f9423a142ad39df8d57933cc67c62677937658793da3be44524f1d9ee39dd4e4

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 1992-Jun-19 22:22:17
Detected languages English - United States
French - France
Italian - Italy
CompanyName Legrand®
FileDescription UPS Server
FileVersion 1.1.4.51
InternalName UPS Server
LegalCopyright Copyright © 2012-2014 Legrand®. All Rights Reserved.
LegalTrademarks
OriginalFilename UpsSrv.exe
ProductName UPS Communicator
ProductVersion 1.18
Comments Designed and developed by Stefano Pongiluppi

Plugin Output

Suspicious Strings found in the binary may indicate undesirable behavior: May have dropper capabilities:
  • CurrentControlSet\Services
Contains domain names:
  • https://jcl.svn.sourceforge.net
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/Jcl8087.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclAnsiStrings.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclBase.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclCharsets.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclDateTime.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclFileUtils.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclIniFiles.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclLogic.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclMath.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclMime.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclRTTI.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclResources.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclStreams.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclStringConversions.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclStrings.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclSynch.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclSysInfo.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclSysUtils.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclUnicode.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclUnitVersioning.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclWideStrings.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/windows/JclConsole.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/windows/JclRegistry.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/windows/JclSecurity.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/windows/JclShell.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/windows/JclWin32.pas
  • https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/windows/Snmp.pas
  • jcl.svn.sourceforge.net
  • sourceforge.net
  • svn.sourceforge.net
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryExA
  • GetProcAddress
  • LoadLibraryA
Functions which can be used for anti-debugging purposes:
  • FindWindowA
Code injection capabilities (PowerLoader):
  • GetWindowLongA
  • FindWindowA
Can access the registry:
  • RegQueryValueExA
  • RegOpenKeyExA
  • RegCloseKey
  • RegSetValueExA
  • RegFlushKey
  • RegCreateKeyExA
Possibly launches other programs:
  • CreateProcessA
  • CreateProcessAsUserA
Can create temporary files:
  • CreateFileA
  • GetTempPathA
Uses functions commonly found in keyloggers:
  • MapVirtualKeyA
  • GetForegroundWindow
  • CallNextHookEx
Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
Functions related to the privilege level:
  • OpenProcessToken
  • DuplicateTokenEx
  • AdjustTokenPrivileges
Interacts with services:
  • QueryServiceStatus
  • OpenServiceA
  • OpenSCManagerA
Manipulates other processes:
  • OpenProcess
Can take screenshots:
  • CreateCompatibleDC
  • BitBlt
  • GetDCEx
  • GetDC
  • FindWindowA
Reads the contents of the clipboard:
  • GetClipboardData
Suspicious The PE header may have been manually modified. The resource timestamps differ from the PE header:
  • 2014-Sep-19 09:46:56
Malicious VirusTotal score: 4/71 (Scanned on 2023-08-13 23:33:52) APEX: Malicious
Bkav: W32.AIDetectMalware
MaxSecure: Trojan.Malware.300983.susgen
Rising: Trojan.Generic@AI.98 (RDML:wyr3tiCDmMcz2AFvY0n7Sg)

Hashes

MD5 4b3916beaa7b87c8e527833943a7b4e1
SHA1 bd6f9e66afd6a366ca879e0e318dc7d3ab53c1bd
SHA256 f9423a142ad39df8d57933cc67c62677937658793da3be44524f1d9ee39dd4e4
SHA3 ae1308ed3cf36d266fd8f2b7875ccd806b0591cff0ae214b140948dbaba28bb0
SSDeep 24576:p/xteAVTuPDIHaIEW0TTOFfcZ4YfoqdIKxQX:p/bizbTTSqddx
Imports Hash 24a304548f072ca6c15216c24c727da4

DOS Header

e_magic MZ
e_cblp 0x50
e_cp 0x2
e_crlc 0
e_cparhdr 0x4
e_minalloc 0xf
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0x1a
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 8
TimeDateStamp 1992-Jun-19 22:22:17
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0xb3400
SizeOfInitializedData 0x4a000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000B4294 (Section: CODE)
BaseOfCode 0x1000
BaseOfData 0xb5000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x106000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x4000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

CODE

MD5 66702ad7caed00cf3f60c05ff54a4b55
SHA1 32e7f2f03cc46be2cdb516355a4a0b9f0c82a135
SHA256 5d5381a470ed972e6f3a70f0c9a3e074c16e3f91b315d8be978966d9443535e3
SHA3 ce99701a6f767c6c38adf356b97d0b1efb7bd6464fa04efb41cbb8f4b47215d1
VirtualSize 0xb3384
VirtualAddress 0x1000
SizeOfRawData 0xb3400
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.58872

DATA

MD5 aa2f4083b989652361012ebee3985ea7
SHA1 450ecb7318b6f87135175657e83732169d209c0c
SHA256 4694ed851e0300152e67c122b7b0853e58d5d57dd9ef0a9faac7cfed1937a911
SHA3 186bf74b408dc18fc18289ba8a840155c24e104c7275a8dff266cbb497d42655
VirtualSize 0x4c34
VirtualAddress 0xb5000
SizeOfRawData 0x4e00
PointerToRawData 0xb3800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.07948

BSS

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x3e09
VirtualAddress 0xba000
SizeOfRawData 0
PointerToRawData 0xb8600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata

MD5 0c09a7100a50f4112098462ae436ded0
SHA1 428da657837809e0052bbbf0fdf19e34ef42e341
SHA256 2b65e430774902a06a859057ab95780b51c07f4bebb9de271e92b261929c6e11
SHA3 fad7feb41279afbe58ec51e937ac2c8bf27759854099366206ea2a48f174cb1e
VirtualSize 0x2cba
VirtualAddress 0xbe000
SizeOfRawData 0x2e00
PointerToRawData 0xb8600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.9884

.tls

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x14
VirtualAddress 0xc1000
SizeOfRawData 0
PointerToRawData 0xbb400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata

MD5 d3668ab2aa4dd6fa8ce51e268381f85a
SHA1 d733c415c2f68d36819dda2ca60f7753993c7f03
SHA256 b5ff42a16cbd37dac56c3b312985a00b68644edcc43e4bf2a9b5b2c59d3ff3fb
SHA3 a36cb4a501cb3a561e83f02e37907ff2abc9674272bb424d2146fe0cff908f0a
VirtualSize 0x18
VirtualAddress 0xc2000
SizeOfRawData 0x200
PointerToRawData 0xbb400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
Entropy 0.205446

.reloc

MD5 33ddda2133b46753180b60bafe5ce580
SHA1 0eae3950e9f634ea0430b51f9eef68f2a2ec8876
SHA256 8c3b983cccbd9cac9d387e0ba803e0a2ac530ab0b33bcc14674ed7e70696e5c2
SHA3 b6d35854b0db6687f7acc71e97a904a43100f78cc72a20c448c3b89273807ac1
VirtualSize 0xd328
VirtualAddress 0xc3000
SizeOfRawData 0xd400
PointerToRawData 0xbb600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
Entropy 6.6934

.rsrc

MD5 945d2872d4f6c642c655a3c3f6a74fe2
SHA1 6a64a6a47ea9dd474669af45e0cfc0004b008082
SHA256 0fe01950e936345c94c5f8acbf6d9e1079b29a70b80772e5e410516fbca20c70
SHA3 1cd9161ba7551682719dff1fc9f16f714d97502dd00a8454a3e8845a2bf6130a
VirtualSize 0x34e00
VirtualAddress 0xd1000
SizeOfRawData 0x34e00
PointerToRawData 0xc8a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
Entropy 5.26174

