Manalyze report for e9d9b199fa906adf06d5381e2977e784

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2017-May-15 08:15:17
Detected languages	English - United States Romanian - Romania
CompanyName	Locklizard
FileDescription	Locklizard Safeguard - PDF Viewer
FileVersion	`2.6.44.1230`
InternalName
LegalCopyright	Locklizard
LegalTrademarks
OriginalFilename
ProductName	Locklizard Safeguard - PDF Viewer
ProductVersion	`2.6.0.0`
Comments

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C++ v6.0 DLL` `Microsoft Visual C++ 6.0 - 8.0` `MASM/TASM - sig1(h)`
Suspicious	PEiD Signature:	`Armadillo v4.30 - 4.40 -> Silicon Realms Toolworks`
Suspicious	Strings found in the binary may indicate undesirable behavior:	`Looks for VirtualPC presence: 0f 3f 07 0b`
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32` `Uses constants related to TEA`
Suspicious	The PE is possibly packed.	`Unusual section name found: .jyla` `Unusual section name found: .qnjvxc` `Unusual section name found: .bucos` `Unusual section name found: .aciet` `Unusual section name found: .iwmj` `Unusual section name found: .yxbngr` `Unusual section name found: .dzsu` `Unusual section name found: .zgrun` `Section .zgrun is both writable and executable.` `Unusual section name found: .rxizs` `Section .rxizs is both writable and executable.` `Unusual section name found: .zjfqg` `Unusual section name found: .nxebmi` `Unusual section name found: .yegq` `Unusual section name found: .jfcenw`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryA LoadLibraryW` `Functions which can be used for anti-debugging purposes: FindWindowA` `Code injection capabilities (process hollowing): ResumeThread SetThreadContext WriteProcessMemory` `Possibly launches other programs: CreateProcessA` `Can create temporary files: CreateFileA GetTempPathA GetTempPathW CreateFileW` `Memory manipulation functions often used by packers: VirtualProtectEx VirtualProtect VirtualAlloc` `Manipulates other processes: WriteProcessMemory ReadProcessMemory` `Can take screenshots: FindWindowA BitBlt CreateCompatibleDC`
Info	The PE's resources present abnormal characteristics.	`Resource 3 is possibly compressed or encrypted.` `The binary may have been compiled on a machine in the UTC+3 timezone.`
Info	The PE is digitally signed.	`Signer: Locklizard Limited` `Issuer: COMODO RSA Code Signing CA`
Malicious	VirusTotal score: 3/67 (Scanned on 2018-09-25 20:18:24)	`Cylance: Unsafe` `Rising: Trojan.Inject!8.103 (C64:YzY0OuAoA48KsEnK)` `Jiangmin: Trojan.Inject.yzp`

Hashes

MD5	`e9d9b199fa906adf06d5381e2977e784`
SHA1	`570bc0867467b825809938a987ea4c36ed84221a`
SHA256	`d965bdac285bdbc7d37d6275ec5e994c1b7bcd56796b7f95fcc006b1fffd9b01`
SHA3	`ca45a759f9033ce78a18e572f6303b6fd39d417a85fd2c775b057291908e684e`
SSDeep	`98304:5gv3xEJwe4vk/oygDVrNuPoWvcYlbgwKu1U+iPEFSln0JBP9t:5gv31kBcAcv3ln+3`
Imports Hash	`daf574f3040b477b1ee15e12a0c73af8`

DOS Header

e_magic	`MZ`
e_cblp	`0x50`
e_cp	`0x2`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0xf`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0x1a`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x220`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`13`
TimeDateStamp	2017-May-15 08:15:17
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_DEBUG_STRIPPED` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LINE_NUMS_STRIPPED` `IMAGE_FILE_LOCAL_SYMS_STRIPPED`

Image Optional Header

Magic	`PE32`
LinkerVersion	`83.0`
SizeOfCode	`0xcb000`
SizeOfInitializedData	`0x47e000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0072029E (Section: .zgrun)`
BaseOfCode	`0x6b1000`
BaseOfData	`0x2c5000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x1000`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`4.0`
Win32VersionValue	`0`
SizeOfImage	`0xf80000`
SizeOfHeaders	`0x1000`
Checksum	`0x5575b5`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x2000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.jyla

MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`
VirtualSize	`0x1d3000`
VirtualAddress	`0x1000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`

.qnjvxc

MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`
VirtualSize	`0xf0000`
VirtualAddress	`0x1d4000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`

.bucos

MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`
VirtualSize	`0x1000`
VirtualAddress	`0x2c4000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`

.aciet

MD5	`7857ff7f02aeaebfadd9b9bb6320c2ff`
SHA1	`39e2fa1ca456fbaa3600175acbf61b919bf40ca8`
SHA256	`8f241b4528d29880a5aa7f7af471655545e29ac56443244bb0eab98ac6d52b6d`
SHA3	`be406c52b2a463429d5518878b2218a1d93158088203e081f3f4f80e1d18b7e0`
VirtualSize	`0x1000`
VirtualAddress	`0x2c5000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x1000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_SHARED`
Entropy	`0.0344466`

.iwmj

MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`
VirtualSize	`0x4000`
VirtualAddress	`0x2c6000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`

.yxbngr

MD5	`06b51a17cb7ef3f2b50087debf6c9ce1`
SHA1	`0c6f1d7f1dc43ca539e63c8e80e6124879654db8`
SHA256	`4ee4ba6652dda080e890ce70140ffb498fa98804f5115daacfd92f1e5ec33803`
SHA3	`b11b5c77107087624a826e74f07fe4e221ed16fc834807ce8de4a3b511144d6f`
VirtualSize	`0x3c7000`
VirtualAddress	`0x2ca000`
SizeOfRawData	`0x8000`
PointerToRawData	`0x2a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.68165`

.dzsu

MD5	`8f37ff51ba905a12a79f9f80b9451da9`
SHA1	`15959d17e438b5f62d8cfc7a0696ec271cdbce60`
SHA256	`6a459076b3a82a95e2a6fa3b1f0290dbeb14f92be256d91062adbc13cec519e8`
SHA3	`6aebd2b56716ae0630d13f7f48965faa9a4274c636bc3a860ed9ee7f91f20ac1`
VirtualSize	`0x20000`
VirtualAddress	`0x691000`
SizeOfRawData	`0x20000`
PointerToRawData	`0xe400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_SHARED`
Entropy	`6.55543`

.zgrun

MD5	`a0e55ee6bc1038b82df6d7f10d5714ef`
SHA1	`b941ef6943a1ae323769131fe0ba3b62d75021e7`
SHA256	`94a4b371d9298c2785a7fa5547146a4ea0e7c67a0a73b8d0d84efa16f320aa32`
SHA3	`7e0d28dafc5a9a4513bdf097e5c7cd54c5e45bc6f456041e380cdd305db11180`
VirtualSize	`0xc0000`
VirtualAddress	`0x6b1000`
SizeOfRawData	`0xbe000`
PointerToRawData	`0x2f000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`6.49031`

