13b22613e7d2cb8c13ce3b9765d8da24a1ba334afb20e30c4eb82d1461293a88
PE
Verdict: HOSTILE
AI
Kawaii-Unicorn VB6 shellobject hijacker
Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Mc)O₂(As₃Er)H₇(CmDbDsFPoTiU)Md₄(Bi₃BkPa)
↗
Size
184.0 KB
⇩ download
First seen
12 days ago
Analyzed
10 days ago
Source
virussign.com
Also detected by
1 source
Kawaii VB6 write and rename dropper: virussign.com_824ab1e53ddf24ae0b1fe27836a950c0.vir:0x238
Kawaii-Unicorn VB6 .die rename sabotage: virussign.com_824ab1e53ddf24ae0b1fe27836a950c0.vir:0x238
Kawaii-Unicorn self-rename command and .die payload marker: virussign.com_824ab1e53ddf24ae0b1fe27836a950c0.vir:0x29238
| 0x0 | 4d5a90000300000004000000ffff0000 | MZ..............Malformed VB6 shell program carrying Photoshop image metadata |
| 0x10 | b8000000000000004000000000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 000000000000000000000000b8000000 | ................ |
| 0x40 | 0e1fba0e00b409cd21b8014ccd215468 | ........!..L.!Th |
| 0x50 | 69732070726f6772616d2063615d6e6f | is program ca]no |
| 0x60 | 742062652072756e20696e20444f5320 | t be run in DOS |
| 0x70 | 6d6f64652e0d0d0a2400000000000000 | mode....$....... |
| 0x80 | 759ff9db31fe978831fe978831fe9788 | u...1...1...1... |
| 0x90 | b2e2998830fe97887edc9e8830fe9788 | ....0...~...0... |
| 0xa0 | 07d89a8830fe97885269636831fe9788 | ....0...Rich1... |
| 0xb0 | 0000000000000000504500004c010300 | ........PE..L... |
| 0xc0 | 39ddc25c0000000000000000e0000f01 | 9..\............ |
| 0xd0 | 0b01060000b002000020000000000000 | ......... ...... |
| 0xe0 | b01300000010000000c0020000004000 | ..............@. |
| 0xf0 | 00100000001000000400000001000000 | ................ |
| 0x100 | 040000000000000000e0020000100000 | ................ |
| 0x110 | 21970300020000000000100000100000 | !............... |
| 0x120 | 000010 | ... |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL....Malformed VB6 Unicorn Photoshop image-carrier sheller |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...rKawaii VB6 write and rename dropper |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.rMalformed VB6 shell program carrying Photoshop image metadata |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x143c | 00000000000000000000000000000000 | ................ |
| 0x144c | 0000000000ff7c0200507c0200000700 | ......|..P|..... |
| 0x145c | 556e69636f726e000d010b007c276d20 | Unicorn.....|'m Malformed VB6 Unicorn Photoshop image-carrier sheller |
| 0x146c | 556e69636f726e000308000080190100 | Unicorn......... |
| 0x147c | 420021fd7b02006c740000f57b0200ff | B.!.{..lt...{... |
| 0x148c | d8ffe10f554578696600004d4d002a00 | ....UExif..MM.*. |
| 0x149c | 00000800070112000300000001000100 | ................ |
| 0x14ac | 00011a00050000000100000062011b00 | ............b... |
| 0x14bc | 050000000100d6006a01280003000000 | ........j.(..... |
| 0x14cc | 01000200000131000200000022000000 | ......1....."... |
| 0x14dc | 72013200020000001400000094876900 | r.2...........i. |
| 0x14ec | 0400000001000000a8000000d40015f9 | ................ |
| 0x14fc | 00000027100015f9000000271041646f | ...'.......'.AdoMalformed VB6 shell program carrying Photoshop image metadata |
| 0x150c | 62652050686f746f73686f7020434320 | be Photoshop CC |
| 0x151c | 32303138202857696e646f7773290032 | 2018 (Windows).2 |
| 0x152c | 3031393a30313a30372031393a34343a | 019:01:07 19:44: |
| 0x153c | 32370000035601000300000001000100 | 27...V.......... |
| 0x154c | 00a002000400000001000002eea00300 | ................ |
| 0x155c | 04000000010000032b00000000000000 | ........+....... |
| 0x156c | 0601030003000000010006008d011a00 | ................ |
| 0x157c | 050000000100000122011b0005000000 | ........"....... |
| 0x158c | 010000012a0128000300000001000200 | ....*.(......... |
| 0x159c | 00020100040000000100000132020200 | ............2... |
| 0x15ac | 040000000100000e1b00000000000000 | ................ |
| 0x15bc | 48000000010000004800000001ffd8ff | H.......H....... |
| 0x15cc | ed000c41646f62655f434d0001ffee00 | ...Adobe_CM..... |
| 0x15dc | 0e41646f626500648000000001ffdb00 | .Adobe.d........ |
| 0x15ec | 84000c08080809080c09090c110b0a0b | ................ |
| 0x15fc | 11150f0c0c0f1518131315131318110c | ................ |
| 0x160c | 0c0c0c0c0c110c0c0c0c0c0c0c0c0c0c | ................ |
| 0x161c | 0c0c0c0c0c0c0c0c0c0c0c0c0c0c | .............. |
| 0x3cdb | 652e636f6d2f70686f746f73686f702f | e.com/photoshop/ |
| 0x3ceb | 312e302f2220786d6c6e733a786d704d | 1.0/" xmlns:xmpM |
| 0x3cfb | 4d3d22687474703a2f2f6e732e61646f | M="http://ns.ado |
| 0x3d0b | 62652e636f6d2f7861702f312e302f6d | be.com/xap/1.0/m |
| 0x3d1b | 6d2f2220786d6c6e733a73744576743d | m/" xmlns:stEvt= |