Imports

kernel32.dll DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
CreateDirectoryA
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
DeleteFileA
CreateFileA
CloseHandle
user32.dll GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
advapi32.dll RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32.dll SysFreeString
SysReAllocStringLen
SysAllocStringLen
kernel32.dll (#2) DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
CreateDirectoryA
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
DeleteFileA
CreateFileA
CloseHandle
advapi32.dll (#2) RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32.dll (#3) DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
CreateDirectoryA
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
DeleteFileA
CreateFileA
CloseHandle
version.dll VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
gdi32.dll UnrealizeObject
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RestoreDC
Rectangle
RectVisible
RectInRegion
RealizePalette
Polyline
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetPixel
GetPaletteEntries
GetObjectA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
ExcludeClipRect
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
CombineRgn
BitBlt
user32.dll (#2) GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
kernel32.dll (#4) DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
CreateDirectoryA
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
DeleteFileA
CreateFileA
CloseHandle
oleaut32.dll (#2) SysFreeString
SysReAllocStringLen
SysAllocStringLen
ole32.dll CoUninitialize
CoInitialize
oleaut32.dll (#3) SysFreeString
SysReAllocStringLen
SysAllocStringLen
comctl32.dll ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
shell32.dll Shell_NotifyIconA
ShellExecuteExA
user32.dll (#3) GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
version.dll (#2) VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32.dll (#5) DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
CreateDirectoryA
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
DeleteFileA
CreateFileA
CloseHandle
advapi32.dll (#3) RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32.dll (#6) DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
CreateDirectoryA
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
DeleteFileA
CreateFileA
CloseHandle
wsock32.dll WSACleanup
WSAStartup
WSAGetLastError
WSACancelAsyncRequest
WSAAsyncGetServByName
WSAAsyncGetHostByName
WSAAsyncSelect
getservbyname
gethostbyname
socket
send
recv
ntohs
listen
ioctlsocket
inet_addr
htons
connect
closesocket
bind
advapi32.dll (#4) RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32.dll (#7) DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
CreateDirectoryA
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
DeleteFileA
CreateFileA
CloseHandle

Delayed Imports

CASE

Type UNICODEDATA
Language French - France
Codepage UNKNOWN
Size 0x7155
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 4.42418
MD5 4652b3d146daac44e763d0f49ce21c60
SHA1 8e75515049c08958339b37d391d02647ae295084
SHA256 ec6ad735f450f6d36de899e63ef09779404f769c3335791c2657e4eb06f690c9
SHA3 3c3ce02b5495a10068708b86acc6021adbaf30c2aa7e3e5377a6e751cc1620d4

CATEGORIES

Type UNICODEDATA
Language French - France
Codepage UNKNOWN
Size 0x7ba5
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 5.80158
MD5 77dfc6f0ac7e616ab0bfb9261abe9f14
SHA1 dba41f95e25fa73cb07800395a310ab34d548614
SHA256 19bc6b03706d7c99388a52392cee2fd167e069068217fa4ff8efdffa3f97bbad
SHA3 0e77fe3d1e25cf117446bd91e348dd0d452681360589264f2b288aad4ae68377

COMBINING

Type UNICODEDATA
Language French - France
Codepage UNKNOWN
Size 0x67e
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 5.63613
MD5 74a0a6eba011befda636bef24b0c1061
SHA1 af512649d727584f20bd0e9e899baef1259523c2
SHA256 0961ba49a8475a0c68f3dd2074a51dea206b00d61840a31f284f9e3450691f2a
SHA3 89ba17c57b1f842be9f769640478429fe65907b53c5c97227988e2c1d4e294e4

COMPOSITION

Type UNICODEDATA
Language French - France
Codepage UNKNOWN
Size 0x9cf1
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 5.13315
MD5 0a5739c1601ced28398bedb810f5d23c
SHA1 39e835c9ed0afa3242562eb938dc37b611e83ac5
SHA256 8d5c16c752042d97fca63533f8dcff36de874f6c4396302a07b2032154caddfe
SHA3 f9e9583cc0c6d0b3babdf550e65442090729fdf1776368f50ac1c8b6b26fde03

DECOMPOSITION

Type UNICODEDATA
Language French - France
Codepage UNKNOWN
Size 0xd271
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 5.24925
MD5 a2f650d201cc9e18bf594996c27b4727
SHA1 fc5dc7ce41ea61cc7c3249d3566b433d1297c9f0
SHA256 51356874770a9e4a28ab22732f53ff326a15c0726784c35d82153e620dd7e6ca
SHA3 c70d1e1008fc3e6df7393e286a0bb159423494482cd657d672f81563010396c8

NUMBERS

Type UNICODEDATA
Language French - France
Codepage UNKNOWN
Size 0x1435
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 5.41551
MD5 8ed7f1f3e620584fc6ee90de0e3605c2
SHA1 4b86f56010b5e174c099a7be2f2570917639bcdb
SHA256 0466ee103dd14e0099d40935a1d12556b71c2ff6e9e68ffb3b1c32d8814de3f0
SHA3 a67d515ebe1f9f33a05d6b9f1e3990c8fcd524d681dbb914436e309b5f2a4b6c

1

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.51103
MD5 d4448645fc1ddece64db479243c1bb19
SHA1 f7cc615bd9629c30970564a8f9ba5abdb50034da
SHA256 8f52f998c91c485971d6572b0c6e75bd7acaa0eac79ca8a536a4bd28b9d4f357
SHA3 6d35320c509cc7a526bba1e13c484310935a91a0e7c8d0796a613fc463418613

2

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.80231
MD5 2e87b3c111e3073a841775c1f8ec5a90
SHA1 20292304fa2ef1bfdc4a1000e90a1c16d4765a96
SHA256 ce19ace18e87b572e6912306776226af5b8e63959c61cde70a8ff05b3bbdcc41
SHA3 9527f09e739c2064835800a7e5c317cb422bdd7237f00fca079a1c62f58a2612

3

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.00046
MD5 a04c3c368cb37c07bd5f63e7e6841ebd
SHA1 699300bceaa1256818c43fecfc8cad93a59156b2
SHA256 ee1c9c194199c320c893b367602ccc7ee7270bd4395d029f727e097634f47f8c
SHA3 58722e3138aad1382e284c1605ecd665ced536de4906749ac8d6e11252cc9558

4

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.56318
MD5 9929115b21c2c59348058d4190392e75
SHA1 626fba1825d572ea441d36363307c9935de3c565
SHA256 9d9edf87ca203ecc60b246cc783d54218dd0ce77d3a025d0bafc580995a4abd8
SHA3 fea156e872544252c625076a6bf3baa733ee5b3d5399716e156734af7a841369

5

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.6949
MD5 f321ad13d1c3f35a05d67773b4bc27d6
SHA1 30aded8525417e2531d5eb88bf2f868172945baa
SHA256 99676c52310db365580965ea646ece86c62951bfd97ec0aae9f738a202a90593
SHA3 04c839da98a8c50a36697076af5bc6d527560a69153b2f718f065908fd4fe3ad

6

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.62527
MD5 5ca217e52bdc6f23b43c7b6a23171e6e
SHA1 d99dc22ec1b655a42c475431cc3259742d0957a4
SHA256 11726dcf1eebe23a1df5eb0ee2af39196b702eddd69083d646e4475335130b28
SHA3 b358d8a5b0f400dd2671956ec45486ae1035556837b5289df5f418fe69348b3f

7

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.91604
MD5 6be7031995bb891cb8a787b9052f6069
SHA1 487eb59fd083cf4df02ce59d9b079755077ba1b5
SHA256 6f938aab0a03120de4ef8b27aff6ba5146226c92a056a6f04e5ec8d513ce5f9d
SHA3 0f1c6c0378a3646c9fbf3678bbeeccf929d32192f02d1ea9d6ba0be5c769e6ab