.rxizs

MD5	`ba15058a3d5d29fd2347001f6eea0fbe`
SHA1	`28f96a042551bf96ed2deb337ded02aa5d823fc6`
SHA256	`172fafc34b864079af3a0205e151846703c37a3b3967a1a403f7ed930340c0d3`
SHA3	`dff699aa9b521e29a0c5b5fea59ba4d6c9d80edbcaabbea210caa4e11b4e9730`
VirtualSize	`0x10000`
VirtualAddress	`0x771000`
SizeOfRawData	`0xd000`
PointerToRawData	`0xed000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`7.01051`

.zjfqg

MD5	`71e15415f08ed4ab876db640acf81373`
SHA1	`692ba53b64f9108596583f41fc6fad4a1e44d301`
SHA256	`c6126549837f850ad6e148d5edd35914dd447f5159cbfba7464e6fa761467c09`
SHA3	`94da0a2be74e82bf8a31679111b2ff208198a01cd019d0bdf63cf9e07616cb99`
VirtualSize	`0x30000`
VirtualAddress	`0x781000`
SizeOfRawData	`0x21000`
PointerToRawData	`0xfa000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.43291`

.nxebmi

MD5	`86a08237cde3eea78e30f52f77234117`
SHA1	`4f4f70b5fa83b4a3a8054cef95fbe53c6e83a998`
SHA256	`471cc66fb0c9bd37b13ddc0fccdd0097327eed37b2565fba71d3716e23228fca`
SHA3	`c886167e069c38911d9e1fc42368e939e9c396affe460c9b102a00b63d837efa`
VirtualSize	`0x10000`
VirtualAddress	`0x7b1000`
SizeOfRawData	`0xa000`
PointerToRawData	`0x11b000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`6.62781`

.yegq

MD5	`f3950de85fed2615f3ef0562fe03cf41`
SHA1	`2b3dbe1718b78da02067f5918a2ba6a432120443`
SHA256	`b7a8dad252ec823369013f89970dc90373d17afdc46fb88bebd5561f60a46a7c`
SHA3	`d1381ea24a313fdd23d4e424d588c60ded5859bbf28aa2d8d37d4d729b0377dd`
VirtualSize	`0x400000`
VirtualAddress	`0x7c1000`
SizeOfRawData	`0x3f7000`
PointerToRawData	`0x125000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`7.99979`

.jfcenw

MD5	`2261cabcaa39c8f4d3115f7620a522b7`
SHA1	`a3765e53cf23d37c3d265881a55b9d7cbb50eecb`
SHA256	`e07320c451ddff2cadb4cf7004a41c28d1f7033b7350c7853097901272f8f481`
SHA3	`c0e6a72a4bb2e810df0e8167040f6c5181e5192241b1907912983a4b3a8733e9`
VirtualSize	`0x3bf000`
VirtualAddress	`0xbc1000`
SizeOfRawData	`0x33000`
PointerToRawData	`0x51c000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.19376`

Imports

KERNEL32.dll	`VirtualProtectEx` `GetLastError` `CreateMutexA` `ContinueDebugEvent` `ResumeThread` `OutputDebugStringA` `OutputDebugStringW` `SetThreadContext` `GetThreadContext` `WaitForDebugEvent` `WriteProcessMemory` `UnmapViewOfFile` `InitializeCriticalSection` `FreeConsole` `CreateThread` `SuspendThread` `DebugActiveProcess` `SetEnvironmentVariableA` `GetCurrentProcessId` `MapViewOfFile` `DuplicateHandle` `GetCurrentProcess` `CreateFileMappingA` `GetVersionExA` `GetProcAddress` `LoadLibraryA` `GetEnvironmentVariableA` `VirtualProtect` `VirtualAlloc` `SetLastError` `ReleaseMutex` `WaitForSingleObject` `OpenMutexA` `SetErrorMode` `GetShortPathNameA` `GetModuleFileNameA` `GetShortPathNameW` `GetModuleFileNameW` `GlobalUnlock` `GlobalLock` `GlobalAlloc` `WideCharToMultiByte` `IsBadReadPtr` `GlobalAddAtomA` `GlobalAddAtomW` `GlobalFree` `GlobalGetAtomNameA` `GlobalDeleteAtom` `GlobalGetAtomNameW` `SetFilePointer` `CreateFileA` `ExitProcess` `GetLocalTime` `MultiByteToWideChar` `SearchPathA` `GetTempPathA` `GetTempPathW` `GetTempFileNameA` `GetTempFileNameW` `GetWindowsDirectoryA` `GetPrivateProfileStringA` `EnterCriticalSection` `DeleteFileA` `MoveFileA` `CreateProcessA` `GetStartupInfoA` `GetCommandLineA` `GetCurrentThreadId` `ReadFile` `GetFileSize` `GetProcessHeap` `FlushFileBuffers` `WriteConsoleW` `SetStdHandle` `GetConsoleMode` `GetConsoleCP` `HeapReAlloc` `GetStringTypeW` `IsValidLocale` `EnumSystemLocalesA` `GetLocaleInfoA` `GetUserDefaultLCID` `GetTimeZoneInformation` `LoadLibraryW` `FreeLibrary` `SetConsoleCtrlHandler` `FatalAppExitA` `IsValidCodePage` `GetOEMCP` `GetACP` `QueryPerformanceCounter` `HeapDestroy` `HeapCreate` `GetFileType` `InitializeCriticalSectionAndSpinCount` `SetHandleCount` `GetEnvironmentStringsW` `FreeEnvironmentStringsW` `HeapSize` `GetLocaleInfoW` `GetStdHandle` `WriteFile` `IsProcessorFeaturePresent` `CompareStringW` `IsDebuggerPresent` `SetUnhandledExceptionFilter` `UnhandledExceptionFilter` `TerminateProcess` `TlsFree` `TlsSetValue` `TlsGetValue` `TlsAlloc` `GetCPInfo` `LCMapStringW` `HeapAlloc` `GetDateFormatA` `GetTimeFormatA` `GetModuleHandleW` `HeapFree` `GetSystemTimeAsFileTime` `GetStartupInfoW` `RaiseException` `RtlUnwind` `ReadProcessMemory` `LeaveCriticalSection` `GetExitCodeProcess` `GetCurrentThread` `SetThreadPriority` `Sleep` `GetTickCount` `VirtualQueryEx` `CreateEventA` `SetEvent` `CloseHandle` `GetModuleHandleA` `WritePrivateProfileStringA` `GetCommandLineW` `FormatMessageA` `LocalFree` `InterlockedIncrement` `InterlockedDecrement` `InterlockedCompareExchange` `InterlockedExchange` `DeleteCriticalSection` `SetEndOfFile` `SetFilePointerEx` `CreateFileW` `FindClose` `RemoveDirectoryW` `DeleteFileW` `DeviceIoControl` `GetFullPathNameW` `FindFirstFileW` `FindNextFileW` `GetFileAttributesW` `CreateDirectoryExW` `CopyFileW` `GetCurrentDirectoryW` `SetCurrentDirectoryW` `GetFileInformationByHandle` `GetFileAttributesExW` `GetFileTime` `SetFileTime` `MoveFileExW` `GetDiskFreeSpaceExW` `CreateDirectoryW` `AreFileApisANSI`
USER32.dll	`BeginPaint` `EndPaint` `KillTimer` `GetAsyncKeyState` `DefDlgProcA` `DrawTextA` `CreateDialogParamA` `RegisterClassExA` `DialogBoxParamA` `GetWindowTextLengthA` `GetWindowTextA` `SetWindowTextA` `GetDlgItem` `CreateDialogIndirectParamA` `ShowWindow` `UpdateWindow` `InSendMessage` `UnpackDDElParam` `DefWindowProcW` `DefWindowProcA` `LoadCursorA` `RegisterClassW` `CreateWindowExW` `RegisterClassA` `CreateWindowExA` `GetWindowThreadProcessId` `SendMessageW` `PeekMessageA` `EnumWindows` `IsWindowUnicode` `PackDDElParam` `PostMessageW` `PostMessageA` `IsWindow` `LoadStringA` `LoadStringW` `FindWindowA` `DestroyWindow` `GetDesktopWindow` `GetSystemMetrics` `MoveWindow` `SendMessageA` `SetPropA` `EnumThreadWindows` `GetPropA` `WaitForInputIdle` `SetTimer` `GetMessageA` `TranslateMessage` `DispatchMessageA` `MessageBoxA` `FreeDDElParam`
GDI32.dll	`SelectObject` `BitBlt` `DeleteObject` `CreatePalette` `CreateDCA` `SelectPalette` `RealizePalette` `CreateDIBitmap` `DeleteDC` `CreateCompatibleDC`
COMDLG32.dll	`GetOpenFileNameA` `GetSaveFileNameA`
SHELL32.dll	`SHGetSpecialFolderPathA`

