dfd15589266a3551f4fbadb844b3872b

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 1992-Jun-19 22:22:17
Detected languages English - United States
Portuguese - Brazil
Russian - Russia

Plugin Output

Suspicious Strings found in the binary may indicate undesirable behavior: Contains references to system / monitoring tools:
  • filemon.exe
  • procmon.exe
  • regmon.exe
Looks for VMWare presence:
  • VMWARE
Looks for VirtualPC presence:
  • 0f 3f 07 0b
Miscellaneous malware strings:
  • cmd.exe
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to SHA1
Uses constants related to AES
Suspicious The PE is possibly packed. Unusual section name found: CODE
Unusual section name found: DATA
Unusual section name found: BSS
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryExA
  • GetProcAddress
  • LoadLibraryA
Functions which can be used for anti-debugging purposes:
  • QueryPerformanceCounter
  • FindWindowA
Code injection capabilities (PowerLoader):
  • GetWindowLongA
  • FindWindowA
Possibly launches other programs:
  • ShellExecuteA
Can create temporary files:
  • GetTempPathA
  • CreateFileW
  • CreateFileA
Uses functions commonly found in keyloggers:
  • MapVirtualKeyA
  • GetForegroundWindow
  • GetAsyncKeyState
  • CallNextHookEx
Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
  • VirtualAllocEx
Has Internet access capabilities:
  • URLDownloadToFileA
Enumerates local disk drives:
  • GetDriveTypeA
Manipulates other processes:
  • ReadProcessMemory
  • OpenProcess
Can take screenshots:
  • CreateCompatibleDC
  • BitBlt
  • GetDCEx
  • GetDC
  • FindWindowA
Reads the contents of the clipboard:
  • GetClipboardData
Suspicious The PE header may have been manually modified. Resource MENUBTN is possibly compressed or encrypted.
The resource timestamps differ from the PE header:
  • 2018-Nov-07 12:41:42
Malicious VirusTotal score: 31/68 (Scanned on 2018-11-07 20:19:27) MicroWorld-eScan: Gen:Variant.Graftor.468422
ALYac: Gen:Variant.Graftor.468422
K7GW: Trojan-Downloader ( 00503b041 )
K7AntiVirus: Trojan-Downloader ( 00503b041 )
Arcabit: Trojan.Graftor.D725C6
Symantec: ML.Attribute.HighConfidence
Kaspersky: HEUR:Trojan.Win32.Generic
BitDefender: Gen:Variant.Graftor.468422
Avast: Win32:Trojan-gen
Rising: Downloader.Banload!8.15B (TFE:4:iW0UrQiPFnF)
Ad-Aware: Gen:Variant.Graftor.468422
Emsisoft: Gen:Variant.Graftor.468422 (B)
F-Secure: Gen:Variant.Graftor.468422
Invincea: heuristic
McAfee-GW-Edition: BehavesLike.Win32.Dropper.vh
Fortinet: W32/GenericR.JSV!tr
Ikarus: Trojan-Downloader.Win32.Banload
MAX: malware (ai score=85)
Endgame: malicious (high confidence)
ZoneAlarm: HEUR:Trojan.Win32.Generic
McAfee: GenericR-JSV!DFD15589266A
VBA32: TScope.Trojan.Delf
Cylance: Unsafe
ESET-NOD32: a variant of Win32/TrojanDownloader.Banload.XXW
SentinelOne: static engine - malicious
GData: Win32.Riskware.Vamti.A
AVG: Win32:Trojan-gen
Cybereason: malicious.9266a3
Panda: Generic Malware
CrowdStrike: malicious_confidence_100% (W)
Qihoo-360: Win32/Trojan.5a2

Hashes

MD5 dfd15589266a3551f4fbadb844b3872b
SHA1 f44266d8ee26beb0cbbc75f8dec33c4e2522981d
SHA256 9a52d1615be6f25a1ae7b93238cb8c70c27466ce73ed4f135c3e9695ac0ea502
SHA3 3385bfcd23d0d1b914defa0af62978933603216214ecaf0efb0bc206ef6cb84b
SSDeep 49152:bbPiQ4fS5Z8t4sLspB7E1xCJ2erYUcY1mwTdTPg:bbPRutaZ2jYzg
Imports Hash d670a0189341f86cd487a0c15f49d916

DOS Header

e_magic MZ
e_cblp 0x50
e_cp 0x2
e_crlc 0
e_cparhdr 0x4
e_minalloc 0xf
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0x1a
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 8
TimeDateStamp 1992-Jun-19 22:22:17
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0x1e1200
SizeOfInitializedData 0x55200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x001E2074 (Section: CODE)
BaseOfCode 0x1000
BaseOfData 0x1e3000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x240000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x4000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

CODE

MD5 9a0814b091153b99ce71a416d4750991
SHA1 b545167c53fc1181a61532cbfc7534faccafec5e
SHA256 cc26659ebd48870da724d88e23646f181a116c2211161222a89ce5ce529ff2a9
SHA3 8ebe9be575d445b3476a868b8c12fdccd022682b9e4fe1beb7b9d78c2ac2c0c9
VirtualSize 0x1e1120
VirtualAddress 0x1000
SizeOfRawData 0x1e1200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.51532

DATA

MD5 d43d042bee7dec6a5ae508719cdd8b3b
SHA1 81b5e1754fa198a836ed73cdf5a085029021f394
SHA256 e862d5d202b82f3f0f491d1e3b11fab952288f25e6e8e66a6969dc3a3e56a32b
SHA3 160710cd8cc57d287de99ec0f528069555398607326862750d2e5f9ecc7f8df7
VirtualSize 0xd344
VirtualAddress 0x1e3000
SizeOfRawData 0xd400
PointerToRawData 0x1e1600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 6.97414

BSS

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x321d
VirtualAddress 0x1f1000
SizeOfRawData 0
PointerToRawData 0x1eea00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.idata

MD5 75826197fe238d8708e664934bf21a56
SHA1 fa265fbafeb020e15fa2e48eae7c41b6faa0b094
SHA256 4137c2d6257488277e70c0c499b3d77e07933a6344d8da4ee01a280c5d9e2c0b
SHA3 1313d3efe39124c7658e5f27921a9d036512d25d32578828ca4b648750e490e6
VirtualSize 0x2cfc
VirtualAddress 0x1f5000
SizeOfRawData 0x2e00
PointerToRawData 0x1eea00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.87075

.tls

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x24
VirtualAddress 0x1f8000
SizeOfRawData 0
PointerToRawData 0x1f1800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rdata

MD5 cec54cc883111db838cc2ad0a0ac0522
SHA1 83c0dab4df70697450b57d4b04f724cf4d42438a
SHA256 86fecea853f7e889b56bd13e300b51589b93a848f73e73a55c769800488e6748
SHA3 72ceca192532b3d21c3fa093b352df024652666df9a3c3680b34d92faf54ff0c
VirtualSize 0x18
VirtualAddress 0x1f9000
SizeOfRawData 0x200
PointerToRawData 0x1f1800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
Entropy 0.210826

.reloc

MD5 236455689f2056c3e746c75ba1583fe5
SHA1 0630514bc2af24da76b9076fa84cd09eccc780c5
SHA256 80b6681d34a39dce9cfa2a9344eed09a5e71e6d4b710c4a718f78118a63ce6b7
SHA3 a268feb0bef218b03201a3ea371326a164e7c303dd4483a15e6819ab3ae624a3
VirtualSize 0x157f0
VirtualAddress 0x1fa000
SizeOfRawData 0x15800
PointerToRawData 0x1f1a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
Entropy 6.69045

.rsrc

MD5 ff8bd84a72bee5022c83a1447f08ea90
SHA1 865adce1de27d9bc073afca9f15e73715a42827e
SHA256 4520a564ca718a35099076e5da9cf154333592bb47dff0e2209cfe28866fbe26
SHA3 14842a89042f630c2025e80804950d58c523945d522fb53101fc3ebcd2e48155
VirtualSize 0x2f600
VirtualAddress 0x210000
SizeOfRawData 0x2f600
PointerToRawData 0x207200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
Entropy 5.20944

Imports

kernel32.dll DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
user32.dll GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
advapi32.dll RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32.dll SysFreeString
SysReAllocStringLen
SysAllocStringLen
kernel32.dll (#2) DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
advapi32.dll (#2) RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32.dll (#3) DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
version.dll VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
gdi32.dll UnrealizeObject
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixelV
SetPixel
SetPaletteEntries
SetMapMode
SetEnhMetaFileBits
SetDIBitsToDevice
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
Polyline
PlayEnhMetaFile
PatBlt
OffsetRgn
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetViewportOrgEx
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetPixel
GetPaletteEntries
GetObjectA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionA
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetCurrentObject
GetClipBox
GetBrushOrgEx
GetBitmapDimensionEx
GetBitmapBits
GdiFlush
ExtTextOutA
ExtCreateRegion
ExcludeClipRect
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePen
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateFontIndirectA
CreateEnhMetaFileA
CreateDIBitmap
CreateDIBSection
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
CombineRgn
CloseEnhMetaFile
BitBlt
user32.dll (#2) GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
kernel32.dll (#4) DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
oleaut32.dll (#2) SysFreeString
SysReAllocStringLen
SysAllocStringLen
ole32.dll CreateStreamOnHGlobal
IsAccelerator
OleDraw
OleSetMenuDescriptor
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoGetClassObject
CoUninitialize
CoInitialize
IsEqualGUID
oleaut32.dll (#3) SysFreeString
SysReAllocStringLen
SysAllocStringLen
comctl32.dll ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
shell32.dll Shell_NotifyIconA
ShellExecuteA
SHGetFileInfoA
URLMON.DLL URLDownloadToFileA

Delayed Imports

1

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.6633
MD5 ff4e5862f26ea666373e5fab2bddfb11
SHA1 cfa13c0ab30f1bbd566900dee3631902f9b6451c
SHA256 b8e6fc93d423931acbddae3c27dd3c4eb2a394005d746951a971cb700e0ee510
SHA3 91dae12a9f43c5443e0661091a336f882fa1482f75fa9a57c9298d1d70c8ae69

2

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.80231
MD5 2e87b3c111e3073a841775c1f8ec5a90
SHA1 20292304fa2ef1bfdc4a1000e90a1c16d4765a96
SHA256 ce19ace18e87b572e6912306776226af5b8e63959c61cde70a8ff05b3bbdcc41
SHA3 9527f09e739c2064835800a7e5c317cb422bdd7237f00fca079a1c62f58a2612