8

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.31558
MD5 d93bd8d9d021ee9bb5da9bbb466c4865
SHA1 ac36d10be5e641b737641a625857e929d6e8c07d
SHA256 478928c2c498d82aa1f6b8da5e3d483d058c071d74c6e85ee0073e53042d0f57
SHA3 618ef4adba30e7d4f9e1cadc3bc8972856e424bc46a5a8d7fa78b5e58c6e3302

9

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.6633
MD5 ff4e5862f26ea666373e5fab2bddfb11
SHA1 cfa13c0ab30f1bbd566900dee3631902f9b6451c
SHA256 b8e6fc93d423931acbddae3c27dd3c4eb2a394005d746951a971cb700e0ee510
SHA3 91dae12a9f43c5443e0661091a336f882fa1482f75fa9a57c9298d1d70c8ae69

BBABORT

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.92079
MD5 c987e709cafd3a191333610e4c44914d
SHA1 901e4db5d379a222dd416776633ca9738db32e14
SHA256 c0ede68a98bd2bc58c78564dfb42f1640dc29766d3ab2782ab8b5ed28c6fd414
SHA3 7b14efd89b642988834daf08c97db5bb847f941d75f44a3915e3e5dca2510c53
Preview

BBALL

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1e4
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.16995
MD5 f8a9b4a8f4097cea6a482026484c4d12
SHA1 2057a63edce2cbb165512bfad326728cf1053d60
SHA256 46cfc44afa8ab31ae3da35fa8346e4c085c441659d9992b09fc8ad517f2b289a
SHA3 f3852a8bcb1b38f498231cca2b0427af6c4c52886f92f980968d40fd8e8c5337
Preview

BBCANCEL

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.92079
MD5 c987e709cafd3a191333610e4c44914d
SHA1 901e4db5d379a222dd416776633ca9738db32e14
SHA256 c0ede68a98bd2bc58c78564dfb42f1640dc29766d3ab2782ab8b5ed28c6fd414
SHA3 7b14efd89b642988834daf08c97db5bb847f941d75f44a3915e3e5dca2510c53
Preview

BBCLOSE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.68492
MD5 6c2fba077bd332b3a48d6b5e43fe4a22
SHA1 e7d12e9fd5659881742773884db8ca537765dc81
SHA256 f8e1696801fe89b88936ac4226cea03bfa5aa345aa33ca982822ae7fbc6557e2
SHA3 39193ea4b2ffb32f16c75ca88ca20465a374cd928aac9b4b3ba5739bbb6222de
Preview

BBHELP

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.88085
MD5 1021657335ba4838db07f5231723df3b
SHA1 68f04f6ecbf628029e4e0061392029edec2b0e43
SHA256 cb7421b5c6af74c3159c361f3bb78bba8a488d8979d1250e106fa96cbf928789
SHA3 888ed4f8473561552d848c3d6624e2331c4ec7795bc5001237cb752b96e4929c
Preview

BBIGNORE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.29718
MD5 098b5f6c87471f5a83a4e55a6a036d6c
SHA1 e16d9186ffa72cc3e373cdf8e40f9e570f0082e7
SHA256 41f05a4df5f42d92b879493d51941de342d36460fe15c0f3b63b2b706b928fef
SHA3 7939e94342a45e6742dbf7c93f5b42fb861ac81b1fe5e8e04e49c0421338b2cf
Preview

BBNO

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.58804
MD5 8832519641f28981f87e1b3006896eef
SHA1 916eaafcf9ffb12bfd6338419bdd22764778ebbd
SHA256 81265e63c89ee5c2e5126452e22f84e9be9452449f3e5959ab6d346cb58b2bde
SHA3 39743ce838b215420cbb732e107e4c45f63384dcdd5b830d15097fa06cf32cc2
Preview

BBOK

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.67459
MD5 4b349737af0b7e5a5308dff7b93b274b
SHA1 b3d36a94fa9a57ad7a68a3b30be92947e811e760
SHA256 6b97877cdd547e6ba6467f86055f1fc7b06660b034439f0da4c137538ef14a83
SHA3 b9e9646067eae58ad9aded92130651d090a92771bae94676003e9aba47f77cd6
Preview

BBRETRY

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.53344
MD5 7daf7522622a4fe823701fd2ff6f4996
SHA1 89f40bad3052afafbd71e80c07b928ec1aa7f4e5
SHA256 c925e4a8cbf6d42dbb1220a510614df725558f8d843338982bab8c4e020f6429
SHA3 95aa592de7b91edb5889cf5f9a7b042d3b6f6910bbd657ba85632f0d0ed557fb
Preview

BBYES

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1d0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.67459
MD5 4b349737af0b7e5a5308dff7b93b274b
SHA1 b3d36a94fa9a57ad7a68a3b30be92947e811e760
SHA256 6b97877cdd547e6ba6467f86055f1fc7b06660b034439f0da4c137538ef14a83
SHA3 b9e9646067eae58ad9aded92130651d090a92771bae94676003e9aba47f77cd6
Preview

PREVIEWGLYPH

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0xe8
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.85172
MD5 48276e8432af5a23af78e1d23de8ef5a
SHA1 12fb57606d03e3fe28263e3e9e96b4eedc79aef7
SHA256 78507a772de646626b196a743cee75b298a68c33a0fd482842071519d59037b2
SHA3 1cf31d53c7ea5dbe90181cb2db39ce6cd21484f5495b0af59f5c6164d9b3d3d0
Preview

1 (#2)

Type RT_ICON
Language Italian - Italy
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 4.04027
MD5 dbe990330daaa9ac9289d001e4201995
SHA1 9194bbbded916a35023765d0239d142320b7b07f
SHA256 5cc90a65d63dfebbe0453598185ce5337b51c1019d112540fd6dcf5b9d168a8f
SHA3 e8ccfc1a5d29e2724869f3a87b37fe97d20c033fcf4aff09ce28d6f3597b54b0

DLGTEMPLATE

Type RT_DIALOG
Language UNKNOWN
Codepage UNKNOWN
Size 0x52
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.5627
MD5 db949b51eec31f37281a7fa424a3e158
SHA1 f61214ce31a91d174e77f12c90f18ddd4e265a1d
SHA256 771f64afb45a9edc8c4f6c5b2039f9b32623cea53bf0cab5bf1f371cc5d1abe4
SHA3 4a2bc09771734352d594a48fe2249ca0697c471d80a4001f60c6d86c46b6319e

4061

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xac
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.62035
MD5 9cc0bd050114c610dd200db2e4b2f2d8
SHA1 7fb52277859963163fc40380ca386719777b93e6
SHA256 bf400e507e660f08cdbb2315e376622822b88d135c497643a4269a9aaf479cc2
SHA3 fee5e7eaef596fc6bad508ff7e9ea4a8aa462d7b119f84e7c09be32c1067cf8e

4062

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x448
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.2383
MD5 53285d5b99d33b3daabac7b2a2787ed3
SHA1 871322e3476f5bee583bdf88641e81b0caf35254
SHA256 512201b1abbfa15c85f1362875bc08409f31d38b4d63062d51a174f9b8036f6d
SHA3 5d86ddab8ebe603fd5c6341b9bc6a80fde07720852e00f9eba7b51ec65324ee0

4063

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x364
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.14983
MD5 873a17aeaf67aa4345ec1bced1494296
SHA1 a98a38de7a12fef3e735cfe555615e47f050d3b7
SHA256 ff2e0f86ebe8c198d7d1a6cee5bd8df737d867c747171007a7db37fbe47cc49a
SHA3 2aef5b944aa2cb055e0a5e146bdd645a78ab2e7df06a3d03841515007e50ee6e

