Manalyze report for 8ee648c9d5edbc34632089fef045205fa88e7ad1cae28e077c879b54e1f59f84

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2020-Dec-29 12:48:03
Detected languages	Chinese - PRC English - United States
Debug artifacts	F:\ææ\lx\SmartUpdate2\UsbUpdateAppX\Release\UsbUpdateAppX.pdb
CompanyName	TODO: <Company name>
FileDescription	UsbUpdateAppX
FileVersion	`1.0.0.1`
InternalName	UsbUpdateAppX.exe
LegalCopyright	TODO: (c) <Company name>. All rights reserved.
OriginalFilename	UsbUpdateAppX.exe
ProductName	TODO: <Product name>
ProductVersion	`1.0.0.1`

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C++ v6.0 DLL` `Microsoft Visual C++ 6.0 - 8.0` `MASM/TASM - sig1(h)`
Suspicious	Strings found in the binary may indicate undesirable behavior:	`Contains another PE executable: This program cannot be run in DOS mode.`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryW` `Can access the registry: RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegEnumKeyW RegQueryValueW RegCloseKey RegEnumKeyExW RegEnumValueW` `Possibly launches other programs: ShellExecuteW` `Can create temporary files: GetTempPathW CreateFileW` `Uses functions commonly found in keyloggers: GetAsyncKeyState GetForegroundWindow CallNextHookEx MapVirtualKeyW` `Memory manipulation functions often used by packers: VirtualAlloc VirtualProtect` `Enumerates local disk drives: GetVolumeInformationW GetDriveTypeW` `Can take screenshots: GetDC CreateCompatibleDC BitBlt`
Malicious	The PE is possibly a dropper.	`Resource 130 detected as a PE Executable.`
Suspicious	VirusTotal score: 1/71 (Scanned on 2026-04-29 09:46:47)	`APEX: Malicious`

Hashes

MD5	`f4e50eadbc9de3bdafc0cf98a353717d`
SHA1	`1c30ef6db254709786939f4282c5ee75ef0f2450`
SHA256	`8ee648c9d5edbc34632089fef045205fa88e7ad1cae28e077c879b54e1f59f84`
SHA3	`f78bd5ca20bee6de45c8824c1460109e7b10bcd54287a12e70d6f851ecaa37a6`
SSDeep	`49152:j2aoHmxkyh93kxdgqMs4lQMEf5uBiIpk3bh3K7Y2n9ewF2UJFNd3IaSegX6:4HmxkMkIqqlQMEfYBiIpkrqn9ea2UJF`
Imports Hash	`417bddfd228c76b2e3f673effb2c5053`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0xe8`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`5`
TimeDateStamp	2020-Dec-29 12:48:03
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`10.0`
SizeOfCode	`0x125400`
SizeOfInitializedData	`0xfec00`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x00102128 (Section: .text)`
BaseOfCode	`0x1000`
BaseOfData	`0x127000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`5.1`
ImageVersion	`0.0`
SubsystemVersion	`5.1`
Win32VersionValue	`0`
SizeOfImage	`0x22f000`
SizeOfHeaders	`0x400`
Checksum	`0x226b54`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`96e532535a82895cfe66155c66fbd0d9`
SHA1	`169b6ee4702f9f1c6db83a0862ef550eca1c5b8a`
SHA256	`8249cd5ebce83fce345d1ba2a9c6df0c9e1c8f0020687208a6e6d18f9d70a3fa`
SHA3	`37d343b56cadb2bf9a91164c970b38a7990780fc8f43ec6326ac7bc127790918`
VirtualSize	`0x1252f5`
VirtualAddress	`0x1000`
SizeOfRawData	`0x125400`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.53225`

.rdata

MD5	`311d1b5fce09e4bf90f78355b7eb1fd5`
SHA1	`a3f77191e3e9b0f46bb9e1ae2b6caedcc53edeaf`
SHA256	`153b448d751a570a4e8d33364e0503d431242dc6f7861c1797f4ffe13c426dae`
SHA3	`e9bb08a68d0a688853bdbf5db0ada8a9a2c11a7de68957f04831621f61540cd4`
VirtualSize	`0x45758`
VirtualAddress	`0x127000`
SizeOfRawData	`0x45800`
PointerToRawData	`0x125800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.99305`

.data

MD5	`24b8172b1b2e013341402290963310eb`
SHA1	`64314498b2fbdfbd6f897b7ee83e7ab6d36c50e7`
SHA256	`d4e1d316925d2fdde80c74ae24af1b4cb69b6be957a0e41dc2c3b6692a0271f5`
SHA3	`b6a533842396f22119fb6ec87644448153c2ce4d735fa431109feb64f80e5ec7`
VirtualSize	`0x8dabc`
VirtualAddress	`0x16d000`
SizeOfRawData	`0x86400`
PointerToRawData	`0x16b000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`7.06714`

.rsrc

MD5	`c842d254b4ed05b49a533cac845b06fd`
SHA1	`a9bd0f2543e42ab07aedffadf6e88aa59828edbb`
SHA256	`552fac8a702f8074044e1725bec0cf913a6e452c778b0ac0a4d00755db798191`
SHA3	`a50f3ccf6b83ab7d3e9909a32e9ec8616db3503f48ef421524054aab5e037631`
VirtualSize	`0x9b34`
VirtualAddress	`0x1fb000`
SizeOfRawData	`0x9c00`
PointerToRawData	`0x1f1400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.08176`

.reloc

MD5	`4a85eff2e5d66bbf23d86d1df8a65082`
SHA1	`fb8850b132b4bb0df0593b6c1676d30adf7bb4df`
SHA256	`d2f4cab02beba0fe6764cff6f0853017a96357db4c072be43bd64f852a1f4d5f`
SHA3	`c512b038e76fe6280a2aeb7d910c5be71740a23474074eb42b30db298540d89d`
VirtualSize	`0x293ae`
VirtualAddress	`0x205000`
SizeOfRawData	`0x29400`
PointerToRawData	`0x1fb000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.04171`