3

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.00046
MD5 a04c3c368cb37c07bd5f63e7e6841ebd
SHA1 699300bceaa1256818c43fecfc8cad93a59156b2
SHA256 ee1c9c194199c320c893b367602ccc7ee7270bd4395d029f727e097634f47f8c
SHA3 58722e3138aad1382e284c1605ecd665ced536de4906749ac8d6e11252cc9558

4

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.56318
MD5 9929115b21c2c59348058d4190392e75
SHA1 626fba1825d572ea441d36363307c9935de3c565
SHA256 9d9edf87ca203ecc60b246cc783d54218dd0ce77d3a025d0bafc580995a4abd8
SHA3 fea156e872544252c625076a6bf3baa733ee5b3d5399716e156734af7a841369

5

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.6949
MD5 f321ad13d1c3f35a05d67773b4bc27d6
SHA1 30aded8525417e2531d5eb88bf2f868172945baa
SHA256 99676c52310db365580965ea646ece86c62951bfd97ec0aae9f738a202a90593
SHA3 04c839da98a8c50a36697076af5bc6d527560a69153b2f718f065908fd4fe3ad

6

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.62527
MD5 5ca217e52bdc6f23b43c7b6a23171e6e
SHA1 d99dc22ec1b655a42c475431cc3259742d0957a4
SHA256 11726dcf1eebe23a1df5eb0ee2af39196b702eddd69083d646e4475335130b28
SHA3 b358d8a5b0f400dd2671956ec45486ae1035556837b5289df5f418fe69348b3f

7

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.91604
MD5 6be7031995bb891cb8a787b9052f6069
SHA1 487eb59fd083cf4df02ce59d9b079755077ba1b5
SHA256 6f938aab0a03120de4ef8b27aff6ba5146226c92a056a6f04e5ec8d513ce5f9d
SHA3 0f1c6c0378a3646c9fbf3678bbeeccf929d32192f02d1ea9d6ba0be5c769e6ab

BBABORT

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.92079
MD5 c987e709cafd3a191333610e4c44914d
SHA1 901e4db5d379a222dd416776633ca9738db32e14
SHA256 c0ede68a98bd2bc58c78564dfb42f1640dc29766d3ab2782ab8b5ed28c6fd414
SHA3 7b14efd89b642988834daf08c97db5bb847f941d75f44a3915e3e5dca2510c53
Preview

BBALL

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e4
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.16995
MD5 f8a9b4a8f4097cea6a482026484c4d12
SHA1 2057a63edce2cbb165512bfad326728cf1053d60
SHA256 46cfc44afa8ab31ae3da35fa8346e4c085c441659d9992b09fc8ad517f2b289a
SHA3 f3852a8bcb1b38f498231cca2b0427af6c4c52886f92f980968d40fd8e8c5337
Preview

BBCANCEL

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.92079
MD5 c987e709cafd3a191333610e4c44914d
SHA1 901e4db5d379a222dd416776633ca9738db32e14
SHA256 c0ede68a98bd2bc58c78564dfb42f1640dc29766d3ab2782ab8b5ed28c6fd414
SHA3 7b14efd89b642988834daf08c97db5bb847f941d75f44a3915e3e5dca2510c53
Preview

BBCLOSE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.68492
MD5 6c2fba077bd332b3a48d6b5e43fe4a22
SHA1 e7d12e9fd5659881742773884db8ca537765dc81
SHA256 f8e1696801fe89b88936ac4226cea03bfa5aa345aa33ca982822ae7fbc6557e2
SHA3 39193ea4b2ffb32f16c75ca88ca20465a374cd928aac9b4b3ba5739bbb6222de
Preview

BBHELP

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.88085
MD5 1021657335ba4838db07f5231723df3b
SHA1 68f04f6ecbf628029e4e0061392029edec2b0e43
SHA256 cb7421b5c6af74c3159c361f3bb78bba8a488d8979d1250e106fa96cbf928789
SHA3 888ed4f8473561552d848c3d6624e2331c4ec7795bc5001237cb752b96e4929c
Preview

BBIGNORE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.29718
MD5 098b5f6c87471f5a83a4e55a6a036d6c
SHA1 e16d9186ffa72cc3e373cdf8e40f9e570f0082e7
SHA256 41f05a4df5f42d92b879493d51941de342d36460fe15c0f3b63b2b706b928fef
SHA3 7939e94342a45e6742dbf7c93f5b42fb861ac81b1fe5e8e04e49c0421338b2cf
Preview

BBNO

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.58804
MD5 8832519641f28981f87e1b3006896eef
SHA1 916eaafcf9ffb12bfd6338419bdd22764778ebbd
SHA256 81265e63c89ee5c2e5126452e22f84e9be9452449f3e5959ab6d346cb58b2bde
SHA3 39743ce838b215420cbb732e107e4c45f63384dcdd5b830d15097fa06cf32cc2
Preview

BBOK

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.67459
MD5 4b349737af0b7e5a5308dff7b93b274b
SHA1 b3d36a94fa9a57ad7a68a3b30be92947e811e760
SHA256 6b97877cdd547e6ba6467f86055f1fc7b06660b034439f0da4c137538ef14a83
SHA3 b9e9646067eae58ad9aded92130651d090a92771bae94676003e9aba47f77cd6
Preview

BBRETRY

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.53344
MD5 7daf7522622a4fe823701fd2ff6f4996
SHA1 89f40bad3052afafbd71e80c07b928ec1aa7f4e5
SHA256 c925e4a8cbf6d42dbb1220a510614df725558f8d843338982bab8c4e020f6429
SHA3 95aa592de7b91edb5889cf5f9a7b042d3b6f6910bbd657ba85632f0d0ed557fb
Preview

BBYES

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.67459
MD5 4b349737af0b7e5a5308dff7b93b274b
SHA1 b3d36a94fa9a57ad7a68a3b30be92947e811e760
SHA256 6b97877cdd547e6ba6467f86055f1fc7b06660b034439f0da4c137538ef14a83
SHA3 b9e9646067eae58ad9aded92130651d090a92771bae94676003e9aba47f77cd6
Preview

BS_BB_DOWN

Type RT_BITMAP
Language Russian - Russia
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.39245
MD5 7bafb51d4b019e3fb9b428297f88f03b
SHA1 9abfa16f0e9c1a5b727a960f56de9644b3ab57d5
SHA256 7f04360ce706015921e55d0c17c7b335acff04b322d5d4ab81d4b96349f1b758
SHA3 e27b9b5673f754b60c775f58b0bb37d69de72afbe5256c420afabce721919a20
Preview

BS_BB_UP

Type RT_BITMAP
Language Russian - Russia
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.39245
MD5 0c6ffb2ff6fe4d1f1c44842329f7d39d
SHA1 12753a68f21ba4c92a00ba8de3dd99e8117ebeb3
SHA256 1321e4196ce3e9c83cdd0e1f21bad66f44c1a9d2807d3139c1b019dca31eb49e
SHA3 84342486f8a5f82d1a44c6c952194e4e6d7454cefcd61ec2a2c5bb177a91b8f2
Preview

BS_BRUSH_BD

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.44837
MD5 7ac956d8adbb7ba24bb15e3379bd72b0
SHA1 02e18aad7db02140207e78103699b82359e79a68
SHA256 ebd13873d1a0343888866656f5d739b01b75fc97a923a104dae1858753ebadc0
SHA3 f3a25d5723c7dbc9ec748d3395e7c2ab7aacd57e08b079711d2e6f4e7627d3e7
Preview

BS_BRUSH_CLEAR

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.8125
MD5 65f68141afba8bc7bb0f93237b11d213
SHA1 b61591f40bbfdceb93581bff288f4e3c7821fd51
SHA256 3be93087713ebbb22cd23b4e74fefcb1ef870593337831c87a2b1f7c9fafdfbf
SHA3 9caa3af8b78a4225d889a584e9932e8a36418f385a6248f62b9d4c4ce2896f34
Preview

BS_BRUSH_CROSS

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.33319
MD5 994aebee7c24b7b0efd78d3da6cf1da7
SHA1 deca06f8a37b0736a26afab3307fc5867e1866e5
SHA256 c37f658a42d121680eb5c6c86e48b11234b90525cbfc61598197a106be6a71d3
SHA3 d2687faf429438280ca5fa6b3d8b03dc0ca45b7926597923f9e83fa5af292b9c
Preview

BS_BRUSH_DCROSS

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.55179
MD5 5fce0770d9ee896f307129ae6508dbcd
SHA1 c3239740daaa089665f224f5bfa00cbd88f981af
SHA256 5cd79c6659aa48863e4a63507536ef73b11601be53f9d175898aaa6ea95cee45
SHA3 7d65b3fea38069b1d1fde85d62d5e6a11a91f27cc6ab118286948b61c545ca7a
Preview

BS_BRUSH_FD

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.44161
MD5 5212c7fbb8e86e1ea60cf5d63c920624
SHA1 a5f6a14aee32f2750f40490b92054395cb811363
SHA256 722c4ff07a55291ab699d98121fda489520d555824c7a079006d45c1d672ef35
SHA3 b68b4d67d5e878af25f20ec6f5b1562b30fa6a8756dfd49e5f89ec24f78b7a61
Preview

BS_BRUSH_H

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.92428
MD5 3e085825e0dbbecff5108e0076545f84
SHA1 9cfcd257684c925fbcc81f2c388d0d637df732c6
SHA256 d3a6f2bf38094b673c94d3e86d56e3beebc8d18670686c8ee18dd97ff21d187b
SHA3 fab13e5b63ffef9f59214a16527908895484bd64dacb8c245a7f015e6ee94248
Preview

BS_BRUSH_SOLID

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.24989
MD5 1a1990e8256d93c98e182a4a08239622
SHA1 e29bf2ddbcb9680a937d09efa4b1b0898eff62f8
SHA256 2c5c4bb7853d9f1ccb39af5b2ca614fb85d651652b32e531d03b815d7748839a
SHA3 6a8843b14f84f0ed4982c1f7319c9bee806f4ce9470dd1db7b3c74e3c9ed82a8
Preview

BS_BRUSH_V

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.28795
MD5 75830d2440cd4877fa13968e54395ff8
SHA1 3fb77ce20f008641205ee61531b00bfb6f10cc78
SHA256 2711f7db41a6a0c6fce9bc45257edd7f7f5017ab0b334321b5671e3b09c7fa82
SHA3 a54592c1eb321b79414bda244dbdb53791d0fef8b1f78e05ca521a6e903d0b1b
Preview

