PESCAN.IO - Analysis Report Basic

File Structure
Analysis Image
PE Chart Code
Executable header (light blue)
Executable sections (pink)
Non-executable sections (black)
External injected code (red)
File Structure in red = malformed or corrupted header
Chart Code For Other Files
Printable characters (blue)
Non-printable characters (black)
Information
Icon: Icon
Size: 4,99 MB
SHA-256 Hash: 3DDDCB05BEC063D42715DEB1FC64416F3D6248B25780B6974FFCF23979FE9A3B
SHA-1 Hash: 8C73D89450E9C7F75C6122B305C1D2D02F63CC1A
MD5 Hash: 95065CA42CE75C43C4F6E692765BD38A
Imphash: 29B325328E1C749C3DA1FD536BBDCD79
MajorOSVersion: 5
MinorOSVersion: 1
CheckSum: 0050D132
EntryPoint (rva): BFC430
SizeOfHeaders: 400
SizeOfImage: C4A000
ImageBase: 0000000000400000
Architecture: x64
ImportTable: BFC000
Characteristics: 22
TimeDateStamp: 6626285A
Date: 22/04/2024 9:05:30
File Type: EXE
Number Of Sections: 11
ASLR: Disabled
Section Names (Optional Header): *unnamed*, *unnamed*, *unnamed*, *unnamed*, *unnamed*, *unnamed*, *unnamed*, *unnamed*, .reloc, .rsrc, *unnamed*
Number Of Executable Sections: 2
Subsystem: Windows GUI
[Incomplete Binary or Compressor Packer - 7,30 MB Missing]
Sections Info
Section Name Flags ROffset RSize VOffset VSizeEntropyChi2
*unnamed* 60000020 (Code, Executable, Readable) 400 0 1000 978190N/AN/A
*unnamed* C0000040 (Initialized Data, Readable, Writeable) 400 0 97A000 D19B8N/AN/A
*unnamed* C0000000 (Readable, Writeable) 400 0 A4C000 336C0N/AN/A
*unnamed* C0000040 (Initialized Data, Readable, Writeable) 400 0 A80000 5F06N/AN/A
*unnamed* C0000040 (Initialized Data, Readable, Writeable) 400 0 A86000 89ECN/AN/A
*unnamed* 40000040 (Initialized Data, Readable) 400 0 A8F000 71N/AN/A
*unnamed* C0000000 (Readable, Writeable) 400 0 A90000 280N/AN/A
*unnamed* 40000040 (Initialized Data, Readable) 400 0 A91000 6DN/AN/A
.reloc 42000040 (Initialized Data, GP-Relative, Readable) 400 6BC00 A92000 6BA946,50811780546,71
.rsrc 40000040 (Initialized Data, Readable) 6C000 A4600 AFE000 FD8F07,62221686942,41
*unnamed* E0000060 (Code, Initialized Data, Executable, Readable, Writeable) 110600 4DC00 BFC000 4DBA07,99731449,73
Description
OriginalFilename: JSONView64.exe
CompanyName: MiTeC
LegalCopyright: Copyright (c) 2016-2023, Michal Mutl
LegalTrademarks: All rights reserved
ProductName: JSON Viewer
FileVersion: 3.2.1.0
FileDescription: JSON Viewer
ProductVersion: 3.0.0.0
Language: English (United States) (ID=0x409)
CodePage: Western European (Windows 1252) (0x4E4)
Entry Point
The section number (11) have the Entry Point
Information -> EntryPoint (calculated) - 110A30
Code -> EB2086508D91C500A93277050F439875FCFD911A04BF1E63CABFA91C8B50FCBC0335E9C10300007520EB017990E955010000
• JMP 0X1022
• XCHG BYTE PTR [RAX - 0X73], DL
• XCHG EAX, ECX
Signatures
Certificate - Digital Signature:
• The file is signed and the signature is correct
Duplicate Sections
Section *unnamed* duplicate 9 times
Packer/Compiler
Detect It Easy (die)
• PE+(64): compiler: Borland Delphi(-)[-]
• Entropy: 7.96149
Suspicious Functions
Library Function Description
KERNEL32.DLL GetModuleHandleA Retrieves a handle to the specified module.
File Access
user32.dll
shell32.dll
kernel32.dll
advapi32.dll
File Access (UNICODE)
JSONView64.exe
Temp
Interest's Words
exec
ping
Interest's Words (UNICODE)
PassWord
URLs
http://schemas.microsoft.com/SMI/2005/WindowsSettings
http://schemas.microsoft.com/SMI/2016/WindowsSettings
http://crl.comodoca.com/AAACertificateServices.crl
http://ocsp.comodoca.com
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0
http://ocsp.sectigo.com
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt
http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl
http://ocsp.digicert.com
http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt
http://cacerts.digicert.com/DigiCertTrustedRootG4.crt
http://crl3.digicert.com/DigiCertTrustedRootG4.crl
http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
https://sectigo.com/CPS0
https://www.mitec.cz0
Strings/Hex Code Found With The File Rules
Rule Type Encoding Matched (Word)
Text Ascii Registry (RegOpenKeyEx)
Text Ascii Antivirus Software (comodo)
Text Ascii Stealer malware focused on obtaining CVV codes to conduct unauthorized transactions (CVV)
Entry Point Hex Pattern NeoLite v2.0
Entry Point Hex Pattern PE Pack v1.0
Resources
Path DataRVA Size FileOffset CodeTextPE/Payload
\VCLSTYLE\WINDOWSMODERNDARK\1033 BDDAA8 1DE45 14BAA8 DB85EB2F1901D5C135FEF4DF084BFC5DF3887FD34C67AE267DED4FC3A4B5BE71D61CA20038A13826B977A8733E9CFCE2C6FD.../....5....K.]....Lg.&}.O....q....8.8&.w.s>.....N/A
\CURSOR\1\1033 BDD974 134 14B974 3553364946C9BFD79A267E21F951D2FC448F793C3F631D0A88F163CBD33385E6181C905E4B2D3DDD910B1C1FD148E04102B55S6IF....&~!.Q..D.y<?c....c..3.....K-=......H.A..N/A
\CURSOR\2\1033 BDD840 134 14B840 D9D1DDFDF3D7F51611E80EB26105D25E003996CA9371A7366CA04F0744B9899CEF46906FE1C7A602F817BFE35E7093D895EF............a...9...q.6l.O.D....F.o........p....N/A
\CURSOR\3\1033 BDD70C 134 14B70C 951EA0E1EC4F303859CC606588CCE3B289E9AEAFE3B7A3CE2C4F80018343E2358B1D57E328AADB46626502189710B3EAA924.....O08Y.e............,O...C.5..W.(..Fbe.......$N/A
\CURSOR\4\1033 BDD5D8 134 14B5D8 AA840D9DA4AAE66EB625B1003DC7EBD454B1EE68AD84564733E24071F25EAC6A182F2AB1BF02FF36F17E12501ADB25E50DEF.......n.%..=...T..h..VG3.@q..j./*....6.~.P..%...N/A
\CURSOR\5\1033 BDD4A4 134 14B4A4 A0F0D1534D3342A002C148F48B4BBE373C21B8FC927B8B44EDCC72722047C9D8D063F0E36678E4A53EEFA38361CB2FA46381...SM3B...H..K.7<!...{.D..rr G...c..fx..>...a./.c.N/A
\CURSOR\6\1033 BDD370 134 14B370 2232756EA3FD8C35C46914CC09A43165F1356C87B82CE3E1B195B10004920622BF120B8907765D96FCE94ED8881081E4D1DF"2un...5.i....1e.5l..,.........".....v]...N.......N/A
\CURSOR\7\1033 BDD23C 134 14B23C B524D85B2B3689CD08148590076A7521D604AF0E2B3F1B0D299AE8A551F4A62E0711F457E37B69A6E0734DC53FE2E73C851B.$.[+6.......ju!....+?..)...Q......W.{i..sM.?..<..N/A
\CURSOR\8\1031 BDCF50 2EC 14AF50 0A1DC2F8B6F25FB02C0F4E9D31D514E4CC747417C1F1825B2993126DEAA9DCBC1A23C72816542B5F9D95B2F310D3762516C4......_.,.N.1....tt....[)..m......(.T+_......v%..N/A