Imports

KERNEL32.dll	`SetEnvironmentVariableA` `GetConsoleMode` `GetConsoleCP` `LCMapStringW` `GetTimeZoneInformation` `IsValidCodePage` `GetOEMCP` `GetACP` `GetCPInfo` `IsProcessorFeaturePresent` `GetStringTypeW` `IsDebuggerPresent` `UnhandledExceptionFilter` `TerminateProcess` `QueryPerformanceCounter` `HeapCreate` `SetHandleCount` `GetEnvironmentStringsW` `FreeEnvironmentStringsW` `GetStdHandle` `SetUnhandledExceptionFilter` `GetFileType` `SetStdHandle` `FindResourceW` `VirtualQuery` `GetSystemInfo` `VirtualAlloc` `GetSystemTimeAsFileTime` `HeapSize` `HeapQueryInformation` `CreateThread` `ExitThread` `RaiseException` `WriteConsoleW` `HeapReAlloc` `HeapFree` `HeapAlloc` `ExitProcess` `DecodePointer` `EncodePointer` `GetStartupInfoW` `HeapSetInformation` `GetCommandLineW` `FindResourceExW` `VirtualProtect` `SearchPathW` `GetProfileIntW` `InitializeCriticalSectionAndSpinCount` `GetNumberFormatW` `GetWindowsDirectoryW` `GetTickCount` `GetTempPathW` `GetTempFileNameW` `GetFileTime` `GetFileSizeEx` `GetFileAttributesW` `FileTimeToLocalFileTime` `GetFileAttributesExW` `SetErrorMode` `GetFullPathNameW` `GetVolumeInformationW` `FindFirstFileW` `RtlUnwind` `FindClose` `GetCurrentProcess` `DuplicateHandle` `GetFileSize` `SetEndOfFile` `UnlockFile` `LockFile` `FlushFileBuffers` `SetFilePointer` `ReadFile` `lstrcmpiW` `GlobalFlags` `GetCurrentDirectoryW` `InterlockedIncrement` `TlsFree` `DeleteCriticalSection` `LocalReAlloc` `TlsSetValue` `TlsAlloc` `InitializeCriticalSection` `GlobalHandle` `GlobalReAlloc` `EnterCriticalSection` `TlsGetValue` `LeaveCriticalSection` `LocalAlloc` `FileTimeToSystemTime` `GetThreadLocale` `GlobalGetAtomNameW` `GlobalFindAtomW` `GetVersionExW` `CompareStringW` `InterlockedDecrement` `ReleaseActCtx` `CreateActCtxW` `GlobalAddAtomW` `CreateEventW` `SuspendThread` `SetEvent` `WaitForSingleObject` `ResumeThread` `SetThreadPriority` `GetCurrentProcessId` `GetPrivateProfileStringW` `WritePrivateProfileStringW` `GetPrivateProfileIntW` `lstrcpyW` `lstrcmpA` `GlobalDeleteAtom` `GetCurrentThread` `GetCurrentThreadId` `GetUserDefaultUILanguage` `ConvertDefaultLocale` `GetSystemDefaultUILanguage` `GetModuleFileNameW` `GetLocaleInfoW` `ActivateActCtx` `DeactivateActCtx` `lstrcmpW` `GetModuleHandleW` `InterlockedExchange` `GlobalFree` `CopyFileW` `GlobalSize` `GlobalAlloc` `GlobalLock` `GlobalUnlock` `FormatMessageW` `LocalFree` `MulDiv` `SetLastError` `GetDriveTypeW` `lstrlenA` `WideCharToMultiByte` `lstrlenW` `MultiByteToWideChar` `DeleteFileW` `GetLogicalDrives` `Sleep` `FreeLibrary` `GetProcAddress` `LoadLibraryW` `FreeResource` `WriteFile` `CreateFileW` `CloseHandle` `GetLastError` `CreateMutexW` `LockResource` `SizeofResource` `LoadResource`
USER32.dll	`CharUpperBuffW` `CopyIcon` `FrameRect` `EmptyClipboard` `CloseClipboard` `SetClipboardData` `OpenClipboard` `CopyImage` `GetIconInfo` `HideCaret` `InvertRect` `RegisterClipboardFormatW` `LockWindowUpdate` `SetCursorPos` `CreateAcceleratorTableW` `GetKeyboardState` `GetKeyboardLayout` `ToUnicodeEx` `DrawFocusRect` `DrawFrameControl` `DrawEdge` `DrawIconEx` `SetClassLongW` `DestroyAcceleratorTable` `SetParent` `UnpackDDElParam` `ReuseDDElParam` `LoadImageW` `LoadAcceleratorsW` `InsertMenuItemW` `BringWindowToTop` `TranslateAcceleratorW` `UnregisterClassW` `DestroyIcon` `GetMenuDefaultItem` `SetMenuDefaultItem` `CreatePopupMenu` `IsMenu` `MonitorFromPoint` `UpdateLayeredWindow` `EnableScrollBar` `UnionRect` `CharUpperW` `IsZoomed` `GetAsyncKeyState` `NotifyWinEvent` `RedrawWindow` `SetWindowRgn` `LoadMenuW` `MessageBeep` `GetNextDlgGroupItem` `InvalidateRgn` `IntersectRect` `SetRect` `IsRectEmpty` `CopyAcceleratorTableW` `OffsetRect` `CharNextW` `SetLayeredWindowAttributes` `EnumDisplayMonitors` `KillTimer` `SetTimer` `RealChildWindowFromPoint` `DeleteMenu` `WaitMessage` `ReleaseCapture` `WindowFromPoint` `SetCapture` `LoadCursorW` `GetSysColorBrush` `SystemParametersInfoW` `DestroyMenu` `GetMenuItemInfoW` `InflateRect` `ShowWindow` `MoveWindow` `SetWindowTextW` `IsDialogMessageW` `PostThreadMessageW` `CheckDlgButton` `SendDlgItemMessageW` `SendDlgItemMessageA` `WinHelpW` `IsChild` `GetCapture` `GetClassLongW` `SetPropW` `GetPropW` `RemovePropW` `SetFocus` `GetWindowTextLengthW` `GetWindowTextW` `GetForegroundWindow` `BeginDeferWindowPos` `EndDeferWindowPos` `GetTopWindow` `GetMessageTime` `GetMessagePos` `MonitorFromWindow` `GetMonitorInfoW` `MapWindowPoints` `ScrollWindow` `TrackPopupMenu` `SetMenu` `SetScrollRange` `GetScrollRange` `SetScrollPos` `GetScrollPos` `SetForegroundWindow` `ShowScrollBar` `CreateWindowExW` `GetClassInfoExW` `GetClassInfoW` `RegisterClassW` `AdjustWindowRectEx` `EqualRect` `DeferWindowPos` `GetScrollInfo` `SetScrollInfo` `SetWindowPlacement` `GetWindowPlacement` `GetDlgCtrlID` `DefWindowProcW` `CallWindowProcW` `GetMenu` `SetWindowLongW` `GetClassNameW` `InvalidateRect` `UpdateWindow` `DrawStateW` `ShowOwnedPopups` `SetCursor` `GetMessageW` `IsWindowVisible` `GetKeyState` `ValidateRect` `SetMenuItemBitmaps` `GetMenuCheckMarkDimensions` `LoadBitmapW` `ModifyMenuW` `EnableMenuItem` `CheckMenuItem` `SetWindowsHookExW` `UnhookWindowsHookEx` `GetCursorPos` `CallNextHookEx` `GetFocus` `GetWindowRect` `PtInRect` `GetSysColor` `DefFrameProcW` `DefMDIChildProcW` `DrawMenuBar` `TranslateMDISysAccel` `CreateMenu` `GetWindowRgn` `DestroyCursor` `SubtractRect` `EndPaint` `BeginPaint` `GetWindowDC` `ClientToScreen` `ScreenToClient` `GrayStringW` `DrawTextExW` `DrawTextW` `TabbedTextOutW` `FillRect` `GetWindowThreadProcessId` `MapVirtualKeyExW` `IsCharLowerW` `GetDoubleClickTime` `GetUpdateRect` `IsClipboardFormatAvailable` `GetLastActivePopup` `MessageBoxW` `MapVirtualKeyW` `GetKeyNameTextW` `ReleaseDC` `GetDC` `CopyRect` `GetDesktopWindow` `GetActiveWindow` `SetActiveWindow` `CreateDialogIndirectParamW` `DestroyWindow` `IsWindow` `GetWindowLongW` `GetDlgItem` `IsWindowEnabled` `GetNextDlgTabItem` `EndDialog` `RegisterWindowMessageW` `GetWindow` `SetWindowContextHelpId` `GetParent` `MapDialogRect` `SetWindowPos` `PostMessageW` `GetMenuState` `GetMenuStringW` `GetMenuItemID` `InsertMenuW` `GetMenuItemCount` `GetSubMenu` `RemoveMenu` `DrawIcon` `GetClientRect` `GetSystemMetrics` `IsIconic` `SendMessageW` `AppendMenuW` `GetSystemMenu` `LoadIconW` `EnableWindow` `DispatchMessageW` `TranslateMessage` `PostQuitMessage` `PeekMessageW` `SetRectEmpty`
GDI32.dll	`CreateFontIndirectW` `GetTextExtentPoint32W` `CreateDIBitmap` `CreateCompatibleBitmap` `GetTextMetricsW` `EnumFontFamiliesW` `GetTextCharsetInfo` `GetBkColor` `GetTextColor` `GetRgnBox` `SetRectRgn` `CombineRgn` `GetMapMode` `DPtoLP` `CreateRoundRectRgn` `CreateDIBSection` `CreatePolygonRgn` `CreateEllipticRgn` `Polyline` `Ellipse` `Polygon` `CreatePalette` `GetPaletteEntries` `GetNearestPaletteIndex` `RealizePalette` `GetSystemPaletteEntries` `OffsetRgn` `SetDIBColorTable` `CreateHatchBrush` `SetPixel` `Rectangle` `EnumFontFamiliesExW` `ExtFloodFill` `SetPaletteEntries` `LPtoDP` `GetWindowOrgEx` `GetViewportOrgEx` `PtInRegion` `FillRgn` `FrameRgn` `GetBoundsRect` `GetTextFaceW` `SetPixelV` `SetViewportOrgEx` `SelectObject` `Escape` `CreateSolidBrush` `ExtTextOutW` `CreatePen` `GetObjectType` `OffsetViewportOrgEx` `SelectPalette` `GetStockObject` `CreateCompatibleDC` `CreateBitmap` `CreatePatternBrush` `DeleteDC` `ExtSelectClipRgn` `ScaleWindowExtEx` `SetWindowExtEx` `OffsetWindowOrgEx` `SetWindowOrgEx` `ScaleViewportExtEx` `StretchBlt` `GetDeviceCaps` `TextOutW` `RectVisible` `PtVisible` `GetPixel` `BitBlt` `GetWindowExtEx` `GetViewportExtEx` `GetObjectW` `CreateRectRgn` `SelectClipRgn` `DeleteObject` `SetLayout` `GetLayout` `SetTextAlign` `MoveToEx` `LineTo` `IntersectClipRect` `ExcludeClipRect` `GetClipBox` `SetMapMode` `SetTextColor` `SetROP2` `SetPolyFillMode` `SetBkMode` `SetBkColor` `RestoreDC` `SaveDC` `PatBlt` `CreateRectRgnIndirect` `CreateDCW` `CopyMetaFileW` `SetViewportExtEx`
MSIMG32.dll	`AlphaBlend` `TransparentBlt`
COMDLG32.dll	`GetFileTitleW`
WINSPOOL.DRV	`ClosePrinter` `OpenPrinterW` `DocumentPropertiesW`
ADVAPI32.dll	`RegQueryValueExW` `RegOpenKeyExW` `RegCreateKeyExW` `RegSetValueExW` `RegDeleteValueW` `RegDeleteKeyW` `RegEnumKeyW` `RegQueryValueW` `RegCloseKey` `RegEnumKeyExW` `RegEnumValueW`
SHELL32.dll	`DragQueryFileW` `SHGetSpecialFolderLocation` `SHGetMalloc` `SHGetPathFromIDListW` `SHBrowseForFolderW` `SHAppBarMessage` `ShellExecuteW` `SHGetDesktopFolder` `DragFinish` `SHGetFileInfoW`
COMCTL32.dll	`InitCommonControlsEx` `ImageList_GetIconSize`
SHLWAPI.dll	`PathFindFileNameW` `PathStripToRootW` `PathIsUNCW` `PathFindExtensionW` `PathRemoveFileSpecW`
ole32.dll	`OleLockRunning` `IsAccelerator` `OleTranslateAccelerator` `OleDestroyMenuDescriptor` `OleCreateMenuDescriptor` `CoInitializeEx` `DoDragDrop` `OleFlushClipboard` `OleIsCurrentClipboard` `CreateStreamOnHGlobal` `OleInitialize` `CoFreeUnusedLibraries` `OleUninitialize` `CreateILockBytesOnHGlobal` `CoGetClassObject` `CoInitialize` `CoUninitialize` `CoCreateInstance` `CLSIDFromString` `CLSIDFromProgID` `CoCreateGuid` `OleDuplicateData` `CoTaskMemAlloc` `ReleaseStgMedium` `RevokeDragDrop` `CoLockObjectExternal` `StgCreateDocfileOnILockBytes` `CoTaskMemFree` `RegisterDragDrop` `OleGetClipboard` `CoRegisterMessageFilter` `StgOpenStorageOnILockBytes` `CoRevokeClassObject`
OLEAUT32.dll	`SysFreeString` `OleCreateFontIndirect` `VarBstrFromDate` `SysStringLen` `SystemTimeToVariantTime` `VariantTimeToSystemTime` `VariantCopy` `VariantInit` `VariantChangeType` `VariantClear` `SysAllocStringLen` `SysAllocString` `SafeArrayDestroy`
oledlg.dll	`OleUIBusyW`
gdiplus.dll	`GdipGetImageGraphicsContext` `GdipBitmapUnlockBits` `GdipBitmapLockBits` `GdipCreateBitmapFromScan0` `GdipCreateBitmapFromStream` `GdipGetImagePalette` `GdipGetImagePaletteSize` `GdipGetImagePixelFormat` `GdipGetImageHeight` `GdipGetImageWidth` `GdipCloneImage` `GdipDrawImageRectI` `GdipSetInterpolationMode` `GdipCreateFromHDC` `GdiplusShutdown` `GdiplusStartup` `GdipCreateBitmapFromHBITMAP` `GdipDisposeImage` `GdipDeleteGraphics` `GdipAlloc` `GdipFree` `GdipDrawImageI`
OLEACC.dll	`LresultFromObject` `AccessibleObjectFromWindow` `CreateStdAccessibleObject`
IMM32.dll	`ImmGetOpenStatus` `ImmReleaseContext` `ImmGetContext`
WINMM.dll	`PlaySoundW`