BS_GRAD_HORZ_IN

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x6a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.97451
MD5 f9c24e4397d0c16c64e0c07a7fda5b13
SHA1 c3ea2ad3d67adb81481fe2d464cd2c22ecdd02ff
SHA256 89cc168a1996c5a1fe527c4713730d6c7db12abc17e45887ffe643d85fae8df0
SHA3 6464c24797eb4db108194639d875c85444e9b6d92e4282f266d8069a06add09f
Preview

BS_GRAD_HORZ_INOUT

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x6a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.88788
MD5 f158c3d1bc53c8bebb369729eb20dbb6
SHA1 19f699ee3a574abbdf4fc46f05fdb09755af1e43
SHA256 7c6f12a9819e5e54814c7fdc6b6362a8b9afb36216bca1f6b42d5c7239d92e6c
SHA3 d3c4401734d9ad4a16b8c58b182a4fb4e677f01a795a1d7de1dc20a0f59a1b3d
Preview

BS_GRAD_HORZ_OUT

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x6a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.97451
MD5 08aed00ec5c5e6441ded95374413cb11
SHA1 b4bb72ac13e72082f67a412f8d87d0850e861b85
SHA256 d8212eb42f366885bc1b7a39d68dfddf92f0050a90b2a509e99fe84ae7a91d2a
SHA3 69a473103040d75256b30d2cffec7cdcae50a19ae1651d72f1b5dcc06e3e3b54
Preview

BS_GRAD_VERT_IN

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x6a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.30493
MD5 34ff63630e04f89f26938b2629bba336
SHA1 f2a9a07515d4aabf2d503f966fe943b6e1881f7a
SHA256 6528ab80d910170002c5059f8da0b99b99dcedf58dcc9eed539c2e06cf723e44
SHA3 bdf163a88758882ea33346c9c3f754ff562b516a96851ed12b42d26578c270a1
Preview

BS_GRAD_VERT_INOUT

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x6a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.23726
MD5 a10a40ece00dd067cd8a7909b3014234
SHA1 2ee6c6e1b08a57672c9acfb0c59d2affad06383b
SHA256 e5492917761d314263e833f7aa0e5aab9903b21a71a44a24eaabe0ee698104f6
SHA3 5c9276c0d0d33f11b694ee80ec720291036d1730c305b15317f93a57f90ec13f
Preview

BS_GRAD_VERT_OUT

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x6a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.3019
MD5 20ad72020f89628afe2ccf3f54fdd20c
SHA1 4f90e55febd5401e0bcc71b94dd2f47c814cc769
SHA256 1c5833d594c172227a4a9d9e0917339dc7e019a24b25e1fc33829aa93c52f6ac
SHA3 51054a93c4ca0349a56ae40c1ac4abc9b7c28d3869b1a9524f0d7a5e9438e650
Preview

BS_HRL

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x108
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.58393
MD5 cf1386a428b9c10ee983b2116ef6230e
SHA1 6cbe47ea49f0ad1936fc748114a23c255c1bd893
SHA256 83c2806d991ac20f5b9d7c17e30e975ab62f69d2c14787b2e0e2e10c269e03e5
SHA3 bd68e90ca9befa7dea48c60bd48afda552e77ab147cce7443615fecb24751ba6
Preview

BS_HTB

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x208
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.90768
MD5 91eb22e4507f704f70e6b87d2106d0fa
SHA1 f0f75c295a1a6ce07f0580c5a66dfdad2d446995
SHA256 ab4afc0c66ea1cb969afcd378b095d4300b1a7c43df39e84465a677404fa9f47
SHA3 6e9c6fd76609914bd7d2fc791e3243a9c12b48935d781d8b7aafa14110bbcf43
Preview

BS_NEXTMONTH

Type RT_BITMAP
Language Russian - Russia
Codepage UNKNOWN
Size 0xe8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.36623
MD5 898aaa198c51fe45c0820ff4fc53dedd
SHA1 3b202c3dce276a0bdff595e03bd1f1dd389393f0
SHA256 41610c9e6fc9dad564f9f951ed7ae6b9d5b286babced7c1f2c10e9b3d9cbc794
SHA3 3b18ca7b63be6828b7f34373c99b583a67ddf2a94567b2f60eb0278c60c5fe4b
Preview

BS_NEXTYEAR

Type RT_BITMAP
Language Russian - Russia
Codepage UNKNOWN
Size 0xe8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.52033
MD5 c9417738aab72fe6266b5dda3b5b03e9
SHA1 060c4e8eb3f3542ca403a3a5e66cf95af743b37e
SHA256 9830fade33ac50ead3ddb821069e7a8cd23f6f9d949803d3af39adbc6892ee7f
SHA3 e13a5ae9fa74891491f2739484a9c5e55da189499f353cf496eb4aaf378ae5b5
Preview

BS_PEN1

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.90352
MD5 6fb747d1e35ba591f7893d46788dec9b
SHA1 6235b92ce88ec2ed2476c09c92bbde6e77e733f3
SHA256 e8fd5ca6a4b996ccae63619cc2f959a9c9fb4e7515436bae55ec58cf1d709c73
SHA3 4dd45db8afa605359cae914ac3e8e2fce2b01e9fd6ac6302d9bff57f24398222
Preview

BS_PEN2

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.95831
MD5 a50ac68326db8c45eabeb94a95a42a44
SHA1 02ba84b0f58a8b4ca4a4748e8195ee7a67216fce
SHA256 0ae174fb5954cd956289582217f6c3b3207b758f6920092c45bbfeeeb3c58b9c
SHA3 e4eb1119a56b196e284ffd96436616ff01031b09c7939bb77d1fd02344ace4bf
Preview

BS_PEN3

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.9978
MD5 641f8a3a0643ea10e10875389fc48434
SHA1 17060245aec12a617a12f45cdc623810d279e808
SHA256 d28196656c12a4c86deb88fc530e29859138073199199122fb8205dc8161531b
SHA3 1a3a623f388bac2bf278646f4808fec2b6750fd145eecb0cb3afde16adea3e71
Preview

BS_PEN4

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.02312
MD5 d8b0b01f26f577deffcd724a2aa9d071
SHA1 d68d2760d5049d46ccecabb51251557983a34feb
SHA256 a84b3d3085fad91b187511c13269ea4df733fa31ab4b3afb1ba16909c186d874
SHA3 682e26c67183ed4c8c4a6eeae0786e785ddb49eead36177af4a1bb884db899c7
Preview

BS_PEN6

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.03344
MD5 211ef1ed59073134fe17797027da1c25
SHA1 852367e09b59dc01e11e31c9db3774723aad52e0
SHA256 3ea8a96c40efc2f1ffa42b12d10317ee2bf4ba6102d4bbc7cf3a7bcefa13eecd
SHA3 035655d6dea7e3e4a472eb301fb7cf5757f2371b954e76e84c33b13b10af3e64
Preview

BS_PEN_DASH

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.04889
MD5 0f9f4d9ab48c437d3a3b82b47ce554c4
SHA1 e8ad92fbb2ea67c423728e12bcc660cd49e35b4f
SHA256 253e29265a28ebb007cc483f1e24b63dde9abf26af85fe17d6c60c869293adf9
SHA3 50b9a097e0d0a0279671202be85cdef3af3b12378e48b3219bd637a390566193
Preview

BS_PEN_DASHDOT

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.04204
MD5 251691efeadb27e85420ddecce8d2e71
SHA1 18d09a0f8896f743c532152400449a926380c16a
SHA256 db719454cefee0117f9052c344cbc7f3c9ee1fc53a90850aa0640e3cccb9ee34
SHA3 3cb289249f9235d9f591e13e99ebdbc95e7a346a8cd6b88161eba617d91a904c
Preview

BS_PEN_DASHDOTDOT

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.07654
MD5 f1724a5b0a577ab4650b7757f4f1a50c
SHA1 a90788f8385e9cff92f14a980a9ae992ced9d968
SHA256 38f961ad9452ba8fc9673ac16dcf782348da5a87f933b4b923cce85955e53238
SHA3 88ba1590f01c4523b46e86d2e78926eead0fa4ba997847b16844dea90dbbf4b9
Preview

BS_PEN_DOT

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.12101
MD5 d439a2f89691ad6a24d6206b47afc731
SHA1 087e4b6b1fd5f02b0fc8166f9d749d9365897aa5
SHA256 403959de2a39700480fddd5e724aad60da3be906f174815cb2514e735f0ea745
SHA3 39390757abab6c3976f1914c60837229298bf4261c87466a4afe382afd7878ca
Preview

BS_PEN_SOLID

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.96999
MD5 63f738c82dfb7894b0c24f6ca14d8ef3
SHA1 d5c11307cb2295d28444a31c220eae8e018b1191
SHA256 82a0b5a07f363d1c69e251e47011261e5a83c89a796c92ca4eeec2dbe995c40d
SHA3 d4b262dee17d51e901a4dabdd46a2343de4213cf82db349af12e10e21d1bcbf1
Preview

BS_PRIORMONTH

Type RT_BITMAP
Language Russian - Russia
Codepage UNKNOWN
Size 0xe8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.29255
MD5 980d3545c114ec9bfa765932e230d6be
SHA1 cae147de42a5533673fdd78095f397b2ae5a0c47
SHA256 554eaa41121730192fff5d000cdcec6867a377301ab5f2d56ed92c51302ef7fb
SHA3 d82cc4a0c77cb3cf02f2645f112587babe69dc9195ffc25a4c90fd6978024ff7
Preview

BS_PRIORYEAR

Type RT_BITMAP
Language Russian - Russia
Codepage UNKNOWN
Size 0xe8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.57114
MD5 ac1384ae5e2eeb4ffb226ad55a1b75c4
SHA1 fb7c85ccd1d1ddc2b864daf61ce12f251e4dbb20
SHA256 b894f460fa4a38126fe361336825100e66409a9cc7b968a7e36bdfab98dd5a6f
SHA3 910980fa6d1797eb875681b8deade3f5a38e3722d21b3c5e76299305dede0eb7
Preview

BS_SHADOW1

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.86083
MD5 871d08bb3ed40a14597b4ab0a10e5565
SHA1 b71bc8df6510e0052ed750d62ff3f7202244560b
SHA256 d4c9b75291f4091d5689aa28b33fb7430b58416717fc62c2648250923e0a4d17
SHA3 d9202a42e8bd50df57cbf1bd5605c699a73f8cab36534ca9832dfec8d003c3b3
Preview

