| File Path | Type and Hashes |
|---|
| Match Rules |
|---|
| File Name: | virussign.com_0c9f08df1bf2a0666465ecbaf5aa2429.exe |
| File Type: | PE32 executable (GUI) Intel 80386, for MS Windows |
| SHA1: | 45dfed147a1f20b0de6a4d505c7b5cbca9af9215 |
| MD5: | 0c9f08df1bf2a0666465ecbaf5aa2429 |
| First Seen Date: | 2025-08-20 13:56:12.309622 ( ) |
| Number of Clients Seen: | 3 |
| Last Analysis Date: | 2025-08-22 10:34:50.796157 ( ) |
| Human Expert Analysis Result: | No human expert analysis verdict given to this sample yet. |
| Property | Value |
|---|---|
| magic literal enum | 3 |
| file type enum | 6 |
| debug artifacts | [] |
| number of sections | 8 |
| trid | [[65.5, u'Win32 Executable Borland Delphi 7'], [25.9, u'Win32 Executable Borland Delphi 6'], [4.1, u'Win32 EXE PECompact compressed (generic)'], [1.3, u'Win32 Executable Delphi generic'], [1.2, u'Windows screen saver']] |
| compilation time stamp | 0x2A425E19 [Fri Jun 19 22:22:17 1992 UTC] [SUSPICIOUS] |
| LegalCopyright | \xa9 2010 A&C |
| InternalName | SpamAgree |
| FileVersion | 1.0.0.0 |
| CompanyName | A&C |
| LegalTrademarks | No trademarks available |
| Comments | \u0415\u0441\u043b\u0438 \u0412\u044b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u043f\u0435\u0440\u0432\u044b\u0435, \u043f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430, \u043f\u043e\u0437\u0430\u0431\u043e\u0442\u044c\u0442\u0435\u0441\u044c \u043e \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043b\u044e\u0447 \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438. |
| ProductName | VK LoveMachine |
| ProductVersion | 1.0.0.0 |
| FileDescription | VK Love Machine |
| OriginalFilename | vk-love.exe |
| Translation | 0x0419 0x04e3 |
| entry point | 0x49f310 (CODE) |
| machine type | Intel 386 or later - 32Bit |
| file size | 766976 |
| ssdeep | 12288:zpiPwxtupQm/OLsGbQyBk6FZE/JwW7jamnfoNhCXJr:zpo2tzm/O98h6FZqORy06r |
| sha256 | 73e6a344c741d910edcb5063defae65b869dbe6cdbc46e46d93711ca98d58d7e |
| exifinfo | [{u'EXE:FileSubtype': 0, u'File:FilePermissions': u'rw-r--r--', u'SourceFile': u'/nfs/fvs/valkyrie_shared/core/valkyrie_files/4/5/d/f/45dfed147a1f20b0de6a4d505c7b5cbca9af9215', u'EXE:OriginalFileName': u'vk-love.exe', u'EXE:ProductName': u'VK LoveMachine', u'EXE:InternalName': u'SpamAgree', u'File:MIMEType': u'application/octet-stream', u'File:FileAccessDate': u'2025:08:22 10:32:20+00:00', u'EXE:InitializedDataSize': 117760, u'File:FileModifyDate': u'2025:08:20 13:55:07+00:00', u'EXE:FileVersionNumber': u'1.0.0.0', u'EXE:FileVersion': u'1.0.0.0', u'File:FileSize': u'749 kB', u'EXE:CharacterSet': u'Windows, Cyrillic', u'EXE:MachineType': u'Intel 386 or later, and compatibles', u'EXE:FileOS': u'Win32', u'EXE:LegalTrademarks': u'No trademarks available', u'EXE:ProductVersion': u'1.0.0.0', u'EXE:ObjectFileType': u'Executable application', u'File:FileType': u'Win32 EXE', u'EXE:CompanyName': u'A&C', u'File:FileName': u'45dfed147a1f20b0de6a4d505c7b5cbca9af9215', u'EXE:ImageVersion': 0.0, u'File:FileTypeExtension': u'exe', u'EXE:OSVersion': 4.0, u'EXE:PEType': u'PE32', u'EXE:TimeStamp': u'1992:06:19 22:22:17+00:00', u'EXE:FileFlagsMask': u'0x003f', u'EXE:LegalCopyright': u'\xa9 2010 A&C', u'EXE:LinkerVersion': 2.25, u'EXE:FileFlags': u'(none)', u'EXE:Subsystem': u'Windows GUI', u'File:Directory': u'/nfs/fvs/valkyrie_shared/core/valkyrie_files/4/5/d/f', u'EXE:FileDescription': u'VK Love