690fc60b467c4e48a2a11eb359d80dc0

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2020-Sep-19 10:29:08
Detected languages English - United States
Farsi - Iran
Comments acrobat xi 10
CompanyName Pars Rayaneh
ProductName PrjOfficeAutomation
FileVersion 99.526.0008
ProductVersion 99.526.0008
InternalName سيستم اتوماسيون اداري
OriginalFilename سيستم اتوماسيون اداري.exe

Plugin Output

Info Matching compiler(s): Microsoft Visual Basic v5.0/v6.0
Microsoft Visual Basic v5.0 - v6.0
Info Interesting strings found in the binary: Contains domain names:
  • adobe.com
  • http://ns.adobe.com
  • http://ns.adobe.com/exif/1.0/
  • http://ns.adobe.com/iX/1.0/'
  • http://ns.adobe.com/photoshop/1.0/
  • http://ns.adobe.com/tiff/1.0/
  • http://ns.adobe.com/xap/1.0/
  • http://ns.adobe.com/xap/1.0/mm/
  • http://ns.adobe.com/xap/1.0/mm/'
  • http://ns.adobe.com/xap/1.0/rights/
  • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
  • http://ns.adobe.com/xap/1.0/sType/ResourceRef#
  • http://purl.org
  • http://www.iec.ch
  • http://www.w3.org
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#'
  • ns.adobe.com
  • www.iec.ch
  • www.w3.org
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 690fc60b467c4e48a2a11eb359d80dc0
SHA1 65f0eb7e3b02163ec96787182bed79c8aa8afeb7
SHA256 bdb150be49816a02ec2d8324df3fa3c4fcf5e2c529b0e95755a908c7763d1d8e
SHA3 6150106896f9136f0fe35e2a882ff101f8771ddec229b6d4883b9a434dbb82a1
SSDeep 24576:4xfwLfUZeRm1C4ff27IDkwsyVXFToStXIms01VZenVxXAt:RLZp7IDkwFV+St4mJVcVxXAt
Imports Hash f32c8b77c7954b54aedcbba83f0878fa

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xc0

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2020-Sep-19 10:29:08
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 6.526
SizeOfCode 0x396000
SizeOfInitializedData 0x1e000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00005B38 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x397000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x1000
OperatingSystemVersion 4.0
ImageVersion 63.20E
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x3b5000
SizeOfHeaders 0x1000
Checksum 0x3a82f0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 8f2836a712093ea47971586b93875d18
SHA1 7fae05853c154f7ed780b9eadffa453f6cce4c93
SHA256 7f99c3d624bd63619157539b7b1468676c47c0470a7737da4b0e4acb3768b219
SHA3 f9b15ea6e23bffa3b1f254be6fdde25f8b0004d47e5ede5edc6cc7ab6a234aef
VirtualSize 0x395dfc
VirtualAddress 0x1000
SizeOfRawData 0x396000
PointerToRawData 0x1000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.6184

.data

MD5 620f0b67a91f7f74151bc5be745b7110
SHA1 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d
SHA256 ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7
SHA3 a99f9ed58079237f7f0275887f0c03a0c9d7d8de4443842297fceea67e423563
VirtualSize 0x13494
VirtualAddress 0x397000
SizeOfRawData 0x1000
PointerToRawData 0x397000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 3bace5587df41bdbdda5b922a3ece6f5
SHA1 00fa851bfa85738a1e6f23abebd1135267b9dda0
SHA256 f3a82546596dcdb422355a3fa1720b5b2f770978972402a49e05127dfce11614
SHA3 433d42aff17575ea47d7ac3c74650e747fbd23f68644e1205529f436df8c16d4
VirtualSize 0x9414
VirtualAddress 0x3ab000
SizeOfRawData 0xa000
PointerToRawData 0x398000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.49615