Delayed Imports

130

Type	`IDR_DLL`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x2200`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.43857`
Detected Filetype	PE Executable
MD5	`4af659cb04807c2015339d8ba0ed4fc6`
SHA1	`02316dc51ce2d959c12fd370529a31fdc0535932`
SHA256	`fad660bc7e006c58f37db9d75b72bf30c089ef62fc4e72673cbfd424d247b5e5`
SHA3	`54e1223cb6e3bce11f8614e9743545cc9490d41764e5d2249f9114be17affdee`

9

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.02695`
MD5	`cab67e9ca149fb79ab4473998412b951`
SHA1	`2e793d35537bfb5d3f042ed0626d3b119d50519a`
SHA256	`fbeb3be87e80cb8e1d2af3d8140796c1bb80c6c7056f60897088ff9e355c3867`
SHA3	`0e72f5537421764effb2ed98e536358bb7e86eed7b0936e606e8d45559685684`

10

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xb4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.74274`
MD5	`9fa8a914823ac7e5370652146901f4f1`
SHA1	`eb3224109abb341b6e464d2606fdbed1a7160bc6`
SHA256	`f64ccc0582bc7c66af8b40049e485e8e241335261ec95ace909293ba50b2e4a3`
SHA3	`bb348af06514e27cd1fa21ad524dfd037edcd3b36ef4cc6ab24c4a8ec38995ff`

11

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.34038`
MD5	`d78a341fa7444ba9ccb74ad0c943d0ac`
SHA1	`a3fdcb001587c47b72f06441087455e8027baca1`
SHA256	`652988945185cf5d604d9b48de66288d82d8ed0acdd134398e90d002d2d9fc72`
SHA3	`2ddf8193c735adcec9a83d3a9032dc70796778b1d0c967a43789f1a6bb3da15f`

12

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.34004`
MD5	`07618c451f53db89991c3fb7c567a568`
SHA1	`0d5cd2bb85bb88024b832f68bdbadd1e69938138`
SHA256	`0b0e16c38a3d5a85566e67b1d9a7e720e4dee27e163b06099d3d7dfa5dbed9ee`
SHA3	`f4d98de638008ce348a7ef0cb3feb13207cf5b3eaea4f1ee1d71b3a22397fba4`

13

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.51649`
MD5	`9936fbf67a1d9f755c37852015d09527`
SHA1	`426016ba6a10cc2634ab7357e4223793c51aa304`
SHA256	`368f9cb089d206a8b61251f0c85eeda97ee08a56b33be8579246e964d3af6169`
SHA3	`6bdb1e7d667efe7812e162384a6341edec73311ee7dfcb122adf0cc0f08e7a8f`

14

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.45401`
MD5	`ffacff1dbee315221fd131e951d8e151`
SHA1	`d2eb9800a1f60d3ea7225fec706d809cf477885b`
SHA256	`6440c3a38dcfb81d45bc6be31b776fdae116dd7a2933b407b67132f6cfa0e6eb`
SHA3	`dbe125dd582d83c13a62c87798c900fdc43d97b581935e320c14f9cc761a3868`

15

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.34864`
MD5	`fa681900dd51c997aa67a2c5a4704099`
SHA1	`b48ebfd25835cb260b5e4f8e7085ea3da102c48a`
SHA256	`9882a8462ce9de3cc9a5d0ca48c8c4f7ca97f1f846f0c10e6655e33c9734b152`
SHA3	`157fb750ffc808227ced340c81ed1c1c1e15b05dd0e831678b871515870e0a8b`

16

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.34505`
MD5	`0a12283479aa8a8677dd27bb0f584a34`
SHA1	`63679153c4d14fc591d1286cc98ff5044a5b589d`
SHA256	`322e92d75b3fec9e16b81466f4cf111d298b80812d5b238f4ee032c025a02050`
SHA3	`d6fc5e08b9d51b2cc80c1a2a34ca495e28edd0ca1bc65f317958b773c675de7e`

17

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.34864`
MD5	`d0293b6f84ea96f2662fa2f8e2fd44de`
SHA1	`240ad776d40208f067dda60701affa3d162cb3bb`
SHA256	`8db6df648274a0fc3d28430367216e1c17c364ca613066cbb0e133637e92ba62`
SHA3	`d92c1c2bfba803073152e14d6846474d13ccef3f04aa8670540389efa7c7d995`

18

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.31114`
MD5	`49ca9d25ceb458297ddf84fff64c8d55`
SHA1	`fbd6d992b7e2a59c9e24372ea8d30a5dcdbd46f9`
SHA256	`f9c81ce9b4176b305c554a15f0ca2b98b11be76c1f13ef22169999aa07e9612f`
SHA3	`03f7002b636940864ef7d399ba60fb8de3f455da32f311ee39cdf6602c5d348b`

19

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.33609`
MD5	`27fc5529ad790189bbf410c7e3a70fb7`
SHA1	`ea2456c9b26f884a7f7abb051f460ec98cb9451c`
SHA256	`601635482a9b1864ea0c61ce0282c5c9fe1d014aa95dbb4f60770f1c2b6df3da`
SHA3	`24ab306744896452b2a7f7055c97671ab0aad3965342b3d0cead7a6cb640238d`