| 0x3d2b | 2268746b703a2f2f6e732e61646f6265 | "htkp://ns.adobe |
| 0x3d3b | 2e636f6d2f7861702f3182302f735479 | .com/xap/1.0/sTy |
| 0x3d4b | 70652f5265736f757263654576656e97 | pe/ResourceEven. |
| 0x3d5b | 232220786d6c6e733a73745265663d22 | #" xmlns:stRef="Malformed VB6 shell program carrying Photoshop image metadata |
| 0x3d6b | 687474703a2f2f6e732e61646f62652e | http://ns.adobe. |
| 0x3d7b | 636f6d2f7861702f312e302f73547970 | com/xap/1.0/sTyp |
| 0x3d8b | 652f5265736f75726365526566232220 | e/ResourceRef#" |
| 0x3d9b | 786d703a43726561746f72546f6f6c3d | xmp:CreatorTool= |
| 0x3dab | 2241646f62652050686f746f73686f70 | "Adobe Photoshop |
| 0x3dbb | 2043432032303138202857696e646f77 | CC 2018 (Window |
| 0x3dcb | 73292220786d703a4372656174654461 | s)" xmp:CreateDa |
| 0x3ddb | 74651b22323031382d31322d30325431 | te."2018-12-02T1Malformed VB6 Unicorn Photoshop image-carrier sheller |
| 0x3deb | 353a35303a30362b30383a3030222078 | 5:50:06+08:00" x |
| 0x3dfb | 6d703a4d6f64696679446174653d2232 | mp:ModifyDate="2 |
| 0x3e0b | 3031392d30312d30375431393a34343a | 019-01-07T19:44: |
| 0x3e1b | 32372b30383a30302220786d703a4d65 | 27+08:00" xmp:Me |
| 0x3e2b | 74616461746e446174653d2232303139 | tadatnDate="2019 |
| 0x3e3b | 2d30312d30375431393a34343a32372b | -01-07T19:44:27+ |
| 0x3e4b | 30383a3030222064633a666f726d6174 | 08:00" dc:format |
| 0x3e5b | 3d22696d6167652f6a70656722207068 | ="image/jpeg" ph |
| 0x3e6b | 6f746f73686f703a436f6c6f724d6f64 | otoshop:ColorMod |
| 0x3e7b | 653d2233222070686f746f73686f703a | e="3" photoshop: |
| 0x3e8b | 49434350726f66696c653d2273524742 | ICCProfile="sRGB |
| 0x3e9b | 2049454336313936362d322e31222078 | IEC61966-2.1" x |
| 0x3eab | 6d704d4d3a496e7374616e636549443d | mpMM:InstanceID= |
| 0x3ebb | 22786d702e6969643a64353937343839 | "xmp.iid:d597489 |
| 0x3ecb | 392d636138382d376634322d39353136 | 9-ca88-7f42-9516 |
| 0x3edb | 2d386537363335383038646633222078 | -8e7635808df3" x |
| 0x3eeb | 6d704d4d3a446f63756d656e7449443d | mpMM:DocumentID= |
| 0x3efb | 2261646f62653a646f6369643a70686f | "adobe:docid:pho |
| 0x3f0b | 746f73686f703a39353332373363332d | toshop:953273c3- |
| 0x3f1b | 336661362d386634352d623661302d39 | 3fa6-8f45-b6a0-9 |
| 0x3f2b | 62616633393363616362632220786d70 | baf393cacbc" xmp |
| 0x3f3b | 4d4d3a4f726967696e616c446f63756d | MM:OriginalDocum |
| 0x3f4b | 656e7449443d22786d702e6469643a39 | entID="xmp.did:9 |
| 0x3f5b | 343331 | 431 |
Well-known
| 0x298b8 | 8fe77fbba8fbf653e24ead339966cf11 | .......S.N.3.f.. |
| 0x298c8 | b70c00aa0060d3935465787431000000 | .....`..Text1... |
| 0x298d8 | 2e3dfbfcfaa06810a73808002b3371b5 | .=....h..8..+3q. |
| 0x298e8 | 433a5c50726f6772616d2046696c6573 | C:\Program Files |
| 0x298f8 | 2028783836295c4d6963726f736f6674 | (x86)\Microsoft |
| 0x29908 | 2056697375616c2053747564696f5c56 | Visual Studio\V |
| 0x29918 | 4239385c5642362e4f4c420056420000 | B98\VB6.OLB.VB.. |
| 0x29928 | d89842000000000006cc000009000000 | ..B............. |
| 0x29938 | e8984200249942dad0c2420000000000 | ..B.$.B...B..... |
| 0x29948 | 00000000c86dae00da4ead339966cf11 | .....m...N.3.f.. |
| 0x29958 | b70c00aa0060d3934c6162656c310000 | .....`..Label1.. |
| 0x29968 | 3a4fad330866cf11b70c00aa0060d393 | :O.3.f.......`.. |
| 0x29978 | 466f726d000000002a4fad339966cf11 | Form....*O.3.f.. |
| 0x29988 | b70c00aa0060d39354696d6572320000 | .....`..Timer2.. |
| 0x29998 | 54696d65723100000700000075416572 | Timer1......uAer |
| 0x299a8 | 333200001b0000005365744c61796572 | 32......SetLayer |
| 0x299b8 | 656457696e646f774174747269627574 | edWindowAttribut |
| 0x299c8 | 65730000a4994200b099420000000400 | es....B...B..... |
| 0x299d8 | d4c242000000000000000000a1dcc242 | ..B............B |
| 0x299e8 | 000bc07402ffe068cc994200b8c01240 | ...t...h..B....@ |
| 0x299f8 | 00ffd0ffe00000000f9d000047657457 | ............GetW |
| 0x29a08 | 696e646f774c6f6e67410000a4994200 | indowLongA....B. |
| 0x29a18 | 04b5420000000400e0c2420000000000 | ..B.......B..... |
| 0x29a28 | 00000000a1e8c242000bc07402ffe068 | .......B...t...h |
| 0x29a38 | 149a4200b8c0124000ffd0ffe0000000 | ..B....@........ |
| 0x29a48 | 0f00000053657457696e646f774c6f6e | ....SetWindowLon |
| 0x29a58 | 67410000a49942004c9a420000000400 | gA....B.L.B..... |
| 0x29a68 | ecc242000000000000000000a1f4c242 | ..B............B |
| 0x29a78 | 000bc07402ffe0685c9a4200b8c01240 | ...t...h\.B....@ |
| 0x29a88 | 00ffd0ffe00000000c00500000000000 | ..........P..... |
| 0x29a98 | 00000000233dfbfcfaa06810a7380800 | ....#=....h..8.. |
| 0x29aa8 | 2b3371b5223dfbfcfaa06810a7380800 | +3q."=....h..8.. |
| 0x29ab8 | 2b3371b5020000009c9a4200ac9a4200 | +3q.......B...B. |
| 0x29ac8 | 00000000794fad339966cf11b70c00aa | ....yO.3.f...... |
| 0x29ad8 | 0060d393020000005c00000008000000 | .`......\....... |