4064

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3bc
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.14046
MD5 0f8af353fed94799ea3c812a99aea8a3
SHA1 722a73503bcfe91409d6f1878e8c3f935f2e64af
SHA256 fd892046a2c300ae0db1b95758644a279ae55deb5ede1aee3b0762f644dadab1
SHA3 a5e08cb6ddbc520cc8b52035b80ec858d57d371459ccd28a0ac29cdec587d63c

4065

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x264
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.22992
MD5 a2bb5e70301a9e58ae1e2f3c3869f7c6
SHA1 7cef608600d1014d54cfd082eb8cfa6fea5d9d62
SHA256 0596ab4335a655fcd47cb14ef9559b550cf33ccc816de75f92333e741ed93d94
SHA3 380caa56abc2cc1e62b5a6d87183096adeeeced6fefcd0d6bc6d025424483f5f

4066

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x388
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.32023
MD5 b27d4da490f9ad1c66a663487fe79825
SHA1 403aef6ba60fc993df5eb0b8a1cab4ddbc02a9db
SHA256 3358da39fb941fe68f850d1550dac47d2292d51484fbfe621d299d4ceaf648b4
SHA3 ffa1b9337a46ec15017a3cf754d30e74f6b783e473153fa4da07be81f98a81f7

4067

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x428
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.35321
MD5 c21b8eadfd966a1a02155f8e4af8d72a
SHA1 6f8dcdd2fbc7116a26c477460ce24be752a5715a
SHA256 95427f9acd9ed0e62834b2599b005d15676639cd1e2fc46fd83ce2cab7109f05
SHA3 988769d3c6fb0a1bd4dd4868478ccad636fb4586435b24027a7bc8c33c7f041e

4068

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x828
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.2486
MD5 1e98abf2c016f4e93eb642dde61296d6
SHA1 50b02c95810bc8670bb84475dba7810fbea09dff
SHA256 ee8a103b62c4a4a095f8f26a065e9ce6e8922874811150be4d56850e96ea11e7
SHA3 d0afb4af1712c49da2a023f9db5a380b6f2bb81123f14a029a79cf7941ac575b

4069

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x878
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.27132
MD5 81c8e0ebea2b2785c7ccf2004f2dc7e4
SHA1 cc7db1b74be07d28517eee66220bbdbc15229f57
SHA256 56c85e9656ae54117d16e3b00c070d42a915550f9e5858c46b03557faa9b8a6c
SHA3 02a1ee0ccf2d9cbd930be4b36c412d70b067005fa7bd2e5f2a15af8e32b60b1c

4070

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x8b8
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.2209
MD5 f9701e86b06ace8568bdad4daf66c2cc
SHA1 93b9bafac37fdf00ee3b8ddba1b2c8d0f852ecbe
SHA256 59c19945f02670d4f5143621d629c44db1cab1819e7748b9988a20d7682942e0
SHA3 d9f365204288cfb468f49155306523107e73600754009e0c009a4b1e27b4ac42

4071

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x7c8
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.30157
MD5 11693883227275fc47e30941dc14b7f4
SHA1 64f74e88eb1106b5709a1bce9ecdb59b7d69ec8d
SHA256 c18999e0c95872f0010d5ece84cb3a485645d422ce74208ae93b5e6080ea2775
SHA3 7f91300faddb1061f37543da75f181bfd94c1ddc507285c9418a728e33185a67

4072

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x964
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.2006
MD5 c0f9bdf2cca4ce468ca0a6ba8854545b
SHA1 6562ee61667792712e4f8debed2823650dcffb13
SHA256 6b2e9534164a08cfc116d22dcad4ab4943aff66c148d191d9eca60fc87eae48a
SHA3 4b6aeeee7c2aa97a5dc9db86eab41ceb25ec6c6c2a76db51aad1bd03cf8f6d72

4073

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xa14
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.18906
MD5 10d3fe3a56fab06d577e0fed4401959d
SHA1 335e4eb26a5ac3de3eea9674829179edb43d9c08
SHA256 6d229a79d371d3d9da1bed8988e3a134f246a190383291feeb96a4341ba46bfb
SHA3 f21d1b94e81c3221b7af3182cf4a42a5d3d23f208939aecbd67ca81b2ffd1f10

4074

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x4b0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.32498
MD5 b612c369695136ad257d8cbd5c3907e0
SHA1 bcad3cd3b053aac02ab52c3b0be6788b2c42a41d
SHA256 0519d1fe1a9d2e7cc85e9013e76be1e60cc41e10f310f2d2c1a0aa6261d28132
SHA3 449adc8c438b1bc3846a28be08bf43f2f2ddca9845558eb6aa593494befca3fd

4075

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x274
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.19179
MD5 d0adc423b6ddbf5b39cbe88b0cd9e5dd
SHA1 477c538798b09854018ec5feddf35769dc35525e
SHA256 300ac152c28b930cc9b44f797c0e402604b52150fc6eab16d1863ce1cef30ef6
SHA3 e88faa36fe2d51b201df03c11b577ad4bf5f6ec7d52246a1a8a4604a0c0defef

4076

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x1c4
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.31216
MD5 334ced8f7217427e8dff38dc122165bd
SHA1 e4b7c1df476638c3f262fd930a7e2bc997a08e17
SHA256 9e5a076d812a35426c78ee866dd000a041ffb06176b6aae461026c4f2b3cde9b
SHA3 41fe421398e11ef691460b12b10561976bcb3216bbaa0ad6d332d5ec29abacb1

4077

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x144
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.2132
MD5 3174b50a15b7b046bd4ab7e4523d1fba
SHA1 282ebd70f2ed6b80f7d089f5f6a77ec9e0107ef6
SHA256 7ea532e6ab6f6d84e9bc26262e9797fdc149c04dd98bb27950a9337d61172aba
SHA3 f50690459f5a794eb7bc6e6ebf4b3edfb19d721bfb076656f02db63507c45541

4078

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x120
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.17976
MD5 0bf5d14523917c66d7a59db0722c3a2d
SHA1 8c770a12e2a065634d1cf4d2bd96b7a29bada7ee
SHA256 05d988d24f1d0309039c23bda643dc5f39baa7b67065f94945a9af2f9e236131
SHA3 ab8beeb8e663f732aed40ca5d3668e8eb0038d1cbb61f1c409a7a917bb688785

4079

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x1f0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.29259
MD5 24179fd4548c989927debe54811525fd
SHA1 a330b72d8d30fe0b663a8f896df344c5c59e1f75
SHA256 c40411745c4637c719d9fc03001875005490f628c327981258e470e0e5229184
SHA3 fbf0237feffb1df7608a164f53574101ca9a46f48e519a0ea6a3b529bd85300d

4080

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x1cc
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.28456
MD5 7f9e799ecfa68e3a636057a0493cd85c
SHA1 bcb341c425123a56ed2a82e5b9ad8728c65ac700
SHA256 3068bd9c5f37b83ad5f39962b04f439e6dd8393c5e907aa310eb0af70dce334a
SHA3 50ffd18c1d50d88c097c24d43d44963011480f22b31a5fac7ecc7887ed109b74

4081

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x188
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.25026
MD5 85716ca8894c10e17f08796e8bc87547
SHA1 186c577aa2802b2fa92721e06db2ef525aee4c7c
SHA256 859bc0d26ad5d6d50a69e22d552872c15f5b926a2db0f697f10c586c6cd6993d
SHA3 fe3a16983589828a173ba039c1ba98daab959b8b008711fc9b35e5d7d019cefc

4082

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x1b0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.21127
MD5 05cd04c37dd937ce10c60d829c14148f
SHA1 fdb12dc69ef02cea95cdd140191dda3263accf76
SHA256 615e6db9af156fd94f47544a5280708e15ddbce74a0ea5dc7fbd93e6578cb407
SHA3 19fa87a0d9a39e90fd79e6b4ee06db23f89b726673a50933221e6ab13e086d0d