BS_SHADOW10

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.82746
MD5 0dd771a2ec81cb6854b140b602150f54
SHA1 b477a494c56093bae4409f7a01a016c227da6b52
SHA256 0a367c16138e6e2a0740d105860e357909ec5595e60214118a647c130b4ba9b5
SHA3 e58120d82fc8f7ff7403584f354937bdfc411f6c37a5fc99cb451793c15a6417
Preview

BS_SHADOW11

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.37373
MD5 e9bb59441be47b635ac43cb8281a5d11
SHA1 cf1fc3b6e0073063a786b8077d2f5d68d02f5f87
SHA256 f6f35903d4c0c4d6bed3b27a54d2c1cdd93924bfdf21d3762f5de5bfdd82f347
SHA3 526245b0da3a91a3bbba6a7f506106c99a8dc822ca85137a0a54c4fe5fe6edb8
Preview

BS_SHADOW12

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.37481
MD5 4e69c57b162badcad02bf7ff5e916aa3
SHA1 6dd050f29a1ad883709bfeaec550f52d68275056
SHA256 e59426cff0fd45a74e7c8bd176dfccf3de8c4991f55c4ccb7ec4f59a51591107
SHA3 183723d4dacb64c944219b68949e75f70049107b4206f9db70338bd248681c0d
Preview

BS_SHADOW13

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.85445
MD5 4d73fbcc29c855b682ca1d75a611834d
SHA1 2b04606ddd428cdcf880197c857c1180a22a329b
SHA256 a59454128299ea7d52705ba161600108f7fb3e44ce68aee848c0c0c1340d2876
SHA3 abeb874f17b682cba0e29a23223ff06fad3fd84cb56c4563b48ecbdf52546fde
Preview

BS_SHADOW14

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.49713
MD5 cc18edb6118248adb20dba4d1ff6673b
SHA1 a56bc2ac972f14a93c057b0c79b65891b07755c6
SHA256 485d899304893829ee8f35f81c88ea181fa1d787712048f057b32dad30dc7f7e
SHA3 baad38a952d5240d9ab0cbea76f8b9c3ebdf7c990a198e4d241b9e5cf3f5bec1
Preview

BS_SHADOW15

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.53098
MD5 50a473f4fb09808f6978cc678c081544
SHA1 1fdd11bf4cd5587909fa2ee1a712bd0b60acb426
SHA256 ecab66730729046eeafd52b1a34555d7a8e5819a21f601a2c482fb98fb5c837e
SHA3 168377d5dc51370131416670f9c373991eca61119008f8fd0c4b6cdae3695bb8
Preview

BS_SHADOW16

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.52593
MD5 942a19f747e71081846abd636a08e551
SHA1 794aa904e3ffcbc60d04741dfdc707da7af69085
SHA256 e54fbeb066efe41c5d4b9868584d1c8abb5e0b554060edb335aacefa0ec91873
SHA3 4806f0b35c5f940f95b9cc6a49baf0d510cb5edd775a7d013524e6c60e496237
Preview

BS_SHADOW17

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.19425
MD5 534568d51ee2f09ac9c7ab21b7463813
SHA1 9537ea6d36d7432143da1932254c12ea03d61b75
SHA256 273f7d12d1cd12e7bc94903f61715d1368120abc2ede9fa91d45e6d67ae61790
SHA3 03ed3bf181476c5b4995b82ce2c59eefd1f7ddc71812258104433c5ef1a5773a
Preview

BS_SHADOW18

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.18062
MD5 b79ce2889fce845019fa4ff266c87072
SHA1 b9e47b76609c205d6f9751b2e5def199ccc2ab53
SHA256 dfb7b13058c9ad544798e63c36344e16daa90ccc2cdcce93e74bc05df381daf1
SHA3 5d6fbc48b9d5e50224d5cea896cc07fb07fa17f8be9e921db8dec0c28ee5dbce
Preview

BS_SHADOW19

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.35805
MD5 8ced8f761f79c94b352b185e4eae345a
SHA1 b7921a96d34b0785849e15e7074d3ef60d8615b2
SHA256 7531d800e2ac168ec5f3d447f9df8486098e6641d8d232b3ce49df4c51886066
SHA3 0fb27548d5bf5b280916c324e03a329d5a258b1a968a3256bf00f326210d4ab8
Preview

BS_SHADOW2

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.7466
MD5 647716165e0cb6ab9b902b48c9f87c23
SHA1 982430c8e69393bd1d3d687c077aee557f1bae36
SHA256 de893f57b046fb4d5c1f8bc34b7fdd6b85a6b23d40c34fd64dbb0f2ace527fe8
SHA3 b7ca574b0d673250e455004e9d0bd578992d62629deb55048f9e19b25ad1b442
Preview

BS_SHADOW20

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.57936
MD5 b238c323001b2ebde6fccc778b5eaaaf
SHA1 6071f18c7b706b1a634f3d7dc1ee3282b134ebe8
SHA256 5768bbc5991304d65c607762dc4b17de1ecdb3e4964b79994fd8ac664da6d843
SHA3 6cb28d76f6069369f4341464cd6df32f39cc0fa3c6726140e5a01f6f124b4bc5
Preview

BS_SHADOW21

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.68523
MD5 237f770e459cc925beca94f3246b2ca9
SHA1 59f8b46b09673919430f17210b8a88796dba4159
SHA256 1be7ca4639b3c8ea8cdc6c1eb77e99ada64beaf30939c0b88e06c89d75055021
SHA3 542280a4dfaad9bd388f2b4786292c428188de993db2e2b7c38acec9afb30c7b
Preview

BS_SHADOW3

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.27817
MD5 36c67536ea2ce109b653d20f4652d6c2
SHA1 5fac0ca2d4892b3b67660d4952dc238ef0cb4ecf
SHA256 a283c315f1e183102d4317456ef28c69fec23ae64e862fcb252e22defd8b552a
SHA3 5e0b8c6f8ae0d3d6530eef2567f0eab7e3732fa255e5d297ee19a7af01aeaf6d
Preview

BS_SHADOW4

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.36822
MD5 c6cef8b419cf2cb3c340704a0743350e
SHA1 da09a92a63343f507232da8382efb7e5b619f76e
SHA256 9ff19ef36cea7c1c0ca597149f0b0b62f7c67851e587e262f2bffaf5d4ec7bcc
SHA3 35fd8e275512fafd5c8f419ed0c8729ecdb11c04bf3f49272e8facaa1a49e85b
Preview

BS_SHADOW5

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.86083
MD5 57a8182f88e563d2f1c2e0dc291eae3c
SHA1 a19893840ad81c227c47a6231715f9cc36877cd1
SHA256 94af347c5203b706cd780558c83d3bc02d41e8f65106442b6af3582682d35b37
SHA3 b2deba902033df37810f88f1f08b1a6d196569588a1246c9eb5857151c55d4c4
Preview

BS_SHADOW6

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.85644
MD5 9cf4ce4a4325bcba2fbb1614b0fcd8eb
SHA1 398575f4af403e9083d1e1ba53ec8fd9f53a8511
SHA256 838591c1131b840e443711fe4327c5fcc148ae43bc4a634f5791673f1cbaa95d
SHA3 b2162f6323cc9582b2a700945e6ecbb481a5dc2c08fab2c774086c234b675499
Preview

BS_SHADOW7

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.5621
MD5 c2be0cef9cda0bad06547f44a5c76950
SHA1 9261618be4fdc5fbb218262593d77650cc75b936
SHA256 42dc07b3e0e07f34379918dc3511091981cd24bee6820ecf5ff3d07bdad24a0e
SHA3 f0dc8c6b1e8c39a3e8ab4e1675b2ffbba36602432ab7ef9fe86bf2ac4c8628f2
Preview

BS_SHADOW8

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.55442
MD5 9a621ce49816c50a8fa72a7901bdd355
SHA1 d1e92ce008bbb2a85622ec208bf3963cbc48f5f7
SHA256 088f79cd0b8ac18c6102c62fed77c6de738e946714e7008591b7e25772f9987d
SHA3 8768113324ab9b44a1cb2ef88d83973882856a37f4e4dbcabdfab2923fcc1b78
Preview

BS_SHADOW9

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.42861
MD5 bcefea915f9b5848c331f4045895942a
SHA1 1abb1d7bdf1d7ff471290abf0090c44f62283193
SHA256 e4c438b44132fdf836190b3cf9d7f0a72377321a9ca08c102a33468800cc44e7
SHA3 b6078ef35bb1a42f0f3929e75f960ac0b2ca61c5d03d424a116a020e62e54e4a
Preview

BS_VRL

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x118
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.56373
MD5 ff3539fd3adad872f36bf6f7d9becae0
SHA1 9429c19f0aca67bfb520a76bd6fcccccfda51688
SHA256 a2e8470b912941c6e3ef2c6710f5cbb38f9f0d404b69badcf184362da755d097
SHA3 b72a7bbfe68f5df34a03ba1cdc36e3626cc059aed3cee381acceb6e5391548be
Preview

BS_VTB

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x2c8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.07803
MD5 a09d830140375e2c7dad9fde985d785f
SHA1 22d92c5068fa4543128a2667c919491ccc433e35
SHA256 d3d364ba63ab3dd6de6e7f0d111cc1c63382b656838aa011558fee0f13fd0795
SHA3 ecd5693cc2f4669cef46d16c6bd1f059d360dda0f3285a44607b728cc6699a37
Preview

CDROM

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.78825
MD5 6bb98462b4b00776fd17038cbf1fb4bd
SHA1 f40205d022d824e0b7d930151138991504af3dc6
SHA256 4f72c53f3bac49ce0b7c248152479a14e383a90c9fe95edbddec9f03784ca698
SHA3 2e951c0dc6c1e7540825793fbf48393c33a7156ba8a9ce6343a06323ef1716aa
Preview

CLOSEDFOLDER

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.01477
MD5 7a7f1740c64d8b5af56ef7611410255c
SHA1 df7641fd3a5588e182515b337dcbbd28f2de12ab
SHA256 d20c1e7cdff419e1efe08e1b91b4c0d772f7436de618045f7e0fdb3afb662849
SHA3 111928d2405474821d76f758f1ba2dfb15368f64bbfde0644c9ec7acc5f56c9f
Preview

CURRENTFOLDER

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.97986
MD5 53466cf475196c6a883514140b1253c1
SHA1 02f577f238ea87b3400ec0ced2315d53cddfc7d1
SHA256 0f5248f16fe2b1e73aa9be760a6f0bef933dc09e3cc6d8a8958eae1ce0bd0f97
SHA3 e38ae4779212d26cd9f3f9298910aa52dbbbce2527673aa9ada7de9deb1a817c
Preview