\CURSOR\9\1031 BDCC64 2EC 14AC64 30A12E5DE427666D1F84CE5F53D72A13A09EA91345FFEC391DC48A1B5839C95C7387151A54EF7525E85784BF70FCAC9DBBC80..].'fm..._S.*.....E..9....X9.\s...T.u%.W..p.....N/A
\CURSOR\10\1031 BDC978 2EC 14A978 44BA1F9F573E54CA7F382FD57D03B0145510EEF9DD204263EEDE825EB966E904EEFD2685C02EA0A63BCDA50AB1EA159D131BD...W>T..8/.}...U.... Bc....f....&.....;.........N/A
\CURSOR\11\1031 BDC68C 2EC 14A68C 5F744E2D50F54A46091842489FD08608C3CC90CF52A9F2B0C2B1A1C5A00EA0931AA6ED2E06962FEDC3F2C51CA29B7461FBC1_tN-P.JF..BH........R................./.......ta..N/A
\CURSOR\12\1031 BDC558 134 14A558 F73CF5B913E213000A9A0F9DD039565DA17F4789F54463198AAE2341ED764264D0F7EB3548E9E01611C22C9620064E69C2D3.<...........9V]..G..Dc...A.vBd...5H.....,. .Ni..N/A
\CURSOR\13\0 BDC424 134 14A424 7ED05F9091E251A47EF48E25772AD00448239FE56D222D7B50B7EE72972CB5B03C5296AEF40C48E799106D30F719DDDFD7BF~._...Q.~..%w*..H..m"-{P..r.,..<R....H...m0......N/A
\CURSOR\14\0 BDC138 2EC 14A138 FC33FCC95284534EEB28606A8185A6DE8DA587DD9121592E835CAFCA1E990FDBD18D23E708F9F15DF7FBB17F18070E01EF3A.3..R.SN.(j.........!Y..\............].........:N/A
\CURSOR\15\0 BDBE4C 2EC 149E4C B83AB14112CD493AED34F8A011C49C50554EA6F96468F5249A66086E8972E88D7D7A21A6BEC38B61119126C91EAFAE57D51D.:.A..I:.4.....PUN..dh.$.f.n.r..}z!....a..&....W..N/A
\CURSOR\16\0 BDBB60 2EC 149B60 214765CB41E9983FB7FA50D266A76204970BE04B5DBC2E5D5E364833BB0E19D009FC390FFB52A428CFA04C583415CBDC10C1!Ge.A..?..P.f.b....K]..]6H3......9..R.(..LX4.....N/A
\CURSOR\17\0 BDB874 2EC 149874 39886B95151FFF6F3888C2117C3F0E360C16AF80CA87ED9DCB7C600166A23C16C55A823D56EA8B6E056D73622FBADD3BDC9E9.k....o8...|?.6.........|.f.<..Z.=V..n.msb/..;..N/A
\CURSOR\18\0 BDB588 2EC 149588 E1DEFE82A7F5F37466C7D78F370FB8AF9718BF0124A8500C647CBE8B89FDE00858842A5FFC6F4DDFED2B29FEE9A687D1D828.......tf...7.......$.P.d|......X.*_.oM..+)......(N/A
\CURSOR\19\0 BDB29C 2EC 14929C 081575367C89A91BBD265A8039029C10F6E6D8F916039A2DEBD700C06F420132CF782878E7B1FBC87C8BB5CAD3FD3AD67FFE..u6|....&Z.9..........-....oB.2.x(x....|.....:...N/A
\CURSOR\20\0 BDAFB0 2EC 148FB0 C5E91BFF1512F5647C2583923C9767078D6C3F003D647922C6BD5EFC3B57B3636B5BB276B474CE7F2A95F3EE9AEAE8343787.......d|%..<.g..l?.=dy"...;W.ck[.v.t..*......47.N/A
\CURSOR\21\0 BDACC4 2EC 148CC4 8C1F0290A17CA7A339489DBC67D3DF0D02CB443B712C65092A9049BA127438BEBB6BA7734870A0C30E10D7EF34DBA91528D2.....|..9H..g.....D;q,e.*.I..t8..k.sHp......4...(.N/A
\CURSOR\22\1031 BDAB90 134 148B90 16A4D86D21289B9BAF7A25CB8CE430C5088EE19C10A11C40744963CD2B0E437D8AE29BFCF8BBA943C0C7D3B64DA73B5B3D1B...m!(...z%...0........@tIc.+.C}.......C....M.;[=.N/A
\CURSOR\23\1031 BDA8A4 2EC 1488A4 1A4BFFE6A74FCFA1FCC4C680D02A34C4E2ADF9440EBC23941E3CE24125533DF417A404DEC6E9361D79FC4BC2A781EC5532B0.K...O.......*4....D....<.A%S=.......6.y.K....U2.N/A
\CURSOR\24\1031 BDA5B8 2EC 1485B8 98D7B60404FFE155F3F1E810CD128598EB64AEE04ADAF3AA73DD5D32BE0BA2BC35E103D9781645D817C6200ED4428C6525DD.......U.........d..J...s.]2....5...x.E... ..B.e%.N/A
\CURSOR\25\1031 BDA2CC 2EC 1482CC C82B5AEE75CC33B96F76E4A5E8C59F2C4A848BD7BDD3BF5FFDEEB93D2EBA22425691C010785DBDF7E464FC7B45FDF7864869.+Z.u.3.ov.....,J......_...=.."BV...x]...d.{E...HiN/A
\CURSOR\26\1031 BD9FE0 2EC 147FE0 C81E9D131D72F99B59655AD87584C042A6A7DC590FED7BF7CE68B14E9FF666C14CCCA90DE5C645A54B84AD99B657D1FA48F8.....r..YeZ.u..B...Y..{..h.N..f.L.....E.K....W..H.N/A
\CURSOR\27\1031 BD9CF4 2EC 147CF4 836FFFF73452A594DC0B16B1C1A9FE78A489CAC3F817BE1EDDD7A76F36C83D9A0C79E492F79E8BF0553DCA572972E476CB2A.o..4R.........x...........o6.=..y......U=.W)r.v.*N/A
\CURSOR\28\1031 BD9A08 2EC 147A08 95CF3D79438C38787B09DE12BBCA7CF7276E002FCA95C738A266A365B5C475F1553A24F2A43F9C19A7BE33BB1FBA66289801..=yC.8x{.....|.'n./...8.f.e..u.U:$..?....3...f(..N/A
\CURSOR\29\1033 BD98D4 134 1478D4 3B99B3F0EF6DBA5D1B662284B0BBDDA4A36FB4508D5DB9055D30D2F894C2934569ACAF21880E82A4E7234C539CE3EE3A0776;....m.].f"......o.P.]..]0.....Ei..!.....LS...:.vN/A
\BITMAP\PREVIEWGLYPH\1033 BD97EC E8 1477EC A855E9FB9AA4A1BEF1743A98008B512AC511B24ABEB701754C59CDD9BED3CB804311297F68A636D3DD351DEC5E1364DA745E.U.......t:...Q*...J...uLY......C.).h.6..5...d.tN/A
\BITMAP\SBDOWN\1033 BD9724 C8 147724 348566BC209392C45E2CBE2A78F092196316AC7129874F318909DEB2E3FA079E5DF7190BC4846671D1A20E0CA133F76A58064.f. ...,.*x...c..q).O1........].....fq.....3.jX.N/A
\BITMAP\SBDOWNDIS\1033 BD965C C8 14765C 034DC8320F54EB277286C90AECB32CAD87C7360142E123C40BDB74DFFBD332F7B7FEA0999E26C8D8C0AB8B1A660D48CF9C18.M.2.T.'r.....,...6.B....t...2......&......f.H...N/A
\BITMAP\SBDOWNDN\1033 BD9174 4E8 147174 68B729486DE4290C9423A6D40394AEC810149EB9EA75EE591D14B083D1DC2F25F0BE473DA306673CC761337C05FDDA4D7B7Bh.)Hm.).............u.Y....../%..G=..g<.a3|...M{{N/A
\BITMAP\SBLEFT\1033 BD90A4 D0 1470A4 BBBF064DC4C43A82AD318869FB82D83F1F0545BF60CBE82CB9B9F151AD308C793CB487DADF5D5CBEEDA65A7C06FE6E20C9C5...M..:..1.i...?..E...,...Q.0.y<....]\...Z|..n ..N/A
\BITMAP\SBLEFTDIS\1033 BD8FD4 D0 146FD4 C9C0341C19A9FF5E3B480C8A4EB9B34FAA880C871E11AF78D17506978C4C09D7504A88885E5833857762623A18CDDF96D4F8..4....;H..N..O.......x.u...L..PJ..X3.wbb:......N/A
\BITMAP\SBLEFTDN\1033 BD8F04 D0 146F04 D192EC47A9EBA58E40A18E781E7B8EE4FDF243C0880348EB0D3CE367E9E26E457BCC9D532955A3314021701655B8BD225098...G....@..x.{....C...H..<.g..nE{..S)U.1@!p.U.."P.N/A
\BITMAP\SBRIGHT\1033 BD8E34 D0 146E34 5456F8B6DD5B5DF98EF93B4130ECDF2BEE1F463A8E3B183B6F0AE68ADFF2CF9B2AC4D2BD5A0BEECA44E5C5422B3806DC4BB3TV...[]...;A0..+..F:.;.;o.......*...Z...D..B+8..K.N/A
\BITMAP\SBRIGHTDIS\1033 BD8D64 D0 146D64 65D38A6190D12D57A03BBE8D8CB216DD116C6C3D64E2D16E68C938FCE84C572E6D3215C4994EF786ACA7D3A2EF3B0F94A205e..a..-W.;.......ll=d..nh.8..LW.m2...N.......;....N/A
\BITMAP\SBRIGHTDN\1033 BD8C94 D0 146C94 6194EC84F16483C9651CB5CB7450754AF27A1F7B9F90EA10CD648BD63851C2ABC87DBDAD76484FEDAEF46725B3FF8517FAC6a....d..e...tPuJ.z.{.....d..8Q...}..vHO...g%......N/A
\BITMAP\SBUP\1033 BD87AC 4E8 1467AC 1F2A4BA21380300AF3834314DC1A1DFE67E0AD9950DA5AAC6D6C1058C19F240A391613F43F470498F1A37A9DE301DC17523C.*K...0...C.....g...P.Z.ml.X..$.9...?G....z.....R<N/A