Delayed Imports

106

Type	`AVI`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1800`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`6.88299`
MD5	`3d2b80f9e1e4664285a3c6ee5fcd45c3`
SHA1	`9ac76eed12f040556d6b0cd5efae60be28909b40`
SHA256	`8dedc72f93bedd513e03c19fd4f1df3d7de23602bf9efa9acbfaf7b318f2e8ce`
SHA3	`dde174e81f6e2f8b66c425dac6a7677068fcd485e82fa7eea6e4915555511bd7`

1

Type	`RT_CURSOR`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`6.69425`
MD5	`7dea11ea6eb3541b882687059bfed13d`
SHA1	`7547b1d4d8312fcab07d9a8f535a60474cd7ccb5`
SHA256	`73d86e491ce5c04a1fd277ffe8897ec25935462fc10bb17f31bb4e0df16a7bf6`
SHA3	`808eb14aa34929cd8a794baa528c0b09c67f115e2897a0fd50e74411f9d6ab7b`

2

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`6.63569`
MD5	`9cea069037452cf681481cca61f486b5`
SHA1	`172b53565faa0e9900419d7a2953ddb7c733e963`
SHA256	`50ccc061a942f5e9c8b0d4dc824b52a07034060ee4123720b83df6f1952a196d`
SHA3	`aacfb98335d203331a5d8eedabdc7d8f36c762c5a4556877ed0c02c2c542deed`

3

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`7.19183`
MD5	`d1e6ceed346ffc9af3e4ab42a0f03ba9`
SHA1	`402f0c2658f8bbbadfcd034d6821a7d0d4790b47`
SHA256	`c42804d5ff6062637a9f9501546c58c0ec6933c0b3b3bb8741879f1802695f54`
SHA3	`17ec9b8f29a661f559178b06e2fe7de9239e8a9300a73187a9306935600d50ff`

4

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.625`
MD5	`73f292a074fac1705d35267d6c6eb7d9`
SHA1	`e82e54f9254ea345e063bbd9167bb22aa6ed2389`
SHA256	`51f5a091559422f99388406a941cc2004d7f921d67365ef10ded80b05e3d1ba8`
SHA3	`5e5d31199ad10e602cbaa901ee83660683511d520cee5f727ade0bfbd3441de2`

5

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

6

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

7

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

8

Type	`RT_CURSOR`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

9

Type	`RT_CURSOR`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

10

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

BBABORT

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1d0`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

BBALL

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1e4`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

BBCANCEL

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1d0`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

BBCLOSE

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1d0`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

BBHELP

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1d0`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

BBIGNORE

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1d0`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

BBNO

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1d0`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

BBOK

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1d0`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

BBRETRY

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1d0`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

BBYES

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1d0`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

PREVIEWGLYPH

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0xe8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

1 (#2)

Type	`RT_ICON`
Language	Romanian - Romania
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`5.26338`
MD5	`a59c5c69c6f62d7865e629ee3999162c`
SHA1	`86af6e479291f3b438a4ed24b443fd46498ec346`
SHA256	`565b4081d2f442e5d2789483308e3b3f1a296be5f329fe03f5546ee57a159aa7`
SHA3	`e2057b3b6640d8d1c35cd66a280042b30137a3fe0621b5b897ec6b1c0deca2e3`

2 (#2)

Type	`RT_ICON`
Language	Romanian - Romania
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`5.62344`
MD5	`6625d38bb458828046bf16d8c2b99d2a`
SHA1	`a15d8c2df3b923182ddd2a753b8fa3c48cf84427`
SHA256	`c3b82ff4c1f948b03a3afcb61b0782ce9390f18dc9e7bd76c90e42f193fea547`
SHA3	`c8e1f4c1c4efda6818ca3c84cbdafee798619e392bd7ea48f75954a9ac7c7f5f`

3 (#2)

Type	`RT_ICON`
Language	Romanian - Romania
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`5.99723`
MD5	`338ec990462680fa7fd8da571a5fbe0e`
SHA1	`bb37ac4908c92c1fd661761316d46f04e6924474`
SHA256	`497c9dee7c4afe7e9d71ceb3e4c79af100c245e2e021cc89362814c2eb13e1f0`
SHA3	`943106561c91ba0a18312478ed0632313efe914c76f75bfabc7e8d129bae5ff9`

4 (#2)

Type	`RT_ICON`
Language	Romanian - Romania
Codepage	UNKNOWN
Size	`0x8a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.31509`
MD5	`521bf1503229bd39a2467db3077a9af8`
SHA1	`7da6a5a9278300a45e208d315f0087db70093031`
SHA256	`1c150b8cff15c73565cfbca7fe745b039616c48d0553bb596e03680ad33311aa`
SHA3	`bb23208bc4172f0dcc95ce6ae5dfd6e6adf74ba90bb3b4118af065b6147d6b7f`

5 (#2)

Type	`RT_ICON`
Language	Romanian - Romania
Codepage	UNKNOWN
Size	`0x1ca8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`5.81466`
MD5	`3212d721ba43563f2b1ad8443b1460ea`
SHA1	`b4e0b17231c1f2ad3fac0a6f83a7c098705d00aa`
SHA256	`ca472d707f521ac878ba3a3bc8ceb1d4f729efda68073fb186897ed26087b782`
SHA3	`0290bce63d162c737927bf4b8c7840b6a4017ee2090dbeb1529adb3be9dc20d1`

6 (#2)

Type	`RT_ICON`
Language	Romanian - Romania
Codepage	UNKNOWN
Size	`0xea8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.80089`
MD5	`137d332193b89df31bfad3047211cba4`
SHA1	`a6798a36c8dbe8d8e7e2e240abf866b65dff2fe2`
SHA256	`b2edfa78f1c9eb12592a5d66e729c6600932515d8e682d28fe67988b280f93d6`
SHA3	`92abee12edea5f3e20037d9c93146e4fbfcd61216aebffdd506b3bf910d7f86f`

