648bda83fd5fef66bb
SHA3 ce6148ade08ef9b829f83cb13b4c650d9d4a7012bfd1ab697a7870a05f4104f8
Preview

32766

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 dcaa3c032fe97281b125d0d8f677c219
SHA1 58fe36409f932549e2f101515abee7a40cf47b2c
SHA256 6e1e7738a1b6373d8829f817915822ef415a1727bb5bb7cfe809e31b3c143ac5
SHA3 02ef292e1b4a70e439e362af6b4fa213e3816ade45222b78dabab712b6afba54
Preview

32767

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 a95c7c78d0a0b30b87e3c4976e473508
SHA1 b19f3999f1b302a2d28977cb18a3416c918d486c
SHA256 326c048595bbc72e3f989cb3b95fbf09dc83739ced3cb13eb6f03336f95d74f1
SHA3 8157b4e6afa7ed2e2ffc174d655bec9fb81db609e4c5864faa5ead931ff60689
Preview

MAINICON

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 2.8213
Detected Filetype Icon file
MD5 a6cc0f4b800e3caabc6271d087bdc359
SHA1 b19192f55ad4b829c4715d03be05a59daee837b9
SHA256 3e2f9a5226bde14751c2522b44ed893147ebfa45f9c60b4112d60cd80c08ea8d
SHA3 a7e1d313a748b8c62ed7fccb33054177510de39006e3f284ecc9fef9e7c3e4bc

1 (#3)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x1c4
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 3.27578
MD5 b722302691686b65903eed84a505b797
SHA1 cc90260d446604e50da8bd119a9a6ba1ccf549b3
SHA256 44093ef1c4c99e12d3432f6f7500736885935d43fcb6df0bd54d6b105d246375
SHA3 6a24f7348a56ebd19cec6dc83dd8fde1330c626898d29b16ca3a4ffeebdaf528

1 (#4)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x2ca
TimeDateStamp 2014-Dec-16 13:48:00
Entropy 4.86531
MD5 1faf6e210c6e58fa55cd2bc58522e96a
SHA1 0a6ab9b175cf7f6edfc4a6f42426b0fc68015fdb
SHA256 2dad263245cdc59156aee45019d5e98de12554f9b1b730aa8b9472e6d71fac4b
SHA3 7386a0530265548b2406c294cb459e00fa41c48e467aa446dcf258eb46a3a9fc