EXECUTABLE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.96393
MD5 d623fd4c67881a744b9783e77cdaa9a3
SHA1 07fd1454decb874d847cb6e3a847391e3b03865a
SHA256 4a217ca811d9c29363ead1d67b7ffa0f6e8b8e1d1a068730f4f7d557c3710b44
SHA3 2aa8c8713c75f32e131b449444a6b570ee7be8da50c2f7e8a499cef693339e85
Preview

FLOPPY

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.63812
MD5 c3a2737f14f437f54cbf251782ae0a45
SHA1 e0a402c41f62804664b9d9cb9bae9615bf60f5ed
SHA256 2cb60d7d674640457497f54b82b42afaa8a2cbd7c28a1aae35f128b4471cfaaa
SHA3 eb1bb0ae168e1645292c6759be7ba322451b7035d87f01f8bf0f548290bb1830
Preview

HARD

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.62043
MD5 47957e26414e5a0cf93c9049b1a7f2a2
SHA1 08a70125bb3cf069d224c94dd4f4632b8f671a61
SHA256 a36fee3ac0a24b86169997e112d55de38ae2080815d2104c73bc90ad4eff5cbe
SHA3 59409ff1a314a69758371a1dafa7f175812eb3821240ff5b25b7b881b9d58deb
Preview

KNOWNFILE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.83217
MD5 7a6c4028ea8bdbe916a592614cb67a33
SHA1 e84fa7f028b79b4c641a2d66ad1ad296b7e6a262
SHA256 d8444a0e4c91df51a151d4c64256e5d5f62a3e4a5b17ccb9778422f0e01223c3
SHA3 de4dcc10f2110aa3f30104c8ef6a447c8fb22789a236072e61e38d5e16d0e0c9
Preview

MENUBTN

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0xc58
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 7.20451
MD5 8c47d7333a94bb0a7dfe92ef8a0ce43c
SHA1 b4be88c0c7802b6eafd0429f073959d1a3ac027e
SHA256 e5aba431a82d7f8bd638d71419268cdedc359789eba1ace124d05aecd7777ed9
SHA3 2b62dc881d223f5f24144c92c008f532e41f250ec4dca9a9b6fa693211c6f975
Preview

METRIC

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x328
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.42682
MD5 0afc4e926c60e12a434d80521b1fbb4b
SHA1 597459391f14ec8953b85f22426114ad93405cc7
SHA256 fc1428df18b078f14738c8064d4705f530414919f5ac7b513f1abd4f39a8e891
SHA3 4ba6c424aad58eb4942f12b16220b47de6261a7bafc18aae9b79b9a0433c732c
Preview

NETWORK

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.73457
MD5 30e739f7ed3dd033117260d97bb67e99
SHA1 b97adf513dd432cf039cd9425caf9b3241d7d233
SHA256 caf10784d936136cddde6b4489d7ffdc6098f8050a81c7e02d1ebdd9878cff15
SHA3 1511f9fa160bee36e6099269dade08d1a5709a22360ccbd4060fa6b54b8fb7d4
Preview

OPENFOLDER

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.0519
MD5 9b7d7f0031cfa6a137ff6436e59986fb
SHA1 20eb56f55581540919b119113b567bec618c3f95
SHA256 e086586402b8c51192766a01a37dd2f2b4b657bbd4d5b721f1eed692678f6ef6
SHA3 86a19763883baaae65d79b7e3c64525f16b942bd1187792bab8f56f7efaa2c56
Preview

PREVIEWGLYPH

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.85172
MD5 48276e8432af5a23af78e1d23de8ef5a
SHA1 12fb57606d03e3fe28263e3e9e96b4eedc79aef7
SHA256 78507a772de646626b196a743cee75b298a68c33a0fd482842071519d59037b2
SHA3 1cf31d53c7ea5dbe90181cb2db39ce6cd21484f5495b0af59f5c6164d9b3d3d0
Preview

PS

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x328
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.28435
MD5 f7bf76e0dd12eb824d9a73cde65efd91
SHA1 60365dc98983fddeb6558fd842f436e6e127acf3
SHA256 4c83e107aa55577b4a2daeb66599057b2e7e6676afe75a43de6bb14cc5384458
SHA3 22b3310a994739b51389882080a94f1cb3d145cb7bfe20a27eb1a77e485f3df1
Preview

RAM

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.73213
MD5 0ad765e61ab984673ce3db3a91fc6182
SHA1 2b67d4f1eec717c3aa2472db56ab4472c96b742f
SHA256 5bea8ae9edb158f767d478703ce5153b8773e1e0390fa2c4af83f063c6c2f1fa
SHA3 deda4d692b33e267292ba10effd899736e090a1af7f55028cdaa0ef850a85945
Preview

RASTER

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x328
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.10537
MD5 6fa01af86a543b7347c55f4a727eabf3
SHA1 b0a3ffaa966b551172a3b5109476617f5b76450c
SHA256 661baef06507696b2bd4d11d656bf6005399ff7b8af7934a2e9e6499e366fe03
SHA3 74e09334a4e04ed41fe15b4e9a0847f71c8d99772a74e89140abad550548194b
Preview

TTF

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x328
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.67724
MD5 d56a1f9b00a15b5f0afa493f4768bf4b
SHA1 7974fbfcbfe49c19b4f4bcbf58c982a48db46b0c
SHA256 5665769b39b1ec3f952534da797e5b0f48eb4ab5e0f3d511dfd7f175b3bfb67e
SHA3 e24102a679c1261f216334027f6e273204763054d4fdb70b6c11110930599889
Preview

UNKNOWN

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x328
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 0.863149
MD5 98bc0e81e90f288e04ecb3d036d0ad6e
SHA1 8ec755d86ab62b3801a33286335547cc43a198e8
SHA256 0da580a81768fc7dcd1b4f0cb0d8616024268920c0605f6f2e52da9d2bfbc416
SHA3 c90e30a42eef606db09c6ad09bd90ce2b56685d4e4b3e53661aee95044a36b74
Preview

UNKNOWNFILE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.50975
MD5 307c6180ecb5efadfc8d59bb7dc28a5c
SHA1 8cd2e11eefecccd0c1414ce2b548c4fa82621dd4
SHA256 6af26f85073e8fce3b9ab49acbde0b702f68ec078be72e8aeca66086947a885e
SHA3 3e2f18021c6974600d7e8fc8064bb225657e4aeb0e28b7fdae034c6e938e264f
Preview

1 (#2)

Type RT_ICON
Language Portuguese - Brazil
Codepage UNKNOWN
Size 0x468
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 4.62916
MD5 d646fda66fbaf39ba84f07a17e9f6d89
SHA1 0785cda4e5b90585926bc1a5ee8352d5d02a8193
SHA256 c258029fa1f20737ca69d90a80a6d90e4c589484e54db67f530e03957c87acae
SHA3 9c307fc28a454a623103220f05fd31644c48e7d539db3a4517d275b9c46dc067

2 (#2)

Type RT_ICON
Language Portuguese - Brazil
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 4.23483
MD5 4d1b40d7e2dff3719395c27297b9949b
SHA1 545da798d28c384eb6ba68285aa7514ff7732e24
SHA256 1b26f53d63fe390b9df0de2c09ca8f1c38fa0a37a819e9ce4ceafc115feb25cd
SHA3 ff74034ab7e7c563c8098f5016eca29dca78020cf739906a75166e143cfddf15

3 (#2)

Type RT_ICON
Language Portuguese - Brazil
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.8155
MD5 a0d75042859851030b1fd4f2ccf08481
SHA1 07970d666c8b3b900c64d9af3b3afa1bc2c858f8
SHA256 2125e8aa853bc5b8392084dd1706c98d7e304d82d98243cca61912bfba75243f
SHA3 2cdf767832d09010b01d25f223c532dc53eb650bb0275e9632a52f876ea6703f

4 (#2)

Type RT_ICON
Language Portuguese - Brazil
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.33133
MD5 629069c37a74615dbee6239594d4642a
SHA1 5557f69cfbab044d97e9c86c30f85dbc24bb3932
SHA256 3a3c7e76a8f9c680c99edb7f733f5f45e85916f79fe9b7755c60b18c5f18e031
SHA3 a335c81e9dfe0fb16fb279a4775fb3a7e8518b63de6221ddc9fb6d56bf9b4bd8

DLGTEMPLATE

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x52
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.5627
MD5 db949b51eec31f37281a7fa424a3e158
SHA1 f61214ce31a91d174e77f12c90f18ddd4e265a1d
SHA256 771f64afb45a9edc8c4f6c5b2039f9b32623cea53bf0cab5bf1f371cc5d1abe4
SHA3 4a2bc09771734352d594a48fe2249ca0697c471d80a4001f60c6d86c46b6319e

3682

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x4c
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.04342
MD5 3d60ddeaf6bea5daf7a9c7cbd6b09e48
SHA1 2bdc027dd19b7a6d7eba9cd1556b2051095bf816
SHA256 e36c6d730814156bacab1acf6c98732dad709c4750b311cfa068b2c3c622f3e4
SHA3 7f17bca6c93f6c4d57ecd2619ddbc87333092e56bdde9d691a34e4a38b495e5f

3683

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xaa
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.92331
MD5 d4300364a3eef3cb5644ed866dddc78f
SHA1 b7a5249d8b49e45eeaf527bcde288079141fa680
SHA256 06dbfdc99d88b330f738d8228ba99235f089e3a7f0a48b5eb4fc97e229213e12
SHA3 3301da995336aa74d6e87fe5f6ca73f1211afbf03478388b6d36f0332b1ba92a

3684

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x186
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.47221
MD5 1ec17c6a0ef3ebeec0934ab3dc5a949c
SHA1 c2ae86472ece7c4debcaf93d981b9680fa50a8d3
SHA256 043682eb90c932a3cc5509e78b522fe3f84bf8096075270a4eebc2b2bdd973a4
SHA3 2a84a54bb8784ffbcd8162e187c5aa5220f2dc566f90a3ca795ed3f354f174c8

3685

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x1ce
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.39032
MD5 3620598cbf4d64cf36a7bf8561b0687d
SHA1 f2e358c5f7fe8acbf1c9950fabfcb2350da8cc53
SHA256 cd1984df43d496bc1cbe563defbc6e33357f2bff36c7fdae379339c09e6e9a1d
SHA3 6fa94570d91c1ed64e6ff04d369746094753c8bec510bde4a25a5298ecfe4742