20

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.81313`
MD5	`858a63dc597812b0885e8a8f9689227c`
SHA1	`0a816cd0e6f10038f43bde278eb613f1c7281b33`
SHA256	`2bf742d2beb4c56dd6eb68347dd8ee28da85bed9e6d165b36c6edb91da01d5d6`
SHA3	`6974d714fd124f0de87b6f088039e52bcf3123b5e6ae24c7c61864b70b894963`

21

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.81491`
MD5	`ff43eaab521694d0356618a92cd83b55`
SHA1	`f1ed8d456a5a3d87d1a8349e992c99e22bf3624e`
SHA256	`cfc4ff9e46fbb61f61b68f36adc6593b137233d1cbaa50fe37e5653f0cb20396`
SHA3	`7069692bfbe0c043b33390a40f8033c3d0aa3092c3b1ca1b01fc899dc760ec48`

22

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.10016`
MD5	`4bfaa5ad112338fc90bf84b1ba21859d`
SHA1	`f175fb276720b4f98bc75dd3edc8c53ed563bdf4`
SHA256	`c4a6e3a7a346baecb09a0c49268eb44f388382a7866a4e912b53d48fa3b34c26`
SHA3	`eb1f5efadebebc4b756ef49661343ee08641f53184ad8ee83e33d6665028a00d`

23

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.97052`
MD5	`654a61b5fd300aaf86c52a3c48035005`
SHA1	`e16bdc1b4309abd682e2d0b52aaf370a77ad6a86`
SHA256	`f273e554605a89aa0994c9d42bc2569be3db5b19b2900dacb30f3218ed1174a0`
SHA3	`50582dc2bd6d1a2632564b2d3c6fdc1877e401924754069bc2dfccf3e2896340`

24

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.22699`
MD5	`b6946159ef4680b2b03d58bdf3dc83f6`
SHA1	`b949690a6e071a1fe43cb83a15d5104d1fa9fe0d`
SHA256	`ebaf4bcc0f0d7ca9a3458ea52520d2dd10811069241940b9b2e79ac1a4c3ca5c`
SHA3	`4b1152fe0fd4581cc8716682bff8f14d7c903ab6b5414d52876bd37fc58eb0c5`

30994

Type	`RT_BITMAP`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xb8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.23666`
MD5	`8cf65be17e506ff24c2177078f88b56e`
SHA1	`3e397dc7597caeb844df0ea760b64231c8ce3dbf`
SHA256	`e7c0005285d1ab59732d5f99f77a9bdd6342b01cf44437ebd7a07611a227e272`
SHA3	`7da4c7aab356574679f0f9107740f01647864c846c04f699deef67577fd6aded`
Preview

30996

Type	`RT_BITMAP`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x144`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.87621`
MD5	`5a9c81cdbf480cf01daa71ba0e233c5f`
SHA1	`28e04c01584654e1974347d1baa462b2784e9c47`
SHA256	`abdf36bde89a26349f5741c17c235dacea88d441d8662ba16a598dc50c3c4864`
SHA3	`99dec83590ac444359a5a6f8924dae5615d93f4df527e10a8a61319ce3a5beaf`
Preview

1

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x668`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.3356`
MD5	`593b036bb68262232ab124c3a4ff2b40`
SHA1	`ffbd3373439d67b0a62e6a2fb89ef81622b1ddd3`
SHA256	`e0993e10dcb777c35eb9f177a0934d37342cc590296e0695f9e2946bccba6d40`
SHA3	`932bcb33ddec76964690c54c54d3d7f6c1e851fe44e349c5da0a9fd161d92c7a`

2

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x2e8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.65412`
MD5	`15cacce478b0d00cd26364ab683a20e9`
SHA1	`ef085e0cbcf127b345a19f3a6fe0ec96246ac2af`
SHA256	`8eafb353b5bbf95abd1cb019e0271171708b187c3687b314118462f542e54aff`
SHA3	`8518ce85b297e2bb2d85650836fe7b67effa278dd8484b145d267a30cffc5c2e`

3

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x1e8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.64044`
MD5	`dcb01853b31a4ba0d25ac378789b1a8b`
SHA1	`f3c35f43fbf22828d6ab4c6e9b43f962caa41a69`
SHA256	`5173c3e214c65becd1743dc6b496fe2e7d4b09cbd3bb42446a17091181bb9f76`
SHA3	`387e7232e3ef8a32f3c5797547ebbe07af862ad003615edb60b2eac10c5f4ff9`

4

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.51377`
MD5	`e3d0310d9bf2cf98c0d397f3c2d548fe`
SHA1	`a23aa60472132f265b91b9b9930d5c51b28e1069`
SHA256	`2fe7e17326a109b9651d2de7f7d4802b38a32cd7af7774ea9f00e7baa9a63c1a`
SHA3	`73ac5f34bec0435586fa26b6d0041bf39e4a5253ed9f1d8876d43689dc6ca94d`

5

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0xea8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.12664`
MD5	`11ceabc7cfa0f6ad17fcc82795760490`
SHA1	`735b07bb85efc401af980c155b2e4552b5f4faa2`
SHA256	`c86083e1f8acc2ad0b715bdbf7e174600ac40e11b81565abc80c183f3a8b2b38`
SHA3	`7378603ae9e14f2a8cd26ec360c881676c1ac7edc63bc0ba2ec5ffca049be717`

6

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x8a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.8257`
MD5	`4a951af0da41c2292e978afe30792250`
SHA1	`d4558ffcd0e6bafc25bddccf7b4f9fb309761509`
SHA256	`a3fcf4a9ba1df8da6b7b6937f52a0e68674c214891f9c1c13386fecb0c13533c`
SHA3	`ddd6a44f946e27e794376c5ad73c91530bcb056d2ab0de1281c75ee96ce5e95b`

7

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x6c8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.88645`
MD5	`863a850631d2b88263ed03f0873fc5cd`
SHA1	`518c99f3c7d1dc48d75d512eed53f35879aae7b6`
SHA256	`04f6599e26a0897c4db1466b8320e19c4b3e1b606301b56c59b243d864c1165d`
SHA3	`05c84fc49d58b834374e9fcd7d0eb777ce231aee272e9313ee183e793a16de66`

8

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x568`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.82374`
MD5	`d5c4549bc5e006e3510d65d635506751`
SHA1	`4eaadbf4a2b5469ec02021852544f1762892585b`
SHA256	`0ca3a366516b4537d7afd7f302fe87e0af1e4e001a20ae4042879515f94e365c`
SHA3	`de6c1ecbe17e1524c63a636213778557fda6ac6fdcba85bdb6c6443c7d414b5b`