Imports

MSVBVM60.DLL EVENT_SINK_GetIDsOfNames
__vbaVarSub
__vbaVarTstGt
__vbaStrI2
#690
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaFreeVar
#588
__vbaLateIdCall
__vbaLenBstr
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaFreeObjList
#516
_adj_fprem1
__vbaForEachCollAd
__vbaVarCmpNe
__vbaStrCat
#660
__vbaSetSystemError
#662
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaAryDestruct
#591
__vbaVarIndexLoadRefLock
__vbaLateMemSt
__vbaVarForInit
__vbaExitProc
__vbaForEachCollObj
#300
#595
__vbaOnError
__vbaObjSet
#302
_adj_fdiv_m16i
#303
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
#598
#305
__vbaFpR4
#599
#306
__vbaBoolVar
#520
#308
#309
__vbaBoolVarNull
__vbaRefVarAry
__vbaVarTstLt
__vbaFpR8
_CIsin
#709
__vbaLateMemStAd
__vbaVarCmpGt
#632
__vbaNextEachCollObj
__vbaChkstk
#526
EVENT_SINK_AddRef
#528
__vbaGenerateBoundsError
__vbaExitEachColl
#529
__vbaStrCmp
__vbaVarTstEq
__vbaR4Str
#560
__vbaDateR8
__vbaObjVar
__vbaI2I4
DllFunctionCall
__vbaVarLateMemSt
__vbaVarOr
__vbaCastObjVar
__vbaStrR4
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaStrR8
__vbaRedim
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
__vbaLateIdCallSt
__vbaVarAnd
__vbaObjIs
#311
EVENT_SINK_QueryInterface
__vbaExceptHandler
#711
#313
#712
__vbaStrToUnicode
#606
_adj_fprem
_adj_fdivr_m64
#607
__vbaI2Str
__vbaLateIdStAd
#608
#317
#531
#716
__vbaFPException
#318
__vbaInStrVar
#319
__vbaUbound
__vbaStrVarVal
__vbaVarCat
__vbaDateVar
__vbaCheckType
__vbaI2Var
#537
#645
_CIlog
__vbaErrorOverflow
__vbaVarLateMemCallLdRf
__vbaR8Str
__vbaInStr
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarSetObj
#573
__vbaStrCopy
__vbaI4Str
#681
#575
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
#578
#685
#100
__vbaVarTstNe
__vbaI4Var
__vbaVarCmpEq
#689
#610
#611
__vbaLateMemCall
__vbaVarAdd
#320
#612
__vbaVarDup
__vbaFreeVarg
__vbaStrToAnsi
#321
__vbaVerifyVarObj
__vbaFpI2
__vbaVarCopy
__vbaVarLateMemCallLd
__vbaVarTstGe
__vbaFpI4
#616
#617
__vbaVarSetObjAddref
__vbaLateMemCallLd
_CIatan
__vbaAryCopy
#618
__vbaStrMove
__vbaCastObj
__vbaStrVarCopy
#619
_allmul
__vbaLateIdSt
_CItan
__vbaNextEachCollAd
#546
__vbaUI1Var
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaFreeStr
__vbaFreeObj
#581

Delayed Imports

1

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 5.54295
MD5 e8c38f25f5582dd896d115b84952d387
SHA1 71814e77ced04d9489b60e3444d7e93a95088b98
SHA256 feab59edb7ebbce04093c9c8b9a5a4a0d8e594d5d4c955c983ec7643ae42183b
SHA3 d2f3086643c7cef7bbe4c839e7f3470f202b45d4f3112af974aa9e0adc454261

2

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 4.78462
MD5 b333fff790a30b67ed9042d68d233ecc
SHA1 e76a60d915d8d95d97116d4588594fa0bf2ce352
SHA256 4a46da2433531d6d09946363482a49675c36f84988241cec678cfba14318b9a1
SHA3 b61cd36fbe6fae0828eeb3e61e42fd31a5bda18fb1fdbd4e6334c904f57332d5

3

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 6.10002
MD5 41915946b317bdaea25a836df2b160fc
SHA1 39afa48f40e8c70ff039c6c12dda5c4ce4a4f727
SHA256 b6811611ad5f08dce51c7e52038e16ddfb57d856776fafc63ebdc508f5b79f37
SHA3 5fee2a62048b71aae88a029d2df2281294c620352f5edc30e909d82c71598952

4

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 4.90775
MD5 92bb803f253d99e18768a2f05ceea923
SHA1 2fb9c9ce7dddf7c565a62f4c8d604f0d3e10f6ec
SHA256 fa55491829f0555c29147194f22eb5671b826e8ae8d4320bc0e32cc0d8710916
SHA3 0e6aef203c96fa5e25c071d9c6b0ad841f33b26253f9f5260d10f56e2f902cc2

5

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 5.34871
MD5 d0f361019dc35d86ad398fc82a38f9c2
SHA1 6e50ce9b6c4e2572054503b0e66ff9f6c0d21974
SHA256 902322c3c72c82ff7795f8d219c69577d3f3ce4ec885f59d0ef8cf8725748562
SHA3 65841733225124da2815ae3262f4654a868d3a8719a838e990f830a54217fcd0

6

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 5.97599
MD5 02e37fb6ab829e1fc2d4f4a2c07e4c5b
SHA1 c49bb2a9c0b07d156e28c1271b47b7f7981cde45
SHA256 c37fda85e54fd19ff4a0f8f5a76fc2ad98271940df81f46b1be50666d1474ce1
SHA3 3ffe0211fb9dc6a25a86dbae715285835876282d4e06a06cc9ef48aa6ae027b5