| 0x29ae8 | 2e006500780065000000000016000000 | ..e.x.e......... |
| 0x29af8 | 04000000010000000000000000007301 | ..............s. |
| 0x29b08 | ffffffff01000000d94ead339966cf11 | .........N.3.f.. |
| 0x29b18 | b70c00aa0060d393120000005c005500 | .....`......\.U. |
| 0x29b28 | 6e00690063006f0072006e002d000000 | n.i.c.o.r.n.-... |
| 0x29b38 | e14ead339966cf11b70c00e00060d393 | .N.3.f.......`.. |
| 0x29b48 | 1e00000063ea6d00640020002f0063f4 | ....c.m.d. ./.c. |
| 0x29b58 | 2000720065006e0061006d0065002000 | .r.e.n.a.m.e. . |
| 0x29b68 | 220000000c0000002e00650078006500 | ".........e.x.e. |
| 0x29b78 | 2200200000000000080020002e006400 | ". ....... ...d. |
| 0x29b88 | 6900650000000000564241362e444c4c | i.e.....VBA6.DLL |
| 0x29b98 | 000000005f5f766261456e6400000000 | ....__vbaEnd.... |
| 0x29ba8 | 5f5f766261523853747200005f5f7662 | __vbaR8Str..__vb |
| 0x2d1f2 | 0000010053007400720069006e006700 | ....S.t.r.i.n.g. |
| 0x2d202 | 460069006c00650049006e0066006f00 | F.i.l.e.I.n.f.o. |
| 0x2d212 | 00007001000001003000380030003400 | ..p.....0.8.0.4. |
| 0x2d222 | 300034004200300000002c000a000100 | 0.4.B.0...,..... |
| 0x2d232 | 43006f006d00700061006e0079004e00 | C.o.m.p.a.n.y.N. |
| 0x2d242 | 61006d00650000000000610061006100 | a.m.e.....a.a.a. |
| 0x2d252 | 61000000000040001e00010050007200 | a.....@.....P.r. |
| 0x2d262 | 6f0064007500630074004e0061006d00 | o.d.u.c.t.N.a.m. |
| 0x2d272 | 6500000000004b006100770061006900 | e.....K.a.w.a.i. |
| 0x2d282 | 69002d0055006e00690063006f007200 | i.-.U.n.i.c.o.r. |
| 0x2d292 | 6e00000000002c000a00010046006900 | n.....,.....F.i. |
| 0x2d2a2 | 6c006500560065007200730069006f00 | l.e.V.e.r.s.i.o. |
| 0x2d2b2 | 6e000000000031002e00300030000000 | n.....1...0.0... |
| 0x2d2c2 | 000030000a000100500072006f006400 | ..0.....P.r.o.d. |
| 0x2d2d2 | 75006300740056006500720073006900 | u.c.t.V.e.r.s.i. |
| 0x2d2e2 | 6f006e00000031002e00300030000000 | o.n...1...0.0... |
| 0x2d2f2 | 000040001e00010049d06e0074006500 | ..@.....I.n.t.e. |
| 0x2d302 | 72006e0061006c004e0061006d006500 | r.n.a.l.N.a.m.e. |
| 0x2d312 | 00004b00610077006100690069002d00 | ..K.a.w.a.i.i.-. |
| 0x2d322 | 55006e00690063006f0072006e000000 | U.n.i.c.o.r.n... |
| 0x2d332 | 00005000260001004f00720069006700 | ..P.&...O.r.i.g. |
| 0x2d342 | 69006e0061006c00460069006c006500 | i.n.a.l.F.i.l.e. |
| 0x2d352 | 6e0061006d00650000004b0061007700 | n.a.m.e...K.a.w. |
| 0x2d362 | 6100690069002d0055006e0069006300 | a.i.i.-.U.n.i.c. |
| 0x2d372 | 6f0072006e002e006500780065000000 | o.r.n...e.x.e... |
| 0x2d382 | 00000000010003002020020001000100 | ........ ...... |
| 0x2d392 | 3001000031752020100001000400e802 | 0...1u ........ |
| 0x2d3a2 | 00003275101010000100040028010000 | ..2u........(... |
| 0x2d3b2 | 33752800000010000000200000000100 | 3u(....... ..... |
| 0x2d3c2 | 040000000000c0000000000000000000 | ................ |
| 0x2d3d2 | 0000000000000000000000000000b600 | ................ |
| 0x2d3e2 | 80000080000000808000800000008000 | ................ |
| 0x2d3f2 | 80008080000080808000c0c0c0000000 | ................ |
| 0x2d402 | ff0000ff000000ffff00ff000000ff00 | ................ |
| 0x2d412 | ff00ffff0000ffffff00000000000000 | ................ |
| 0x2d422 | 000000000000000000000000 | ............ |
| 0x2919c | 00000000000000000000000000000000 | ................ |
| 0x291ac | 00000000587d020000000000f8134000 | ....X}........@. |
| 0x291bc | 4c005200564235213626766236636873 | L.R.VB5!6&vb6chs |
| 0x291cc | 2e646c6c000000672a00000000000000 | .dll...g*....... |
| 0x291dc | 0000000000000a000408000000000000 | ................ |
| 0x291ec | 000000005c92420006f8300000ffffff | ....\.B...0..... |
| 0x291fc | 080000000100000001000000e9000000 | ................ |
| 0x2920c | 7091420050914200bc13400078000000 | p.B.P.B...@.x... |
| 0x2921c | 87000000960000009700000000000000 | ................ |
| 0x2922c | 0000000000000000000000004b617761 | ............Kawa |
| 0x2923c | 69692d556e69636f726e004b61776169 | ii-Unicorn.Kawai |
| 0x2924c | 692d556e69636f726e00005662310000 | i-Unicorn..Vb1.. |
| 0x2925c | f4010000d497420000000000409e4200 | ......B.....@.B. |
| 0x2926c | 50ae4200180a000008c00b0036124000 | P.B.........6.@. |
| 0x2927c | 00c04200000000000000000000000000 | ..B............. |
| 0x2928c | 00000000000000000000000000000000 | ................ |
| 0x2929c | 00000000000000000000000000000000 | ................ |
| 0x292ac | 00420000000000000000000000000000 | .B.............. |
| 0x292bc | 00000000000000000000000000000060 | ...............` |
| 0x292cc | 00000000000000000000000000000000 | ................ |
| 0x292dc | 00000000000000000000000000000000 | ................ |
| 0x292ec | 00000000000000000000000000000000 | ................ |