100

Type	`RT_DIALOG`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x168`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.26581`
MD5	`31b58ce6a616ef7d36eb48eacffab886`
SHA1	`5d7a1f03a2ddfde810342ca167569cf25427bd65`
SHA256	`34bbab12f7636b97b005baf98ef7d2e3a139523b7637f0589ef7d10ba26d2b02`
SHA3	`d0f1ac4f8a430a27457322bbd66151c6f6c03d1863af4c3ec68686beba185dad`

102

Type	`RT_DIALOG`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x1fc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.28278`
MD5	`25261c605098e7e77dae69844bf0de4f`
SHA1	`6c7d874f319319d4f43ae9229852451696fd24e0`
SHA256	`1cc07269ae34decc049be9d713ae29c6b7fc5e16030f6b956b0b67b4b96728c8`
SHA3	`89351cc466e60246461581d692bc615c237da23a62fbf01bf3940fb9b2d437a4`

30721

Type	`RT_DIALOG`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xe8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.06676`
MD5	`ad7b15160c8bf80910606d417f40fef5`
SHA1	`9752acb8e012635c4356f7f2a20191d656b53faf`
SHA256	`6e113fd8e9f3156ae68251c6076beb9b59fe29e589d06398e7019802521f69d3`
SHA3	`50c74f1eeba91cb4ecc237c0b18cd2f6c0e2b6064e8d13ce1a779160c03b5d48`

30734

Type	`RT_DIALOG`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x34`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.41669`
MD5	`72723d63b211c60717138184c1675b66`
SHA1	`ecd2be6587bb32a080e51b5c3f3a816e8b637c85`
SHA256	`4cf716efaf68e0cb2ec45ec55d291050b5712b05653cae68edbb999f803d2a98`
SHA3	`6031fa1100e39d04c89ed42890fe9833adb0503fe1857940533b7356aec9d306`

7 (#2)

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x4e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.07677`
MD5	`cd88c3806ff5bb60323517c7f5be4420`
SHA1	`5985df739951d5285561c99c8dc9daf494be3e81`
SHA256	`46af9d3651c21bb4f1cb1648e8d98f4cb5bf8235a15fee9bc59c28b584be30ab`
SHA3	`fc418408b6e4faf1b33a769d7f4cb3434734a6ac283cb66a856adc65f2a0e479`

3841

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x82`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.81705`
MD5	`8bb814f43734537868736a6df5dcc012`
SHA1	`3ae7a8f8678bc2aed76f745960730097032389b6`
SHA256	`d91dc4e26fd86def5ee907c72f32457bea07d21fa618012245f641d08501548d`
SHA3	`73fabbc3aad03738eda288b6d45b076e7f94f1ff8de37df5ac4d6e7dc7a48f98`

3842

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x2a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0.960953`
MD5	`0131ce1c2237957b6926d5097b0af63d`
SHA1	`2ce37b98065cc4de92e99eb0777e0e1159102068`
SHA256	`05e0d5787611ed4f643733e3e6e62d00f426422b5d3e443ceebac22e9d294bc4`
SHA3	`9ee7bcb02f48332a4fac72465297312ef9c765b03edf2ab24a4b3de0840bda6c`

3843

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x184`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.08634`
MD5	`58655591099de216feb4cc512012d318`
SHA1	`4001db00e1535b26b506e6d033e9759351ae6874`
SHA256	`9665348f07508c6c2a568fc90ec4c04736668adc3521e311a4c7659973d92313`
SHA3	`296c00546a67204c06806ff85a9e3e065559b2b85b22fec4166afc19cad4b6f9`

3857

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x4e6`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.25779`
MD5	`3c0e880ffca8f519b51579c8c0825858`
SHA1	`24a521aba0485f373d4d8993d704c86e556bcbf1`
SHA256	`0519d7704cb64bab3aeca7c3b96affd55641099a2a162e88537cb1b8dbfcd540`
SHA3	`6d04d7acb581fbf887f75a077583ce66c949d3f197bfb8445aab6ff2ba93fc01`

3858

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x264`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.11275`
MD5	`3dbecd982474b9072ecd4aefe7406857`
SHA1	`ee81b0d03aebe1cde90de59031771f416d29eef2`
SHA256	`eaa0b4fe4704e193dd2ed1f8de1cb20e1001034fdb30307ee44aa664966d4ffc`
SHA3	`9053da012393a18a8a9012e2ab17735c7c864f0463086c9439c3a74a37ed7ee7`

3859

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x2da`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.16694`
MD5	`9e3221160c33e15054ff236daf2263d7`
SHA1	`cf41e0cdd3377698f819c4ef95ab56de40c57a5a`
SHA256	`cffcd4956911b3d50eef378cb051e598baba0db48246b07780af03b01c67c64d`
SHA3	`663e17de8922b049f83fdeca37a68d626bb83566bc377d85be42c653707a2b74`

3860

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x8a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.71087`
MD5	`5988b72b85cd1c121906b20e7526fdf2`
SHA1	`45efa4995e9c25a32e3f47a15b63a813cc6e8fc4`
SHA256	`35b5abb90316b4017d5531e031cbf15bae6e8dd46f6dd221701693a22a7795be`
SHA3	`afa115b83c9f9b2f16ce1e14424b4e2cf6216cbcee84835e0b5cec4a23510a93`

3865

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xac`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.63903`
MD5	`5fbbd2a5f564e043553889eec9147920`
SHA1	`2ddafabdf2bf5b62090419f07f731c4d02f0d987`
SHA256	`1b8660b0c53b94f3e029de58e56d08c8097a080244e9dc65d4155a9b603820d8`
SHA3	`1a90cf149f1fc5cfa9cd3f82f9a079ec48c7f7ce76dc4be601e538ae5c052ab9`

3866

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xde`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.87807`
MD5	`a0838b75a6ffc345212d18178663bb7d`
SHA1	`a90a0eccdf4cc4c50f430195695a3b65adefe5e8`
SHA256	`31bff9afbf08a8869318cd946a1d73a4425afefc5693c6e06671bde1e86de1dc`
SHA3	`ad576d2bedb8e173fb207310f244bee3ad8c898a2101cb67da930fadf80ec7d0`

3867

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x4a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.24671`
MD5	`7e0e2d984d6d743b4d90b04758507505`
SHA1	`bec6af6197b875caf3064c7e053b64044904c1bb`
SHA256	`2b5551644093e58a4af74928fb744bd735fa2ef5f99824e6918ff9f6a33a3803`
SHA3	`08f040ebd50cc1809f91378999331d0d19e7364612041db3805a0ff1d37050e5`