7 (#2)

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xea8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.3284`
MD5	`f94ab9038e36ac02af9331d1353a5c94`
SHA1	`94d9d8ed2fddaaad1da719481f53fdea6c5d2622`
SHA256	`5edafa67218c8296ab508b1a6286bdb10117e1daddfcd300d469cc96d50b091d`
SHA3	`71fe741f170b3ee3b8e4c968fb9e916c553b91edda6869bf3ee3f31c849a8e48`

8 (#2)

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x8a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.58188`
MD5	`8387a3b8e72c5ef987c2aef82db3bb23`
SHA1	`a35e3320cee395f89fe35810dd9b63c40324bd19`
SHA256	`6eb0286542a7085d952c7de4907a81be292ffe0f75ca845c8024011af156b3f4`
SHA3	`056be0897553e7131a156b5ab30042a8693c66b489f1a361eba562f1235f890e`

9 (#2)

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`5.12259`
MD5	`0f5f3b784bf7e3e5189e864e037c43a1`
SHA1	`0e24b3e411907feeac955ec5ecfb65531dec4434`
SHA256	`f62c5cef6793da70f4e1fee3c5d4d9daa02cfeaf673c328c5a866ddaec6c5b62`
SHA3	`0e48c7797a31c2868dd26a3527a953392f02d19f49465be9e33a694242c730e2`

10 (#2)

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`3.26769`
MD5	`ad925565101e395df873fe56ad8e1f11`
SHA1	`ba61595356812b45cd048827385bbd648588e084`
SHA256	`f87c33183d32ff460bb062d9c3e593db7214ed8091183d1086b6678e95f5e43e`
SHA3	`8411f46c8f07ec99739452abf1909d950383848b10e39546a3cf9d3da80c0e1b`

11

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`3.25899`
MD5	`88615a6ffcd8b4d81b5394c701887b9c`
SHA1	`63235d1ef32fa289e4265255f7d047a381074179`
SHA256	`c84dd79bface3f9abbb54e158fccd01323bb0025669878f95cf793a2f3a3674c`
SHA3	`7a18470f37874cdfc392e13a3f79af94ef3adf6e62513a95e038430dcd035147`

12

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`3.06716`
MD5	`78dcce74c910de3d8f6ea29edd47f5eb`
SHA1	`0af66d0a86b7f2987ab290fda01725c789615266`
SHA256	`23c06ace0a5f596d483793cb6d99700324d9fab927b29a2316230960eb96ae39`
SHA3	`7940ee3a78bbeb1d6e8ebe38498d91db67a026cc053ff9b1f214eb114c48d778`

13

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`3.30271`
MD5	`fd3540ab659776041b6277aec5dd8007`
SHA1	`991b45c443fce87c34471dc3989b9a45242dd94d`
SHA256	`7291cbbb88c9a2fbe61be6dc28b33506b66c9912790b856a2f9f6a4c0e6f89ea`
SHA3	`f6abecf92307c69c18db561f617d95442bd5ea3faa577e37c65db70a06c9c269`

14

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`3.73857`
MD5	`9aae9cd6e6f9fa654b386b14ff99b1a8`
SHA1	`05c1ea8a9d57d4790d37627e7ed60978ac452091`
SHA256	`7a5ae136829a74a177f81668205135db0a6770514fccaa11b06c437118725318`
SHA3	`09dec4c756a89f1d7ad2785c4d7791be6aad593e27265f206be2d37bfdf0d9e9`

15

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ca8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`3.46121`
MD5	`1c8f7859b5d0b04e0c23c92f75b6c96a`
SHA1	`ccfb0683953346d2258162069bb8be14bd2b1efc`
SHA256	`57b8d7a4a7e4455ac29ed836c29d8bf9da8566d3451083bc1cb3c8dbe8d325a8`
SHA3	`0fe7359aede0f53785e4e33a28568ed5ba4668911ba8fcf8bf99053edc904fc9`

16

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.85297`
MD5	`de58aebdf73490a67676a9e57bd16c33`
SHA1	`20bb90b0e5bbfbfee67c86e7d545b50023ee3375`
SHA256	`a8f6333ed7b3a5f0a46bcaa0a194c798639f5d0552725843720338f9fcac02d9`
SHA3	`19b777b89392fd9b6a3e1debdea58cb122a89f488685f06c4287b40a9cc3a7fc`

17

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`5.27693`
MD5	`b8ce029a2a6c3e7ab9c181818956d716`
SHA1	`766adafae6c5d18dd2f2ff62a728a001774b9aca`
SHA256	`9e6fea6151469f8b1b24395d627a1bae079cbfdc4155854df6ebe8f1162f71da`
SHA3	`61c463ef088fd4c8fbc0d0e8ea8df9f23d8bfae7796ca33d613753538e298c93`

18

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.93915`
MD5	`cf31b3c2ec3bebcb7585b5bce12ded9c`
SHA1	`042cf203a593ee0ca701685dbccd9ce430300a1a`
SHA256	`fa67eb49a1605a80fb7087a9273c57858b50eec0faf9e06e1e0c1405be157c49`
SHA3	`c1818bd0426a2e51f7893eb24d9494ac5099c1f5f35f1b7b2c123cb84abd0e95`

19

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.48417`
MD5	`868169e9922f3f3352c315c73b631fe3`
SHA1	`d96c3b881272f866d659abeedb3943877206ab54`
SHA256	`a4f1b6bde5d702578a35073888e3e3b3af4eda385859532308868f5d10746966`
SHA3	`e79f3031d54c550f7d8111131f21d21479f52976674c3ba135b124259bc43254`

20

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.64119`
MD5	`1e52fe170f9f935b8706f042cfb621b1`
SHA1	`96c488a0f73ab96006ac52bb92709ed11a608a93`
SHA256	`f802425ef512425a45ba5468f8a80a0dd7ceecef446f171c2f56a2c3e17d802f`
SHA3	`33cdb4f3d748a0230a25f88ca9f90d66de0dfcdf2eb8a155ae4643f8de9a8cee`

21

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x8a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`5.62794`
MD5	`4d56a7de851c0ca96b0a351e8dbc49fc`
SHA1	`719a5369aa2c6f194363c851b5860c0e5f650ad4`
SHA256	`cf974b410e0af17d904e0880ae31b14f081443441b2f0cc137722329cf726a7a`
SHA3	`fd90b342e785898d0725c23ae1e06baec3dacc9befb77764e46207629a40cb7e`

22

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.16182`
MD5	`5d2e992a8ff960c6476439871e30c7d9`
SHA1	`7ee08128649b78bd595b6ab40bd2aa9ab1af5485`
SHA256	`30688c2358c841baec2468c3d60c73afbf1a58c0cc3371c3ba5036fabd5fe759`
SHA3	`45d19010377457346d7a5b396997d5b3526af02ab71cb20c68372c1e3e9e952b`