Machine', u'EXE:EntryPoint': u'0x9f310', u'EXE:SubsystemVersion': 4.0, u'EXE:CodeSize': 648192, u'EXE:Comments': u'\u0415\u0441\u043b\u0438 \u0412\u044b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u043f\u0435\u0440\u0432\u044b\u0435, \u043f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430, \u043f\u043e\u0437\u0430\u0431\u043e\u0442\u044c\u0442\u0435\u0441\u044c \u043e \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043b\u044e\u0447 \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438.', u'File:FileInodeChangeDate': u'2025:08:20 13:55:28+00:00', u'EXE:UninitializedDataSize': 0, u'EXE:LanguageCode': u'Russian', u'ExifTool:ExifToolVersion': 10.1, u'EXE:ProductVersionNumber': u'1.0.0.0'}] |
| mime type | application/x-dosexec |
| imphash | 1e1b13fd9d6cf9b82e5bb930338cf535 |
| File Path on Client | Seen Count |
|---|---|
| C:\Users\Dzoni\Downloads\Virussign.2025.08.17\virussign.com_0c9f08df1bf2a0666465ecbaf5aa2429.exe | 1 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | MD5 |
|---|---|---|---|---|---|
| CODE | 0x1000 | 0x9e3a8 | 0x9e400 | 6.53999656747 | dd86969847a3c1ce282cbfbade841996 |
| DATA | 0xa0000 | 0x29b0 | 0x2a00 | 4.94939034513 | 65f4d4cc5a4da7e11995e7705f8f051f |
| BSS | 0xa3000 | 0xffd | 0x0 | 0.0 | d41d8cd98f00b204e9800998ecf8427e |
| .idata | 0xa4000 | 0x250c | 0x2600 | 4.88203058627 | f064811bd4a4e8eb383dce479b2d0d62 |
| .tls | 0xa7000 | 0x10 | 0x0 | 0.0 | d41d8cd98f00b204e9800998ecf8427e |
| .rdata | 0xa8000 | 0x18 | 0x200 | 0.180244406087 | e28d5301ee1bf2f9dfa5ba959382df06 |
| .reloc | 0xa9000 | 0xb704 | 0xb800 | 6.64577000908 | 6e66fb2b8e6a2e459933f3e99956fb80 |
| .rsrc | 0xb5000 | 0xc200 | 0xc200 | 5.06423016841 | 6741c6c1a4e4d93fa5e553f22fc2ccaa |
-
kernel32.dll
- DeleteCriticalSection
- LeaveCriticalSection
- EnterCriticalSection
- InitializeCriticalSection
- VirtualFree
- VirtualAlloc
- LocalFree
- LocalAlloc
- GetVersion
- GetCurrentThreadId
- InterlockedDecrement
- InterlockedIncrement
- VirtualQuery
- WideCharToMultiByte
- MultiByteToWideChar
- lstrlenA
- lstrcpynA
- LoadLibraryExA
- GetThreadLocale
- GetStartupInfoA
- GetProcAddress
- GetModuleHandleA
- GetModuleFileNameA
- GetLocaleInfoA
- GetLastError
- GetCommandLineA
- FreeLibrary
- FindFirstFileA
- FindClose
- ExitProcess
- ExitThread
- CreateThread
- WriteFile
- UnhandledExceptionFilter
- SetFilePointer
- SetEndOfFile
- RtlUnwind
- ReadFile
- RaiseException
- GetStdHandle
- GetFileSize
- GetFileType
- CreateFileA
- CloseHandle
-
user32.dll
- GetKeyboardType
- LoadStringA
- MessageBoxA
- CharNextA
-
advapi32.dll
- RegQueryValueExA
- RegOpenKeyExA
- RegCloseKey
-
oleaut32.dll
- SysFreeString
- SysReAllocStringLen
- SysAllocStringLen
-
kernel32.dll
- TlsSetValue
- TlsGetValue
- LocalAlloc
- GetModuleHandleA
-
advapi32.dll
- RegQueryValueExA
- RegOpenKeyExA
- RegCloseKey
-
kernel32.dll
- lstrcpyA
- WritePrivateProfileStringA
- WriteFile
- WaitForSingleObject
- VirtualQuery
- VirtualAlloc
- SuspendThread
- Sleep
- SizeofResource
- SetThreadLocale
- SetFilePointer
- SetEvent
- SetErrorMode
- SetEndOfFile
- ResumeThread
- ResetEvent
- ReadFile
- MultiByteToWideChar
- MulDiv
- LockResource
- LoadResource
- LoadLibraryA
- LeaveCriticalSection
- InitializeCriticalSection
- GlobalUnlock
- GlobalReAlloc
- GlobalHandle
- GlobalLock
- GlobalFree
- GlobalFindAtomA
- GlobalDeleteAtom
- GlobalAlloc
- GlobalAddAtomA
- GetVersionExA
- GetVersion
- GetTimeZoneInformation