\BITMAP\SBUPDIS\1033 BD82C4 4E8 1462C4 A3EFD9031878DE788AE2FA2401221257AD41EF1242E1ACCC8770EFAB2C269816DD853D7F10C54FA01AEE88DAFD3E34CF0522.....x.x...$.".W.A..B....p..,&....=...O......>4.."N/A
\BITMAP\SBUPDN\1033 BD7DDC 4E8 145DDC 27B2969EA2FC06BE47F1CC5973364157F18C548959F9C0EB1A37881FAD1FF60D33CB001A146A37109E15BB20284511D79BB7'.......G..Ys6AW..T.Y....7......3....j7.... (E....N/A
\BITMAP\TEXTEDITORACTIVELINE\0 BD7AB4 328 145AB4 3073B846BF9EA3F10621781E6D07E5FF4FBC03D753EFC86E71560D1BECA2ABD300A8D4A6C48B46F5BB90E84C47E323920B6F0s.F.....!x.m...O...S..nqV............F....LG...oN/A
\BITMAP\TEXTEDITORBOOKMARKIMAGES\0 BD6BD4 EE0 144BD4 C80BC4AC9EE5A29E1F6F8A0B3142F5CD4864DD921E6A518ED056A5B89EFE876765CB5F045ADA9DC97128717AD4FF7B45AFE4.........o..1B..Hd...jQ..V.....ge._.Z...q(qz..{E..N/A
\BITMAP\TEXTEDITORMOUSEMOVESCROLL\0 BD65D4 600 1445D4 DF6CA2DAC18DECCF63775F5514A649FE719046AE8198AE716CEC635CC644F894F3B5465CA8C11109C235860DFB90AD31CC1E.l......cw_U..I.q.F....ql.c\.D....F\.....5.....1..N/A
\BITMAP\TEXTEDITORSYNCEDIT\0 BD62AC 328 1442AC 6DB8995F3773F39AF57374CB55C4F1BE172185D13A16AD50F85384504BE4ECB53AE04A5B302F7C84A3D03FD758FEE7F0DDEEm.._7s...st.U....!..:..P.S.PK...:.J[0/|...?.X.....N/A
\BITMAP\VT_MOVEALL\0 BD6044 268 144044 D05EE7A6C777968A3A74A03F55BCC14EE1BFC3B9E712E823627DD1E7929D2CD80A22E78A678FF28AF367C6BA7EA37F366C5C....w..:t.?U..N.......b}....,.."..g....g..~..6l\N/A
\BITMAP\VT_MOVEEW\0 BD5DDC 268 143DDC 25E70E4EE1E645C4DACF053071F19AF99E99006F96B9C40C00A9E4652CE5ED55A13A257F7F5E5874EAD014F28D72297D2922%..N..E....0q......o.......e,..U.:%..Xt.....r)})"N/A
\BITMAP\VT_MOVENS\0 BD5B74 268 143B74 F5B571131CBAB35752B63620BE3192CFB084CE6C6680D6AADCBE8CC0FD8ED58C8088DFADCF78B2C47B441412E8C35D2D9162..q....WR.6 .1.....lf................x..{D....]-.bN/A
\BITMAP\VT_XPBUTTONMINUS\0 BD5A50 124 143A50 B6285BCEC6504A28EAEB723AD0C3FEC2480C81FE92A1309EEC5342CAD68CA3BB525F26BAFBBC347289BA017444ADD94DD5AC.([..PJ(..r:....H.....0..SB.....R_&...4r...tD..M..N/A
\BITMAP\VT_XPBUTTONPLUS\0 BD592C 124 14392C FD0DE6ED7937C07B500087136027E21523A441BC0E93AED836F88258CDE386429AC885F1762E43057FD30828E245F1EEF014....y7.{P...'...A.....6..X...B....v.C....(.E....N/A
\ICON\1\1033 AFF830 468 6D830 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000(....... ..... .....@.............................N/A
\ICON\2\1033 AFFCC0 988 6DCC0 2800000018000000300000000100200000000000600900000000000000000000000000000000000000000000000000000000(.......0..... ..................................N/A
\ICON\3\1033 B00670 10A8 6E670 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................N/A
\ICON\4\1033 B01740 25A8 6F740 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000(...0........ ......%............................N/A
\ICON\5\1033 B03D10 4228 71D10 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000(...@......... ......B............................N/A
\ICON\6\1033 B07F60 94A8 75F60 2800000060000000C00000000100200000000000809400000000000000000000000000000000000000000000000000000000(............ ...................................N/A
\ICON\7\1033 B11430 3AC7 7F430 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A8660000000473424954080808087C08648800.PNG........IHDR.............\r.f....sBIT....|.d..N/A
\DIALOG\DLGTEMPLATE\0 BD58D8 52 1438D8 DB6C4036FE7E30B216EB7BB9A50598C809F052A77D2BD172A453C697F411A4D384E42F18511EE4768E15C458366F31E0E877CB0D201EBEA7B9D30B1F644AF2E20069C2DEFE79EDD18D64E94D578ADA338022.l@6.~0...{.......R.}+.r.S......../.Q..v...X6o1..w.. .......dJ...i...y...d.MW..3."N/A
\DIALOG\TEXTFILEDLG\0 BD5884 52 143884 81EB7383FAA7F146D61B99F0F09B772813D447C090214BA294020F27D49CCD745959CD55D286E92C70F7CAFCC9274B6823BA3120C4458654C726E3135214FB47F1E0B251DE33098E8FDE204DA327B16DB194..s....F......w(..G..!K....'...tYY.U...,p....'Kh.1 .E.T.&..R..G...Q.3.... M.'.m..N/A
\STRING\4044\0 BD5518 36C 143518 516B00F2F03F17F78E5041D3AE267A6A2FD17E23907B80F9EFBBFE8A940276FB96CDD9CDE23018F68CE676E3B09129EAFC6DQk...?...PA..&zj/.~.{........v......0....v...)..mN/A
\STRING\4045\0 BD4F90 588 142F90 3DBF9954C252631F547AA64CB1683DF7177602278FF54A49DF0EE529AB95E10E4C70EEF6207D9B26C60BFE80FCA1E05F7DA7=..T.Rc.Tz.L.h=..v.'..JI...)....Lp.. }.&......._}.N/A
\STRING\4046\0 BD4A14 57C 142A14 91C6EEE7C8F58112F9427F0B07CC737CBA8FBD7B15E01476CD0AFEF86976B537CCBA373A39B61EC49B0D83E91867555EA600.........B....s|...{...v....iv.7..7:9........gU..N/A
\STRING\4047\0 BD4524 4F0 142524 5302A0977D0CCFE1869FA0B559491BEE105938442EF90636C19D0ED006E690091364640666C448B59C9E1BC6AAE0BACF4466S...}.......YI...Y8D...6.........dd.f.H.........DfN/A
\STRING\4048\0 BD4024 500 142024 BBB30D74C453EAC3C8E5BED0C9D02A3FEF74C40678F24A016FE791E00AAFCCD07F7C039DBFA6018BB1FF51EA248E0A513FC3...t.S........*?.t..x.J.o........|........Q.$..Q?.N/A
\STRING\4049\0 BD3D30 2F4 141D30 9FDBB57978092C37DB8D5BB74FC3CE6319AA74B05E9EC93B8D4E4F79C0F0E558BCD046F5964DF56788CDEC9B3F37529C4F75...yx.,7..[.O..c..t...;.NOy...X..F..M.g....?7R.OuN/A
\STRING\4050\0 BD3920 410 141920 A1740C0F2DC392B421D0FE2CA353B380E3F378EAAABCBD5780BE67A48A5436A1B34B7064B06CED82F301FAD3B95D069D7193.t..-...!..,.S....x....W..g..T6..Kpd.l.......]..q.N/A
\STRING\4051\0 BD36A8 278 1416A8 AB3F1692AF479A25F488F1B9A66C7910A3658B0355B32FF7D5E6DF6C5F38F20CF48F5B1E81E65BDE2B6DA04081060B1A236E.?...G.%.....ly..e..U./....l_8....[...[.+m.@....nN/A
\STRING\4052\0 BD3498 210 141498 EA49565B782733F332234C0685D385230EDE965CD82CA247A595FE091E500330A7E65823E402A136A23659D87988EAAE8C22.IV[x'3.2L.......\.,.G.....P.0..X...6.6Y.y...."N/A
\STRING\4053\0 BD310C 38C 14110C 039C6E7BB4346BC148923A40252D3ABEB367B6B9FF746748ACBF55EFD2C876D6394047CC658FAD657FF065BE6BD7749ABF20..n{.4k.H.:@%-:..g...tgH..U...v.9@G.e..e..e.k.t..N/A
\STRING\4054\0 BD2C48 4C4 140C48 5A81192F6629B7593015AAD5DA8EC7D81FBA397597D217A32E20A503876000224A24EE24EF9D76279AAAFE4F18EA43C6FB9CZ../f).Y0.........9u..... ...."J$.$..v'...O..C...N/A
\STRING\4055\0 BD2888 3C0 140888 0E7EDECDBCF85FF95AD3DA01FB2F65838F3C939A12A8DF228B70A36125DE81ECF88C4DF48A8D1522552921CFB21548F9F079.~...._.Z..../e..<.....".p.a%.....M...."U)!...H..yN/A