4083

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x218
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.24022
MD5 1bc7df7e77bab5ff2f7b5084d7d54588
SHA1 96ce6d633c6724a8a33d1bd3e4731db86d328708
SHA256 9fb7198119a7707a7f66653d6aa7290b5a00f2e76929508bacd12beecb47791b
SHA3 7ad84324d1711ce584f15598ef5cc69ee596b5a0b5b53f782f7b8a56b0facea1

4084

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xec
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.1103
MD5 bf2fff79658c0e0cf6b0f8d69454b141
SHA1 1d4f936e92513aeb6f98ce8b6f46754b259218a8
SHA256 6eb30fe1aef4c8288c7aaf6f119fd154acfef3646d1a6602a744047c97b17358
SHA3 0c4b3244053c1a4525bee4b10a11d8f856a1f7a7f3a4bf7e4a0ff1bc1feff883

4085

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x12c
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.16759
MD5 3bdada9a88cda96bf1b0d3403ceb54fc
SHA1 ba74c3f247ffbaf507add457ccadf93f172905be
SHA256 7d781c9be9556b69347ff390d222282f3f4073738ee503540896263fef3aec51
SHA3 4bd9c56df6bacde8ba18a7d5e8d1d47c49d6ac5c5f7001b9923a9bdb271f7640

4086

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x33c
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.26807
MD5 88fc83e088aa4f0686494238ceb9fee6
SHA1 d73dfb0faf60dec12969bde9704bf0ba32bfdc08
SHA256 24c0f3cf82beab613a11678f819ee355badd5935edd94025b4010b78eb9125c7
SHA3 89ac66c1decc60434644eb2a942ecc121e82a5e17123eb4145c133aff263d1e5

4087

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3d8
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.19912
MD5 7bc08a0c792f2513e410e1ad9830d0a0
SHA1 1f627a570a727808ccaa6c2d63c7519b0bea6cfc
SHA256 d70e2ca02f5d8e1af34b83d78eddbebc48e0b266fa8b07c66e0c72e0d1ec66b6
SHA3 08b13aecf83acea5490d67971b2c4440252ee4663d2135e378357504f046a2e5

4088

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x37c
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.21161
MD5 355490cd916cd043755fef8604be9db9
SHA1 6160e9f63a09a30d528599d6aed5bb85b5175ac7
SHA256 02a3d56134b1cfc2882206c1d44f2c378fc442a5cdb6aa7f96c016461407c03a
SHA3 9817c5ca8b0a7848a4ddfc93785c7cbb163082341e1c1b78d90df19042a729a3

4089

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x37c
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.23751
MD5 e09b2424441a3deae9588cfb8a82f0f4
SHA1 c811735eb79fe007b79bb056af26f654a7e94325
SHA256 e1be49ea155f36010b2b85704d57f7acac17093562db3123ea5019f21bbdb507
SHA3 38d5ba995195c8c8159871ea3a35909c8ab07c2b477315b740b8fb50c354a566

4090

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x398
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.25318
MD5 c157261a2f842ebbf52465ef9380b117
SHA1 ef975318b59e98461f9b588ea09ea7acc945a5fd
SHA256 072f5c02c17846df2f5796ddab9a4c652816404b1f3569cca802cd06a276d8fb
SHA3 79d652b691d833bed6c81a1b2ac18ccb2cd89ecb0b01ba7510fdd11ba3b67a55

4091

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xe4
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.01073
MD5 ff91ae4b02540155fba71086488a6305
SHA1 38d3bb70f85acefb824e2d4f6bca9bbf040d4f7b
SHA256 21e5d0e9ad97e712f845942dfa558cb7186ce160e8586e743a96610fcd7790cf
SHA3 99914b36fb842da8e950feac44e71872ef2a32d4cfcd0ec29227971ca3dae454

4092

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xbc
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.80014
MD5 d403ecb2e79bb6d225675000eb5ba0a8
SHA1 dd6bc5d698469b9454f661165a40c00cbebf4d7d
SHA256 7723a1a9d4c6bb26e866699606b976646714de2cf376f33ff22e17017af53cec
SHA3 d750bf4a63c12d1eab6e46704265a7633ca81882b24f2dd0aa8d67b2cb177a2a

4093

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2f4
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.25916
MD5 3f88e76377aab7148626f1186fa96099
SHA1 26b4182fe39881589c718c679cc562bed9dbc61e
SHA256 83e7ac43347fbf8de335784d18cb823f2394e03c9289050d0eafbee0dd84aa13
SHA3 daa24d8ca65a5b111dabab3055f1d6a2691ce5111d2b518dfdd233e93a18aa24

4094

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x454
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.25449
MD5 029dc58e6fef6a2f268d1fc8a2dcca24
SHA1 827de1994989c106c824b4ae1f0bf7f69696ada0
SHA256 36c27eb394063e09c4fd2491377a52d481407f572fd0dd1ec0a60f35d5c56443
SHA3 da6691cd65534ecc14cffc49bbaa57768ced8025cc66f15461ce2ac7addb8467

4095

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x30c
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.19539
MD5 26941c8b9fdb9103ce484758a5c80ccb
SHA1 343175514208428d51bd7ef16d49c597f8b329e9
SHA256 eefc34b30aa9f22d210252d840d6e9443402db4e5cde5f177dcd5db70b55c661
SHA3 bb18773cc78b71273eb51a5d0adb441d80e5da4626149f62f083213c52d7bf12

4096

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x32c
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.10531
MD5 438f67e1969044680f7175f580e6e386
SHA1 032be9f4a255c71108516c2ba32d511f9b692f2b
SHA256 b8d287760360405da384d3005d527609daeb2c6e6a756fa231a72e784560a488
SHA3 8a60009b8ae93f698d3e423d0768c4d6a7bef21ac8d57fcfce87ab6d859a2dfa

DVCLAL

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x10
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 4
MD5 d8090aba7197fbf9c7e2631c750965a8
SHA1 04f73efb0801b18f6984b14cd057fb56519cd31b
SHA256 88d14cc6638af8a0836f6d868dfab60df92907a2d7becaefbbd7e007acb75610
SHA3 a5a67ad8166061d38fc75cfb2c227911de631166c6531a6664cd49cfb207e8bb

PACKAGEINFO

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 5.42592
MD5 a7be2a13708c5fb38407144f48d1bea7
SHA1 266f5cff59eb65bb4c343f4da18726b22885993e
SHA256 fb7d72352f64ec6488874813381e8830f305e1b3688c39f14a644a6d5caf0cc6
SHA3 61e8be532e6e58cd158265c2260b81d85f4cb7ec33ad3495a815dcb573150a37

TFRMSTART9X

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x5a8
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 5.49627
MD5 9a3e7b7a832252311940fcfe7be11291
SHA1 5060fafaca25ac7b1bee3c229674df8ffc8c717e
SHA256 1275eb6519e8dd15150e33a4586972ceb0dc5e9c61e1d8bf2bf4bad71ca2be38
SHA3 fde23784d3d01ee196b8037d8f0a858bc51c36c2ac7c740cdc2038187eb51529

1 (#3)

Type RT_MESSAGETABLE
Language English - United States
Codepage UNKNOWN
Size 0x660
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 1.94244
MD5 cb5edee34b645d069a1cf05c56b8813c
SHA1 708d8a230888bb789a5b03cecff74f92cf04ef4f
SHA256 dc1f800df4db7bd90228057dea898befef6f55816cd7919d4a375a220bbc045a
SHA3 a936dd0ca031af768e6fc193f17b683a6040dc672363b0749fa7a9b454a5594d