23

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ca8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`3.96327`
MD5	`0e87ad3bfd7be0645129db9c6b431688`
SHA1	`9314e3fd65c533753c2f9e9eddf5cbac534ff4e0`
SHA256	`7df57fa5edc0005252f32edbb2176ef225e4212fcb4026b97a06b2c14cf91820`
SHA3	`1547c042f6baab5c0ee9e4f76351eee045c377e19fb0f8245abbc837ce2b49d6`

24

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xea8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.78643`
MD5	`f0c6b58d619edd0b613b3b6191187c94`
SHA1	`b808e495d0a2ee91fa5fdc098651864d6dc4efb5`
SHA256	`33cace72b0253ccccd25d0e1ef9cf4c09e8eda7c52c32f4e5befab56a825877b`
SHA3	`54ad2d4d2c61236c71c14470e5279211aadb2fa41f17ed64e40963d2029177d1`

25

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.77561`
MD5	`c63bf608698f2b112048dced45336ea3`
SHA1	`69b8c9408ef902cea3bbad919be5b06215dc8e80`
SHA256	`c9cb518dae51902ff92c68c21061c5f9b4f6341b7e61d298ed3f861966650589`
SHA3	`3831d3883ff06026f38e9220e91234214a3ddd1b1a4a8796f937ac66f9ac3884`

26

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.54057`
MD5	`3c513b6cfd742485fd30ad98a963a47a`
SHA1	`90f880187b0733d8d7abb39f00e447d8f423485b`
SHA256	`7300dc2444fc53315a2d5beb019f70d3ab2b124d342eee9677c6af9b56a3acce`
SHA3	`c970dfe676d7d19abb195c8cb0200f464d325cb352964bd470f9ab4cd769efa4`

27

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`3.17204`
MD5	`b69a9b40c87e1c43c14ca22353365d59`
SHA1	`de8ef11461eb378c9bcd634a581668770eb1d0fb`
SHA256	`85295a7f69fec3250dddcc67488f158b2065a3f82d0b356aab6a2103b619eed3`
SHA3	`f09ab66e48ed78e42428e516cb2951095bac6d4caa5fd930928308f63e35ad1d`

28

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.15193`
MD5	`cd3c6aa0e1cb3ccdbad907a61565085d`
SHA1	`4c4dad921ac837504919c85a389de264b8b43352`
SHA256	`6ea141755ab8adbd9f1d4c16eae434abc9e5f10be04e7c82e51b1b0de4397d3e`
SHA3	`8c9d009b8068c92cd884c786fa896a685966ff4bfa8de46d43d62b1e3609ce62`

29

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.15175`
MD5	`a376cd425d4db3b4548bcef724ee50f0`
SHA1	`58334fbe7f00c91007444133a4c9db3c0b16b3fe`
SHA256	`a64e2487f4f0da258736ca20f254f3edf9a583fe06ab56f7b2dc2ed94e8acc29`
SHA3	`1e28ee9dcb30a42c1566f7baeda21e0267199e51709736a45c46e8aba1ee9f10`

30

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`1.46759`
MD5	`392fae08b9d76e8ae4e8b9b1535acbf3`
SHA1	`31f74fcd957457acd2b84d0ecf6f086bd55e3bf0`
SHA256	`37fc977e62076522cac6cf51efaaa0225f72524a81fc0f1c81f8ff6c5f5d2a6f`
SHA3	`ac5d7752fa6ceaf247878acdb7634c989f9250f016667632be222405f61e3429`

31

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`1.46804`
MD5	`63bb42f25543746ee555cc0b3949263b`
SHA1	`d696452b0a062ec87a85c2b39eae40ce0921371b`
SHA256	`a760b355a6a8f2861b31532a1c773e5591865f25f9edcfa1822136115f76cfef`
SHA3	`071e0bed4c4d4c886c6ca6b5230ffa969d1a02c28dd53a553743aa05dd052bd7`

32

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.15253`
MD5	`7f730cbaded7c5445ba4d8fb30cf6667`
SHA1	`147b46a491876ff6799ac1a6d7f39430d44c43ed`
SHA256	`1e73437c7c0d491693ec8170d813b2cca96b7d468987d34e6a9900f347417320`
SHA3	`69ff3e4a138d3386de34c50401a507a4226a8125a1556b72f8adfcfd79c3523c`

33

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.20744`
MD5	`295367993c5ef8140cd645bb1a6085e5`
SHA1	`864f01d6da2052e656216debaf8a95f77722d185`
SHA256	`66ea53aada86868309c7e9c591a3bd71d3433719ea5bdb92ca6a8ffc5f090151`
SHA3	`db5b9abeead93734229b68f3c1391fbe269058a43e0e3122856aec6eb1cdb1e1`

34

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.20475`
MD5	`1a8b62581045081ed56a4e96ce989156`
SHA1	`a41ff88fcb17eaf295a8ab0b1e01ca306f4f26f6`
SHA256	`bc52beec9aac57e126ee0fb7ed8ff25867693e3da741e59ec999680662771964`
SHA3	`ff95c92db88669b99cea597dee9f9a33328b773d31d4de16a6bdcdf0f98ee7b4`

35

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.98388`
MD5	`98394d03eb31783f442361dc9701afdd`
SHA1	`01677a76a74b06d128614b82731cfcae9c3dca38`
SHA256	`dabb07ec81af9ffc9cc3e111d0301dd5c9aba7bf4b3a02ce29ea460a2c240112`
SHA3	`b17d16aa5935304bc405a763ea06b0466eea9a6694c913c7f107c9ac1da545be`

36

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`3.01424`
MD5	`9040c10f4108dc5287fe04b50a2d316c`
SHA1	`c4745bad7f5a7f352fc1fd8ace7938981fbb9e69`
SHA256	`9e2683d38744727ba3e5008d409e2c7c51a3bde8467fa4045291782a51a856ba`
SHA3	`c755f78806536bd029b981bb55814dcf10c2680f6282d5c32c57fa905b7eb335`

37

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0.262958`
MD5	`7a7dad5f801c7ec1c1759bc7ac0f2202`
SHA1	`626db3eb2bfbd6bdcb0c6b4aa0ea9cc529ce40d2`
SHA256	`694f65f6e83f4c4ea243803cee86cb8e14d27d7c72863b4a7c77bbb7843cef7d`
SHA3	`e370f365eda68e84f4447679dd01ce6a0559f93344d6488cc149bce98bcd70d4`

38

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`1.99693`
MD5	`8f01d0e616a9050b294db3126d0fba62`
SHA1	`3d573d0dd8a04acf1fc826bb2dfc94e7e011f527`
SHA256	`f9d0a2969c7535b837c726d93e7a4e93dd52ae9f98b2e1a2ac95c74fd8705111`
SHA3	`895e7878afe5ee40ac7db2a52e2aeff6e55cf5503041c787fbe398ec6ad12cb2`

39

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`1.99931`
MD5	`3b05a6f328a7d1b4ffd71e7e53b75db7`
SHA1	`9596b75b30bd2e85334b4b6312d7c28916519bfc`
SHA256	`c3d8e00155bb764ece2b101740adff146f2bc224c7b26e9f6915622911bcd8c9`
SHA3	`25d306c24c48fe8cadd32c8b5574c02a42daf2fde1319d4217507e4583e01bfa`