String Table contents

The chunks must be compatible to be assigned.
This "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.
This "Portable Network Graphics" image contains no data.
The program tried to add a existent critical chunk to the current image which is not allowed.
It's not allowed to add a new chunk because the current image is invalid.
The png image could not be loaded from the resource ID.
Some operation could not be performed because the system is out of resources. Close some windows and try again.
Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA)
This operation is not valid because the current image contains no valid header.
The new size provided for image resizing is invalid.
The "Portable Network Graphics" could not be created because invalid image type parameters have being provided.
Vietnamese (Windows)
Western European (ISO)
Western European (Windows)
GetCoding must be overridden in %s
This "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)
The "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corrupted
This "Portable Network Graphics" image is invalid because it has missing image parts.
Could not decompress the image because it contains invalid compressed data.
Description:
The "Portable Network Graphics" image contains an invalid palette.
The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it again
This "Portable Network Graphics" image is not supported or it might be invalid.
(IHDR chunk is not the first)
This "Portable Network Graphics" image is not supported because either its width or height exceeds the maximum size of 65535 pixels.
There is no such palette entry.
This "Portable Network Graphics" image contains an unknown critical part which could not be decoded.
This "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.
This "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.
Cyrillic (Windows)
Estonian (ISO)
Greek (ISO)
Greek (Windows)
Hebrew (ISO-Logical)
Hebrew (ISO-Visual)
Hebrew (Windows)
Japanese (JIS)
Korean
Korean (EUC)
Latin 9 (ISO)
Thai (Windows)
Turkish (ISO)
Turkish (Windows)
Unicode (UTF-7)
Unicode (UTF-8)
Line
Cannot create file "%s". %s
Cannot open file "%s". %s
Arabic (ISO)
Arabic (Windows)
Baltic (ISO)
Baltic (Windows)
Central European (ISO)
Central European (Windows)
Chinese Traditional (Big5)
Chinese Simplified (GB18030)
Chinese Simplified (GB2312)
Chinese Simplified (HZ)
Cyrillic (ISO)
Cyrillic (KOI8-R)
Cyrillic (KOI8-U)
Selected DOM Vendor does not support this property or method
Property or Method "%s" is not supported by DOM Vendor "%s"
Node cannot be null
Microsoft MSXML is not installed
No active document
Node "%s" not found
IDOMNode required
Attributes are not supported on this node type
Invalid node type
Mismatched paramaters to RegisterChildNodes
Element "%s" does not contain a single text node
DOM Implementation does not support IDOMParseOptions
ItemTag property is not initialized
Node is readonly
Refresh is only supported if the FileName or XML properties are set
FileName cannot be blank
OLE error %.8x
Method '%s' not supported by automation object
Variant does not reference an automation object
Dispatch methods do not support more than 64 parameters
Failed to clear tab control
Failed to delete tab at index %d
Failed to retrieve tab at index %d
Failed to get object at index %d
Failed to set tab "%s" at index %d
Failed to set object at index %d
MultiLine must be True when TabPosition is tpLeft or tpRight
Invalid owner
%d is an invalid PageIndex value. PageIndex must be between 0 and %d
This control requires version 4.70 or greater of COMCTL32.DLL
"%s" DOMImplementation already registered
No matching DOM Vendor: "%s"
Style '%s' already registered
Style class '%s' already registered
Style '%s' not found
Style class '%s' not found
Invalid style handle
Invalid style format
VCL Style File
Class '%s' is already registered for '%s'
Class '%s' is not registered for '%s'
%s parameter cannot be nil
A StyleHook class has not been registered for %s
Feature not supported by this style
Style '%s' is not registered
Cannot unregister the system style
Style not registered
Invalid bitmap pixel format, should be a 32 bit image
&Username
&Password
&Domain
Login
Error setting %s.Count
Listbox (%s) style must be virtual in order to set Count
No OnGetItem event handler assigned
"%s" is an invalid path
Cannot remove shell notification icon
PageControl must first be assigned
%s requires Windows Vista or later
Button%d
RadioButton%d
Caption cannot be empty
Unable to load style '%s'
Unable to load styles: %s
All
Unable to insert a line
Invalid clipboard format
Clipboard does not support Icons
Cannot open clipboard: %s
Text exceeds memo capacity
Operation not supported on selected printer
There is no default printer currently selected
Menu '%s' is already being used by another form