3686

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x144
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.12235
MD5 e256dbf41a3ba39829bdc3344224835a
SHA1 77b9e94f278ce49147712ec4fbe3ad79355f76c0
SHA256 5e5f94ea3ff8822a84634aa27e1a45c85ccfd8a184a1f72791d5ac99b202493c
SHA3 76c01537a1d3f62879cb611ff3baf215fd49eceae2432a3b321b1be623d77104

3687

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x7e
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.8845
MD5 696018a56c8e5f1c453da13c3e852c9c
SHA1 acb54b394f728850142f0ad0248bea8515958cea
SHA256 efaaf59a5d9c0fc524e465b7bb220a5223dbdfb4cbf837ac848acdd962db7e88
SHA3 09a352947c27d716eae852287071016d0ed1cbe1683c5acb63eb0b16874a6b14

3688

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x24
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 0.545897
MD5 0a433f06a73393a9564564963dc0b8d2
SHA1 53bab8bd76db86fb39b8aacc4ce13d65c860a80d
SHA256 d6f50b6545a8b304e0989ca0caa5ee4d16f62978b2268424bd216eeb8babe372
SHA3 f496be32c9d03f468a2663ae450f09da5600d43ee312d30c05ceb332392b9152

4071

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x310
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.08819
MD5 5f9ce26c17d2215e74835445c580294e
SHA1 dfd635344d21bb4de5a48be0a30d06e33a13e41b
SHA256 5c5bfe4586417fb7e01c797fbefad72d12f658779c58ab2958a37095d15d5beb
SHA3 8bfaed5544b4e1e16f8ba65b6f325e5d240676e65a72a209f149f2c5bfeb5ea8

4072

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3b8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.40207
MD5 d8a9bbf1c7c47545845cb02965037f75
SHA1 365f56004da36657d4b83f18143e51c3088bbf37
SHA256 8ce51d51e0db0d28d97c4baf6495ef353f1639eeebde95475645ba85f8b969b4
SHA3 28999453cc985195fadeda8e70de9570e2ddaa397da411d486ddca0b26f03efa

4073

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x1b4
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.24229
MD5 eebff4ebd0bd3b3c509dcbc7896bfcd3
SHA1 694034dd973da943c15c9caaeb2d487463bbaada
SHA256 4031483a6f4f9bfce173fbdd74ec0a57e0bbdc1b90fbdcfa3bafc750f1d91975
SHA3 c62da5206d7e659c5212974bad0a79c561bfd9daa778be023abed5f8b3933850

4074

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x308
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.27591
MD5 1fef07356af76174d99e2892025d9273
SHA1 d99de14396066025561a113b59eac6190fe97a3f
SHA256 c3c234e330203c0f803698d49f293f062af49f54649d652182b024ce5b7afb1d
SHA3 8dbb79ebe30206d3f25717ea96f73c731d9a121ccfa1f07e99217aca7316935e

4075

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3f0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.17631
MD5 f70d13d3e458cd76e0d4967bbed4238e
SHA1 e122d54da7d16846360719931d13930f878675ef
SHA256 f18e6ba25147ffdbdd8c621a184c69836ae9690613e2292bd853bac4aefa8b3b
SHA3 118528b2e4b93694dd544039b2c118b9c8c19fc503e812a50cd0d888edc841fb

4076

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3c4
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.15253
MD5 08165d2003c07ad87ea05277331e840a
SHA1 52e8aada47985b9c4dc2c9149b28ebc7c0a13d94
SHA256 3b1dec51ebbb9f9d6e792a6329910cc537885b22711b468c5f8c663c7490467b
SHA3 3b2ad18e06b52fed04aba74b4f0795ab9ed0477893197e70d29bba8b32b41a97

4077

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x350
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.24221
MD5 272891d7cfa941aaa4dfbe8dd13c7ed4
SHA1 fd04d3294aa083b2959f93b8caca1f21e48cb75a
SHA256 be3bfa2a1a9f6c259e9daf2370e5a4975097cde810f3dd84a9e565ae79d44e7d
SHA3 136887cf1ae9b8a3bd0782929c07f0a90ee7943e155e23ca314da53b0299e669

4078

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x308
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.30478
MD5 96fcb06d362059da37f0cb5e13ec80cf
SHA1 51832cd01640318292793b44985c7a5937b97729
SHA256 d360b86eedd5200efbfa406deab1dad16080bf13bcf17b8ce75264c34ca3004d
SHA3 253a5282776989124377a9a87b82868c9b329f619dcf7504240116405a138c3d

4079

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x534
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.23149
MD5 9cea05df42e013d7c03e1a3fb77f9fef
SHA1 b93b80915e85fabb6ec247041b35e9f82b5fa578
SHA256 e7e9fb030a64764ee388a97a5dda965042b08a06b423ba20da729078c77112c3
SHA3 7f2a9a04fe323fcda445c0523edef6ec68f70b897d5f6095ad502b2e46565331

4080

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x1f0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.35401
MD5 a0c69babf35e636f81cafb134a263272
SHA1 12212a79f34385fca8a3dd4e2eca6f55aef6ee08
SHA256 88cc8cb68168b10de402f06695ed8d3b2a07dfabfa4d79eb52cb26d59dfbd129
SHA3 9d544e2d4051314f7375bf99f88947698ec5d755f3c2f630a27b90e83d1e7826

4081

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x1c8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.27601
MD5 f4a4b10d7ff827f0a9e21b06706be97e
SHA1 999b14eece9eeb2145f6bae04e886d4ae135a449
SHA256 83f780ed499b9006d6b2f018c75d10c11cb631a9763d842fcc8e4a6732b90a10
SHA3 cab79b55538bff3ed5fb22105c99104de0447da478c5777656cd1c5aa4671eb8

4082

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xe8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.04775
MD5 410d6e935274674f3171c3526e2ce915
SHA1 8f2bdaec9f363e6b24d17bf1a2f9ef53f7f9e58f
SHA256 a5e89b1a6a6918ce79a3e247e2c3d062425c8cb56c0ecb308e84e2fdff168a87
SHA3 cd11ee51451050f7e19230cb1e3eb3fc4fdfc436e3ee412a52a16f05ff00d3f1

4083

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x344
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.22023
MD5 04c131be8c678ab174528472cf587a0c
SHA1 74f79514f32ac72a47fcc6a0ee3c94b41a75fe22
SHA256 54a86e022384fe18a216c89ad5ba256725e7c7897a5d63416bbe155042baad8f
SHA3 6093b58993de32391d522e0e64f9a6c58c490a301fe0dc3904125c51c21a4f5e

4084

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xc8
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.04708
MD5 eef78350fba28825dbe8bcd61f4b0237
SHA1 b2dc4b88dc8d6e1c819fa6052aed4331df6d4e70
SHA256 bc513d57ad95cbb305ac46ae360462e61754d10b6857199ceadf5003269a2110
SHA3 c36dadcacfef902b664746f7cf78aa8e8c3d2658ec395aa3a041f7eabb0fc1fb

4085

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x100
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.08557
MD5 801f865cac1970b96d910c247aedb0d7
SHA1 dd099710d9952184a9c7e66c08043e657233bf3b
SHA256 84ac61e9857fc4cd7d4d56d7cd8e0ceb8b65b34287eec35f935b74924b1bc262
SHA3 fbf94540957563ff71bd37505d606233cbe071df9afcdd12855f2c39f387210a

4086

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x238
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.2612
MD5 e6e6d01c7a0944bff36b2722055b7337
SHA1 8158c50e72759a408d6efe103b4b49a9a2a8b1d1
SHA256 018def4f6cc5a7cf613ce89c3d965734ba04403395f03458bdd62692b25e476f
SHA3 a76ad45b8dd2b7ba2ebf0354a4e38e726df57b339893771f4ad7d54aad959c76

4087

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x41c
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.22581
MD5 dc4ecaad6cd47aef0636ef5a97c32093
SHA1 17bd0af5269215cc1c48c5a21c23f2d7faed7056
SHA256 e26310604d803753ed04aa4612d50cc5818490ebd372074ed6535924627c5a66
SHA3 2f4e54a110e01fc19c28f9b273b3382f7f6295bab1288889b3047dac17f3bc2e

4088

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x348
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.21893
MD5 d52db553b05059e627b7ecc5f9b83a61
SHA1 99ccefbb2d4519e1a9bc3d0d1dfee396f4c90667
SHA256 2a70dc86f02f0da8bd3d7d65985894e9362bff1ea7adfe8a77d028ac3f0bdaea
SHA3 0d199599bd8df16fe179d20e79ad2fd4d4a545481f2270719e92aa8b265a41a4

4089

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3b0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.22717
MD5 71b4b80938e274d816d6154005ca22aa
SHA1 9005023b31cefbd6469dd1fd41ddbf175b41dcb8
SHA256 7e8f44b995c3276367b6ddfa128ce77b4356e864ac902e53c990e450db0b713b
SHA3 4575049e9f5ca9122baef89bd97a0f507cc0bbea13d09a32286a7b2624535e12

4090

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3d4
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.252
MD5 2c07c2f1da509ca0595ea246d54a095c
SHA1 78b8b3acab5a0ae968012d614b52c66d2abb8928
SHA256 c9a5bc5461266e26e04dddb43d4182e131de008fa8f9fbb6f34d63c00f0baa60
SHA3 4b1bf37a8f6abdf568e96fbf253018f99868ec7f870364b2088e557e852f4191

4091

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xf4
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.94341
MD5 aead513017e6566240e7ac86b5480759
SHA1 648ee52447fd9b798760ba8dc84fda558d30f287
SHA256 0bab6e5a1259540a8def510ea55891a64d06c7c40dbbe8eab251f5d60993aabe
SHA3 9e2d3b1ee751fdb86e8834cea1ccd92a2af585a66b9319c1fb664369f5ef8180

4092

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xc4
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.8794
MD5 654a3b0e552431bce845d4873d01d0cf
SHA1 9b3d44f51cea9362bcf7c258974a4a767df915cf
SHA256 580d974dbf7953e0e47920170ddb9e8dba22e8f3561e059ce4f3774056c876a1
SHA3 40a1765801c78b03ba59f217f7767147f65598ecf74ebe7fb848546b5ce9ee6c

4093

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2c0
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.24527
MD5 ec5ec390e6c3e6ac6ab08c101650d9a0
SHA1 98397a54552a64cd25f984b3bf392e7a508cd770
SHA256 5b93e2fc7eb445819cf543d22bfc292ecef52715a12027631ef5264d714d1634
SHA3 2ecb37ae5285e4e5f653e88bf963364c012310b3b9c25a56d8a2a4c6ee57bda9