40

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xea8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.73521`
MD5	`64b44f5c7e6b18719a6bfe71f113f6b2`
SHA1	`5b04b8a541ca283c631bef7548d8930d42a519cc`
SHA256	`bc8a753d31b41c57756fad618a3f88e9d0e7cbdf04a8c0adef0d78ea4d7964c3`
SHA3	`a80415d4757c80ec8066865da4f87da8af27ee3e3e2ea298fe3fe6ed52d8f502`

41

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x8a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.59352`
MD5	`eb61a6fdb724e49f51b3fd45734bfb6f`
SHA1	`ce3bda93106c8d796b5019eb16415ca9bc2e0718`
SHA256	`0d3315db269a863e3b8a8e62fcf0916ec3fe814934ddcceb5c3ecd61bc33f2ac`
SHA3	`a76cc8fde785b652b6600c56013b387fae0c5765e4213011a79cd2fa144d7881`

42

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.86429`
MD5	`e413d2ccc237ae83403ed1274037e90c`
SHA1	`f2628770b92dc9fcef180f6fe87ef2beaac7f236`
SHA256	`d613e3929437fe4356f5294c77624cc01ceca7a181c0f60449f88715f1213daa`
SHA3	`a7e9f2381738521fd51ea11be34fa58e7ef11f4525ba98fdb4e0d39498da669d`

43

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.16144`
MD5	`fcc47bec496d66ddf28b24f257a80786`
SHA1	`0483355e228d7c1bde00ca6afeb452e47b3160ff`
SHA256	`d2bcbcc229ff2ec043f73c7b055ea7fe7fe811b658aa2f3aaf90b376d4cd46af`
SHA3	`26bb08b660ac35dd360d4d5d8271fe8adf57801ef9b17765c0c4370e998f32dc`

44

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.43192`
MD5	`6cb71beef7b43ef7b952c5a40a4e13ea`
SHA1	`ef67dbeef706030606c5ef374a7787d79c4910c5`
SHA256	`ea8c7b4cb7555adccaee869fae40301a6ce1016b21872370de46f42c4b0b6345`
SHA3	`e5e6984288bebabe86020374dfbdc3074f4c435532c5a79dc14f5c64a727bd82`

45

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.64729`
MD5	`f8b5c7cf7a5c394b2818d55f9bd0c96b`
SHA1	`7bbd58d580091e3dcb5a5852f9084214da72809e`
SHA256	`3d942d617d556540dd30f2c89bdc3c6b7582af47395ea9e2a42ff026e7b2ba4c`
SHA3	`f5219111dcf0656e2c17fdb4e6468302799d96013d8ebac5633a42ae60ffa4cc`

46

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.61505`
MD5	`6c60d2a57f9943e3168dbab141a0b695`
SHA1	`2313ffe8689af59621f77182296cc97e34638fe0`
SHA256	`3242690c5227faa5042a327ba88b8aa9f251fb4dcaba57e585e6bbf912a817f3`
SHA3	`839d0c265636bba25e00be693a6a4dc80def0eb9bcb33e22b28be0bc518a3333`

47

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.46169`
MD5	`b2462eeee6f83caf2e8074d44d215c68`
SHA1	`b0e2fbf6738f809f6eb1d763846ffa18318697df`
SHA256	`0c83eb58fa070fa31d02fb9c7a2abd519a31adf09ba56c7e044c72d61bf5857e`
SHA3	`f38152c1aeee60c9ecb7d864d14d09697f5c7ed331cea670e9c7605a3e09ca50`

48

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ca8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.19455`
MD5	`aab56c28c22bec9f97c589e78e6e487b`
SHA1	`7291314779ce91b692553e4a9140b840191d052c`
SHA256	`628a7caea86706faad8f500c3398362059519f4c7211a4afd6c8af0e9053e7dd`
SHA3	`efc571773696d08e73e4d07c575ae0040c101efd3838d3decab6a212f96ca473`

49

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x8a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`6.06696`
MD5	`63b592e06f5d2cc401b77661adb3290f`
SHA1	`9d48036c26e9f3a51ac3661538036b6ed074d3b6`
SHA256	`58d6c71ed12b4e5b4de8185e196e5561f71ef94c7de1222f69a50ea5ef432efc`
SHA3	`2964007969807df9946f35f59fdc2813863e818d280e95469661c3138a7818c0`

50

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.03159`
MD5	`8363391abdd6fa7fa1fbbb356cb455be`
SHA1	`ee504334b1eeb18e8d298527a82c87da848072e6`
SHA256	`dd1ddf8ff1ef44b95e091653711025824d7676418ccf913318973b27d8a2a098`
SHA3	`42158c2a7d44bf15eb5776f55844717313f7e9be9519fe04e6aa194dbdfdee27`

51

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`5.67557`
MD5	`ab1e477b252547c5456c2ea887861560`
SHA1	`8bb35fa7e7069394d11cee4a0b001fd5173c30f6`
SHA256	`ba26393ba51f66b353741dd203123451f64b7356ef387c05dec3eec299263e96`
SHA3	`e7c88ddd66d20b75aaded7a970772e35d1006a2404d5c8f50a6bfe0fc5131eda`

52

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.93695`
MD5	`a80df042b59d749f1e2eedc72df436f8`
SHA1	`8ba69e246038aa3f00603759e709952dc41d5206`
SHA256	`1974b9d67a3dc935ef3a192650f86eeab427d6ae27aaa166ca9d5f09cfe9ba53`
SHA3	`ae57ffe5d3a5c9e16c83585da67bca7ec63215cd41894cec521da1a1cf7de72b`

53

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`5.43496`
MD5	`76f6634f9c30dbaa0de9b4bb61e68eaf`
SHA1	`ef22d5e8919313192a9bf17de9f1388c6ea6f3d2`
SHA256	`62f301592ec12b74b408fada89007f03c54679e18f7f48533da7c5f01dda4f18`
SHA3	`bee6284926da2625f6577a1d61c46d0d7e013e8584ad7eb08c8a6b21ff4a50f2`

54

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.82873`
MD5	`9afa8e7f1e59eadd5392f3558b6970b2`
SHA1	`498124335d87e2ba110b7a8a3e1bdc3c5db26de5`
SHA256	`eda2c4c70bca0c81f652582a05509fb377ee4e5dc16e8c457a72c5544fead5a8`
SHA3	`a600e6fdbea48b43f79c29dc9724a5d6bfced2bc6b74ca5d25046529be976b25`

DLGTEMPLATE

Type	`RT_DIALOG`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x52`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TEXTFILEDLG

Type	`RT_DIALOG`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x52`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4075

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xac`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4076

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xae8`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4077

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x8c0`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4078

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x46c`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4079

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x544`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4080

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x494`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4081

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x3a4`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4082

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xbc`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4083

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x118`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4084

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x168`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4085

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x420`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4086

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x3fc`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4087

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x258`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4088

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xe4`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4089

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x18c`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4090

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x3ec`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4091

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x3f4`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4092

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x2fc`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4093

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x398`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4094

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x370`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4095

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x38c`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

4096

Type	`RT_STRING`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x454`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