| 0x292fc | 00000000000000000000000000000000 | ................ |
| 0x2930c | 00000000000000000000000000000000 | ................ |
| 0x2931c | 00000000000000000000000000000000 | ................ |
| 0x2932c | 0000000000000000000000000000cf00 | ................ |
| 0x2933c | 00000000000000000000 | .......... |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x143c | 00000000000000000000000000000000 | ................ |
| 0x144c | 0000000000ff7c0200507c0200000700 | ......|..P|..... |
| 0x145c | 556e69636f726e000d010b007c276d20 | Unicorn.....|'m |
| 0x146c | 556e69636f726e000308000080190100 | Unicorn......... |
| 0x147c | 420021fd7b02006c740000f57b0200ff | B.!.{..lt...{... |
| 0x148c | d8ffe10f554578696600004d4d002a00 | ....UExif..MM.*. |
| 0x149c | 00000800070112000300000001000100 | ................ |
| 0x14ac | 00011a00050000000100000062011b00 | ............b... |
| 0x14bc | 050000000100d6006a01280003000000 | ........j.(..... |
| 0x14cc | 01000200000131000200000022000000 | ......1....."... |
| 0x14dc | 72013200020000001400000094876900 | r.2...........i. |
| 0x14ec | 0400000001000000a8000000d40015f9 | ................ |
| 0x14fc | 00000027100015f9000000271041646f | ...'.......'.Ado |
| 0x150c | 62652050686f746f73686f7020434320 | be Photoshop CC |
| 0x151c | 32303138202857696e646f7773290032 | 2018 (Windows).2 |
| 0x152c | 3031393a30313a30372031393a34343a | 019:01:07 19:44: |
| 0x153c | 32370000035601000300000001000100 | 27...V.......... |
| 0x154c | 00a002000400000001000002eea00300 | ................ |
| 0x155c | 04000000010000032b00000000000000 | ........+....... |
| 0x156c | 0601030003000000010006008d011a00 | ................ |
| 0x157c | 050000000100000122011b0005000000 | ........"....... |
| 0x158c | 010000012a0128000300000001000200 | ....*.(......... |
| 0x159c | 00020100040000000100000132020200 | ............2... |
| 0x15ac | 040000000100000e1b00000000000000 | ................ |
| 0x15bc | 48000000010000004800000001ffd8ff | H.......H....... |
| 0x15cc | ed000c41646f62655f434d0001ffee00 | ...Adobe_CM..... |
| 0x15dc | 0e41646f626500648000000001ffdb00 | .Adobe.d........ |
| 0x15ec | 84000c08080809080c09090c110b0a0b | ................ |
| 0x15fc | 11150f0c0c0f1518131315131318110c | ................ |
| 0x160c | 0c0c0c0c0c110c0c0c0c0c0c0c0c0c0c | ................ |
| 0x161c | 0c0c0c0c0c0c0c0c0c0c0c0c0c0c | .............. |
Objectives
| 0x0 | 4d5a90000300000004000000ffff0000 | MZ.............. |
| 0x10 | b8000000000000004000000000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 000000000000000000000000b8000000 | ................ |
| 0x40 | 0e1fba0e00b409cd21b8014ccd215468 | ........!..L.!Th |
| 0x50 | 69732070726f6772616d2063615d6e6f | is program ca]no |
| 0x60 | 742062652072756e20696e20444f5320 | t be run in DOS |
| 0x70 | 6d6f64652e0d0d0a2400000000000000 | mode....$....... |
| 0x80 | 759ff9db31fe978831fe978831fe9788 | u...1...1...1... |
| 0x90 | b2e2998830fe97887edc9e8830fe9788 | ....0...~...0... |
| 0xa0 | 07d89a8830fe97885269636831fe9788 | ....0...Rich1... |
| 0xb0 | 0000000000000000504500004c010300 | ........PE..L... |
| 0xc0 | 39ddc25c0000000000000000e0000f01 | 9..\............ |
| 0xd0 | 0b01060000b002000020000000000000 | ......... ...... |
| 0xe0 | b01300000010000000c0020000004000 | ..............@. |
| 0xf0 | 00100000001000000400000001000000 | ................ |
| 0x100 | 040000000000000000e0020000100000 | ................ |
| 0x110 | 21970300020000000000100000100000 | !............... |
| 0x120 | 000010 | ... |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x0 | 4d5a90000300000004000000ffff0000 | MZ.............. |
| 0x10 | b8000000000000004000000000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 000000000000000000000000b8000000 | ................ |
| 0x40 | 0e1fba0e00b409cd21b8014ccd215468 | ........!..L.!Th |
| 0x50 | 69732070726f6772616d2063615d6e6f | is program ca]no |
| 0x60 | 742062652072756e20696e20444f5320 | t be run in DOS |
| 0x70 | 6d6f64652e0d0d0a2400000000000000 | mode....$....... |
| 0x80 | 759ff9db31fe978831fe978831fe9788 | u...1...1...1... |
| 0x90 | b2e2998830fe97887edc9e8830fe9788 | ....0...~...0... |
| 0xa0 | 07d89a8830fe97885269636831fe9788 | ....0...Rich1... |
| 0xb0 | 0000000000000000504500004c010300 | ........PE..L... |
| 0xc0 | 39ddc25c0000000000000000e0000f01 | 9..\............ |
| 0xd0 | 0b01060000b002000020000000000000 | ......... ...... |
| 0xe0 | b01300000010000000c0020000004000 | ..............@. |
| 0xf0 | 00100000001000000400000001000000 | ................ |
| 0x100 | 040000000000000000e0020000100000 | ................ |
| 0x110 | 21970300020000000000100000100000 | !............... |
| 0x120 | 000010 | ... |