- GetTickCount
- GetThreadLocale
- GetTempPathA
- GetSystemInfo
- GetStringTypeExA
- GetStdHandle
- GetProcAddress
- GetPrivateProfileStringA
- GetModuleHandleA
- GetModuleFileNameA
- GetLocaleInfoA
- GetLocalTime
- GetLastError
- GetFullPathNameA
- GetFileSize
- GetExitCodeThread
- GetDiskFreeSpaceA
- GetDateFormatA
- GetCurrentThreadId
- GetCurrentProcessId
- GetComputerNameA
- GetCPInfo
- GetACP
- FreeResource
- InterlockedIncrement
- InterlockedExchange
- InterlockedDecrement
- FreeLibrary
- FormatMessageA
- FindResourceA
- FindFirstFileA
- FindClose
- FileTimeToLocalFileTime
- FileTimeToDosDateTime
- EnumCalendarInfoA
- EnterCriticalSection
- DeleteCriticalSection
- CreateThread
- CreateFileA
- CreateEventA
- CompareStringA
- CloseHandle
-
version.dll
- VerQueryValueA
- GetFileVersionInfoSizeA
- GetFileVersionInfoA
-
gdi32.dll
- UnrealizeObject
- StretchBlt
- SetWindowOrgEx
- SetWinMetaFileBits
- SetViewportOrgEx
- SetTextColor
- SetStretchBltMode
- SetROP2
- SetPixel
- SetEnhMetaFileBits
- SetDIBColorTable
- SetBrushOrgEx
- SetBkMode
- SetBkColor
- SelectPalette
- SelectObject
- SelectClipRgn
- SaveDC
- RestoreDC
- Rectangle
- RectVisible
- RealizePalette
- Polyline
- PlayEnhMetaFile
- PatBlt
- MoveToEx
- MaskBlt
- LineTo
- IntersectClipRect
- GetWindowOrgEx
- GetWinMetaFileBits
- GetTextMetricsA
- GetTextExtentPoint32A
- GetSystemPaletteEntries
- GetStockObject
- GetPixel
- GetPaletteEntries
- GetObjectA
- GetEnhMetaFilePaletteEntries
- GetEnhMetaFileHeader
- GetEnhMetaFileBits
- GetDeviceCaps
- GetDIBits
- GetDIBColorTable
- GetDCOrgEx
- GetCurrentPositionEx
- GetClipBox
- GetBrushOrgEx
- GetBitmapBits
- GdiFlush
- ExcludeClipRect
- DeleteObject
- DeleteEnhMetaFile
- DeleteDC
- CreateSolidBrush
- CreatePenIndirect
- CreatePalette
- CreateHalftonePalette
- CreateFontIndirectA
- CreateDIBitmap
- CreateDIBSection
- CreateCompatibleDC
- CreateCompatibleBitmap
- CreateBrushIndirect
- CreateBitmap
- CopyEnhMetaFileA
- BitBlt
-
user32.dll
- CreateWindowExA
- WindowFromPoint
- WinHelpA
- WaitMessage
- UpdateWindow
- UnregisterClassA
- UnhookWindowsHookEx
- TranslateMessage
- TranslateMDISysAccel
- TrackPopupMenu
- SystemParametersInfoA
- ShowWindow
- ShowScrollBar
- ShowOwnedPopups
- ShowCursor
- SetWindowsHookExA
- SetWindowTextA
- SetWindowPos
- SetWindowPlacement
- SetWindowLongA
- SetTimer
- SetScrollRange
- SetScrollPos
- SetScrollInfo
- SetRect
- SetPropA
- SetParent
- SetMenuItemInfoA
- SetMenu
- SetForegroundWindow
- SetFocus
- SetCursor
- SetClassLongA
- SetCapture
- SetActiveWindow
- SendMessageA
- ScrollWindow
- ScreenToClient
- RemovePropA
- RemoveMenu
- ReleaseDC
- ReleaseCapture
- RegisterWindowMessageA
- RegisterClipboardFormatA
- RegisterClassA
- RedrawWindow
- PtInRect
- PostQuitMessage
- PostMessageA
- PeekMessageA
- OffsetRect
- OemToCharA
- MsgWaitForMultipleObjects
- MessageBoxA
- MessageBeep
- MapWindowPoints
- MapVirtualKeyA
- LoadStringA
- LoadKeyboardLayoutA
- LoadIconA
- LoadCursorA
- LoadBitmapA
- KillTimer
- IsZoomed
- IsWindowVisible
- IsWindowEnabled
- IsWindow
- IsRectEmpty
- IsIconic
- IsDialogMessageA
- IsChild
- InvalidateRect
- IntersectRect
- InsertMenuItemA
- InsertMenuA
- InflateRect
- GetWindowThreadProcessId
- GetWindowTextA
- GetWindowRect
- GetWindowPlacement
- GetWindowLongA
- GetWindowDC
- GetTopWindow
- GetSystemMetrics
- GetSystemMenu
- GetSysColorBrush
- GetSysColor
- GetSubMenu
- GetScrollRange