Docked control must have a name
Error removing control from dock tree
- Dock zone not found
- Dock zone has no control
Error loading dock zone from the stream. Expecting version %d, but found %d.
Length of value array must be >= length of prompt array
Prompt array must not be empty
Space
PgUp
PgDn
End
Home
Left
Up
Right
Down
Ins
Del
Shift+
Ctrl+
Alt+
Value must be between %d and %d
All files (*.*)|*.*
&Yes
&No
OK
Cancel
&Help
&Abort
&Retry
&Ignore
&All
N&o to All
Yes to &All
&Close
BkSp
Tab
Esc
Enter
Enhanced Metafiles
Icons
Bitmaps
TIFF Images
Grid too large for operation
Too many rows or columns deleted
Grid index out of range
Fixed column count must be less than column count
Fixed row count must be less than row count
Cannot insert or delete rows from grid
Invalid input value
Invalid input value. Use escape key to abandon changes
Warning
Error
Information
Confirm
GroupIndex cannot be less than a previous menu item's GroupIndex
Cannot create form. No MDI forms are currently active
Can only modify an image if it contains a bitmap
A control cannot have itself as its parent
OK
Cancel
&Yes
&No
&Help
&Close
&Ignore
&Retry
Abort
&All
Cannot drag a form
Metafiles
Control '%s' has no parent window
Parent given is not a parent of '%s'
Cannot hide an MDI Child Form
Cannot change Visible in OnShow or OnHide
Cannot make a visible window modal
Scrollbar property out of range
%s property out of range
Menu index out of range
Menu inserted twice
Sub-menu is not in menu
Not enough timers available
Printer is not currently printing
Printing in progress
Printer index out of range
Printer selected is not valid
%s on %s
Cannot change the size of an icon
Cannot change the size of a WIC Image
Unknown picture file extension (.%s)
Unsupported clipboard format
Out of system resources
Canvas does not allow drawing
Text format flag '%s' not supported
Invalid image size
Invalid ImageList
Unable to Replace Image
Invalid ImageList Index
Failed to read ImageList data from stream
Failed to write ImageList data to stream
Error creating window device context
Error creating window class
Cannot focus a disabled or invisible window
Cannot have multiple single cast observers added to the observers collection
The object does not implement the observer interface
No single cast observer with ID %d was added to the observer collection
No multi cast observer with ID %d was added to the observer collection
Observer is not available
Invalid date string: %s
Invalid time string: %s
Invalid time Offset string: %s
Tab position incompatible with current tab style
Tab style incompatible with current tab position
Bitmap image is not valid
Icon image is not valid
Metafile is not valid
Invalid pixel format
Invalid image
Scan line index out of range
Windows Server 2008 R2
Windows 2000
Windows XP
Windows Server 2003
Windows Server 2003 R2
Windows Server 2012
Windows Server 2012 R2
Windows 8
Windows 8.1
%s interface is not supported on this OS version
Could not initialize taskbar. Error: %d
Windows taskbar only supports %d buttons on preview tabs
Could not register tab. Error %d
Failed to set bitmap as thumbnail preview. Error: %d
Failed to set bitmap as preview. Error: %d
Observer is not supported
Item not found
Duplicates not allowed
Insufficient RTTI available to support this operation
Parameter count mismatch
Parameter count exceeded
Type '%s' is not declared in the interface section of a unit
VAR and OUT arguments must match parameter type exactly
Specified Login Credential Service not found
%s (Version %d.%d, Build %d, %5:s)
%s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s)
32-bit Edition
64-bit Edition
Windows
Windows Vista
Windows Server 2008
Windows 7
Length of Strings and Objects arrays must be equal
Invalid Timeout value: %s
Timespan too long
The duration cannot be returned because the absolute value exceeds the value of TTimeSpan.MaxValue
Value cannot be NaN
Negating the minimum value of a Timespan is invalid
Invalid Timespan format
Timespan element too long
No context-sensitive help installed
No help found for context %d
Unable to open Index
Unable to open Search
Unable to find a Table of Contents
No topic-based help system installed
No help found for %s
Argument out of range
Cannot call SetReturnValue on an externally create thread
Parameter %s cannot be nil
Parameter %s cannot be a negative value
Input buffer exceeded for %s = %d, %s = %d
Invalid characters in path
Invalid characters in search pattern
The specified path is too long
The specified path was not found
The path format is not supported
The drive cannot be found
The specified file was not found
No help viewer that supports filters
String index out of range (%d). Must be >= %d and <= %d
Invalid UTF32 character value. Must be >= 0 and <= $10FFFF, excluding surrogate pair ranges