\STRING\4056\0 BD2570 318 140570 C9E535A180106A64201DF5D57A6600077DAA3300552B115C1BE5AD79C27FA4F0273CDBFF28B6E9FF8A6FC1433FE922090B2A..5...jd ...zf..}.3.U+.\...y....'<..(....o.C?."..*N/A
\STRING\4057\0 BD2140 430 140140 BC322675D60D20967DCFBD9A418D556941C1CEEB11E6BCF2BE8E9E8FD312139690E6198430CB99236F961FD6912D2B390691.2&u.. .}...A.UiA...................0..o....-+9..N/A
\STRING\4058\0 BD1F10 230 13FF10 4E08A5ABB4FCA035A5444FF44DA4BEB3E93CAA2D25B913CCE978A31FCD0E380732FF52521EE12A148115C35472E1C9AEA201N......5.DO.M....<.-%....x....8.2.RR..*....Tr.....N/A
\STRING\4059\0 BD1E24 EC 13FE24 D9E88A1C00597EEAF45614AF2120B276B4BDB47AE5A3B9C2C432536BE546D3D418F0A3F88D27739AC35565DF94DD5DA5A353.....Y~..V..! .v...z.....2Sk.F.......'s..Ue...]..SN/A
\STRING\4060\0 BD1D3C E8 13FD3C 9140C5AA6336668B0C4A41ED233F90EBDA443EB16C655BFA14A6CBDC39C1796C677DE34A687B1E0C18C3E6DA39ABA4D571F8.@..c6f..JA.?...D>.le[.....9.ylg}.Jh{......9...q.N/A
\STRING\4061\0 BD1C50 EC 13FC50 B4FCBC3F526D5CEA66EB11BFA7684F243AD2D3B7F875122C1C0AD5020017988A14FC5710664CAFACD91BE6BD268CDE7ECF4A...?Rm\.f....hO$:....u.,..........W.fL......&..~.JN/A
\STRING\4062\0 BD1880 3D0 13F880 16AD9EA771312B6830419D464C39A40F43BF4C44026EA2DCDAD38B58216D08A0ACF76385F212F09FC31A95DD1901F0BBD4AA....q1+h0A.FL9..C.LD.n.....X!m....c...............N/A
\STRING\4063\0 BD132C 554 13F32C 3D9D125B61A5A28602380005C3457CFFD0F6D4A365090F276B4D47F16B0A4238504A3D6BDDD9627333D8FCCA9C2918267E29=..[a....8...E|.....e..'kMG.k.B8PJ=k..bs3....).&~)N/A
\STRING\4064\0 BD0D9C 590 13ED9C 5CB645C0A7750980CFB35AA2E8C932F36F241AC0EE829C4F1690B7F093675E2A14E75987E1474E5F55D4BA2BB67041487400\.E..u....Z...2.o$.....O.....g*..Y..GN_U..+.pAHt.N/A
\STRING\4065\0 BD0438 964 13E438 04928182111CD02005511D03A80508BF4848F54EE3165F88415BF14CDE4EDA69C003442CA2C7F69B4D7F0261FA39DE2120FE....... .Q......HH.N.._.A[.L.N.i..D,....M..a.9.! .N/A
\STRING\4066\0 BCF90C B2C 13D90C C8E8C70543E94DD935407EEB6A104DB4C3FFE493A7CE4B6ED6C67D34AE84F82B81555B5875A11E1849C154C116DB4B0A2863....C.M.5@~.j.M.......Kn..}4...+.U[Xu...I.T...K.(cN/A
\STRING\4067\0 BCF4F4 418 13D4F4 D976A7F174EAB63281D0AD341D69F6D8B2ADCFA25D2EF7130D8D6D0F7588AA5D1DB66DFA570CF1B942F6DF667C50898B5C8C.v..t..2...4.i......].....m.u..]..m.W...B..f|P..\.N/A
\STRING\4068\0 BCF0C0 434 13D0C0 D8E41F6AF3308260ED4AC6F9BA774D63E487A93CCFF24581D8BBEAACA73B0442AB4F17A04CA783F90A13880D6078FD880467...j.0..J...wMc...<..E......;.B.O..L.......x...gN/A
\STRING\4069\0 BCED78 348 13CD78 C30755CB8842BCBFB56289010FDA645D89988D0D0C78C5996117D12A61BEA34B60DD09CB14760747E0B037F0BF75595D338A..U..B...b....d].....x..a..*a..K....v.G..7..uY]3.N/A
\STRING\4070\0 BCEA6C 30C 13CA6C 06BE4ED3D2D2B2E54DD221DC86F8D27952F18876416072ABA51BDEAB75F1C618B60750ED15D456E1E9249FF3D9FD40C7E689..N.....M.!....yR..vAr.....u.....P...V..$....@...N/A
\STRING\4071\0 BCE7B4 2B8 13C7B4 20E66E05CE4985C80AE00F6E600F80158C9DDC2D69B62E096FB6A9D7FB765FA179BE3EABF5C52BF84F54D9733808D2DECD85.n..I.....n......-i...o....v_.y.>...+.OT.s8.....N/A
\STRING\4072\0 BCE3A4 410 13C3A4 986204D4CAE1330E7CC9F3597A49F3F06688B6B700BAAE476F66749734AFAEA726BE15AD44D46EF15057C5308AA1AA26311E.b....3.|..YzI..f......Goft.4...&...D.n.PW.0...&1.N/A
\STRING\4073\0 BCE2A8 FC 13C2A8 2AFC1E523F916DA5B0E66E1F9554577E400A101EE0CEECB0C790BA6F7D3D8D69C6B70C223EDD89EF6F1334613FF74B482CA5*..R?.m...n..TW~@..........o}=.i...">...o.4a?.KH,.N/A
\STRING\4074\0 BCE1D8 D0 13C1D8 C17246833A8B16774247E0906A4B875F22C0AF889AD2A736F86334FF1FC2F3152FF2FCAE26AF28EE160E4AAFA545886A8391.rF.:..wBG..jK._"......6.c4...../...&.(...J..E.j..N/A
\STRING\4075\0 BCE0B8 120 13C0B8 709A6B0273144EDDFFA5204C80FB8972361BCA4A1122A733FDCDF0FE6DDD1F45EBBFE7279F22AEC4DA64DE4D22B915F073CBp.k.s.N... L...r6..J.".3....m..E...'."...d.M"...s.N/A
\STRING\4076\0 BCDD8C 32C 13BD8C F0412845FD795C5819DC490F1BDADA5864BEE10B5D986B6503203C8CDDB3A3A13B15DAB20472D4096EFA430580776B46724E.A(E.y\X..I....Xd...].ke. <.....;....r..n.C..wkFrNN/A
\STRING\4077\0 BCD97C 410 13B97C 1509E49BBB78DAAE07ED4952A5865C4BBC8DD65B7B294ACCB458DCAB8EA474C5B8F99AA5DB4479F76FEC6BBBF9B9AAF74698.....x....IR..\K...[{)J..X....t......Dy.o.k.....F.N/A
\STRING\4078\0 BCD594 3E8 13B594 90A5D9A6B87191AC15D738622EDA8F82DAE83FC7AEABB53805046685870D0B503077282E499AD2FE13FACFB22F7CAC8B8A50.....q....8b......?....8..f....P0w(.I......./|...PN/A
\STRING\4079\0 BCD170 424 13B170 FB86590BE0C1BF54499912F6FC999E75ACF3CEADE8737B012F439074D5A848E5019A9656C9B795B9294A793B4BDFE0AE92E6..Y....TI......u.....s{./C.t..H....V....)Jy;K.....(Executable found)
\STRING\4080\0 BCCDE4 38C 13ADE4 B8053696E542789899A691007BB49A3AD533D3B948F296ACEBC61B1A0E49B15188291E1F3E402BC1AA208460E0CE58429FCE..6..Bx.....{..:.3..H........I.Q.)..>@+.. ...XB..N/A
\STRING\4081\0 BCCABC 328 13AABC A0A86D64F7853A5861CB400E2EC628E67536D0E8884173CF33E80899BFDA843BA34B1A1104FBB1E58673AAFA6396EA42208E..md..:Xa.@...(.u6...As.3......;.K.......s..c..B .N/A
\STRING\4082\0 BCC664 458 13A664 A679EE740859F8BAE5E1DF43CF8B70C76B748574728AC62C9DB0A33FBC23C61BF06011E7ABF91C9EA2C5B01E320495209535.y.t.Y.....C..p.kt.tr..,...?..............2.. .5N/A
\STRING\4083\0 BCC1B0 4B4 13A1B0 4689A716978D4B3E77E0DC23BAD8648FDFB97EB0A0D52A938B5D9B212E40B271A8596F6120F9A58C7E0FD5CE147F987B4671F.....K>w....d...~...*..].!.@.q.Yoa ...~......{FqN/A
\STRING\4084\0 BCBB34 67C 139B34 539486441EBDF0802B8AAC197C6C0CF9C8FC318E5FCF21E0244114F014F276ED62024DBFCB8E0DD3C73D71F86104B48E2F72S..D....+...|l....1._.!.$A....v.b.M......=q.a.../rN/A
\STRING\4085\0 BCB674 4C0 139674 33F36C14521C11A8C50747E1B9640FBF3E12D5035DB851A8E4BD55336143D4AA8741BC6136E73E503BDC0868671E3AFC3B403.l.R.....G..d..>...].Q...U3aC...A.a6.>P;..hg.:.;@N/A
\STRING\4086\0 BCB37C 2F8 13937C 3B859FF735A2294CCC9CFB013AFFB202C67AA1708D9B0AC13074BB49E5AD96FE00738A5233560D36E078A384A0D416B9E8A2;...5.)L....:....z.p....0t.I.....s.R3V.6.x........N/A
\STRING\4087\0 BCB024 358 139024 5E5C4C0CF5DEAE0E08B80CB9E8301278FC322837E624989359E25B51D2659952A18F95E06D3740C1D1D7F6B5DF948C492EE3\L..........0.x.2(7.$..Y.[Q.e.R....m7@........I..N/A