- GetScrollPos
- GetScrollInfo
- GetPropA
- GetParent
- GetWindow
- GetMenuStringA
- GetMenuState
- GetMenuItemInfoA
- GetMenuItemID
- GetMenuItemCount
- GetMenu
- GetLastActivePopup
- GetKeyboardState
- GetKeyboardLayoutList
- GetKeyboardLayout
- GetKeyState
- GetKeyNameTextA
- GetIconInfo
- GetForegroundWindow
- GetFocus
- GetDesktopWindow
- GetDCEx
- GetDC
- GetCursorPos
- GetCursor
- GetClipboardData
- GetClientRect
- GetClassNameA
- GetClassInfoA
- GetCapture
- GetActiveWindow
- FrameRect
- FindWindowA
- FillRect
- EqualRect
- EnumWindows
- EnumThreadWindows
- EndPaint
- EndDeferWindowPos
- EnableWindow
- EnableScrollBar
- EnableMenuItem
- DrawTextA
- DrawMenuBar
- DrawIconEx
- DrawIcon
- DrawFrameControl
- DrawFocusRect
- DrawEdge
- DispatchMessageA
- DestroyWindow
- DestroyMenu
- DestroyIcon
- DestroyCursor
- DeleteMenu
- DeferWindowPos
- DefWindowProcA
- DefMDIChildProcA
- DefFrameProcA
- CreatePopupMenu
- CreateMenu
- CreateIcon
- ClientToScreen
- CheckMenuItem
- CallWindowProcA
- CallNextHookEx
- BeginPaint
- BeginDeferWindowPos
- CharNextA
- CharLowerBuffA
- CharLowerA
- CharUpperBuffA
- CharToOemA
- AdjustWindowRectEx
- ActivateKeyboardLayout
-
kernel32.dll
- Sleep
-
oleaut32.dll
- SafeArrayPtrOfIndex
- SafeArrayGetElement
- SafeArrayGetUBound
- SafeArrayGetLBound
- SafeArrayCreate
- VariantChangeType
- VariantCopyInd
- VariantCopy
- VariantClear
- VariantInit
-
ole32.dll
- CoTaskMemFree
- ProgIDFromCLSID
- StringFromCLSID
- CoCreateInstance
- CoUninitialize
- CoInitialize
- IsEqualGUID
-
oleaut32.dll
- GetErrorInfo
- GetActiveObject
- SysFreeString
-
comctl32.dll
- ImageList_SetIconSize
- ImageList_GetIconSize
- ImageList_Write
- ImageList_Read
- ImageList_GetDragImage
- ImageList_DragShowNolock
- ImageList_SetDragCursorImage
- ImageList_DragMove
- ImageList_DragLeave
- ImageList_DragEnter
- ImageList_EndDrag
- ImageList_BeginDrag
- ImageList_Remove
- ImageList_DrawEx
- ImageList_Replace
- ImageList_Draw
- ImageList_GetBkColor
- ImageList_SetBkColor
- ImageList_ReplaceIcon
- ImageList_Add
- ImageList_GetImageCount
- ImageList_Destroy
- ImageList_Create
- InitCommonControls
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_CURSOR', u'offset': 744836, u'sha256': u'b8e6fc93d423931acbddae3c27dd3c4eb2a394005d746951a971cb700e0ee510', u'type': u'data', u'size': 308}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_CURSOR', u'offset': 745144, u'sha256': u'ce19ace18e87b572e6912306776226af5b8e63959c61cde70a8ff05b3bbdcc41', u'type': u'data', u'size': 308}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_CURSOR', u'offset': 745452, u'sha256': u'ee1c9c194199c320c893b367602ccc7ee7270bd4395d029f727e097634f47f8c', u'type': u'data', u'size': 308}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_CURSOR', u'offset': 745760, u'sha256': u'9d9edf87ca203ecc60b246cc783d54218dd0ce77d3a025d0bafc580995a4abd8', u'type': u'data', u'size': 308}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_CURSOR', u'offset': 746068, u'sha256': u'99676c52310db365580965ea646ece86c62951bfd97ec0aae9f738a202a90593', u'type': u'data', u'size': 308}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_CURSOR', u'offset': 746376, u'sha256': u'11726dcf1eebe23a1df5eb0ee2af39196b702eddd69083d646e4475335130b28', u'type': u'data', u'size': 308}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_CURSOR', u'offset': 746684, u'sha256': u'6f938aab0a03120de4ef8b27aff6ba5146226c92a056a6f04e5ec8d513ce5f9d', u'type': u'data', u'size': 