| 0x143c | 00000000000000000000000000000000 | ................ |
| 0x144c | 0000000000ff7c0200507c0200000700 | ......|..P|..... |
| 0x145c | 556e69636f726e000d010b007c276d20 | Unicorn.....|'m |
| 0x146c | 556e69636f726e000308000080190100 | Unicorn......... |
| 0x147c | 420021fd7b02006c740000f57b0200ff | B.!.{..lt...{... |
| 0x148c | d8ffe10f554578696600004d4d002a00 | ....UExif..MM.*. |
| 0x149c | 00000800070112000300000001000100 | ................ |
| 0x14ac | 00011a00050000000100000062011b00 | ............b... |
| 0x14bc | 050000000100d6006a01280003000000 | ........j.(..... |
| 0x14cc | 01000200000131000200000022000000 | ......1....."... |
| 0x14dc | 72013200020000001400000094876900 | r.2...........i. |
| 0x14ec | 0400000001000000a8000000d40015f9 | ................ |
| 0x14fc | 00000027100015f9000000271041646f | ...'.......'.Ado |
| 0x150c | 62652050686f746f73686f7020434320 | be Photoshop CC |
| 0x151c | 32303138202857696e646f7773290032 | 2018 (Windows).2 |
| 0x152c | 3031393a30313a30372031393a34343a | 019:01:07 19:44: |
| 0x153c | 32370000035601000300000001000100 | 27...V.......... |
| 0x154c | 00a002000400000001000002eea00300 | ................ |
| 0x155c | 04000000010000032b00000000000000 | ........+....... |
| 0x156c | 0601030003000000010006008d011a00 | ................ |
| 0x157c | 050000000100000122011b0005000000 | ........"....... |
| 0x158c | 010000012a0128000300000001000200 | ....*.(......... |
| 0x159c | 00020100040000000100000132020200 | ............2... |
| 0x15ac | 040000000100000e1b00000000000000 | ................ |
| 0x15bc | 48000000010000004800000001ffd8ff | H.......H....... |
| 0x15cc | ed000c41646f62655f434d0001ffee00 | ...Adobe_CM..... |
| 0x15dc | 0e41646f626500648000000001ffdb00 | .Adobe.d........ |
| 0x15ec | 84000c08080809080c09090c110b0a0b | ................ |
| 0x15fc | 11150f0c0c0f1518131315131318110c | ................ |
| 0x160c | 0c0c0c0c0c110c0c0c0c0c0c0c0c0c0c | ................ |
| 0x161c | 0c0c0c0c0c0c0c0c0c0c0c0c0c0c | .............. |
| 0x3cdb | 652e636f6d2f70686f746f73686f702f | e.com/photoshop/ |
| 0x3ceb | 312e302f2220786d6c6e733a786d704d | 1.0/" xmlns:xmpM |
| 0x3cfb | 4d3d22687474703a2f2f6e732e61646f | M="http://ns.ado |
| 0x3d0b | 62652e636f6d2f7861702f312e302f6d | be.com/xap/1.0/m |
| 0x3d1b | 6d2f2220786d6c6e733a73744576743d | m/" xmlns:stEvt= |
| 0x3d2b | 2268746b703a2f2f6e732e61646f6265 | "htkp://ns.adobe |
| 0x3d3b | 2e636f6d2f7861702f3182302f735479 | .com/xap/1.0/sTy |
| 0x3d4b | 70652f5265736f757263654576656e97 | pe/ResourceEven. |
| 0x3d5b | 232220786d6c6e733a73745265663d22 | #" xmlns:stRef=" |
| 0x3d6b | 687474703a2f2f6e732e61646f62652e | http://ns.adobe. |
| 0x3d7b | 636f6d2f7861702f312e302f73547970 | com/xap/1.0/sTyp |
| 0x3d8b | 652f5265736f75726365526566232220 | e/ResourceRef#" |
| 0x3d9b | 786d703a43726561746f72546f6f6c3d | xmp:CreatorTool= |
| 0x3dab | 2241646f62652050686f746f73686f70 | "Adobe Photoshop |
| 0x3dbb | 2043432032303138202857696e646f77 | CC 2018 (Window |
| 0x3dcb | 73292220786d703a4372656174654461 | s)" xmp:CreateDa |
| 0x3ddb | 74651b22323031382d31322d30325431 | te."2018-12-02T1 |
| 0x3deb | 353a35303a30362b30383a3030222078 | 5:50:06+08:00" x |
| 0x3dfb | 6d703a4d6f64696679446174653d2232 | mp:ModifyDate="2 |
| 0x3e0b | 3031392d30312d30375431393a34343a | 019-01-07T19:44: |
| 0x3e1b | 32372b30383a30302220786d703a4d65 | 27+08:00" xmp:Me |
| 0x3e2b | 74616461746e446174653d2232303139 | tadatnDate="2019 |
| 0x3e3b | 2d30312d30375431393a34343a32372b | -01-07T19:44:27+ |
| 0x3e4b | 30383a3030222064633a666f726d6174 | 08:00" dc:format |
| 0x3e5b | 3d22696d6167652f6a70656722207068 | ="image/jpeg" ph |
| 0x3e6b | 6f746f73686f703a436f6c6f724d6f64 | otoshop:ColorMod |
| 0x3e7b | 653d2233222070686f746f73686f703a | e="3" photoshop: |
| 0x3e8b | 49434350726f66696c653d2273524742 | ICCProfile="sRGB |
| 0x3e9b | 2049454336313936362d322e31222078 | IEC61966-2.1" x |
| 0x3eab | 6d704d4d3a496e7374616e636549443d | mpMM:InstanceID= |
| 0x3ebb | 22786d702e6969643a64353937343839 | "xmp.iid:d597489 |
| 0x3ecb | 392d636138382d376634322d39353136 | 9-ca88-7f42-9516 |
| 0x3edb | 2d386537363335383038646633222078 | -8e7635808df3" x |
| 0x3eeb | 6d704d4d3a446f63756d656e7449443d | mpMM:DocumentID= |
| 0x3efb | 2261646f62653a646f6369643a70686f | "adobe:docid:pho |
| 0x3f0b | 746f73686f703a39353332373363332d | toshop:953273c3- |
| 0x3f1b | 336661362d386634352d623661302d39 | 3fa6-8f45-b6a0-9 |
| 0x3f2b | 62616633393363616362632220786d70 | baf393cacbc" xmp |
| 0x3f3b | 4d4d3a4f726967696e616c446f63756d | MM:OriginalDocum |
| 0x3f4b | 656e7449443d22786d702e6469643a39 | entID="xmp.did:9 |
| 0x3f5b | 343331 | 431 |
| 0x41df | 6e646f777329222073744576743a6368 | ndows)" stEvt:ch |