JVDRAGCURSOR

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 1.83876
Detected Filetype Cursor file
MD5 a2baa01ccdea3190e4998a54dbc202a4
SHA1 e8217df98038141ab4e449cb979b1c3bbea12da3
SHA256 c53efa8085835ba129c1909beaff8a67b45f50837707f22dfff0f24d8cd26710
SHA3 8874564c406835306368adf5e869422e1bb97109b97c1499caa8af219990e8dc
Preview

JVHANDCURSOR

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.01924
Detected Filetype Cursor file
MD5 b3dbdfe1835416bbc3f5065baca9aca9
SHA1 334d5af1355f6a13c35be4ad16e76baaecf209f1
SHA256 ec26c438d10e3e84ec855c47f07a176e6c11bbfae1557d526490711b80f087fe
SHA3 2409b439f48a139d3764b226eda46c6a629d5bd208991369ae0c85e37c17c71d
Preview

32761

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.01924
Detected Filetype Cursor file
MD5 ebb32ed08b06ab16f79c997b7963c57c
SHA1 c87e290caff3cf222d5ec678a51927ff22637949
SHA256 9c17b4621412d6ded24a76aed74d4425ae61f86b6d4092ca1e28ca66b7c71399
SHA3 fb70f94bf4a64a26f2d83b588fe2a233796083fd03aae7835387aeba2646b847
Preview

32762

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 1.91924
Detected Filetype Cursor file
MD5 aff0f5e372bd49ceb9f615b9a04c97df
SHA1 e3205724d7ee695f027ab5ea8d8e1a453aaad0dd
SHA256 b07e022f8ef0a8e5fd3f56986b2e5bf06df07054e9ea9177996b0a6c27d74d7c
SHA3 9cb042121a5269b80d18c3c5a94c0e453890686aedade960097752377dfa9712
Preview

32763

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.01924
Detected Filetype Cursor file
MD5 48e064acaba0088aa097b52394887587
SHA1 310b283d52aa218e77c0c08db694c970378b481d
SHA256 43f40dd5140804309a4c901ec3c85b54481316e67a6fe18beb9d5c0ce3a42c3a
SHA3 38753084b0ada40269914e80dbacf7656dc94764048bd5dff649b08b700f3ed5
Preview

32764

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.01924
Detected Filetype Cursor file
MD5 1ae28d964ba1a2b1b73cd813a32d4b40
SHA1 8883cd93b8ef7c15928177de37711f95f9e4cd22
SHA256 ff47a48c11c234903a7d625cb8b62101909f735ad84266c98dd4834549452c39
SHA3 a85dadd416ce2d22aa291c0794c45766a0613b853c6e3b884a2b05fc791427b8
Preview

32765

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.01924
Detected Filetype Cursor file
MD5 0893f6ba80d82936ebe7a8216546cd9a
SHA1 0754cbdf56c53de9ed7fbd47859d20b788c6f056
SHA256 a0adcedb82b57089f64e2857f97cefd6cf25f4d27eefc6648bda83fd5fef66bb
SHA3 ce6148ade08ef9b829f83cb13b4c650d9d4a7012bfd1ab697a7870a05f4104f8
Preview

32766

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.01924
Detected Filetype Cursor file
MD5 dcaa3c032fe97281b125d0d8f677c219
SHA1 58fe36409f932549e2f101515abee7a40cf47b2c
SHA256 6e1e7738a1b6373d8829f817915822ef415a1727bb5bb7cfe809e31b3c143ac5
SHA3 02ef292e1b4a70e439e362af6b4fa213e3816ade45222b78dabab712b6afba54
Preview

32767

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 2.01924
Detected Filetype Cursor file
MD5 a95c7c78d0a0b30b87e3c4976e473508
SHA1 b19f3999f1b302a2d28977cb18a3416c918d486c
SHA256 326c048595bbc72e3f989cb3b95fbf09dc83739ced3cb13eb6f03336f95d74f1
SHA3 8157b4e6afa7ed2e2ffc174d655bec9fb81db609e4c5864faa5ead931ff60689
Preview

MAINICON

Type RT_GROUP_ICON
Language Italian - Italy
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 1.81924
Detected Filetype Icon file
MD5 cbee427fa121aba9b9b265ff05de5383
SHA1 24fcae33001c8e0f5ec795c6edf076a69d59589f
SHA256 494e4fd717fa1ee0c5c7bb3b4e28fdab4b7f6e95b4f9865f5ab86f03f62ae62c
SHA3 a3fa35d56632275ba55716a4964f02031270f61f06a903fc460ac2dd6bebde85

1 (#4)

Type RT_VERSION
Language Italian - Italy
Codepage UNKNOWN
Size 0x3a0
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 3.39037
MD5 8d4442175bc66008ec0acb498adc006e
SHA1 128709e4cf05c6debbf6fc9b202c44abacef2e30
SHA256 8104a81a4ea6408116703f11e48896ca3c787d362671caa57bf29d1de994583b
SHA3 b2cc64083a232e0789adcdd1de6dbb8e89f0cfca0bbc93f146e526f9422bd784

1 (#5)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0x2be
TimeDateStamp 2014-Sep-19 09:46:56
Entropy 4.90249
MD5 0522b39c9cb6f0cd625799adc538389a
SHA1 147c3e4ab9d96470947fb4dd37829902ddb732b1
SHA256 d596d038a86cd0256205cb07202bf0e3042e206f57bd5e636805ea0e811580af
SHA3 0504bed395780c361ec282e3aab59747148990894c7a3a981ed5e2e9264efcb0