7

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 6.44531
MD5 5f125ee6aab7f6ba4bc166adfa736318
SHA1 eed1859550e6c0d3dcb3136a1ef8446b57fb0fac
SHA256 67cc6f7dc97227d8909b74b55e11c55865b8b8b886b132203ec9898761a801fa
SHA3 6e9b3530d0d31267e32112426f459abc4f61a292d5efef71121ec0fd1119e8a6

8

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 5.83859
MD5 645d26f257be149b094f49c9859b22eb
SHA1 a6398661f5e081e1be442df1e148fb904fe1c150
SHA256 ee9ba688bd7ed6116bd5e4310ffc751176e20e2e98ea482e5f227ed0a4bbc2c2
SHA3 7b331de3557d9d946e3c27e37206058b6fa1f6322cf0a4b2899b4f4d20113d90

9

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 6.24653
MD5 63a1559fa6ee74ae3a4d9c38dd949b8d
SHA1 91d47b6b9d0cf6e7d7f180a24065902adf6e8ea4
SHA256 37c68d57ac89626010a4f46c5f720b562d8eb60015db596dc65570a3cb655f9e
SHA3 02fb8d6b276557c5ac4c7799ac01dacde4507fd78752eaf68bb278c2f7c9116b

10

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 4.79202
MD5 651f470e8b0e9ccce65c4b7a3a6e8d7f
SHA1 996bd185918c0ce811a1844e183a9ca857fdec56
SHA256 faad907b28b9c8f32167e7237fb37c4de8ee891061130de2f546089e02006bda
SHA3 3722b01c6d5caa0a1e468ba88ec699795bbd51b67113049f52e95283b30dacc7

11

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 5.79081
MD5 55ba1751eeb8df7eb8d4007ebaab4b7b
SHA1 d6c2f1d6111e3144dde933f7d24f430e724e3f75
SHA256 b6941bc716ccb2bc131ae851fba3d73f079d194e38d23d571e61425c2a6cb715
SHA3 8d1b4704c309b2d1eb0e188fcc676b862b1225ca307d6a4f484f76181dcac1d7

12

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 6.34147
MD5 bfe8f11065c40f560ce21bec58a1b7c0
SHA1 14ba193de87dbe3eef483f490d4699660218f770
SHA256 22ad69d71b3489a82f50c48a9b5c9974e8c1225d1a8ced61f917083aa13cda00
SHA3 f4bbd270bcc9438c2528b6b4a0e6e97adec27bf20c2825cc74da110b31cd705f

13

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 6.14041
MD5 ef74d13da8cd01ebf8f256fb54e4541c
SHA1 837b202c5d4167a213261070537a264d861e2b59
SHA256 cfd620d02f17d82a1cd406cfc678170bc8231f96d07f884fabc51760f53fc191
SHA3 cedc8deefeb54bdf5fc71d245b06779ff8a284aef54b00e7462e4ac1969a2bd1

14

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 5.58204
MD5 7c7cc27d2225db9ce1db83289a29e06e
SHA1 96bf4cc0dd570e9aeb73dae5460fa381b0d2056a
SHA256 8b508a412a2005dac969e11c2692c989e1496a874c3256ce6fae88f8f54cf9e6
SHA3 898d044a2647176ba7d0190873171a7447800f1a4e3d67233e31e4ca8770c78c

15

Type RT_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x8a8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 4.22252
MD5 eb44e9433a8592dacaab831002fd0fe7
SHA1 2faf80ebe8673fc0c798a3b423dd6f5e9a384d91
SHA256 2f5a95752492bad66bf14597d3529b1a3633c0d97b9d2be46a863533b59bce56
SHA3 4aab4caf90c676b2a50390ae1259d0d3814866493ebce975c25a9b2c1d696d60

30001

Type RT_ICON
Language UNKNOWN
Codepage Unicode (UTF 16LE)
Size 0x130
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.57965
MD5 a20d09bee9b4207ad5a3b67a78c1dce3
SHA1 ca85fbf532389887f3837bbadd1c579040b99c8b
SHA256 2d3915cdc82e909357d44c4de1b8890bd753605c28df11b10299e3fd09d930b9
SHA3 e3b2b0325b24bb74af126af0863b39a6e63c08820f69cf0ae582a31bfc1052db