4094

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x410
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.22145
MD5 26370eb669f20798f45010ffe8c390da
SHA1 5711eef3c04041ebddbc7a1a5cffa42e9a6f2ee9
SHA256 dea7e7c3a92f00f11c200a5f6bb823f768c7e4daca96b1c4064d466d0557358c
SHA3 6ca9b53a4623381ee20749b5691677467a5bd309c5de5388c2669da1fbd26d4c

4095

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x330
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.23637
MD5 8356cff46d5d2eb6e943dfab8796b058
SHA1 2b4e803199a60cb6685e918c7c50f9314a0e5a0a
SHA256 db3fa427c11963222426e133f94d1db76de1f8a09a33cda71e9241cc69a12704
SHA3 bc5ab850b88d515ad2affc860f262b521306aaca02c7a3bd211602261ef16486

4096

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x314
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 3.12118
MD5 7217b6b6ee273616858467d7261c7d96
SHA1 5a31a93c1c95efd080efc3601518d2e69c91b93f
SHA256 d10704e50b2f6387284c4242cfe62af0bdfcabfb17429ffe617b77804f1fd017
SHA3 6e6e61dcd0b4584d03df4ed0734437fe6cd315b0887e14a3bbcc1e3706e5028f

ACGL

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xcbf
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 7.88637
Detected Filetype PNG graphic file
MD5 3617368b179e75d6b3e0eb3a024c30a2
SHA1 fa49818b7be5c39d1b43fd087e4c489e9e558094
SHA256 715e9b8d78e33e704eb42ae0d85d2f0f46c6fb9d0a89b00881ae754d85cae775
SHA3 8105ad072711b9091a09a43389978e15bce66d2918ffd420d97573dcee87717d

ACHINT

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x421
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 7.69575
Detected Filetype PNG graphic file
MD5 86cf2cbf28f00d157b3ebb600f4ddc31
SHA1 529f9289659e5a6970bdfeb0159933d881cd48fb
SHA256 494d2be2e71bcb8711df248c96b0523647fb86fbdfda38fdef29ad4904443add
SHA3 e8d4d88e0ce2f44250cb5783e3cbc0fede65f3929358a2bd9c9ff9dd8f3b7527

ACSHDA

Type RT_RCDATA
Language Russian - Russia
Codepage UNKNOWN
Size 0xd58
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 7.88292
Detected Filetype PNG graphic file
MD5 35bd2b5d9d94a29c203370df3ece7e39
SHA1 783759bfea0513537fa84057b5b317897a7f8f9f
SHA256 6f39a5683d7e3505c811efa401da41015d87b8ef2a976296816557e3223296b7
SHA3 8b6e5b87be2b119e4c6ea11c32ad2920f0e736fec2c5c03f7d0980d824e93eb7

ACSHDI

Type RT_RCDATA
Language Russian - Russia
Codepage UNKNOWN
Size 0xd0d
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 7.88215
Detected Filetype PNG graphic file
MD5 6fef838d9dee8333a861cdeaedaece2d
SHA1 459cec87c2e3bdbc8b661670ed70cb8bfd1d8b69
SHA256 114c0212a79d7d5628f288bbffbee1ff2301fbab92902251ccb3477a04a3086a
SHA3 5376b8d7cb99a185520824b8c253f744032023f37bb1f7d8cc26594797f8a8ce

DVCLAL

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x10
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 4
MD5 d8090aba7197fbf9c7e2631c750965a8
SHA1 04f73efb0801b18f6984b14cd057fb56519cd31b
SHA256 88d14cc6638af8a0836f6d868dfab60df92907a2d7becaefbbd7e007acb75610
SHA3 a5a67ad8166061d38fc75cfb2c227911de631166c6531a6664cd49cfb207e8bb

PACKAGEINFO

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xb24
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 5.43033
MD5 4a4479bb11565e127ca12e934debef46
SHA1 ad3c77d1b996e638f5799bad0204cfd189cc10a8
SHA256 c010f9be5f14ee7173ff5542fb06e04bbda554c5e17eacfc26704744eff38e21
SHA3 81eaedb5bdacc45a2e089e435b3729f24577329b9b49f6c3f8c7d67ebeaaac33

SC

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x434
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 7.76914
Detected Filetype PNG graphic file
MD5 2ca53c272f3b5101a6792587ceb0c766
SHA1 792e7213d9ee460ade3d1bc3a2b9e8ef65ced26c
SHA256 63e01de887b4a0033cb5e5f60e597b855ea641b4a0088bd80e3b0a6c9b4f2a4a
SHA3 74afc346c588bd3465870df64a1cde1d95622205f697dd397739516a47393f62

SD

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x4b1
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 7.7506
Detected Filetype PNG graphic file
MD5 3d251fe10576c1aeef92c8d02e9b5e6b
SHA1 522f5df4c6547a578d9a588c411755e2cecb334e
SHA256 8ced7282ab9242fecd805910235734f751c740972c2cd708710fd25e0d565ef0
SHA3 679fcf7b9666d019468ff9dc327d2a9e36e2b6cc5d8a77af816b385ea6161cac

SE

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1a1
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 7.11859
Detected Filetype PNG graphic file
MD5 93af80836594e23da1f5ca17508fe370
SHA1 376df05b59f12f2c1d1505f8d24e7d57baa34550
SHA256 db88752ef62a92d8519c18afb05b8cba1b768585c26c46ddc39744792b4fc1a5
SHA3 6b822367ca5cf047e9995c680598365339b8734ddb443e050b5a900c2e0e6181

SF

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x671
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 7.8285
Detected Filetype PNG graphic file
MD5 9051dc17648b2f123f497e19cbad4d4e
SHA1 f91556b83b72dc2abb3770fb05a67e98b1382687
SHA256 3ece66cb2ec05a42faa967c7a7ecbdb75280493141b2e2c987762de376084951
SHA3 22f5586ee5023f2eb7e6f9edf0db55fc33421825abc918d86c944d035203b624

SR

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x7b1
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 7.84042
Detected Filetype PNG graphic file
MD5 573b5a1d2f65e1a8c774139b90920b92
SHA1 4bab73d7abb9a29d73fafd30bd9b41efa7cd4a47
SHA256 a49c46dad2f8d83b7e7eeca72be71e6d4cb5b4ac2ac3794e6faf7a6b67b46345
SHA3 1776c49b701b9327b22e88f5f45694e5658a30c5f569265a81638daacdc9e3c6

TSCALCFORM

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1b07
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 5.50715
MD5 3d157bd393ba04ee80faf6464d21dcce
SHA1 62693cdec061c4ec58d77ee30c621be9756e5a20
SHA256 728be65c253c459ddc69024603a403a279bd791b5cc8a3868ce88419fef0dd2e
SHA3 321055166800aa71acc51b302c5eda2ce9f9b1ce3c71e6234b2c816858eca6f9

TSCOLORDIALOGFORM

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1b8d
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 5.61773
MD5 8dd193ea253623b895a37a864fe296dc
SHA1 0e758a4a98d808eb33cb3f08443d4b2918f09430
SHA256 cd58cdd1ca382b291552776e66af51b7b5f102405a4d4fe34506bd1a4221c5ff
SHA3 ea35c0383a686f6f5f9f9a95960fdfaf8814de750133004ce1102a6c321ed261

TTUITUI

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x64e
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 5.51027
MD5 b13b75a227b930c743539e4e931f7810
SHA1 7e2410e126e363649b1a9215e889d7dad1bfb626
SHA256 63be86d3fe85c963b2eccfacf586f882eeea9c8cd0c276ff913e7e9a2de71d1a
SHA3 9ba75fb843ddfed3ce40b27677fc90e8b5ce7c9b0a324d1a680c2fc8db6a0b23

32761

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.83876
Detected Filetype Cursor file
MD5 a2baa01ccdea3190e4998a54dbc202a4
SHA1 e8217df98038141ab4e449cb979b1c3bbea12da3
SHA256 c53efa8085835ba129c1909beaff8a67b45f50837707f22dfff0f24d8cd26710
SHA3 8874564c406835306368adf5e869422e1bb97109b97c1499caa8af219990e8dc

32762

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 1.91924
Detected Filetype Cursor file
MD5 aff0f5e372bd49ceb9f615b9a04c97df
SHA1 e3205724d7ee695f027ab5ea8d8e1a453aaad0dd
SHA256 b07e022f8ef0a8e5fd3f56986b2e5bf06df07054e9ea9177996b0a6c27d74d7c
SHA3 9cb042121a5269b80d18c3c5a94c0e453890686aedade960097752377dfa9712

32763

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.01924
Detected Filetype Cursor file
MD5 48e064acaba0088aa097b52394887587
SHA1 310b283d52aa218e77c0c08db694c970378b481d
SHA256 43f40dd5140804309a4c901ec3c85b54481316e67a6fe18beb9d5c0ce3a42c3a
SHA3 38753084b0ada40269914e80dbacf7656dc94764048bd5dff649b08b700f3ed5

32764

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.01924
Detected Filetype Cursor file
MD5 1ae28d964ba1a2b1b73cd813a32d4b40
SHA1 8883cd93b8ef7c15928177de37711f95f9e4cd22
SHA256 ff47a48c11c234903a7d625cb8b62101909f735ad84266c98dd4834549452c39
SHA3 a85dadd416ce2d22aa291c0794c45766a0613b853c6e3b884a2b05fc791427b8

32765

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.01924
Detected Filetype Cursor file
MD5 0893f6ba80d82936ebe7a8216546cd9a
SHA1 0754cbdf56c53de9ed7fbd47859d20b788c6f056
SHA256 a0adcedb82b57089f64e2857f97cefd6cf25f4d27eefc6648bda83fd5fef66bb
SHA3 ce6148ade08ef9b829f83cb13b4c650d9d4a7012bfd1ab697a7870a05f4104f8

32766

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.01924
Detected Filetype Cursor file
MD5 dcaa3c032fe97281b125d0d8f677c219
SHA1 58fe36409f932549e2f101515abee7a40cf47b2c
SHA256 6e1e7738a1b6373d8829f817915822ef415a1727bb5bb7cfe809e31b3c143ac5
SHA3 02ef292e1b4a70e439e362af6b4fa213e3816ade45222b78dabab712b6afba54