DVCLAL

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TABOUTBOX

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x2220e`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TAPPLICATION

Type	`RT_RCDATA`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TFORMPDFPASS

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x21b9`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TFORMSEARCHING

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x327`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TFRMACCOUNTS

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x3801`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TFRMBUGREPORT

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x81b4`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TFRMCHANGEPASSUSB

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x25b9`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TFRMCHECKINGVALIDITY

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x30b`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TFRMCONNECTIONERR

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x508e`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TFRMCONNECTIONSETTINGS

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xc3b`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TFRMDEBUGOUTPUT

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1107`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TFRMEMAILFREEZ

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1e1`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TFRMPRINT

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x3d0a`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TFRMSEARCH

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x756e`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TGOTODLG

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x471`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TLOGINDIALOG

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x494`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TMAINPLDVIEWERFORM

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x33a490`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TMDICHILD

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x38d0`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

TZOOMTODLG

Type	`RT_RCDATA`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x482`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

BIGHAND

Type	`RT_GROUP_CURSOR`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

HANDPOINT

Type	`RT_GROUP_CURSOR`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

SMALLHAND

Type	`RT_GROUP_CURSOR`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

32761

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

32762

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

32763

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

32764

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

32765

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

32766

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

32767

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`

MAINICON

Type	`RT_GROUP_ICON`
Language	Romanian - Romania
Codepage	UNKNOWN
Size	`0x5a`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.81587`
Detected Filetype	Icon file
MD5	`d0e27ec9d5d5cdc115f6c8c3f79775bf`
SHA1	`659557803608ee57ea6251029fed7e9123981735`
SHA256	`550d1a722268577e1cb28ccb9325b3ae6953996a2cb0014e02428577aaabac76`
SHA3	`4234a98df0937b862ff9c8c5262d91e80b6f5b3179758f38ca3c84791665ac39`

103

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x5a`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.78167`
Detected Filetype	Icon file
MD5	`3622d27420c97845b7928b37154f2fd8`
SHA1	`08489539ec8374a3a1ab16c8519f5c100c30fac8`
SHA256	`9fe141528a1614aeb914b2043c96df9ea38503d38973f5945d9e68902eb11680`
SHA3	`527788f54c76405a1ca8dbd0b28910f0006c4d6969e4c71e31ff89c4e1e22f4c`

104

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x84`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.8996`
Detected Filetype	Icon file
MD5	`7183cfa56e746d1c2a0f2dd51802a9fb`
SHA1	`20efb7c87cd92e2ee973facc4675de03ac129844`
SHA256	`ff35aa875aed8803c1a3b9568b2fc93ef57a223b64998eb85d68437ea3c96815`
SHA3	`8e0ed4d52776913334fcc13e237a923e396846475a1af7a2fd47e41553b18b24`

105

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x84`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.89174`
Detected Filetype	Icon file
MD5	`f20a96640cd0cee8a925f78884e71ff7`
SHA1	`2fe0663d210995fc3eb59f3eb7f06572a3dc1bd1`
SHA256	`e5707fb9f69b84029f1fae066318efacdb9f5dfd32bd80e43466daff1140595b`
SHA3	`20233a5b1dcc300bfeb802a8562d563c4845808754eeaca8ab14c1379607df6d`

110

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`5648dc7d4ed0fc63bcb7edd05181eb3b`
SHA1	`01b181d888ebd8b07725caf35aa462347a200f5a`
SHA256	`6d8a23b89b2f2b7f83bcd6cf129a88c14859f33515c6dd9b7486cb1a4c0a20be`
SHA3	`1fa696d5fda62c6e9b5420f54901e9cca899d70f48bc156efd9bfc39a3d4a5df`

111

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`3299ed99cc9cc453fa0d339f1b367d1b`
SHA1	`a8be038eeb26f79047d142bd642bcf3f3ea24c78`
SHA256	`7fd552ef4e1d7fff643362c4bac34011eba756496be519c2c0fce9529315c169`
SHA3	`797f8d123e6a89d8e0157d6b25d2850d0ff1ed2149af8a274085b71a09e40d08`

112

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`11786c7299af8ebb52fe6fb5e82e1927`
SHA1	`d56ae2cccdf75ae9292a46a13a44dc2f53e0acf2`
SHA256	`53ff6843afacdabb6e28595746b824314459ad16e3a9d63f7ff452994935634e`
SHA3	`60c1a7f19c97d94dd1c11a2b95a60303f5faad728789bfbcc599ad9c064cd343`

113

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`66322c52126d0a0fb7f36347c4b547e1`
SHA1	`f9d480011d93e867ed34ef39969646433405f915`
SHA256	`26b0bba981e7d51f2bb23216781aa434c399b2ab7704d3ebef69e1e40455b5fa`
SHA3	`7cd63137b812e4982773f730a4b1907a8c514f78568f04b8b05c0c371f93d7f6`

114

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`56c0899170cefc9f9f6371db9202f2dd`
SHA1	`a4a5801547585e324f3940fec39432990280580b`
SHA256	`57a6883c638d9dc391f80a60ec20b4be124d44d2b946be1333378949475d0af6`
SHA3	`aad0a119ed2f9042daaae40f93db758420fa509dd6522e10d3bbcbc7b6c4ba64`

115

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`55d0f429dd18c32ea4488f182a610e28`
SHA1	`9a23e45e520923d2bb5e61ae2d482cab307caa0a`
SHA256	`ad607b30a883659622ef72e69cce812db55ea8dcbd0a4f5f0f6980e16fe82311`
SHA3	`d229b3f8639bb0a97ff3743530db91d0baaae36f1dc3f3e8d9bce5fc08f8781e`

116

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`db4138faebc3a8e6bc89bcb4b73e595c`
SHA1	`c27d0a187a42023384a14054754793950a94cb53`
SHA256	`ee5d5a395e22897d60d0bf42ef5ce956f70bc09c0cdf53fd9a37777f5314923a`
SHA3	`943769320d9de2a578fed2e734f75c3aeb726e666b39131be4425d67412eff36`

117

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`1.94375`
Detected Filetype	Icon file
MD5	`4fd995aaddd8d2bf4891b2714140b2da`
SHA1	`25ac46efb3cd1b3d0067f5c2c2273a6823b00dfa`
SHA256	`8131cb009013d1552c54663530f218b4ceb7e0c1d387b635e4ecf7d071269ae5`
SHA3	`5d0a7d0dffb1c907f52a2d2c6aebae58fc2b018017414219ceeeedcd1102ff33`

118

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`712cda59f76cb556f3783a952df795b0`
SHA1	`366634ff922265579bcd26c247f23ef4442bcff0`
SHA256	`c7ee7f5a4e7e8931e2f7f888a9ff835615733e709a2d6f487e07c1ed64cfd1b7`
SHA3	`be49abe8e948b871c0f5ff464c0ac27279e6f7eab3a293ac7b32051d0b7f8e83`

119

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`c9f720d3a59cb12afd89479153842829`
SHA1	`ccc4ffa57c944de5a50e595f706e184608166ef9`
SHA256	`66026511f524d13683fa69e0043371c33078306d6996c7a184502b024c8ccc62`
SHA3	`1e84aa9053391e0a4f79123f7a075099c6439f156308b7f559074038ff2f0127`