30002

Type RT_ICON
Language UNKNOWN
Codepage Unicode (UTF 16LE)
Size 0x2e8
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 1.76987
MD5 24799ca590d42134e7103b06d46fd960
SHA1 4af9a0fe3b7371abc50a18e851f3122fce9a2ffa
SHA256 a32e750bc1b0315530097434a7e1d324b843e1f5ffd95238b49d3a8aa8e6fe09
SHA3 9a17698629ef5e7a1c567a9669be74aa2c9d8356ecfba40c48811e4dcf5ea875

30003

Type RT_ICON
Language UNKNOWN
Codepage Unicode (UTF 16LE)
Size 0x128
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.07177
MD5 e6c5053ba1c848d7e16701a2d08fb8c6
SHA1 f253482c0fa25197130f6475f2ded060527843bf
SHA256 46dc088910439dad6a0d69da5e64227d04a640845fd1c31e90a7d4340c539fe0
SHA3 1e6c369197dd1a466ea87357db49ec559ecf82c0c3fa13af1a383445945861e6

101

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 ace59502a9166f0998c70311432fdc2c
SHA1 d4c1efb0f0d7f1d6ae5999bc6240883d2ebe8620
SHA256 6b8ce690446b220d16a98b3e9be382b49e2f329fbd79653b5b30544d502128bd
SHA3 6b3f2ae70a60b71a70ed3c3a345306b9381f2f30d3f18b8d53db4a977b6f1901

INPUTARCHIVECLASS

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 355e8f958352958da1c652a4922ac5f1
SHA1 d2c11f63c1b11f9d92bde3efac55564ffba8fc28
SHA256 0904e9a1633cc361fc29fb1e0b19cec50506f0d0818061062f41c844d03c1c08
SHA3 0943528e02c1d55e3f273284b918d6b1eb31e6ab63dbb953b31f4a853985468f

INPUTLETTERINFO

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 62e9f901491ad8ed15a4da20062726b8
SHA1 0c5d3f11d8b92bce091ed9102122a28f8d96a31d
SHA256 fa43581593c961ad14e74886df40e744648aeb9feb394820c216484af582a657
SHA3 96f6566f0df49fc1775dbf49ae0edb77c676ed67c7e877ac906a2e9a052ecedb

INPUTLETTERINFOINOUT

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 1.91924
Detected Filetype Icon file
MD5 1549770227648af64211c945b3821675
SHA1 01182707fcdbeeb9fd165b58be758dc5965533d1
SHA256 d668bdb6c221c4f8695118e7c6398fdd5dbc7efc9d33e98a47af6514170cdcaf
SHA3 87bff2ed1a62f1cfdd3449c7fb6bce0950a6ccaf786ed52cca4410946ae157ae

INPUTLETTEROUT

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 44777fa3e71de8db5ece43fbdbadfbf5
SHA1 ce60016af7fc8639f5729614189a403103f20b2f
SHA256 c7959b3d82de80a39f35fd39d2342000f31ac2f4b97564e743e1b685ebd89b2b
SHA3 30845ffab5ddc9688d2a43169a225a8efef0c8c4090bca43fa6620aa5ccfb203

INPUTSENDER

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 2a823e490762cff49980851a6a4f676b
SHA1 72ef0b11ff150fae3d9351a9a18601a3c1f63e50
SHA256 8ae5accf03db54faf0bde317dbb280c794c76e046b73356d57d27aecdfef28d9
SHA3 d9f19a757dca733f5dd5e8abaf1f2fca58e5919f4fb916291e411ecbd18619b4

INPUTSESSIONINFO

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 c46c250c4a1d4f65f21cb335e961ffdb
SHA1 a97c50a85b690f1fc73ee85ca29c4f413ff3bbd3
SHA256 955c7156f73a67c807fb415f947a7e360825b8eba87987468cadd7fb5efb9be4
SHA3 6e5d6074ec2b4183d0277e37a9f520ff71e2c3d135718ef5c0a1f82f6abea1d6

REPORTARCHIVECLASS

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 6070ef92454cc247045b111434313885
SHA1 9024e89a727621f1fe97ded3cad3414831da3def
SHA256 1a7f51a5805743cb8b8f3d64d2bc1e0f5c55b9b858850d8f2d1520bb4476db0d
SHA3 def315dfb6e23938951ca8e5c4f672e1c86fc1724af42d5cb5555fb94b1ca8f5

REPORTLETTERINFO

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 fd0597e4995d39b58009013d9791c028
SHA1 f1495fd59d7cfc561527b23bc28fabf7223bc813
SHA256 02ae347ec6586d8266deb2b0235c08868098d1a20a6eeb00134008205e8a4ca4
SHA3 c80ceeab4f8366bc7bddbb9bce5a7e55134b3b815f98e3d12f0f41ed199982fa