String Table contents

Connection is inactive
Cannot open socket
Error %d %s in function: %s
Request rejected because SOCKS server cannot connect.
Request rejected because the client program and identd report different user-ids.
Unknown socks error.
Socks server did not respond.
Invalid socks authentication method.
Authentication error to socks server.
General SOCKS server failure.
Connection not allowed by ruleset.
Network unreachable.
Host unreachable.
Connection refused.
TTL expired.
Command not supported.
Address type not supported.
Cannot call TerminateAndWaitFor on FreeAndTerminate threads
Connection is active
Software caused connection abort.
Connection reset by peer.
No buffer space available.
Socket is already connected.
Socket is not connected.
Cannot send or receive after socket is closed.
Too many references, cannot splice.
Connection timed out.
Connection refused.
Too many levels of symbolic links.
File name too long.
Host is down.
No route to host.
Directory not empty
Host not found.
Request rejected or failed.
Operation already in progress.
Socket operation on non-socket.
Destination address required.
Message too long.
Protocol wrong type for socket.
Bad protocol option.
Protocol not supported.
Socket type not supported.
Operation not supported on socket.
Protocol family not supported.
Address family not supported by protocol family.
Address already in use.
Cannot assign requested address.
Network is down.
Network is unreachable.
Net dropped connection or reset.
Connecting to %s.
Connected.
Disconnecting.
Disconnected.
%s
Connect timed out.
%s is not a valid service.
Socket Error # %d
%s
Interrupted system call.
Bad file number.
Access denied.
Bad address.
Invalid argument.
Too many open files.
Operation would block.
Operation now in progress.
Set Size Exceeded.
Thread Class Not Specified.
File "%s" not found
Only one TIdAntiFreeze can exist per application.
Not Connected
Terminate Thread Timeout
No execute handler found.
No data to read.
Can not bind in port range (%d - %d)
Invalid Port Range (%d - %d)
Read Timeout
Max line length exceeded.
No command handler found.
Error on call Winsock2 library function %s
Error on loading Winsock2 library (%s)
Resolving hostname %s.
Invalid MMF name "%s"
The MMF named "%s" cannot be created empty
Win32 error: %s (%u)%s%s
OLE error %.8x
Method '%s' not supported by automation object
Variant does not reference an automation object
Dispatch methods do not support more than 64 parameters
Cannot change the size of a JPEG image
JPEG error #%d
JPEG Image File
Already connected.
Cannot allocate socket.
Connection Closed Gracefully.
Could not bind socket. Address and port are already in use.
Not enough data in buffer.
Winsock Initialization Error.
3rd-level cache: 2 MByte, 4-way set associative, 64 byte line size
3rd-level cache: 1 MByte, 8-way set associative, 64 byte line size
3rd-level cache: 2 MByte, 8-way set associative, 64 byte line size
3rd-level cache: 4 MByte, 8-way set associative, 64 byte line size
3rd-level cache: 1.5 MByte, 12-way set associative, 64 byte line size
3rd-level cache: 3 MByte, 12-way set associative, 64 byte line size
3rd-level cache: 6 MByte, 12-way set associative, 64 byte line size
3rd-level cache: 2 MByte, 16-way set associative, 64 byte line size
3rd-level cache: 4 MByte, 16-way set associative, 64 byte line size
3rd-level cache: 8 MByte, 16-way set associative, 64 byte line size
3rd-level cache: 12 MByte, 24-way set associative, 64 byte line size
3rd-level cache: 18 MByte, 24-way set associative, 64 byte line size
3rd-level cache: 24 MByte, 24-way set associative, 64 byte line size
64-Byte Prefetching
128-Byte Prefetching
CPUID leaf 2 does not report cache descriptor information, use CPUID leaf 4 to query cache parameters
2nd-level cache: 256 KBytes, 8-way associative, 32 byte line size
2nd-level cache: 512 KBytes, 8-way associative, 32 byte line size
2nd-level cache: 1 MBytes, 8-way associative, 32 byte line size
2nd-level cache: 2 MBytes, 8-way associative, 32 byte line size
2nd-level cache: 512 KByte, 4-way set associative, 64 byte line size
2nd-level cache: 1 MByte, 8-way set associative, 64 byte line size
Instruction TLB: 4 KByte pages, 4-way set associative, 128 entries
Instruction TLB: 2 MByte pages, 4-way, 8 entries or 4 MByte pages, 4-way, 4 entries
Instruction TLB: 4 KByte pages, 4-way set associative, 64 entries
Data TLB: 4 KByte pages, 4-way set associative, 128 entries
Data TLB1: 4 KByte pages, 4-way set associative, 256 entries
Data TLB1: 4 KByte pages, 4-way set associative, 64 entries
Data TLB: 4 KByte and 4 MByte pages, 4-way set associative, 8 entries
Shared 2nd-Level TLB: 4 KByte pages, 4-way associative, 512 entries
3rd-level cache: 512 KByte, 4-way set associative, 64 byte line size
3rd-level cache: 1 MByte, 4-way set associative, 64 byte line size
1st-level data cache: 8 KBytes, 4-way set associative, 64 byte line size
1st-level data cache: 16 KBytes, 4-way set associative, 64 byte line size
1st-level data cache: 32 KBytes, 4-way set associative, 64 byte line size
Trace cache: 12 K-Ops, 8-way set associative
Trace cache: 16 K-Ops, 8-way set associative
Trace cache: 32 K-Ops, 8-way set associative
Trace cache: 64 K-Ops, 8-way set associative
Instruction TLB: 2M/4M pages, fully associative, 8 entries
2nd-level cache: 1 MBytes, 4-way set associative, 64 bytes line size
2nd-level cache: 128 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sector
2nd-level cache: 256 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sector
2nd-level cache: 512 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sector
2nd-level cache: 1 MBytes, 8-way set associative, 64 bytes line size, 2 lines per sector
2nd-level cache: 2 MBytes, 8-way set associative, 64 byte line size
2nd-level cache: 512 KBytes, 2-way set associative, 64 byte line size
2nd-level cache: 512 KBytes, 8-way set associative, 64 byte line size
3rd-level cache: 12MByte, 12-way set associative, 64 byte line size
3rd-level cache: 16MByte, 16-way set associative, 64 byte line size
2nd-level cache: 6MByte, 24-way set associative, 64 byte line size
Instruction TLB: 4 KByte pages, 32 Entries
Instruction TLB: 4 KByte and 2 MByte or 4 MByte pages, 64 Entries
Instruction TLB: 4 KByte and 2 MByte or 4 MByte pages, 128 Entries
Instruction TLB: 4 KByte and 2 MByte or 4 MByte pages, 256 Entries
Instruction TLB: 2-MByte or 4-MByte pages, fully associative, 7 entries
Data TLB0: 4 MByte pages, 4-way set associative, 16 entries
Data TLB0: 4 KByte pages, 4-way associative, 16 entries
Data TLB0: 4 KByte pages, fully associative, 16 entries
Data TLB0: 2 MByte or 4 MByte pages, 4-way set associative, 32 entries
Data TLB: 4 KByte and 4 MByte pages, 64 Entries
Data TLB: 4 KByte and 4 MByte pages, 128 Entries
Data TLB: 4 KByte and 4 MByte pages, 256 Entries
1st-level data cache: 16 KByte, 8-way set associative, 64 byte line size
2nd-level cache: 128 KBytes, 2-way set associative, sectored cache, 64-byte line size
2nd-level cache: 256 KBytes, 4-way set associative, sectored cache, 64-byte line size
2nd-level cache: 384 KBytes, 6-way set associative, sectored cache, 64-byte line size
2nd-level cache: 512 KBytes, 4-way set associative, sectored cache, 64-byte line size
No 2nd-level cache or, if processor contains a valid 2nd-level cache, no 3rd-level cache
2nd-level cache: 128 KBytes, 4-way set associative, 32 byte line size
2nd-level cache: 256 KBytes, 4-way set associative, 32 byte line size
2nd-level cache: 512 KBytes, 4-way set associative, 32 byte line size
2nd-level cache: 1 MBytes, 4-way set associative, 32 byte line size
2nd-level cache: 2 MBytes, 4-way set associative, 32 byte line size
3rd-level cache: 4 MBytes, 4-way set associative, 64 byte line size
3rd-level cache: 8 MBytes, 4-way set associative, 64 byte line size
3rd-level cache: 8 MByte, 8-way set associative, 64 byte line size
2nd-level cache: 4 MBytes, 16-way set associative, 64 byte line size
3rd-level cache: 6MByte, 12-way set associative, 64 byte line size
3rd-level cache: 8MByte, 16-way set associative, 64 byte line size
1st level instruction cache: 16 KBytes, 4-way set associative, 32 byte line size
1st level instruction cache: 32 KBytes, 4-way set associative, 64 byte line size
1st level data cache: 8 KBytes, 2-way set associative, 32 byte line size
Instruction TLB: 4 MByte pages, 4-way set associative, 4 entries