308}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 746992, u'sha256': u'c0ede68a98bd2bc58c78564dfb42f1640dc29766d3ab2782ab8b5ed28c6fd414', u'type': u'data', u'size': 464}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 747456, u'sha256': u'46cfc44afa8ab31ae3da35fa8346e4c085c441659d9992b09fc8ad517f2b289a', u'type': u'data', u'size': 484}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 747940, u'sha256': u'c0ede68a98bd2bc58c78564dfb42f1640dc29766d3ab2782ab8b5ed28c6fd414', u'type': u'data', u'size': 464}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 748404, u'sha256': u'f8e1696801fe89b88936ac4226cea03bfa5aa345aa33ca982822ae7fbc6557e2', u'type': u'data', u'size': 464}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 748868, u'sha256': u'cb7421b5c6af74c3159c361f3bb78bba8a488d8979d1250e106fa96cbf928789', u'type': u'data', u'size': 464}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 749332, u'sha256': u'41f05a4df5f42d92b879493d51941de342d36460fe15c0f3b63b2b706b928fef', u'type': u'data', u'size': 464}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 749796, u'sha256': u'81265e63c89ee5c2e5126452e22f84e9be9452449f3e5959ab6d346cb58b2bde', u'type': u'data', u'size': 464}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 750260, u'sha256': u'6b97877cdd547e6ba6467f86055f1fc7b06660b034439f0da4c137538ef14a83', u'type': u'data', u'size': 464}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 750724, u'sha256': u'c925e4a8cbf6d42dbb1220a510614df725558f8d843338982bab8c4e020f6429', u'type': u'data', u'size': 464}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 751188, u'sha256': u'6b97877cdd547e6ba6467f86055f1fc7b06660b034439f0da4c137538ef14a83', u'type': u'data', u'size': 464}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 751652, u'sha256': u'78507a772de646626b196a743cee75b298a68c33a0fd482842071519d59037b2', u'type': u'GLS_BINARY_LSB_FIRST', u'size': 232}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 751884, u'sha256': u'1d66fd6a469d10a5674582dd5b438f5e1a0cf0082e524caa2bfcd29dd3f0ea4e', u'type': u'data', u'size': 152}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_BITMAP', u'offset': 752036, u'sha256': u'd2829ee569905c1b546c1323f3ff585ecb613f6dbdb5ce10c0dd2cb4b10bfcbb', u'type': u'data', u'size': 152}
{u'lang': u'LANG_RUSSIAN', u'name': u'RT_ICON', u'offset': 752188, u'sha256': u'6dc52ddb62455396374aeda1b2f12815a7cf0c37aec4bd1157023ccd2eff45a6', u'type': u'dBase III DBT, version number 0, next free block index 40', u'size': 4264}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_DIALOG', u'offset': 756452, u'sha256': u'771f64afb45a9edc8c4f6c5b2039f9b32623cea53bf0cab5bf1f371cc5d1abe4', u'type': u'data', u'size': 82}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 756536, u'sha256': u'557d8537441a908d8fee208d4b397dbbea843d820647a8b240c9048bcc182aa3', u'type': u'data', u'size': 628}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 757164, u'sha256': u'54bbd259c56b32d77eef936ee70601a6f0b1e946e5821a5b60165e8c35d4b44b', u'type': u'data', u'size': 872}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 758036, u'sha256': u'47d0bcc006116284aa8583da6cfeef4ec30e1fb2f1c0e51822caf7ac93c4e4c6', u'type': u'data', u'size': 1032}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 759068, u'sha256': u'09bbcda532f995d5255296cebc65b1a096c140d736cb77d107d01a563aca086f', u'type': u'data', u'size': 