| 0x41ef | 616e6765643d222f222f3e203c726466 | anged="/"/> <rdf |
| 0x41ff | 3a6c692073744576743a616374696f6e | :li stEvt:action |
| 0x420f | 3d22636f6e5665727465642220737445 | ="conVerted" stE |
| 0x421f | 76743a706172616d65746572733d2266 | vt:parameters="f |
| 0x422f | 726f6d20696d6167652f706e6720746f | rom image/png to |
| 0x423f | 20696d6167652f6a706567222f3e203c | image/jpeg"/> < |
| 0x424f | 7264663a6c692073744576743a6163a0 | rdf:li stEvt:ac. |
| 0x425f | 696f6e3d226465726976656422207374 | ion="derived" st |
| 0x426f | 4576743a706172616d65746572733d22 | Evt:parameters=" |
| 0x427f | 636f6e7665727465642066726f6d2069 | converted from i |
| 0x428f | 6d6167652f706e6720746f20696d6167 | mage/png to imag |
| 0x429f | 652f6a706567222f3e203c7264663a6c | e/jpeg"/> <rdf:l |
| 0x42af | 692073744576743a616374696f6e3d22 | i stEvt:action=" |
| 0x42bf | 7361766564222073744576743a696e73 | saved" stEvt:ins |
| 0x42cf | 74616e636549443d22786d702e696964 | tanceID="xmp.iid |
| 0x42df | 3a64353937343839392d636138382d37 | :d5974899-ca88-7 |
| 0x42ef | 6634322d393531362d38653736333538 | f42-9516-8e76358 |
| 0x42ff | 3038646633222073744576743a776865 | 08df3" stEvt:whe |
| 0x430f | 6e3d22323031392d30315c3037543139 | n="2019-01\07T19 |
| 0x431f | 3a34343a32372b30383a303022207374 | :44:27+08:00" st |
| 0x432f | 4576743a736f6674776172654167656e | Evt:softwareAgen |
| 0x433f | 743d2241646f62652050686f746f7368 | t="Adobe Photosh |
| 0x434f | 6f702043432032303138202857696e64 | op CC 2018 (Wind |
| 0x435f | 6f777329222073744576743a6368b06e | ows)" stEvt:ch.n |
| 0x436f | 6765643d222f222f3e203c2f7264663a | ged="/"/> </rdf: |
| 0x437f | 5365713e203c2f786d704d4d3a48d073 | Seq> </xmpMM:H.s |
| 0x438f | 746f72793e203c786d704d4d3a446572 | tory> <xmpMM:Der |
| 0x439f | 6976656446726f6d2073745265663a69 | ivedFrom stRef:i |
| 0x43af | 6e7374616e636549443d22786d702e69 | nstanceID="xmp.i |
| 0x43bf | 69643a64396437373430312d37313234 | id:d9d77401-7124 |
| 0x43cf | 2d656434322d386237312d3430313462 | -ed42-8b71-4014b |
| 0x0 | 4d5a90000300000004000000ffff0000 | MZ.............. |
| 0x10 | b8000000000000004000000000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 000000000000000000000000b8000000 | ................ |
| 0x40 | 0e1fba0e00b409cd21b8014ccd215468 | ........!..L.!Th |
| 0x50 | 69732070726f6772616d2063615d6e6f | is program ca]no |
| 0x60 | 742062652072756e20696e20444f5320 | t be run in DOS |
| 0x70 | 6d6f64652e0d0d0a2400000000000000 | mode....$....... |
| 0x80 | 759ff9db31fe978831fe978831fe9788 | u...1...1...1... |
| 0x90 | b2e2998830fe97887edc9e8830fe9788 | ....0...~...0... |
| 0xa0 | 07d89a8830fe97885269636831fe9788 | ....0...Rich1... |
| 0xb0 | 0000000000000000504500004c010300 | ........PE..L... |
| 0xc0 | 39ddc25c0000000000000000e0000f01 | 9..\............ |
| 0xd0 | 0b01060000b002000020000000000000 | ......... ...... |
| 0xe0 | b01300000010000000c0020000004000 | ..............@. |
| 0xf0 | 00100000001000000400000001000000 | ................ |
| 0x100 | 040000000000000000e0020000100000 | ................ |
| 0x110 | 21970300020000000000100000100000 | !............... |
| 0x120 | 000010 | ... |
| 0x143c | 00000000000000000000000000000000 | ................ |
| 0x144c | 0000000000ff7c0200507c0200000700 | ......|..P|..... |
| 0x145c | 556e69636f726e000d010b007c276d20 | Unicorn.....|'m |
| 0x146c | 556e69636f726e000308000080190100 | Unicorn......... |
| 0x147c | 420021fd7b02006c740000f57b0200ff | B.!.{..lt...{... |
| 0x148c | d8ffe10f554578696600004d4d002a00 | ....UExif..MM.*. |
| 0x149c | 00000800070112000300000001000100 | ................ |
| 0x14ac | 00011a00050000000100000062011b00 | ............b... |
| 0x14bc | 050000000100d6006a01280003000000 | ........j.(..... |
| 0x14cc | 01000200000131000200000022000000 | ......1....."... |
| 0x14dc | 72013200020000001400000094876900 | r.2...........i. |
| 0x14ec | 0400000001000000a8000000d40015f9 | ................ |
| 0x14fc | 00000027100015f9000000271041646f | ...'.......'.Ado |
| 0x150c | 62652050686f746f73686f7020434320 | be Photoshop CC |
| 0x151c | 32303138202857696e646f7773290032 | 2018 (Windows).2 |
| 0x152c | 3031393a30313a30372031393a34343a | 019:01:07 19:44: |
| 0x153c | 32370000035601000300000001000100 | 27...V.......... |
| 0x154c | 00a002000400000001000002eea00300 | ................ |
| 0x155c | 04000000010000032b00000000000000 | ........+....... |
| 0x156c | 0601030003000000010006008d011a00 | ................ |
| 0x157c | 050000000100000122011b0005000000 | ........"....... |
| 0x158c | 010000012a0128000300000001000200 | ....*.(......... |
| 0x159c | 00020100040000000100000132020200 | ............2... |