REPORTLETTERINFOIN

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 9502a405c4231dde073dfea6dc170b29
SHA1 f366889aa400b5389fbb964815c048ebb2a9d8e0
SHA256 2bccb7aebbf7140800d6ef9608b99ebaf470a6ca903ee7ac8b5767bf0b021e2e
SHA3 56674ae39d388180ec6c7558f67d56c55207ff9641779e733f1c3a6eecbbbb72

REPORTLETTERINFOOUT

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 1f87d232c4392a0ac65b2a20e95b3ff8
SHA1 476163ba116580803cf7089d24f86e239ddce05f
SHA256 ba2039dbfdf406a52759ead63d681d53613e2ecb090409226162d6058c84b93f
SHA3 30bee7773a4d093b536e9c48f0c76ab6d2db241b958f7112e134e73524f38457

REVIEWLETTERINDICATOR

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 b3f675a9ea90557814e71dc601cc440d
SHA1 e32bd76286704a9f0a50e1ef7f48aad8257d58f5
SHA256 806dd0a437967ab96167192e20cf35519593cdb446546206196f16fe29fb1218
SHA3 ab76c051372708a709ca507f5ecfe0993740cd9782c79dad6312bb9b724f5876

REVIEWLETTERINFO

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 1.94375
Detected Filetype Icon file
MD5 61f214720f330ff4a616275bb2bf4a0e
SHA1 fc0d12963468339789c105140b1473587ac8506b
SHA256 24ddd310b3f4a110c48cf96de59eaa8521d739fac0bc2796195caf8a20355c6b
SHA3 15bdd880f793bb4e5de6e4ef43018e5efcdd657ca79fb666df692fcacada2a90

REVIEWLETTERINFOIN

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 fbad1c3af2f25d177cc9b238ab8c195e
SHA1 8640209b212f2ffc8c0497978d93b3794ddc5d19
SHA256 b225e8f0cc55bdab0c68ab9d98d7f1b470b3fd3b7b9c7ece8b70f0a823857e11
SHA3 638bb0b17c6b60587b3b1737b23ea7b9be649f5514a8baf9ec48b8bc3008d6b1

REVIEWLETTERINFOOUT

Type RT_GROUP_ICON
Language Farsi - Iran
Codepage Unicode (UTF 16LE)
Size 0x14
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.0815
Detected Filetype Icon file
MD5 60abf9e95422078dc9fec7a06316ce2a
SHA1 1dbbc89e27842738451f3fffc8df28ebb59b19e7
SHA256 f5063f7a234593415c08fb12f8590568fe3274d5734a627312a952aab596b35b
SHA3 876d5d675d54c24fa1e471276dc66b4f6c9e2e20647c707de7e7d011161f2236

1 (#2)

Type RT_GROUP_ICON
Language UNKNOWN
Codepage Unicode (UTF 16LE)
Size 0x30
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 2.97836
Detected Filetype Icon file
MD5 835a20def9b2661b64b8ac06b4901f36
SHA1 70732dac88537f00c89d105f986ef843d3aca818
SHA256 cbdcb84268fcf2a25b844c1dca787de835c0376e82c1a2e62814a3c940a26cfb
SHA3 9a2de99425a7e2086c65d82719bf44696cfe58b8077ce214e814ceeeb78ba1f4

1 (#3)

Type RT_VERSION
Language English - United States
Codepage Unicode (UTF 16LE)
Size 0x2b0
TimeDateStamp 2020-Sep-19 10:29:08
Entropy 3.77364
MD5 e9a69951c0cab97b1af91e6539e8e71a
SHA1 f42e9a80d917d0322c7297b4e86c48ce973e6a99
SHA256 97c05651c3dce6fd3b3b882f62748549d48e4a4d26a08b219b949912d41fa636
SHA3 b8669780c2369d84c561430760a4a72f67792bb8ab961d7c21c051485d38717c

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 99.526.0.8
ProductVersion 99.526.0.8
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
Comments acrobat xi 10
CompanyName Pars Rayaneh
ProductName PrjOfficeAutomation
FileVersion (#2) 99.526.0008
ProductVersion (#2) 99.526.0008
InternalName سيستم اتوماسيون اداري
OriginalFilename سيستم اتوماسيون اداري.exe
Resource LangID English - United States

TLS Callbacks

Load Configuration

RICH Header

XOR Key 0xaad4b99c
Unmarked objects 0
14 (7299) 1
9 (8783) 48
13 (VS98 SP6 build 8804) 1

Errors

<-- -->