32767

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.01924
Detected Filetype Cursor file
MD5 a95c7c78d0a0b30b87e3c4976e473508
SHA1 b19f3999f1b302a2d28977cb18a3416c918d486c
SHA256 326c048595bbc72e3f989cb3b95fbf09dc83739ced3cb13eb6f03336f95d74f1
SHA3 8157b4e6afa7ed2e2ffc174d655bec9fb81db609e4c5864faa5ead931ff60689

MAINICON

Type RT_GROUP_ICON
Language Portuguese - Brazil
Codepage UNKNOWN
Size 0x3e
TimeDateStamp 2018-Nov-07 12:41:42
Entropy 2.65982
Detected Filetype Icon file
MD5 e1a14086411583c547f9e7c1e662e6e5
SHA1 a7037bec6c9eb39b1f1cb9153f57cd453e00a8ed
SHA256 eb21b67f27629ebaf5d0fff6416f856f95cca14459251036d69989bc2e46c1a3
SHA3 0a2e5c1855e438173e47c3dfc2558a0f73f14721070d25b9e9f9d4357b5379b2

String Table contents

Create
Select directory
Invalid date
Preview of the future hint window
Gradient
Background
Shadow
Bottom border
Top border
Color
Save to file as...
Load from file
Texture
Font
No picture available
Transparency
Offset
Percent
Pause hide (ms)
Max width
Corners radius
Vert. margin
Horiz. margin
Arrow length
Blur
Bevel width
Style :
Preserved settings :
Hint Designer Form
TsFrameAdapter adapter must be placed on the handled frame
Hex -
Decimal -
Blue :
Green :
Red :
Color
Additional colors :
Main palette :
Define colors
Add to custom colors set
Listbox (%s) style must be virtual in order to set Count
Error setting %s.Count
(internal)
Available skins
File open
Calculator
Close
Maximize
Minimize
Size
Move
Restore
&Help
Cancel
OK
Enter password:
Please insert a blank disk #%d
Please insert the first disk
Please insert the last disk
Please insert disk #%d
Disk is full. Required free space: %d bytes, but available only: %d bytes. Clean the disk or find another blank disk
%s. File processing error, possibly disk is full
File '%s' not found on inserted disk. Please insert last disk with required file
Circular Protection detected, Protection Object is invalid.
String Format "%d" not exists.
Input is not an valid %s Format.
Input can not be convert to %s Format.
copy Input to Output
Hexadecimal
Hexadecimal lowercase
MIME Base 64
UU Coding
XX Coding
Length from Encryptionkey is invalid.
Keysize for %s must be to %d-%d bytes
%s is not initialized call Init() or InitKey() before.
Buffer overflow
Invalid UTF7
Overwrite file "%s" with "%s"
Password for "%s"
Cannot change the size of a JPEG image
JPEG error #%d
JPEG Image File
Mi&nimize
Ma&ximize
&Close
&Restore
Minimize to &Tray
Ro&llUp
Minimize
Maximize
Close
Minimize to Tray
Roll Up
System menu
Restore
Invalid socks authentication method.
Authentication error to socks server.
General SOCKS server failure.
Connection not allowed by ruleset.
Network unreachable.
Host unreachable.
Connection refused.
TTL expired.
Command not supported.
Address type not supported.
Uneven size in DecodeToStream.
Uneven size in Encode.
Root :
Directory with skins :
Select skin
Skin preview
Socket is not connected.
Cannot send or receive after socket is closed.
Too many references, cannot splice.
Connection timed out.
Connection refused.
Too many levels of symbolic links.
File name too long.
Host is down.
No route to host.
Directory not empty
Host not found.
Request rejected or failed.
Request rejected because SOCKS server cannot connect.
Request rejected because the client program and identd report different user-ids.
Unknown socks error.
Socks server did not respond.
Protocol wrong type for socket.
Bad protocol option.
Protocol not supported.
Socket type not supported.
Operation not supported on socket.
Protocol family not supported.
Address family not supported by protocol family.
Address already in use.
Cannot assign requested address.
Network is down.
Network is unreachable.
Net dropped connection or reset.
Software caused connection abort.
Connection reset by peer.
No buffer space available.
Socket is already connected.
Connect timed out.
This authentication method is already registered with class name %s.
%s is not a valid service.
Socket Error # %d
%s
Interrupted system call.
Bad file number.
Access denied.
Bad address.
Invalid argument.
Too many open files.
Operation would block.
Operation now in progress.
Operation already in progress.
Socket operation on non-socket.
Destination address required.
Message too long.
File "%s" not found
Only one TIdAntiFreeze can exist per application.
Not Connected
No data to read.
Can not bind in port range (%d - %d)
Invalid Port Range (%d - %d)
Read Timeout
Max line length exceeded.
Error on call Winsock2 library function %s
Error on loading Winsock2 library (%s)
Resolving hostname %s.
Connecting to %s.
Connected.
Disconnecting.
Disconnected.
%s
Method '%s' not supported by automation object
Variant does not reference an automation object
Dispatch methods do not support more than 64 parameters
DCOM not installed
OLE control activation failed
Could not obtain OLE control window handle
License information for %s is invalid
License information for %s not found. You cannot use this control in design mode
Unable to retrieve a pointer to a running object registered with OLE for %s/%s
Already connected.
Cannot allocate socket.
Connection Closed Gracefully.
Could not bind socket. Address and port are already in use.
Not enough data in buffer.
Winsock Initialization Error.
Set Size Exceeded.
Inactive Border
Inactive Caption
Inactive Caption Text
Info Background
Info Text
Menu Background
Menu Text
None
Scroll Bar
3D Dark Shadow
3D Light
Window Background
Window Frame
Window Text
No help keyword specified.
OLE error %.8x
Sky Blue
Cream
Medium Gray
Active Border
Active Caption
Application Workspace
Background
Button Face
Button Highlight
Button Shadow
Button Text
Caption Text
Default
Gray Text
Highlight Background
Highlight Text
Maroon
Green
Olive
Navy
Purple
Teal
Gray
Silver
Red
Lime
Yellow
Blue
Fuchsia
Aqua
White
Money Green
Shift+
Ctrl+
Alt+
Unable to insert a line
Clipboard does not support Icons
Cannot open clipboard
Menu '%s' is already being used by another form
Docked control must have a name
Error removing control from dock tree
- Dock zone not found
- Dock zone has no control
Unable to find a Table of Contents
No help found for %s
No context-sensitive help installed
No topic-based help system installed
Black
Yes to &All
BkSp
Tab
Esc
Enter
Space
PgUp
PgDn
End
Home
Left
Up
Right
Down
Ins
Del
Icons
Bitmaps
Warning
Error
Information
Confirm
&Yes
&No
OK
Cancel
&Help
&Abort
&Retry
&Ignore
&All
N&o to All
GroupIndex cannot be less than a previous menu item's GroupIndex
Cannot create form. No MDI forms are currently active
A control cannot have itself as its parent
OK
Cancel
&Yes
&No
&Help
&Close
&Ignore
&Retry
Abort
&All
Cannot drag a form
Metafiles
Enhanced Metafiles
Unable to Replace Image
Invalid ImageList Index
Failed to read ImageList data from stream
Failed to write ImageList data to stream
Error creating window device context
Error creating window class
Cannot focus a disabled or invisible window
Control '%s' has no parent window
Cannot hide an MDI Child Form
Cannot change Visible in OnShow or OnHide
Cannot make a visible window modal
Scrollbar property out of range
Menu index out of range
Menu inserted twice
Sub-menu is not in menu
Not enough timers available
Property %s does not exist
Stream write error
Thread creation error: %s
Thread Error: %s (%d)
Bitmap image is not valid
Icon image is not valid
Metafile is not valid
Invalid pixel format
Scan line index out of range
Cannot change the size of an icon
Invalid operation on TOleGraphic
Unsupported clipboard format
Out of system resources
Canvas does not allow drawing
Invalid image size
Invalid ImageList
''%s'' is not a valid component name
Invalid property value
Invalid property element: %s
Invalid property path
Invalid property value
List capacity out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d)
Out of memory while expanding memory stream
Error reading %s%s%s: %s
Stream read error
Property is read-only
Resource %s not found
%s.Seek not implemented
Operation not allowed on sorted list
%s not in a class registration group
Friday
Saturday
Unable to create directory
Ancestor for '%s' not found
Cannot assign a %s to a %s
Bits index out of range
Can't write to a read-only resource stream
CheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
A class named %s already exists
List does not allow duplicates ($0%x)
A component named %s already exists
String list does not allow duplicates
Cannot create file "%s". %s
Cannot open file "%s". %s
Invalid stream format
September
October
November
December
Sun
Mon
Tue
Wed
Thu
Fri
Sat
Sunday
Monday
Tuesday
Wednesday
Thursday
May
Jun
Jul
Aug
Sep
Oct
Nov
Dec
January
February
March
April
May
June
July
August
Invalid variant type
Operation not supported
Unexpected variant error
External exception %x
Assertion failed
Interface not supported
Exception in safecall method
%s (%s, line %d)
Abstract Error
Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
%s
A call to an OS function failed
Jan
Feb
Mar
Apr
Format '%s' invalid or incompatible with argument
No argument for format '%s'
Variant method calls not supported
Read
Write
Format string too long
Error creating variant or safe array
Variant or safe array index out of bounds
Variant or safe array is locked
Invalid variant type conversion
Invalid variant operation
Invalid variant operation (%s%.8x)
%s
Could not convert variant of type (%s) into type (%s)
Overflow while converting variant of type (%s) into type (%s)
Variant overflow
Invalid argument
Division by zero
Range check error
Integer overflow
Invalid floating point operation
Floating point division by zero
Floating point overflow
Floating point underflow
Invalid pointer operation
Invalid class typecast
Access violation at address %p. %s of address %p
Access violation
Stack overflow
Control-C hit
Privileged instruction
Exception %s in module %s at %p.
%s%s
Application Error
'%s' is not a valid integer value
'%s' is not a valid floating point value
'%s' is not a valid date
'%s' is not a valid time
'%s' is not a valid date and time
Invalid argument to time encode
Invalid argument to date encode
Out of memory
I/O error %d
File not found
Invalid filename
Too many open files
File access denied
Read beyond end of file
Disk full
Invalid numeric input

Version Info

TLS Callbacks

StartAddressOfRawData 0x5f8000
EndAddressOfRawData 0x5f8024
AddressOfIndex 0x5e30a0
AddressOfCallbacks 0x5f9010
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks (EMPTY)

Load Configuration

RICH Header

Errors

[*] Warning: Section BSS has a size of 0! [*] Warning: Section BSS has a size of 0! [*] Warning: Section .tls has a size of 0! [*] Warning: Section .tls has a size of 0!