High surrogate char without a following low surrogate char at index: %d. Check that the string is encoded properly
Low surrogate char without a preceding high surrogate char at index: %d. Check that the string is encoded properly
Failed to set data for '%s'
Resource %s not found
%s.Seek not implemented
Operation not allowed on sorted list
String expected
%s expected
%s not in a class registration group
Property %s does not exist
Stream write error
Error setting stream size
Thread creation error: %s
Thread Error: %s (%d)
Cannot terminate an externally created thread
Cannot wait for an externally created thread
Cannot call Start on a running or suspended thread
Cannot call CheckTerminated on an externally created thread
Invalid data type for '%s'
Invalid string constant
Line too long
List capacity out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d)
Out of memory while expanding memory stream
%s has not been registered as a COM class
Number expected
ANSI or UTF8 encoding expected
%s on line %d
Error reading %s%s%s: %s
Stream read error
Property is read-only
Failed to create key %s
Failed to get data for '%s'
A class named %s already exists
List does not allow duplicates ($0%x)
A component named %s already exists
String list does not allow duplicates
Cannot create file "%s". %s
Cannot open file "%s". %s
Identifier expected
Unable to write to %s
Invalid binary value
Invalid file name - %s
Invalid stream format
'%s' is an invalid mask at (%d)
''%s'' is not a valid component name
Invalid property value
Invalid property path
Invalid property value
Invalid source array
Invalid destination array
Character index out of bounds (%d)
Start index out of bounds (%d)
Invalid count (%d)
Invalid destination index (%d)
Invalid code page
Invalid encoding name
No mapping for the Unicode character exists in the target multi-byte code page
Ancestor for '%s' not found
Cannot assign a %s to a %s
Bits index out of range
Can't write to a read-only resource stream
''%s'' expected
CheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
December
Sun
Mon
Tue
Wed
Thu
Fri
Sat
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
Unable to create directory
Aug
Sep
Oct
Nov
Dec
January
February
March
April
May
June
July
August
September
October
November
Object lock not owned
Monitor support function not initialized
Feature not implemented
Method called on disposed object
%s (%s, line %d)
Abstract Error
Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
%s%s
A call to an OS function failed
Jan
Feb
Mar
Apr
May
Jun
Jul
Invalid variant operation (%s%.8x)
%s
Custom variant type (%s%.4x) is out of range
Custom variant type (%s%.4x) already used by %s
Custom variant type (%s%.4x) is not usable
Too many custom variant types have been registered
Could not convert variant of type (%s) into type (%s)
Overflow while converting variant of type (%s) into type (%s)
Variant overflow
Invalid argument
Invalid variant type
Operation not supported
Unexpected variant error
External exception %x
Assertion failed
Interface not supported
Exception in safecall method
Exception %s in module %s at %p.
%s%s
Application Error
Format '%s' invalid or incompatible with argument
No argument for format '%s'
Variant method calls not supported
Read
Write
Execution
Invalid access
Format string too long
Error creating variant or safe array
Variant or safe array index out of bounds
Variant or safe array is locked
Invalid variant type conversion
Invalid variant operation
Invalid NULL variant operation
Disk full
Invalid numeric input
Division by zero
Range check error
Integer overflow
Invalid floating point operation
Floating point division by zero
Floating point overflow
Floating point underflow
Invalid pointer operation
Invalid class typecast
Access violation at address %p. %s of address %p
Access violation
Stack overflow
Control-C hit
Privileged instruction
<unknown>
'%s' is not a valid integer value
'%s' is not a valid floating point value
'%s' is not a valid date
'%s' is not a valid time
'%s' is not a valid date and time
'%d.%d' is not a valid timestamp
'%s' is not a valid GUID value
'%s' is not a valid boolean value
Invalid argument to time encode
Invalid argument to date encode
Out of memory
I/O error %d
Too many open files
File access denied
Read beyond end of file

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 5.3.8.0
ProductVersion 5.3.8.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName Maksim Arhipov
FileVersion (#2) 5.3.8.0
ProductName Open Server Panel
ProductVersion (#2) 5.3.8.0
Resource LangID English - United States

TLS Callbacks

StartAddressOfRawData 0xac3000
EndAddressOfRawData 0xac3200
AddressOfIndex 0xa2a9fc
AddressOfCallbacks 0xac4020
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks (EMPTY)

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0! [*] Warning: Section .tls has a size of 0!
<-- -->