120

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`8a80b904706892d6b2dd9df5cd065d84`
SHA1	`ce3993d2618d61cfb4eb2014def40acd0da5cc43`
SHA256	`5480cfcefe56f3a65a022d65e19751abba95ab6b22151ab71bb6486e0eadaf12`
SHA3	`1af6f6632c9b4ebcfc92db5b8e4302e97a7adfb8e56ea6778ea5f1de3da0a63b`

121

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`41ada10a6115d4d59e6915e364592b0d`
SHA1	`2d23c16d658f348f337deed52947011ed7586bac`
SHA256	`43bd6633a0b8e4f506e0bec29756cd3f5097f602cd104d1a6e0dd1c5d1f6fcf2`
SHA3	`8dd230e5dc1bb7bc4abf85211cbc8ef071e089624eff93d418c36456a64a6adf`

122

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`85d5581653072b1d2ab118213d2ed548`
SHA1	`e82927fec9bda1fb570f70c9bae949691e860d6a`
SHA256	`0dbc122d82f8242f21a9a4590aacdb8bfe5e116e110ef6f62cf3b5710088255f`
SHA3	`1b356eed0b17436ab38c1f76504146cc27076c9d26671005061f6b465c4b75a2`

123

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`a9d0a6e3eac8f9ad917c943afe3e6c1b`
SHA1	`ceadaa573cc1a6e26bc2443fcad5ab59a1502e48`
SHA256	`6b8020c42cabe00db7e6ec0cae265cd8953af22599aa67848b9f3bf85ae36ef4`
SHA3	`6b7cc33740faab9707ce34b8ecb8ad91934a75842af3f8a882fa7db79f88037c`

124

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`f2ac53251b7f288d58e66536260ddc0c`
SHA1	`ab6d7d499a3fc7c9eb90d8d70eb7762d1fd24506`
SHA256	`692f0a3f5f38ec8f87e4cf2d8d365bf84c0c7899b0920870d577d52558ca0079`
SHA3	`c7bdb10df54ad53ee9ed73e20d53e795a51dfc1e49e939a29aae84bea0d1e39f`

125

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x84`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`2.92883`
Detected Filetype	Icon file
MD5	`1a682d5dd28cbe2d0540978e52bb2145`
SHA1	`6c1ad19d6551fd611465de4f55ce36bb1dd1795c`
SHA256	`9e8b0e0d5e31a179e0205989f650ca8344eae32c938ab16be4bff80f4ebb0f9e`
SHA3	`e9d6e77a9c9b7802dcbd33aea8ba9ca1d862db5c52a044ad5c1c59aa38b965e4`

1 (#3)

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x324`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`3.38421`
MD5	`2c32bd23f00e151be45065d8f18f75b8`
SHA1	`7f1dc13625158bde388f312e9db97d3168c3c10c`
SHA256	`ea24e1854dac725029ef794b5e67d1172bc808bb32a5410fd810a6eaa0522454`
SHA3	`c29b6e79055834bb9aebf90f55584a74e4bf4891e8ec4564a3d873e6132fb321`

1 (#4)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x245`
TimeDateStamp	2017-May-15 11:15:18
Entropy	`4.95218`
MD5	`ec5f45455a2dc2584390b6ba8dac86b6`
SHA1	`c4430217c0673d86805482d90cf34fa38a3f758c`
SHA256	`a3eca8428248ea414fdceaf0b451393866fe413a5eae29264d1e29bb60c0c68c`
SHA3	`227245b0c93388712983c330d15338e56d8d46dbeb08c42d717f98c86d65706f`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	2.6.44.1230
ProductVersion	2.6.44.1230
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	English - United States
CompanyName	Locklizard
FileDescription	Locklizard Safeguard - PDF Viewer
FileVersion (#2)	2.6.44.1230
InternalName
LegalCopyright	Locklizard
LegalTrademarks
OriginalFilename
ProductName	Locklizard Safeguard - PDF Viewer
ProductVersion (#2)	2.6.0.0
Comments

Resource LangID	English - United States

TLS Callbacks

StartAddressOfRawData	`0x6c4000`
EndAddressOfRawData	`0x6c4104`
AddressOfIndex	`0x5d40a4`
AddressOfCallbacks	`0x6c5010`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_TYPE_REG`
Callbacks	`(EMPTY)`

Load Configuration

RICH Header

Errors

[*] Warning: The PE's sections are not aligned to its reported FileAlignment. It was almost certainly crafted manually.
[*] Warning: Section .jyla has a size of 0!
[*] Warning: Section .qnjvxc has a size of 0!
[*] Warning: Section .bucos has a size of 0!
[*] Warning: Section .iwmj has a size of 0!
[!] Error: Bitmap BBABORT is malformed!
[!] Error: Bitmap BBALL is malformed!
[!] Error: Bitmap BBCANCEL is malformed!
[!] Error: Bitmap BBCLOSE is malformed!
[!] Error: Bitmap BBHELP is malformed!
[!] Error: Bitmap BBIGNORE is malformed!
[!] Error: Bitmap BBNO is malformed!
[!] Error: Bitmap BBOK is malformed!
[!] Error: Bitmap BBRETRY is malformed!
[!] Error: Bitmap BBYES is malformed!
[!] Error: Bitmap PREVIEWGLYPH is malformed!
[*] Warning: Resource DLGTEMPLATE is empty!
[*] Warning: Resource TEXTFILEDLG is empty!
[*] Warning: Resource DVCLAL is empty!
[*] Warning: Resource TABOUTBOX is empty!
[*] Warning: Resource TAPPLICATION is empty!
[*] Warning: Resource TFORMPDFPASS is empty!
[*] Warning: Resource TFORMSEARCHING is empty!
[*] Warning: Resource TFRMACCOUNTS is empty!
[*] Warning: Resource TFRMBUGREPORT is empty!
[*] Warning: Resource TFRMCHANGEPASSUSB is empty!
[*] Warning: Resource TFRMCHECKINGVALIDITY is empty!
[*] Warning: Resource TFRMCONNECTIONERR is empty!
[*] Warning: Resource TFRMCONNECTIONSETTINGS is empty!
[*] Warning: Resource TFRMDEBUGOUTPUT is empty!
[*] Warning: Resource TFRMEMAILFREEZ is empty!
[*] Warning: Resource TFRMPRINT is empty!
[*] Warning: Resource TFRMSEARCH is empty!
[*] Warning: Resource TGOTODLG is empty!
[*] Warning: Resource TLOGINDIALOG is empty!
[*] Warning: Resource TMAINPLDVIEWERFORM is empty!
[*] Warning: Resource TMDICHILD is empty!
[*] Warning: Resource TZOOMTODLG is empty!
[*] Warning: Resource 0 is empty!
[*] Warning: Resource 0 is empty!
[*] Warning: Resource 0 is empty!
[*] Warning: Resource 32761 is empty!
[*] Warning: Resource 32762 is empty!
[*] Warning: Resource 32763 is empty!
[*] Warning: Resource 32764 is empty!
[*] Warning: Resource 32765 is empty!
[*] Warning: Resource 32766 is empty!
[*] Warning: Resource 32767 is empty!