| 0x15ac | 040000000100000e1b00000000000000 | ................ |
| 0x15bc | 48000000010000004800000001ffd8ff | H.......H....... |
| 0x15cc | ed000c41646f62655f434d0001ffee00 | ...Adobe_CM..... |
| 0x15dc | 0e41646f626500648000000001ffdb00 | .Adobe.d........ |
| 0x15ec | 84000c08080809080c09090c110b0a0b | ................ |
| 0x15fc | 11150f0c0c0f1518131315131318110c | ................ |
| 0x160c | 0c0c0c0c0c110c0c0c0c0c0c0c0c0c0c | ................ |
| 0x161c | 0c0c0c0c0c0c0c0c0c0c0c0c0c0c | .............. |
| 0x3cdb | 652e636f6d2f70686f746f73686f702f | e.com/photoshop/ |
| 0x3ceb | 312e302f2220786d6c6e733a786d704d | 1.0/" xmlns:xmpM |
| 0x3cfb | 4d3d22687474703a2f2f6e732e61646f | M="http://ns.ado |
| 0x3d0b | 62652e636f6d2f7861702f312e302f6d | be.com/xap/1.0/m |
| 0x3d1b | 6d2f2220786d6c6e733a73744576743d | m/" xmlns:stEvt= |
| 0x3d2b | 2268746b703a2f2f6e732e61646f6265 | "htkp://ns.adobe |
| 0x3d3b | 2e636f6d2f7861702f3182302f735479 | .com/xap/1.0/sTy |
| 0x3d4b | 70652f5265736f757263654576656e97 | pe/ResourceEven. |
| 0x3d5b | 232220786d6c6e733a73745265663d22 | #" xmlns:stRef=" |
| 0x3d6b | 687474703a2f2f6e732e61646f62652e | http://ns.adobe. |
| 0x3d7b | 636f6d2f7861702f312e302f73547970 | com/xap/1.0/sTyp |
| 0x3d8b | 652f5265736f75726365526566232220 | e/ResourceRef#" |
| 0x3d9b | 786d703a43726561746f72546f6f6c3d | xmp:CreatorTool= |
| 0x3dab | 2241646f62652050686f746f73686f70 | "Adobe Photoshop |
| 0x3dbb | 2043432032303138202857696e646f77 | CC 2018 (Window |
| 0x3dcb | 73292220786d703a4372656174654461 | s)" xmp:CreateDa |
| 0x3ddb | 74651b22323031382d31322d30325431 | te."2018-12-02T1 |
| 0x3deb | 353a35303a30362b30383a3030222078 | 5:50:06+08:00" x |
| 0x3dfb | 6d703a4d6f64696679446174653d2232 | mp:ModifyDate="2 |
| 0x3e0b | 3031392d30312d30375431393a34343a | 019-01-07T19:44: |
| 0x3e1b | 32372b30383a30302220786d703a4d65 | 27+08:00" xmp:Me |
| 0x3e2b | 74616461746e446174653d2232303139 | tadatnDate="2019 |
| 0x3e3b | 2d30312d30375431393a34343a32372b | -01-07T19:44:27+ |
| 0x3e4b | 30383a3030222064633a666f726d6174 | 08:00" dc:format |
| 0x3e5b | 3d22696d6167652f6a70656722207068 | ="image/jpeg" ph |
| 0x3e6b | 6f746f73686f703a436f6c6f724d6f64 | otoshop:ColorMod |
| 0x3e7b | 653d2233222070686f746f73686f703a | e="3" photoshop: |
| 0x3e8b | 49434350726f66696c653d2273524742 | ICCProfile="sRGB |
| 0x3e9b | 2049454336313936362d322e31222078 | IEC61966-2.1" x |
| 0x3eab | 6d704d4d3a496e7374616e636549443d | mpMM:InstanceID= |
| 0x3ebb | 22786d702e6969643a64353937343839 | "xmp.iid:d597489 |
| 0x3ecb | 392d636138382d376634322d39353136 | 9-ca88-7f42-9516 |
| 0x3edb | 2d386537363335383038646633222078 | -8e7635808df3" x |
| 0x3eeb | 6d704d4d3a446f63756d656e7449443d | mpMM:DocumentID= |
| 0x3efb | 2261646f62653a646f6369643a70686f | "adobe:docid:pho |
| 0x3f0b | 746f73686f703a39353332373363332d | toshop:953273c3- |
| 0x3f1b | 336661362d386634352d623661302d39 | 3fa6-8f45-b6a0-9 |
| 0x3f2b | 62616633393363616362632220786d70 | baf393cacbc" xmp |
| 0x3f3b | 4d4d3a4f726967696e616c446f63756d | MM:OriginalDocum |
| 0x3f4b | 656e7449443d22786d702e6469643a39 | entID="xmp.did:9 |
| 0x3f5b | 343331 | 431 |
| 0x41df | 6e646f777329222073744576743a6368 | ndows)" stEvt:ch |
| 0x41ef | 616e6765643d222f222f3e203c726466 | anged="/"/> <rdf |
| 0x41ff | 3a6c692073744576743a616374696f6e | :li stEvt:action |
| 0x420f | 3d22636f6e5665727465642220737445 | ="conVerted" stE |
| 0x421f | 76743a706172616d65746572733d2266 | vt:parameters="f |
| 0x422f | 726f6d20696d6167652f706e6720746f | rom image/png to |
| 0x423f | 20696d6167652f6a706567222f3e203c | image/jpeg"/> < |
| 0x424f | 7264663a6c692073744576743a6163a0 | rdf:li stEvt:ac. |
| 0x425f | 696f6e3d226465726976656422207374 | ion="derived" st |
| 0x426f | 4576743a706172616d65746572733d22 | Evt:parameters=" |
| 0x427f | 636f6e7665727465642066726f6d2069 | converted from i |
| 0x428f | 6d6167652f706e6720746f20696d6167 | mage/png to imag |
| 0x429f | 652f6a706567222f3e203c7264663a6c | e/jpeg"/> <rdf:l |
| 0x42af | 692073744576743a616374696f6e3d22 | i stEvt:action=" |
| 0x42bf | 7361766564222073744576743a696e73 | saved" stEvt:ins |
| 0x42cf | 74616e636549443d22786d702e696964 | tanceID="xmp.iid |
| 0x42df | 3a64353937343839392d636138382d37 | :d5974899-ca88-7 |
| 0x42ef | 6634322d393531362d38653736333538 | f42-9516-8e76358 |
| 0x42ff | 3038646633222073744576743a776865 | 08df3" stEvt:whe |
| 0x430f | 6e3d22323031392d30315c3037543139 | n="2019-01\07T19 |
| 0x431f | 3a34343a32372b30383a303022207374 | :44:27+08:00" st |
| 0x432f | 4576743a736f6674776172654167656e | Evt:softwareAgen |
| 0x433f | 743d2241646f62652050686f746f7368 | t="Adobe Photosh |
| 0x434f | 6f702043432032303138202857696e64 | op CC 2018 (Wind |