\STRING\4088\0 BCAC38 3EC 138C38 0C9371BFCA11558E68CDD147C253E47CD555851359F2B18F3CD63A0988639ACCFB2F9AA3B58B7BE272DF3EB7034E67A816E4..q...U.h..G.S.|.U..Y...<.:..c.../....{.r.>..Ng...N/A
\STRING\4089\0 BCA8A8 390 1388A8 547C41EE2D0A1A3A98B362E48FB9D0EA6F2F815C5FA1DE37AFFAC90B905089EF86EC8B48705F3F0734347265D5A2B8101DE2T|A.-..:..b.....o/.\_..7.....P.....Hp_?.44re......N/A
\STRING\4090\0 BCA7DC CC 1387DC B679A1D6B48E5932C115909D0AA7BA05341CDC639D12CB99D037AAC3CAC78788566EBBB60FFEBC74714EA474956711E2DBA0.y....Y2........4..c.....7......Vn.....tqN.t.g....N/A
\STRING\4091\0 BCA72C B0 13872C 20EE8C9352AFC448520187B23BC26AB0381E8B6056D14FDEDDB55540F7E56A97C342B3A602E6232D33E521B0C7C487CDDA20...R..HR...;.j.8..V.O...U@..j..B....-3.!......N/A
\STRING\4092\0 BCA46C 2C0 13846C 8F14127BD517570CE12501E61B793A813D86CDF35360171A7522D0983281D6957F90BAAFFA098849055060DFEBF50220EF4B...{..W..%...y:.=...S..u"..2..........I.P.... .KN/A
\STRING\4093\0 BCA030 43C 138030 698F555E635E2F3459DF81CABF012E2585B31A5D26E33209EB4E846784B2C3AF58BE799F993163ED977D51627270F928F4FDi.Uc/4Y......%...]&.2..N.g....X.y..1c..}Qbrp.(..N/A
\STRING\4094\0 BC9CF0 340 137CF0 C51B8B741294951BE8ABEBE1F24511D2F621D4F7A83C5635B76F797579CE8602DFC64D3EA8B7EF6008782AE38254CA951A6B...t.........E...!...<V5.oyuy.....M>....x*..T...kN/A
\STRING\4095\0 BC9A14 2DC 137A14 1939A4349E13D61D069FEAE0510338CBECDB7DE0660BDFAB2D8C90BA4B9C499627B414A65CE482F9A7CCC8D99A1464B319B3.9.4........Q.8...}.f...-...K.I.'...\.........d...N/A
\STRING\4096\0 BC96FC 318 1376FC CE57CE8AA159AFFC690D8C855F88BFF9524FE263CB56CCFB96968DD71783E288F34708388711A9F65EB9FA9C79F89925556D.W...Y..i..._...RO.c.V...........G.8.......y..%UmN/A
\RCDATA\BBABORT\1033 B15C00 D5D 83C00 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBABORT_DISABLED\1033 B16988 D57 84988 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBALL\1033 B17708 CFC 85708 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBALL_DISABLED\1033 B1842C CD9 8642C F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBCANCEL\1033 B19130 D5D 87130 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBCANCEL_DISABLED\1033 B19EB8 D57 87EB8 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBCLOSE\1033 B1AC38 C4E 88C38 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBCLOSE_DISABLED\1033 B1B8B0 C4E 898B0 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBHELP\1033 B1C528 CB5 8A528 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBHELP_DISABLED\1033 B1D208 CB0 8B208 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBIGNORE\1033 B1DEE0 D56 8BEE0 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBIGNORE_DISABLED\1033 B1EC60 D47 8CC60 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBNO\1033 B1F9D0 DC2 8D9D0 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBNO_DISABLED\1033 B207BC DC5 8E7BC F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBOK\1033 B215AC CF3 8F5AC F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBOK_DISABLED\1033 B222C8 CED 902C8 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBRETRY\1033 B22FE0 DA9 90FE0 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBRETRY_DISABLED\1033 B23DB4 DA6 91DB4 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBYES\1033 B24B84 CF3 92B84 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\BBYES_DISABLED\1033 B258A0 CED 938A0 F87BAB3F844CF302EDD73C56540F7E33439EE435FB79C4C9AE048A72B3ED8295E35191F85DD00323C535208EFD8429440A9D.{.?.L....<VT.~3C..5.y.....r.....Q..]...5 ...)D..N/A
\RCDATA\DARK\1033 BC8158 15A4 136158 2A665B92DCC531724F249AAD4763DC0AF18BA9E1FA5354E47939BC4914695EABD1782EAA2B514CBC3E8C3B8A76230B847046*f[...1rO$..Gc.......ST.y9.I.i..x..+QL.>.;.v..pFN/A
\RCDATA\DBN_APPLYUPDATES\1033 B265E0 BFE 945E0 F87BAB3F844CF302EDD73C56540F7E33B554B3D404F512DF58B8C722862B90E5A5319211684A554636CD75175F6AA68302AA.{.?.L....<VT.~3.T......X..".+...1..hJUF6.u._j....N/A
\RCDATA\DBN_APPLYUPDATES_20X\1033 B27208 D04 95208 F87BAB3F844CF302EDD73C56540F7E33408FACBA6E3765FEAC4888D37E0193C528374D7888CADDB78340F4EA1C66B10B4AD2.{.?.L....<VT.~3@...n7e..H..~...(7Mx.....@...f..J.N/A
\RCDATA\DBN_CANCEL\1033 B27F34 C0E 95F34 F87BAB3F844CF302EDD73C56540F7E33B554B3D404F512DF58B8C722862B90E5A5319211684A554636CD75175F6AA68302AA.{.?.L....<VT.~3.T......X..".+...1..hJUF6.u._j....N/A
\RCDATA\DBN_CANCELUPDATES\1033 B28B6C C1B 96B6C F87BAB3F844CF302EDD73C56540F7E33B554B3D404F512DF58B8C722862B90E5A5319211684A554636CD75175F6AA68302AA.{.?.L....<VT.~3.T......X..".+...1..hJUF6.u._j....N/A
\RCDATA\DBN_CANCELUPDATES_20X\1033 B297B0 D36 977B0 F87BAB3F844CF302EDD73C56540F7E33408FACBA6E3765FEAC4888D37E0193C528374D7888CADDB78340F4EA1C66B10B4AD2.{.?.L....<VT.~3@...n7e..H..~...(7Mx.....@...f..J.N/A
\RCDATA\DBN_CANCEL_20X\1033 B2A510 D0F 98510 F87BAB3F844CF302EDD73C56540F7E33408FACBA6E3765FEAC4888D37E0193C528374D7888CADDB78340F4EA1C66B10B4AD2.{.?.L....<VT.~3@...n7e..H..~...(7Mx.....@...f..J.N/A
\RCDATA\DBN_DELETE\1033 B2B248 B07 99248 F87BAB3F844CF302EDD73C56540F7E33B554B3D404F512DF58B8C722862B90E5A5319211684A554636CD75175F6AA68302AA.{.?.L....<VT.~3.T......X..".+...1..hJUF6.u._j....N/A
\RCDATA\DBN_DELETE_20X\1033 B2BD78 B29 99D78 F87BAB3F844CF302EDD73C56540F7E33408FACBA6E3765FEAC4888D37E0193C528374D7888CADDB78340F4EA1C66B10B4AD2.{.?.L....<VT.~3@...n7e..H..~...(7Mx.....@...f..J.N/A
\RCDATA\DBN_EDIT\1033 B2C8CC B7B 9A8CC F87BAB3F844CF302EDD73C56540F7E33B554B3D404F512DF58B8C722862B90E5A5319211684A554636CD75175F6AA68302AA.{.?.L....<VT.~3.T......X..".+...1..hJUF6.u._j....N/A
\RCDATA\DBN_EDIT_20X\1033 B2D470 BD4 9B470 F87BAB3F844CF302EDD73C56540F7E33408FACBA6E3765FEAC4888D37E0193C528374D7888CADDB78340F4EA1C66B10B4AD2.{.?.L....<VT.~3@...n7e..H..~...(7Mx.....@...f..J.N/A
\RCDATA\DBN_FIRST\1033 B2E06C B8D 9C06C F87BAB3F844CF302EDD73C56540F7E33B554B3D404F512DF58B8C722862B90E5A5319211684A554636CD75175F6AA68302AA.{.?.L....<VT.~3.T......X..".+...1..hJUF6.u._j....N/A
\RCDATA\DBN_FIRST_20X\1033 B2EC24 C13 9CC24 F87BAB3F844CF302EDD73C56540F7E33408FACBA6E3765FEAC4888D37E0193C528374D7888CADDB78340F4EA1C66B10B4AD2.{.?.L....<VT.~3@...n7e..H..~...(7Mx.....@...f..J.N/A