3868

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x228`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.10695`
MD5	`cd11e247927c7360d3447bbb2e01d326`
SHA1	`0e6b76a1cf9824dac91fad3a346388589987cb9a`
SHA256	`e9212b16f2d3292d0b0eb67134a70778ff1b0aede4918831e5bdba3f950db2a7`
SHA3	`7a0a3e741ea89b752fca14451f1e9b9ac5600d99a7408d04c7835e30688f8fcf`

3869

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x2c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.07875`
MD5	`4b18eed800e2806db8e0aacb95fd54f2`
SHA1	`8b09634f818d6823f6466717f3863cbb466d97c1`
SHA256	`0714c554acd308b38c3d6319f7e470f76a16d712f696545eacac2bdc725dfb95`
SHA3	`067dea0fda55e331beab407da1e0e79a9d71fe8a8d0c965384d459ce0a8d499a`

3887

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x53c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.1767`
MD5	`cd0805e3f678d1d1724b84e06da333ba`
SHA1	`a7b6b955cd17037b33390496d03d63dd711dada2`
SHA256	`267abecc36a0c7b614732ee6bc26b05abdb3f53fe4d6e09691543c4ca0bc8f20`
SHA3	`fbeeb4f33a2d05328ae98cf762fd2b242c8251e95cc009d68c83f18604293e4c`

30977

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x22`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.25451`
Detected Filetype	Cursor file
MD5	`4702e13585001837f089778f8ccc9205`
SHA1	`a6413cb1f1002d91c51c69e0edec99d41e4d4ce4`
SHA256	`04af5d91ca460ae8eb8f2a5149cb13d682f04e801101bfc367d015485dadf206`
SHA3	`b513ca74e8af31543ad7a4e5bb0f3017e7f561c960f42e05ac9ac125cf9e7fea`
Preview

30998

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`1529a8ec9965ecf3256d6d4550712406`
SHA1	`9bd0fc7e667f3d49f5098ecc2bff01987f3e1503`
SHA256	`12a5b9052dd16bed260343bc4352d436167c991c54497c5af441304646549386`
SHA3	`0799f15ab0007d5497ea80dbae86635472c9d085ffbb6c095b71d1e8acebc81b`
Preview

30999

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`5df05404b0dab444d7bc0fe0bee0d519`
SHA1	`ecbc2591eaf234bcc87df4731b5e26266728ff6d`
SHA256	`28b8110695851e5280ff55cb78507b03e8b74dd370b8e122179c82b56f7e5f37`
SHA3	`f18323f0f4e67af79d43a527df26273c9f7e53e73b1ba51cd426cff3412927d2`
Preview

31000

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`1cd71148c4a650e298e26668e22c3733`
SHA1	`5aeaabee3ae2ad999e9ed91c85119a42c83473c6`
SHA256	`4ecc7f2578fd7b137c04f85ffcbd67d6eab0bc8b1df4246cebd2a2aa517f3c60`
SHA3	`89ccb4ca5392e186b8eeb9848f78a12843e40792c3500e104225869bf9be1894`
Preview

31001

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`446e8ff2a515c84d93ca4cbcf405d300`
SHA1	`98de0236185240e011430a5dd8e262ed8f991ec2`
SHA256	`ef309b720f166673cad840a88e7636e9161ad91415cc7c176010cebba07757e5`
SHA3	`d345fed6ee7f3afa40aba48106f47450bde6ac4c3d47db78cbfb11e4368be613`
Preview

31002

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`1e219dd609ce399df95ba7af59ef113f`
SHA1	`436a16dd20d5e3ec42342a4d005a664cd227f517`
SHA256	`8f51832638675f16ec5f251ab59251b3f85d84e5129025d44c45b3191b331c58`
SHA3	`9e44adcf523bb484f416a99197d947211027feae6b6665b457883e548218befd`
Preview

31003

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`22a9b94eda22d068a6823a72268fdada`
SHA1	`7923c0aa606f67498391ecdb828292fcc3bc3ed6`
SHA256	`a2f0549cca7170ae03ba042464efe62365fba38c20049e439871c9e5ce0f914f`
SHA3	`565227501bdf04ce5d2afeb14e48062d4cdd6de7b76c62d26a15f6e4a34ba5c1`
Preview

31004

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`87f676ebb80763bfd77a413c2fb00f0d`
SHA1	`23736a18a1d4330cb9ea762fb7deaef881b6ec2c`
SHA256	`da738753c27f2708bd2257f8cac3385a4ccb0df1341b76acfda07fa980cfb4bd`
SHA3	`d90e5655540ffc0671429e2c3ff78ba0f7a100727622de4185f897a4aa996c3b`
Preview

31005

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`d1c93cf23f34157f8c97800528b9bb99`
SHA1	`ab9e40c42ad0de11e11fdde5de49bd0adaa9bc2b`
SHA256	`8a495f17bc472bfc5e6923d9efa687848fac027ad60694f9c3f10a4f7b194924`
SHA3	`10b44e07ad4f8d644f73b4d71370ae8c337e8bfdac89efebff20378ad61e0758`
Preview

31006

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`8e242da1769c2307f276e393dec0e7d9`
SHA1	`da604259954e8cda5931a679e081bfad9a9fd772`
SHA256	`ee63d4681e7622067fd29005c6cc67b456031eb723c7239f05f1cb097af0ef98`
SHA3	`e6021bdef60731a607f9445b3c004fcdac812f44b42aeb8e32fee72204be4572`
Preview

31007

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`8408eef234acfcac8a26e706cc35d85c`
SHA1	`5ecdc1e1be3f1e941b1ca11b45943aafe135c517`
SHA256	`3f02dcac38fffe306e1825846e2bc0458ee712696310d051e3a69ebda8330cc3`
SHA3	`0406ff4480e84661d58a225cdf84931c95f7ebf6fea388a3cb6bedbc0343b421`
Preview

31008

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`79bc23c45190436b2c51ff2941fa8720`
SHA1	`0a8234176fad8831709703a0a34337a08987a983`
SHA256	`b328fe22a904a2e7e1341a95dbf00e2fdffc9ab350bc64c5ee348d3007c2b479`
SHA3	`b897f30ec85dad865a74be84cd616e0066da486befd0983d87e2b6f5d66a6c6b`
Preview

31009

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`690a20e696fc4e33ffb377a8ef54fb97`
SHA1	`972159605fa069921dbdee9b7a35879e6f1928a6`
SHA256	`6c2ef97bca5cdc6aa6de65b1f1ae8328bcb3494a16025eee870231d991e2cd56`
SHA3	`fd9d56519b5bf976a4ae748fe0c51dcd47ac27ce6a7c271fa2bbb3e00f473b22`
Preview