988}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 760056, u'sha256': u'adafdb9a673b4d879dfde92b011b6aa64c414bcb6060ff023b8e49c51062da02', u'type': u'data', u'size': 804}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 760860, u'sha256': u'45de13bb03196212605bd8bb29320ff089f8f3c88790e7fb0069780804173a3c', u'type': u'data', u'size': 796}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 761656, u'sha256': u'2f2ce82c5f5d0676ff4ae6f0ca277b67d2a4a747d9d9bad8c7667e30d227a458', u'type': u'data', u'size': 1108}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 762764, u'sha256': u'cb2c807005ebfa1c638db600e231fb481cc859026765589ddb7a5800c319a2f0', u'type': u'data', u'size': 696}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 763460, u'sha256': u'4a953ca0ddab4ce20e3684aba44e43a500d3b72f65bc4eaab843e10d44b11f26', u'type': u'data', u'size': 516}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 763976, u'sha256': u'f402909b0c1208c49d06603d65ebff66b7a24510d17122f273b55a33d5037823', u'type': u'data', u'size': 268}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 764244, u'sha256': u'cab99afa653f1ee2163015240676ddb0bea3739109d34ea16f0745adb216d9ca', u'type': u'data', u'size': 808}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 765052, u'sha256': u'3a1eadb1b48817dc163e8b85288bf49232354206e0f3f44372d9148660ddfe59', u'type': u'data', u'size': 192}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 765244, u'sha256': u'686582e18f8e77fe36d182253681e7fde31c65127c72fe8ace5a28be3e088a03', u'type': u'Hitachi SH big-endian COFF object, not stripped', u'size': 252}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 765496, u'sha256': u'22a1bc9220429b976b1897d63fd3ae6d9f5aecb2fc1f2b7861167905f800322c', u'type': u'data', u'size': 288}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 765784, u'sha256': u'8a02dc2c8409eb83025922e3e986bd08cac69593f1ff5d04893ecf07d9142654', u'type': u'data', u'size': 1204}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 766988, u'sha256': u'5c8297dd0b332531898635ea2309cb7c20bc7f5e36937624b126e4fbca9939ea', u'type': u'data', u'size': 860}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 767848, u'sha256': u'5900c9daca1375fddf459eb1fc3766d130f0354bc3f2c09964994baec048feb2', u'type': u'data', u'size': 904}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 768752, u'sha256': u'817836305c82203cabd230eb35c99f90c7e497e49b887e819a2a39f553867300', u'type': u'data', u'size': 1032}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 769784, u'sha256': u'369c5223029ea6d1b17b7f24a8d84c10f528457e79be3349a6c55efd0e8f0e02', u'type': u'data', u'size': 236}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 770020, u'sha256': u'968bbd325d5403ab654fd9308ea2497bce206395d77c4729d07b638480b7cc47', u'type': u'data', u'size': 208}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 770228, u'sha256': u'0d3137dd56cde6d3d1fd0a6e4aa514928ce0eb20cd0a43fdb18ab8cd0bf63b9f', u'type': u'data', u'size': 668}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 770896, u'sha256': u'77e4b2d44652277ed54a8967667dd0cf7af92932f1940e0124cf3cb8c7f67927', u'type': u'data', u'size': 1036}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 771932, u'sha256': u'db3fa427c11963222426e133f94d1db76de1f8a09a33cda71e9241cc69a12704', u'type': u'data', u'size': 