\RCDATA\DBN_INSERT\1033 B2F860 B1D 9D860 F87BAB3F844CF302EDD73C56540F7E33B554B3D404F512DF58B8C722862B90E5A5319211684A554636CD75175F6AA68302AA.{.?.L....<VT.~3.T......X..".+...1..hJUF6.u._j....N/A
\RCDATA\DBN_INSERT_20X\1033 B303A8 B45 9E3A8 F87BAB3F844CF302EDD73C56540F7E33408FACBA6E3765FEAC4888D37E0193C528374D7888CADDB78340F4EA1C66B10B4AD2.{.?.L....<VT.~3@...n7e..H..~...(7Mx.....@...f..J.N/A
\RCDATA\DBN_LAST\1033 B30F18 B86 9EF18 F87BAB3F844CF302EDD73C56540F7E33B554B3D404F512DF58B8C722862B90E5A5319211684A554636CD75175F6AA68302AA.{.?.L....<VT.~3.T......X..".+...1..hJUF6.u._j....N/A
\RCDATA\DBN_LAST_20X\1033 B31AC8 C00 9FAC8 F87BAB3F844CF302EDD73C56540F7E33408FACBA6E3765FEAC4888D37E0193C528374D7888CADDB78340F4EA1C66B10B4AD2.{.?.L....<VT.~3@...n7e..H..~...(7Mx.....@...f..J.N/A
\RCDATA\DBN_NEXT\1033 B326F0 B7A A06F0 F87BAB3F844CF302EDD73C56540F7E33B554B3D404F512DF58B8C722862B90E5A5319211684A554636CD75175F6AA68302AA.{.?.L....<VT.~3.T......X..".+...1..hJUF6.u._j....N/A
\RCDATA\DBN_NEXT_20X\1033 B33294 BF6 A1294 F87BAB3F844CF302EDD73C56540F7E33408FACBA6E3765FEAC4888D37E0193C528374D7888CADDB78340F4EA1C66B10B4AD2.{.?.L....<VT.~3@...n7e..H..~...(7Mx.....@...f..J.N/A
\RCDATA\DBN_POST\1033 B33EB4 BEB A1EB4 F87BAB3F844CF302EDD73C56540F7E33B554B3D404F512DF58B8C722862B90E5A5319211684A554636CD75175F6AA68302AA.{.?.L....<VT.~3.T......X..".+...1..hJUF6.u._j....N/A
\RCDATA\DBN_POST_20X\1033 B34AC8 C85 A2AC8 F87BAB3F844CF302EDD73C56540F7E33408FACBA6E3765FEAC4888D37E0193C528374D7888CADDB78340F4EA1C66B10B4AD2.{.?.L....<VT.~3@...n7e..H..~...(7Mx.....@...f..J.N/A
\RCDATA\DBN_PRIOR\1033 B35778 B83 A3778 F87BAB3F844CF302EDD73C56540F7E33B554B3D404F512DF58B8C722862B90E5A5319211684A554636CD75175F6AA68302AA.{.?.L....<VT.~3.T......X..".+...1..hJUF6.u._j....N/A
\RCDATA\DBN_PRIOR_20X\1033 B36324 C03 A4324 F87BAB3F844CF302EDD73C56540F7E33408FACBA6E3765FEAC4888D37E0193C528374D7888CADDB78340F4EA1C66B10B4AD2.{.?.L....<VT.~3@...n7e..H..~...(7Mx.....@...f..J.N/A
\RCDATA\DBN_REFRESH\1033 B36F50 C2C A4F50 F87BAB3F844CF302EDD73C56540F7E33B554B3D404F512DF58B8C722862B90E5A5319211684A554636CD75175F6AA68302AA.{.?.L....<VT.~3.T......X..".+...1..hJUF6.u._j....N/A
\RCDATA\DBN_REFRESH_20X\1033 B37BA4 D45 A5BA4 F87BAB3F844CF302EDD73C56540F7E33408FACBA6E3765FEAC4888D37E0193C528374D7888CADDB78340F4EA1C66B10B4AD2.{.?.L....<VT.~3@...n7e..H..~...(7Mx.....@...f..J.N/A
\RCDATA\DVCLAL\0 B38914 10 A6914 F12EAE26B7686BEA322363761FD1B18E...&.hk.2cv....N/A
\RCDATA\EULA\1033 BBA874 D8E2 128874 2F51146D51CECCCFFE9531DB004225A2F295049E5B7B4F5505FE5019A5BD50F4FF621B3DD0E7BE0F14C0AF0398EFA1E33CB0/Q.mQ.....1..B%.....[{OU..P...P..b.=............<.N/A
\RCDATA\FONTAWESOME\1033 B921C8 286AC 1001C8 ACDD6CBA930200DB07FE5E5BB70ACB07AB1D69D6177012EAEEDA1CB2D20D0085E5554E7E7538AD230057CF9CE0F4A103015B..l.......[......i..p...........UN~u8..W.......[N/A
\RCDATA\JSON\1033 B8FDF4 23D2 FDDF4 19CD105682647D09F85E40E97604ADFBD6FD2A805E7DCAF820728AA01FFCDB5EC8DA08387D5201AAD188299B9449F4109CE9...V.d}..@.v.....*.}.. r........8}R....)..I....N/A
\RCDATA\LIGHT\1033 B8E6A0 1754 FC6A0 CA00F75EF0763D750DF20771B406823E00813463FC006698EB14F928CE0C000411312C203CE576781803EB8BC1911995B0B0....v=u...q...>..4c..f....(.....1, <.vx..........N/A
\RCDATA\MSG_ERROR\1033 B389EC 148B A69EC F87BAB3F844CF302EDD73C56540F7E33FE8F783CCC58AEA36338D218C58194919E681176E452EDCA44AF2DA58A021A5DDC97.{.?.L....<VT.~3..x<.X..c8.......h.v.R..D.-....]..N/A
\RCDATA\MSG_INFO\1033 B39EA0 111E A7EA0 F87BAB3F844CF302EDD73C56540F7E33FE8F783CCC58AEA36338D218C58194919E681176E452EDCA44AF2DA58A021A5DDC97.{.?.L....<VT.~3..x<.X..c8.......h.v.R..D.-....]..N/A
\RCDATA\MSG_WARNING\1033 B3AFE8 D8C A8FE8 F87BAB3F844CF302EDD73C56540F7E33FE8F783CCC58AEA36338D218C58194919E681176E452EDCA44AF2DA58A021A5DDC97.{.?.L....<VT.~3..x<.X..c8.......h.v.R..D.-....]..N/A
\RCDATA\TDLGABOUT\0 B86BD4 7AC9 F4BD4 4DAB01EB73210B1A0AA66C50170D19268E5BF3E80C46260E898F832A370B6C0F07F91B1FE00A1F3C082000958DCAA373631CM...s!....lP...&.[...F&....*7.l........<. .....sc.N/A
\RCDATA\TDLGBASE64\0 B8611C AB6 F411C 493C8663985114BA0609032A32552E4C36B305D82F0D16791A390F3A1C19159739EAC01D301E25383E2EF3EA62EC2B4A14BEI<.c.Q.....*2U.L6.../..y.9.:....9...0.%8>...b.+J..N/A
\RCDATA\TDLGMRUMGMT\0 B8128C 4E8F EF28C 4D00B9651D5F5D604626030C4F9AFEB1A89BDC88BD827371441A212F2B6A283F0614058A05594B3328879C970A40202F3848M..e._]F&..O.........sqD.!/+j(?.....YK3(....@ /8HN/A
\RCDATA\TDLGOPTIONS\0 B8070C B7F EE70C 9648D41CD58C09572E5D85D34E9B507F52AC1877FB3958ECD63E8C0A6E53648D4FE660DA8013184B803E6858742704126805.H.....W.]..N.P.R..w.9X..>..nSd.O.....K.>hXt'..h.N/A
\RCDATA\TDLGREGWIZ\0 B7932C 73DE E732C 32ABDF2A48097B03E002B3FD4DA0F231FF97A09D505D81DCA3170AE85E97BE897AE9062AED597292BC957657AAC5A9CE13242..*H.{.....M..1....P].........z..*.Yr...vW.....$N/A
\RCDATA\TDMRES\0 B6CEC0 C46B DAEC0 CACAA4694A29CFA43C4A3696D9552394E915401062F234ED8ED21C41E72DDEEF468AD29EDEF43D49678EB90F474A2ADEA43D...iJ)..<J6..U...@.b.4....A.-..F.....=Ig...GJ*..=N/A
\RCDATA\TLOGINDIALOG\0 B6CA38 488 DAA38 BE438BDD420534E5CBE39001472BA4795F0A3482796E6374E274A566C82A682E2BF34F9CB4772B284E243BDE0FD02274E721.C..B.4.....G+.y_.4.ynct.t.f.*h.+.O..w+(N$;..."t.!N/A
\RCDATA\TPASSWORDDIALOG\0 B6C674 3C4 DA674 A90D0000E02FB280A60D0000B43DB280F30C0000844BB280ED0C0000A058B280580400005881BC007B1C0D0A204122546865...../.......=.......K.......X..X...X...{... A"TheN/A
\RCDATA\TWND\0 B6C558 119 DA558 242E06877C517391156140FE1EA7865947C155C149C1442628CC1F256EA726B3147283678275AA6656CC086FADB2A0186563$...|Qs..a@....YG.U.I.D&(..%n.&..r.g.u.fV..o....ecN/A
\RCDATA\TWNDEDITOR\0 B6ABA0 19B6 D8BA0 E66CA97A17C14D4C9875A65CA49E497802BC13AD3092737436D934E2998663991D17CD75529C2D88AA305A4DB4242AC81EC9.l.z..ML.u.\..Ix....0.st6.4...c....uR.-..0ZM.$*...N/A
\RCDATA\TWNDMAIN\0 B597D8 113C7 C77D8 5B137805AF835FD4E7C1031123E88480757101F840E81BFC3D5FBE661276550097CD470BA9EC00D5F6F76AA1E95CB43E7D17[.x..._........uq..@...=_.f.vU...G.......j..\.>}.N/A
\RCDATA\TWNDVIEWER\0 B4F470 A365 BD470 079F7ACEF81BC0F79481F902BC630DFC4E3B6011069F315A741EBE50C47F1E01323C62087EF703C4C7E6284DCF963DD7580F..z..........c..N;...1Zt..P....2<b.~.....(M..=.X.N/A