31010

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`459379b9418ad5b62b1bf409300acb32`
SHA1	`5363fc84172d6b624542a0b52edbbfe21e2443ae`
SHA256	`1085b7390dbd2b2006f85619521047c6ca58a8b274196eeed48e74ad8a1b746a`
SHA3	`2b8f3218d3da7e4ee463a712c6c3b8f5b58cc6799a84f5e582b6a40da38a2bfc`
Preview

31011

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`2fbccba7b754792dfc2070456e66fbd7`
SHA1	`6017f22c993c7d724876e35e8c54e7c4603eafae`
SHA256	`60a0a8bc0169228c8af42c377d93a218ccc9712a17b76ef014f81e156a36c66f`
SHA3	`f1edf8c8df156e449682ec443c0a87232b94e17062148388949ba84b7eb55227`
Preview

128

Type	`RT_GROUP_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x76`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.96529`
Detected Filetype	Icon file
MD5	`82149ca0b3f5e02e5f7440cad0eb6963`
SHA1	`0db39672506737a214e025e8a1594427c91f8765`
SHA256	`967409998fd3e628db9b9643c6eaffc7c89d437dba55027765018ab0f11676d0`
SHA3	`b011f5a48a8b7fde59d0754e2d8b0fe8845177dbf681beb1f1cde9d55f2547f3`

1 (#2)

Type	`RT_VERSION`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x330`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.44169`
MD5	`f26706e613a2ad26e28f4f3603d67536`
SHA1	`4a27a15952e04d9af7b47931e920bc53352eace1`
SHA256	`9b39717fe8000c362213b1f68340477a56a602be5ffa3bb2ae3a4163df1eb90a`
SHA3	`9f74788b3e2428f2f0bedc4ee61d73691f84148bf4dcd1113846f604f0b02974`

1 (#3)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x357`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.0634`
MD5	`76e49a891b3576e44dd22c8b1fe92a21`
SHA1	`ff938b12ed87d10a58bbc76f330f0eacbd839925`
SHA256	`3d48dbb04e791a9341f940b8657dd7547e19fa8612b220fe36bf613bbd06f9c0`
SHA3	`71ed8fe8c269bba3d4518970b4eee6871f89d9ee6bfbc2e97d9740e53be5b89d`

String Table contents

&About UsbUpdateAppX...
Open
Save As
All Files (.)
Untitled
an unnamed file
&Hide
No error message is available.
Attempted an unsupported operation.
A required resource was unavailable.
Out of memory.
An unknown error has occurred.
Encountered an improper argument.
Incorrect filename.
Failed to open document.
Failed to save document.
Save changes to %1?
Failed to create empty document.
The file is too large to open.
Could not start print job.
Failed to launch help.
Internal application error.
Command failed.
Insufficient memory to perform operation.
System registry entries have been removed and the INI file (if any) was deleted.
Not all of the system registry entries (or INI file) were removed.
This program requires the file %s, which was not found on this system.
This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Enter an integer.
Enter a number.
Enter an integer between %1 and %2.
Enter a number between %1 and %2.
Enter no more than %1 characters.
Select a button.
Enter an integer between 0 and 255.
Enter a positive integer.
Enter a date and/or time.
Enter a currency.
Enter a GUID.
Enter a time.
Enter a date.
Unexpected file format.
%1
Cannot find this file.
Verify that the correct path and file name are given.
Destination disk drive is full.
Unable to read from %1, it is opened by someone else.
Unable to write to %1, it is read-only or opened by someone else.
Encountered an unexpected error while reading %1.
Encountered an unexpected error while writing %1.
%1: %2
Continue running script?
Dispatch exception: %1
Unable to read write-only property.
Unable to write read-only property.
Unable to load mail system support.
Mail system DLL is invalid.
Send Mail failed to send message.
No error occurred.
An unknown error occurred while accessing %1.
%1 was not found.
%1 contains an incorrect path.
Could not open %1 because there are too many open files.
Access to %1 was denied.
An incorrect file handle was associated with %1.
Could not remove %1 because it is the current directory.
Could not create %1 because the directory is full.
Seek failed on %1
Encountered a hardware I/O error while accessing %1.
Encountered a sharing violation while accessing %1.
Encountered a locking violation while accessing %1.
Disk full while accessing %1.
Attempted to access %1 past its end.
No error occurred.
An unknown error occurred while accessing %1.
Attempted to write to the reading %1.
Attempted to access %1 past its end.
Attempted to read from the writing %1.
%1 has a bad format.
%1 contained an unexpected object.
%1 contains an incorrect schema.
pixels
Uncheck
Check
Mixed
One or more auto-saved documents were found.
These are more recently saved than the currently open documents and contain changes that were made before the application closed.
Do you want to recover these auto-saved documents?
Note that if you choose to recover the auto-saved documents, you must explicitly save them to overwrite the original documents. If you choose to not recover the auto-saved versions, they will be deleted.
Recover the auto-saved documents
Open the auto-saved versions instead of the explicitly saved versions
Don't recover the auto-saved documents
Use the last explicitly saved versions of the documents
%s [Recovered]

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.0.0.1
ProductVersion	1.0.0.1
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT` `VOS_NT_WINDOWS32` `VOS_WINCE` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	English - United States
CompanyName	TODO: <Company name>
FileDescription	UsbUpdateAppX
FileVersion (#2)	1.0.0.1
InternalName	UsbUpdateAppX.exe
LegalCopyright	TODO: (c) <Company name>. All rights reserved.
OriginalFilename	UsbUpdateAppX.exe
ProductName	TODO: <Product name>
ProductVersion (#2)	1.0.0.1

Resource LangID	English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2020-Dec-29 12:48:03
Version	`0.0`
SizeofData	`90`
AddressOfRawData	`0x1521d8`
PointerToRawData	`0x1509d8`
Referenced File	F:\ææ\lx\SmartUpdate2\UsbUpdateAppX\Release\UsbUpdateAppX.pdb

TLS Callbacks

Load Configuration

Size	`0x48`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x571ca0`
SEHandlerTable	`0x55ab10`
SEHandlerCount	`854`

RICH Header

XOR Key	`0x67072aac`
Unmarked objects	`0`
C objects (VS2008 SP1 build 30729)	`15`
Imports (VS2008 SP1 build 30729)	`35`
Total imports	`752`
ASM objects (VS2010 build 30319)	`43`
C objects (VS2010 build 30319)	`179`
C++ objects (VS2010 build 30319)	`376`
175 (VS2010 build 30319)	`3`
Resource objects (VS2010 build 30319)	`1`
Linker (VS2010 build 30319)	`1`

Errors

Leave a comment

No comments yet.