1st level data cache: 16 KBytes, 4-way set associative, 32 byte line size
1st level data cache: 16 KBytes, 4-way set associative, 64 byte line size
1st level data cache: 24 KBytes, 6-way set associative, 64 byte line size
2nd level cache: 256 KBytes, 8-way set associative, 64 byte line size
3rd level cache: 512 KBytes, 4-way set associative, 64 byte line size, 2 lines per sector
3rd level cache: 1 MBytes, 8-way set associative, 64 byte line size, 2 lines per sector
3rd level cache: 2 MBytes, 8-way set associative, 64 byte line size, 2 lines per sector
3rd level cache: 4 MBytes, 8-way set associative, 64 byte line size, 2 lines per sector
1st level data cache: 32 KBytes, 8-way set associative, 64 byte line size
1st level instruction cache: 32 KBytes, 8-way set associative, 64 byte line size
2nd-level cache: 128 KBytes, 4-way set associative, sectored cache, 64-byte line size
2nd-level cache: 192 KBytes, 6-way set associative, sectored cache, 64-byte line size
Tooltip text
Tooltip background
Gradient Active Caption
Gradient Inactive Caption
Hot Light
Menu Bar
Menu Highlight
Failed to get ANSI replacement character
Failed to create mutex
Null descriptor
Instruction TLB: 4 KByte pages, 4-way set associative, 32 entries
Instruction TLB: 4 MByte pages, 4-way set associative, 2 entries
Data TLB: 4 KByte pages, 4-way set associative, 64 entries
Data TLB: 4 MByte pages, 4-way set associative, 8 entries
Data TLB1: 4 MByte pages, 4-way set associative, 32 entries
1st level instruction cache: 8 KBytes, 4-way set associative, 32 byte line size
Menu text
Window text
Active window title bar text
Active window border
Inactive window border
Application workspace
Selection background
Selection text
Button face
Button shadow
Dimmed text
Button text
Inactive window title bar text
Button highlight
Dark shadow 3D elements
Highlight 3D elements
Plum
Gray 25%
Rose
Tan
Light Yellow
Light Green
Light Turquoise
Pale Blue
Lavender
Scrollbar
Desktop background
Active window title bar
Inactive window title bar
Menu background
Window background
Window frame
Indigo
Gray 80%
Dark Red
Orange
Dark Yellow
Blue Gray
Gray 50%
Light Orange
Sea Green
Light Blue
Violet
Gray 40%
Pink
Gold
Bright Green
Turquoise
Red
Lime
Yellow
Blue
Fuchsia
Aqua
White
Money green
Sky blue
Cream
Medium gray
Brown
Olive Green
Dark Green
Dark Teal
Dark Blue
Window Background
Window Frame
Window Text
No help keyword specified.
TJvCaptionButton owner must be a TCustomForm
Device cannot be identified
Device cannot be opened
Black
Maroon
Green
Olive green
Navy blue
Purple
Teal
Gray
Silver
Caption Text
Default
Gray Text
Highlight Background
Highlight Text
Inactive Border
Inactive Caption
Inactive Caption Text
Info Background
Info Text
Menu Background
Menu Text
None
Scroll Bar
3D Dark Shadow
3D Light
Blue
Fuchsia
Aqua
White
Money Green
Sky Blue
Cream
Medium Gray
Active Border
Active Caption
Application Workspace
Background
Button Face
Button Highlight
Button Shadow
Button Text
Unable to find a Table of Contents
No help found for %s
No context-sensitive help installed
No topic-based help system installed
Black
Maroon
Green
Olive
Navy
Purple
Teal
Gray
Silver
Red
Lime
Yellow
Home
Left
Up
Right
Down
Ins
Del
Shift+
Ctrl+
Alt+
Clipboard does not support Icons
Menu '%s' is already being used by another form
Docked control must have a name
Error removing control from dock tree
- Dock zone not found
- Dock zone has no control
Cancel
&Help
&Abort
&Retry
&Ignore
&All
N&o to All
Yes to &All
BkSp
Tab
Esc
Enter
Space
PgUp
PgDn
End
&Ignore
&Retry
Abort
&All
Cannot drag a form
Metafiles
Enhanced Metafiles
Icons
Bitmaps
Warning
Error
Information
Confirm
&Yes
&No
OK
Cannot hide an MDI Child Form
Cannot change Visible in OnShow or OnHide
Cannot make a visible window modal
Menu index out of range
Menu inserted twice
Sub-menu is not in menu
Not enough timers available
GroupIndex cannot be less than a previous menu item's GroupIndex
Cannot create form. No MDI forms are currently active
A control cannot have itself as its parent
OK
Cancel
&Yes
&No
&Help
&Close
Metafile is not valid
Invalid pixel format
Scan line index out of range
Cannot change the size of an icon
Unsupported clipboard format
Out of system resources
Canvas does not allow drawing
Invalid image size
Invalid ImageList
Invalid ImageList Index
Failed to read ImageList data from stream
Failed to write ImageList data to stream
Error creating window device context
Error creating window class
Cannot focus a disabled or invisible window
Control '%s' has no parent window
Failed to set data for '%s'
Resource %s not found
%s.Seek not implemented
Operation not allowed on sorted list
%s not in a class registration group
Property %s does not exist
Stream write error
Thread creation error: %s
Thread Error: %s (%d)
Windows socket error: %s (%d), on API '%s'
Asynchronous socket error %d
No address specified
Can't create new socket
Socket already open
Bitmap image is not valid
Icon image is not valid
Unable to write to %s
Invalid stream format
''%s'' is not a valid component name
Invalid property value
Invalid property path
Invalid property value
Invalid data type for '%s'
List capacity out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d)
Out of memory while expanding memory stream
Error reading %s%s%s: %s
Stream read error
Property is read-only
Failed to create key %s
Failed to get data for '%s'
Wednesday
Thursday
Friday
Saturday
Ancestor for '%s' not found
Cannot assign a %s to a %s
Bits index out of range
Can't write to a read-only resource stream
CheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
A class named %s already exists
List does not allow duplicates ($0%x)
A component named %s already exists
String list does not allow duplicates
Cannot create file "%s". %s
Cannot open file "%s". %s
July
August
September
October
November
December
Sun
Mon
Tue
Wed
Thu
Fri
Sat
Sunday
Monday
Tuesday
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
Dec
January
February
March
April
May
June
Variant overflow
Invalid argument
Invalid variant type
Operation not supported
Unexpected variant error
External exception %x
Assertion failed
Interface not supported
Exception in safecall method
%s (%s, line %d)
Abstract Error
Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
%s
A call to an OS function failed
Jan
Feb
Exception %s in module %s at %p.
%s%s
Application Error
Format '%s' invalid or incompatible with argument
No argument for format '%s'
Variant method calls not supported
Read
Write
Error creating variant or safe array
Variant or safe array index out of bounds
Variant or safe array is locked
Invalid variant type conversion
Invalid variant operation
Invalid NULL variant operation
Invalid variant operation (%s%.8x)
%s
Could not convert variant of type (%s) into type (%s)
Overflow while converting variant of type (%s) into type (%s)
Invalid numeric input
Division by zero
Range check error
Integer overflow
Invalid floating point operation
Floating point division by zero
Floating point overflow
Floating point underflow
Invalid pointer operation
Invalid class typecast
Access violation at address %p. %s of address %p
Access violation
Stack overflow
Control-C hit
Privileged instruction
Operation aborted
'%s' is not a valid integer value
'%s' is not a valid floating point value
'%s' is not a valid date
'%s' is not a valid time
'%s' is not a valid date and time
'%s' is not a valid boolean value
Invalid argument to time encode
Invalid argument to date encode
Out of memory
I/O error %d
File not found
Invalid filename
Too many open files
File access denied
Read beyond end of file
Disk full

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.1.4.51
ProductVersion 1.1.4.51
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName Legrand®
FileDescription UPS Server
FileVersion (#2) 1.1.4.51
InternalName UPS Server
LegalCopyright Copyright © 2012-2014 Legrand®. All Rights Reserved.
LegalTrademarks
OriginalFilename UpsSrv.exe
ProductName UPS Communicator
ProductVersion (#2) 1.18
Comments Designed and developed by Stefano Pongiluppi
Resource LangID Italian - Italy

TLS Callbacks

StartAddressOfRawData 0x4c1000
EndAddressOfRawData 0x4c1014
AddressOfIndex 0x4b50c0
AddressOfCallbacks 0x4c2010
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks (EMPTY)

Load Configuration

RICH Header

Errors

[*] Warning: Section BSS has a size of 0! [*] Warning: Section .tls has a size of 0!
Leave a comment

No comments yet.