\RCDATA\TXT\1033 B4DF68 1505 BBF68 F881E80B14A2D717DA0741F43A423B09A6DAD93D202CBE17CB005AB6FDC99FFCE66B01679E7966C7B8C0DBC21498969ADE39..........A.:B;....= ,....Z......k.g.yf..........9N/A
\RCDATA\WINXCTRLS_MOMENTUMDOTS_BLACK_64\1033 B4A5F8 3970 B85F8 FF53F00381C84360D8E03BCA37D81B7758AD84046C19A29BC0133C58630B9534D62900EF85CB729201CA686BBF81D0B53069.S....C..;.7..wX...l.....<Xc..4.)....r...hk....0iN/A
\RCDATA\WINXCTRLS_REFRESH_BLACK_64\1033 B3BFCC 333D A9FCC F87BAB3F844CF302EDD73C56540F7E33E6C27666888F801F3AA9FB40014855FF745D5FB52D821B0BEB9334E859356C9C245B.{.?.L....<VT.~3..vf....:..@.HU.t]_.-.....4.Y5l.$[N/A
\RCDATA\WINXCTRLS_ROTATINGLINES_BLACK_64\1033 B3F334 4D4E AD334 F87BAB3F844CF302EDD73C56540F7E33E6C27666888F801F3AA9FB40014855FF745D5FB52D821B0BEB9334E859356C9C245B.{.?.L....<VT.~3..vf....:..@.HU.t]_.-.....4.Y5l.$[N/A
\RCDATA\WINXCTRLS_ROTATINGSECTOR_BLACK_64\1033 B440AC E43 B20AC F87BAB3F844CF302EDD73C56540F7E337301B607F08C364D2CD774FA825A5341BBF66164895FF890FDA3E5FDE4D101617469.{.?.L....<VT.~3s.....6M,.t..ZSA..ad._.........atiN/A
\RCDATA\WINXCTRLS_SEARCHINDICATORS_AUDIO\1033 B44F18 BC3 B2F18 F87BAB3F844CF302EDD73C56540F7E33026A62B96A680523CFD61E48604D027B8D7C004FB6812441681F1FE646115737C94E.{.?.L....<VT.~3.jb.jh....HM.{.|.O..$Ah...F.W7.NN/A
\RCDATA\WINXCTRLS_SEARCHINDICATORS_AUDIO_20X\1033 B45B04 C58 B3B04 F87BAB3F844CF302EDD73C56540F7E33CFF9314025E472D027AA5861B47A1807CDF9C397F5BFD1D366CFC5214923985CF90F.{.?.L....<VT.~3..1@%.r.'.Xa.z..........f..!I.\..N/A
\RCDATA\WINXCTRLS_SEARCHINDICATORS_TEXT\1033 B46784 BD1 B4784 F87BAB3F844CF302EDD73C56540F7E33026A62B96A680523CFD61E48604D027B8D7C004FB6812441681F1FE646115737C94E.{.?.L....<VT.~3.jb.jh....HM.{.|.O..$Ah...F.W7.NN/A
\RCDATA\WINXCTRLS_SEARCHINDICATORS_TEXT_20X\1033 B47380 CFA B5380 F87BAB3F844CF302EDD73C56540F7E33CFF9314025E472D027AA5861B47A1807CDF9C397F5BFD1D366CFC5214923985CF90F.{.?.L....<VT.~3..1@%.r.'.Xa.z..........f..!I.\..N/A
\RCDATA\WINXCTRLS_SECTORRING_BLACK_64\1033 B4947C 117C B747C C35443D67700D4C7E4DE6BB075AB06FA78CAAC27A40184C1E6143168388748AB618920A4214F5924BD74CB07FA16715095BB.TC.w.....k.u...x..'......1h8.H.a. .!OY$.t....qP..N/A
\RCDATA\6159\0 B480CC 104 B60CC 2E8592C1416EBE314B9ABDF2848B41F4E5262A2745736F620938A30E5964DFCA1B6F0D21B39E034CDD4177F5FE7854F5EE92....An.1K.....A..&*'Esob.8..Yd...o.!...L.Aw..xT...N/A
\GROUP_CURSOR\CAT_DRAG_COPY\1033 B49468 14 B7468 3E0137AB5EB65D5CEBDCC5700EA14175BACFF0C0>.7..]\...p..Au....N/A
\GROUP_CURSOR\TEXTEDITORMOUSEMOVESCROLL0\0 B49454 14 B7454 B78C201C68F81D8307CE7FB53C97F0E2E5DA9F73.. .h.......<......sN/A
\GROUP_CURSOR\TEXTEDITORMOUSEMOVESCROLL1\0 B49440 14 B7440 3D6F329C6D186B280052968B1BE4CDAD710FF2D6=o2.m.k(.R......q...N/A
\GROUP_CURSOR\TEXTEDITORMOUSEMOVESCROLL2\0 B4942C 14 B742C D500BE59F552BB44970BC36850149DB0EAA7CE00...Y.R.D...hP.......N/A
\GROUP_CURSOR\TEXTEDITORMOUSEMOVESCROLL3\0 B49418 14 B7418 349F8FFA2070032D47B9F6CB0075CDBD763EFDF44... p.-G....u..v>..N/A
\GROUP_CURSOR\TEXTEDITORMOUSEMOVESCROLL4\0 B49404 14 B7404 4B0CCA6113FD65D48AE700A5A43CB5DEE092570EK..a..e......<....W.N/A
\GROUP_CURSOR\TEXTEDITORMOUSEMOVESCROLL5\0 B493F0 14 B73F0 BAC72AD86C209A831B0D1855D50566AAE3014386..*.l .....U..f...C.N/A
\GROUP_CURSOR\TEXTEDITORMOUSEMOVESCROLL6\0 B493DC 14 B73DC D3A3CC333EDC603AB300AB0C55B7AFEA751FA521...3>.:....U...u..!N/A
\GROUP_CURSOR\TEXTEDITORMOUSEMOVESCROLL7\0 B493C8 14 B73C8 80B771990061C810BA1EAE5C6FEE5300DFAD8632..q..a.....\o.S....2N/A
\GROUP_CURSOR\VT_MOVEALL\0 B493B4 14 B73B4 E900036621570FEC3D7271601CFBC8012901D560...f!W..=rq....)..N/A
\GROUP_CURSOR\VT_MOVEE\0 B493A0 14 B73A0 2BF7DF0057151A63E2E6815B00066E330BBBD27C+...W..c...[..n3...|N/A
\GROUP_CURSOR\VT_MOVEEW\0 B4938C 14 B738C AFB3FF071B3FCFBAF4E05BAEBCE900776EB9EDFA.....?....[....wn...N/A
\GROUP_CURSOR\VT_MOVEN\0 B49378 14 B7378 2F0E31B16900CF7FF3CDD4A492E6009BDF369A29/.1.i............6.)N/A
\GROUP_CURSOR\VT_MOVENE\0 B49364 14 B7364 1CB8DEC4D5A6FC002B4DC953074E379F005D6EBE........+M.S.N7..]n.(Executable found)
\GROUP_CURSOR\VT_MOVENS\0 B49350 14 B7350 E57292AFCF01BDD1CC7D9EF9D7F503CC986F006E.r.......}.......o.nN/A
\GROUP_CURSOR\VT_MOVENW\0 B4933C 14 B733C B98740E60F2C1C986C00FEB566E077072EDB1833..@..,..l...f.w....3N/A
\GROUP_CURSOR\VT_MOVES\0 B49328 14 B7328 22570EFE6407A64C1D3865F752F0AFEB06461D99"W..d..L.8e.R....F..N/A
\GROUP_CURSOR\VT_MOVESE\0 B49314 14 B7314 C015031BF4360D00DC3CB0C8FC3775E0182CF3DB.....6...<...7u..,..N/A
\GROUP_CURSOR\VT_MOVESW\0 B49300 14 B7300 CDBCF3FFCE039A3533E30706882E18D8013070C3.......53........0p.N/A
\GROUP_CURSOR\VT_MOVEW\0 B492EC 14 B72EC 0633CF9A99350900E7FBC5BF6FDE67E60059B366.3...5......o.g..Y.fN/A
\GROUP_CURSOR\32761\1033 B492D8 14 B72D8 0139F2316D8EE9E6ECDC9B00BD9FB37E8185C330.9.1m..........~...0N/A
\GROUP_CURSOR\32762\1033 B492C4 14 B72C4 B19C522F540E5A2A16A47D4FB7FAA0F5733C3BA7..R/T.Z*..}O....s<;.N/A
\GROUP_CURSOR\32763\1033 B492B0 14 B72B0 108106000C45A974DB83DAA23BF4A08F6339B2A0.....E.t....;...c9..N/A
\GROUP_CURSOR\32764\1033 B4929C 14 B729C BC80806F12088470396007114423F75BEF80B999...o...p9..D.[....N/A
\GROUP_CURSOR\32765\1033 B49288 14 B7288 7DEFFBE6C2E4215C0603094A2E2402F2E438FA42}.....!\...J.$...8.BN/A
\GROUP_CURSOR\32766\1033 B49274 14 B7274 5F535459A8452032002E30789CECBD0BDC011E55_STY.E 2..0x.......UN/A
\GROUP_CURSOR\32767\1033 B49260 14 B7260 D20000006B930500D0C30100A8DABD005603434C....k...........V.CLN/A
\GROUP_ICON\MAINICON\1033 B48730 68 B6730 000001000700101000000100200068040000010018180000010020008809000002002020000001002000A810000003003030............ .h........... ....... .... .......00N/A
\VERSION\1\1033 B487D8 33C B67D8 3C0334000000560053005F00560045005200530049004F004E005F0049004E0046004F0000000000BD04EFFE000001000200<.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O...............N/A
\24\1\1033 B48B54 70B B6B54 3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D225554462D3822207374616E64616C6F6E653D2279<?xml version="1.0" encoding="UTF-8" standalone="yN/A
Intelligent String
• TWND
• 3.2.1.0
• 3.0.0.0
• JSONView64.exe