816}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_STRING', u'offset': 772748, u'sha256': u'd10704e50b2f6387284c4242cfe62af0bdfcabfb17429ffe617b77804f1fd017', u'type': u'data', u'size': 788}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_RCDATA', u'offset': 773536, u'sha256': u'88d14cc6638af8a0836f6d868dfab60df92907a2d7becaefbbd7e007acb75610', u'type': u'Sendmail frozen configuration ', u'size': 16}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_RCDATA', u'offset': 773552, u'sha256': u'eb937d5da9b5640196071ed6d762b6d602829d48b999333185227a48eb5fb263', u'type': u'data', u'size': 1536}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_RCDATA', u'offset': 775088, u'sha256': u'07f58cf0f070f4ec745ec7e7e8aa3b2a920e534a32ab9206a620174bd793236e', u'type': u"Delphi compiled form 'TfrmActivate'", u'size': 1953}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_RCDATA', u'offset': 777044, u'sha256': u'45ba2f167a9dcd7419a270c0566e2e44043db8ab22556ba7e3567de2f286afea', u'type': u"Delphi compiled form 'TfrmMain'", u'size': 11824}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_GROUP_CURSOR', u'offset': 788868, u'sha256': u'c53efa8085835ba129c1909beaff8a67b45f50837707f22dfff0f24d8cd26710', u'type': u'MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1', u'size': 20}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_GROUP_CURSOR', u'offset': 788888, u'sha256': u'b07e022f8ef0a8e5fd3f56986b2e5bf06df07054e9ea9177996b0a6c27d74d7c', u'type': u'MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1', u'size': 20}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_GROUP_CURSOR', u'offset': 788908, u'sha256': u'43f40dd5140804309a4c901ec3c85b54481316e67a6fe18beb9d5c0ce3a42c3a', u'type': u'MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1', u'size': 20}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_GROUP_CURSOR', u'offset': 788928, u'sha256': u'ff47a48c11c234903a7d625cb8b62101909f735ad84266c98dd4834549452c39', u'type': u'MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1', u'size': 20}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_GROUP_CURSOR', u'offset': 788948, u'sha256': u'a0adcedb82b57089f64e2857f97cefd6cf25f4d27eefc6648bda83fd5fef66bb', u'type': u'MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1', u'size': 20}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_GROUP_CURSOR', u'offset': 788968, u'sha256': u'6e1e7738a1b6373d8829f817915822ef415a1727bb5bb7cfe809e31b3c143ac5', u'type': u'MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1', u'size': 20}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_GROUP_CURSOR', u'offset': 788988, u'sha256': u'326c048595bbc72e3f989cb3b95fbf09dc83739ced3cb13eb6f03336f95d74f1', u'type': u'MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1', u'size': 20}
{u'lang': u'LANG_RUSSIAN', u'name': u'RT_GROUP_ICON', u'offset': 789008, u'sha256': u'a14e70ed824f3f17d3a51136aa08839954d6d3ccadaa067415c7bfc08e6636b0', u'type': u'MS Windows icon resource - 1 icon, 32x32', u'size': 20}
{u'lang': u'LANG_RUSSIAN', u'name': u'RT_VERSION', u'offset': 789028, u'sha256': u'e8f8f0f541f90a26f0951f32cf84f128ce991f545786e8f1886e6ecd672d6df8', u'type': u'data', u'size': 988}
{u'lang': u'LANG_NEUTRAL', u'name': u'RT_MANIFEST', u'offset': 790016, u'sha256': u'a3eca8428248ea414fdceaf0b451393866fe413a5eae29264d1e29bb60c0c68c', u'type': u'XML 1.0 document, ASCII text, with CRLF line terminators', u'size': 581}