• <dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true/pm</dpiAware>
• <dpiAwareness xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">PerMonitorV2</dpiAwareness>
• advapi32.dll
• kernel32.dll
• shell32.dll
• user32.dll
• :060U00Uq]dL.g?O0U0E1-Q!m0U0y+m0k0$+0http://ocsp.digicert.com0C+07http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0EU>0<0:864http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0U

Flow Anomalies
Offset RVA Section Description
82A9E N/A .rsrc JMP QWORD PTR [RIP+0x8180CFB9]
B0B2F N/A .rsrc CALL QWORD PTR [RIP+0x52193D47]
DBBD5 N/A .rsrc CALL QWORD PTR [RIP+0x6D3C2228]
E40D9 N/A .rsrc JMP QWORD PTR [RIP+0x143405F0]
F83B0 N/A .rsrc CALL QWORD PTR [RIP+0xEA50ADD6]
FBD9B N/A .rsrc JMP QWORD PTR [RIP+0xADA83E22]
114AE3 N/A *unnamed* CALL QWORD PTR [RIP+0x473AC77B]
122DAB N/A *unnamed* CALL QWORD PTR [RIP+0xE136C1B6]
122DBD N/A *unnamed* JMP QWORD PTR [RIP+0xABA1A90E]
12380D N/A *unnamed* CALL QWORD PTR [RIP+0x197BC390]
129600 N/A *unnamed* JMP QWORD PTR [RIP+0x99CB1B7D]
12F1DE N/A *unnamed* CALL QWORD PTR [RIP+0x39333D56]
1365EE N/A *unnamed* JMP QWORD PTR [RIP+0xDED815B0]
13D122 N/A *unnamed* CALL QWORD PTR [RIP+0x5382031]
141D26 N/A *unnamed* CALL QWORD PTR [RIP+0xDA7D2E6C]
147986 N/A *unnamed* JMP QWORD PTR [RIP+0x750C861C]
148FB3 N/A *unnamed* CALL QWORD PTR [RIP+0x7C64F512]
14DCE2 N/A *unnamed* CALL QWORD PTR [RIP+0xA6678A]
15A296 N/A *unnamed* CALL QWORD PTR [RIP+0x2C1A0E7B]
15ED3D N/A *padding* CALL QWORD PTR [RIP+0xA5614A3C]
163CCB N/A *padding* JMP QWORD PTR [RIP+0xD69AA74C]
16B19B N/A *padding* CALL QWORD PTR [RIP+0xC9DE20D1]
17270A N/A *padding* JMP QWORD PTR [RIP+0x58A7FA65]
17F8F6 N/A *padding* CALL QWORD PTR [RIP+0xDEFB1143]
18A35F N/A *padding* JMP QWORD PTR [RIP+0x2496C373]
1A30AF N/A *padding* CALL QWORD PTR [RIP+0x3B9C29D3]
1A9692 N/A *padding* CALL QWORD PTR [RIP+0xE8CBC501]
1ACE36 N/A *padding* CALL QWORD PTR [RIP+0xF9C6CACD]
1ACEC6 N/A *padding* CALL QWORD PTR [RIP+0x23D1A3FE]
1B1B82 N/A *padding* CALL QWORD PTR [RIP+0x72274E73]
1B5F3B N/A *padding* CALL QWORD PTR [RIP+0xC6B06A17]
1C0F35 N/A *padding* CALL QWORD PTR [RIP+0xF280D38]
1C7F8D N/A *padding* CALL QWORD PTR [RIP+0xB2800ACD]
1E232A N/A *padding* CALL QWORD PTR [RIP+0x8C875830]
1E6B65 N/A *padding* JMP QWORD PTR [RIP+0x3755673]
1EAB43 N/A *padding* JMP QWORD PTR [RIP+0x6B9B0C15]
1EDB94 N/A *padding* JMP QWORD PTR [RIP+0x212B3315]
1FE2AE N/A *padding* JMP QWORD PTR [RIP+0x5632804D]
208F9E N/A *padding* CALL QWORD PTR [RIP+0x7D862AE9]
223C82 N/A *padding* JMP QWORD PTR [RIP+0xC20B1074]
22D521 N/A *padding* CALL QWORD PTR [RIP+0x1295C20A]
22EAD8 N/A *padding* JMP QWORD PTR [RIP+0xF68484DC]
22EDCB N/A *padding* CALL QWORD PTR [RIP+0x6C0374B]
22F058 N/A *padding* JMP QWORD PTR [RIP+0xE3104B69]
2323E8 N/A *padding* CALL QWORD PTR [RIP+0xE717269]
235F99 N/A *padding* CALL QWORD PTR [RIP+0x9FC06147]
23869B N/A *padding* CALL QWORD PTR [RIP+0xA001C3DA]
239B65 N/A *padding* CALL QWORD PTR [RIP+0xDDC291C0]
24BCE4 N/A *padding* JMP QWORD PTR [RIP+0x613954D4]
24DAB9 N/A *padding* JMP QWORD PTR [RIP+0xEFE24F4E]
2516CB N/A *padding* CALL QWORD PTR [RIP+0xBDF026E4]
258E43 N/A *padding* JMP QWORD PTR [RIP+0xB2E5F768]
25C791 N/A *padding* CALL QWORD PTR [RIP+0xC4DE7CB2]
25DBD6 N/A *padding* CALL QWORD PTR [RIP+0xB09AE8FF]
25F5DE N/A *padding* CALL QWORD PTR [RIP+0xD5181CD7]
265F9F N/A *padding* JMP QWORD PTR [RIP+0x8EEEA74]
272346 N/A *padding* CALL QWORD PTR [RIP+0xC57FC1C7]
272CD3 N/A *padding* JMP QWORD PTR [RIP+0x7CA6F37]
278520 N/A *padding* JMP QWORD PTR [RIP+0xFC6BFD19]
27B563 N/A *padding* JMP QWORD PTR [RIP+0xF54654EF]
27DBC7 N/A *padding* JMP QWORD PTR [RIP+0xACFC2EEF]
27EA6D N/A *padding* JMP QWORD PTR [RIP+0x2EFDFCDB]
281615 N/A *padding* JMP QWORD PTR [RIP+0xAE000F5A]
2864AF N/A *padding* JMP QWORD PTR [RIP+0x6D8F77FA]
28CE12 N/A *padding* JMP QWORD PTR [RIP+0x9BB58D83]
28F33B N/A *padding* CALL QWORD PTR [RIP+0x87A6F438]
28F765 N/A *padding* CALL QWORD PTR [RIP+0x9A29822]
29395B N/A *padding* CALL QWORD PTR [RIP+0x24DBFDEB]
29CDEE N/A *padding* CALL QWORD PTR [RIP+0x332D7341]
2AC9BB N/A *padding* CALL QWORD PTR [RIP+0xFC10CBBD]
2B5822 N/A *padding* CALL QWORD PTR [RIP+0x60024C32]
2B5E85 N/A *padding* CALL QWORD PTR [RIP+0x321BA197]
2C3CA5 N/A *padding* CALL QWORD PTR [RIP+0x1269908C]
2CAE24 N/A *padding* CALL QWORD PTR [RIP+0x24C1F642]
2DC42D N/A *padding* CALL QWORD PTR [RIP+0xC157DE55]
2E9640 N/A *padding* CALL QWORD PTR [RIP+0x8D923193]
2F126F N/A *padding* JMP QWORD PTR [RIP+0x8D101EE2]
2FBE8B N/A *padding* CALL QWORD PTR [RIP+0xF940F650]
2FF7B7 N/A *padding* CALL QWORD PTR [RIP+0xCC20D42D]
30421D N/A *padding* JMP QWORD PTR [RIP+0x559BD58]
310D5B N/A *padding* JMP QWORD PTR [RIP+0x66E10D9B]
310D7A N/A *padding* JMP QWORD PTR [RIP+0x2235886]
316DA8 N/A *padding* JMP QWORD PTR [RIP+0x8D5993E8]
31CA41 N/A *padding* CALL QWORD PTR [RIP+0xE5822EDD]
31E6B1 N/A *padding* CALL QWORD PTR [RIP+0xE34A60F6]
326E24 N/A *padding* CALL QWORD PTR [RIP+0xC934FE95]
328546 N/A *padding* CALL QWORD PTR [RIP+0xA0BE096D]
32AFB0 N/A *padding* CALL QWORD PTR [RIP+0xA69E05EC]
3307C6 N/A *padding* JMP QWORD PTR [RIP+0x43A7F584]
34359E N/A *padding* CALL QWORD PTR [RIP+0x93159F2]
34E260 N/A *padding* JMP QWORD PTR [RIP+0xF63A0FA]
363B64 N/A *padding* JMP QWORD PTR [RIP+0xF9D2FA45]
36A2A1 N/A *padding* CALL QWORD PTR [RIP+0xF61DE7C9]
36D032 N/A *padding* CALL QWORD PTR [RIP+0x69A5FFA3]
38085D N/A *padding* CALL QWORD PTR [RIP+0xFC4481ED]
382A91 N/A *padding* JMP QWORD PTR [RIP+0x97BCB419]
383B48 N/A *padding* JMP QWORD PTR [RIP+0xAD41B7CD]
389A8F N/A *padding* CALL QWORD PTR [RIP+0xCA67F163]
38A8BE N/A *padding* JMP QWORD PTR [RIP+0x6D24DCFB]
399C0B N/A *padding* CALL QWORD PTR [RIP+0x2DF36FC0]
F5690 N/A .rsrc Injected Junk Code | HitsBL=102/200 - UniqueHits=19 - Ratio=0,51
110600-15E1FF BFC000 *unnamed* Executable section anomaly, first bytes: 74C0BF0000000000
15E200 N/A *Overlay* 49BB50E47269A258E9F71C369472AF74B3EBDD72 | I.P.ri.X...6.r.t...r
Extra Analysis
Metric Value Percentage
Ascii Code 3507074 66,9732%
Null Byte Code 97639 1,8646%
© 2026 All rights reserved.