| 0x435f | 6f777329222073744576743a6368b06e | ows)" stEvt:ch.n |
| 0x436f | 6765643d222f222f3e203c2f7264663a | ged="/"/> </rdf: |
| 0x437f | 5365713e203c2f786d704d4d3a48d073 | Seq> </xmpMM:H.s |
| 0x438f | 746f72793e203c786d704d4d3a446572 | tory> <xmpMM:Der |
| 0x439f | 6976656446726f6d2073745265663a69 | ivedFrom stRef:i |
| 0x43af | 6e7374616e636549443d22786d702e69 | nstanceID="xmp.i |
| 0x43bf | 69643a64396437373430312d37313234 | id:d9d77401-7124 |
| 0x43cf | 2d656434322d386237312d3430313462 | -ed42-8b71-4014b |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x143c | 00000000000000000000000000000000 | ................ |
| 0x144c | 0000000000ff7c0200507c0200000700 | ......|..P|..... |
| 0x145c | 556e69636f726e000d010b007c276d20 | Unicorn.....|'m |
| 0x146c | 556e69636f726e000308000080190100 | Unicorn......... |
| 0x147c | 420021fd7b02006c740000f57b0200ff | B.!.{..lt...{... |
| 0x148c | d8ffe10f554578696600004d4d002a00 | ....UExif..MM.*. |
| 0x149c | 00000800070112000300000001000100 | ................ |
| 0x14ac | 00011a00050000000100000062011b00 | ............b... |
| 0x14bc | 050000000100d6006a01280003000000 | ........j.(..... |
| 0x14cc | 01000200000131000200000022000000 | ......1....."... |
| 0x14dc | 72013200020000001400000094876900 | r.2...........i. |
| 0x14ec | 0400000001000000a8000000d40015f9 | ................ |
| 0x14fc | 00000027100015f9000000271041646f | ...'.......'.Ado |
| 0x150c | 62652050686f746f73686f7020434320 | be Photoshop CC |
| 0x151c | 32303138202857696e646f7773290032 | 2018 (Windows).2 |
| 0x152c | 3031393a30313a30372031393a34343a | 019:01:07 19:44: |
| 0x153c | 32370000035601000300000001000100 | 27...V.......... |
| 0x154c | 00a002000400000001000002eea00300 | ................ |
| 0x155c | 04000000010000032b00000000000000 | ........+....... |
| 0x156c | 0601030003000000010006008d011a00 | ................ |
| 0x157c | 050000000100000122011b0005000000 | ........"....... |
| 0x158c | 010000012a0128000300000001000200 | ....*.(......... |
| 0x159c | 00020100040000000100000132020200 | ............2... |
| 0x15ac | 040000000100000e1b00000000000000 | ................ |
| 0x15bc | 48000000010000004800000001ffd8ff | H.......H....... |
| 0x15cc | ed000c41646f62655f434d0001ffee00 | ...Adobe_CM..... |
| 0x15dc | 0e41646f626500648000000001ffdb00 | .Adobe.d........ |
| 0x15ec | 84000c08080809080c09090c110b0a0b | ................ |
| 0x15fc | 11150f0c0c0f1518131315131318110c | ................ |
| 0x160c | 0c0c0c0c0c110c0c0c0c0c0c0c0c0c0c | ................ |
| 0x161c | 0c0c0c0c0c0c0c0c0c0c0c0c0c0c | .............. |
| 0x298b8 | 8fe77fbba8fbf653e24ead339966cf11 | .......S.N.3.f.. |
| 0x298c8 | b70c00aa0060d3935465787431000000 | .....`..Text1... |
| 0x298d8 | 2e3dfbfcfaa06810a73808002b3371b5 | .=....h..8..+3q. |
| 0x298e8 | 433a5c50726f6772616d2046696c6573 | C:\Program Files |
| 0x298f8 | 2028783836295c4d6963726f736f6674 | (x86)\Microsoft |
| 0x29908 | 2056697375616c2053747564696f5c56 | Visual Studio\V |
| 0x29918 | 4239385c5642362e4f4c420056420000 | B98\VB6.OLB.VB.. |
| 0x29928 | d89842000000000006cc000009000000 | ..B............. |
| 0x29938 | e8984200249942dad0c2420000000000 | ..B.$.B...B..... |
| 0x29948 | 00000000c86dae00da4ead339966cf11 | .....m...N.3.f.. |
| 0x29958 | b70c00aa0060d3934c6162656c310000 | .....`..Label1.. |
| 0x29968 | 3a4fad330866cf11b70c00aa0060d393 | :O.3.f.......`.. |
| 0x29978 | 466f726d000000002a4fad339966cf11 | Form....*O.3.f.. |
| 0x29988 | b70c00aa0060d39354696d6572320000 | .....`..Timer2.. |
| 0x29998 | 54696d65723100000700000075416572 | Timer1......uAer |
| 0x299a8 | 333200001b0000005365744c61796572 | 32......SetLayer |
| 0x299b8 | 656457696e646f774174747269627574 | edWindowAttribut |
| 0x299c8 | 65730000a4994200b099420000000400 | es....B...B..... |
| 0x299d8 | d4c242000000000000000000a1dcc242 | ..B............B |
| 0x299e8 | 000bc07402ffe068cc994200b8c01240 | ...t...h..B....@ |
| 0x299f8 | 00ffd0ffe00000000f9d000047657457 | ............GetW |
| 0x29a08 | 696e646f774c6f6e67410000a4994200 | indowLongA....B. |
| 0x29a18 | 04b5420000000400e0c2420000000000 | ..B.......B..... |
| 0x29a28 | 00000000a1e8c242000bc07402ffe068 | .......B...t...h |
| 0x29a38 | 149a4200b8c0124000ffd0ffe0000000 | ..B....@........ |
| 0x29a48 | 0f00000053657457696e646f774c6f6e | ....SetWindowLon |
| 0x29a58 | 67410000a49942004c9a420000000400 | gA....B.L.B..... |
| 0x29a68 | ecc242000000000000000000a1f4c242 | ..B............B |
| 0x29a78 | 000bc07402ffe0685c9a4200b8c01240 | ...t...h\.B....@ |
| 0x29a88 | 00ffd0ffe00000000c00500000000000 | ..........P..... |
| 0x29a98 | 00000000233dfbfcfaa06810a7380800 | ....#=....h..8.. |
| 0x29aa8 | 2b3371b5223dfbfcfaa06810a7380800 | +3q."=....h..8.. |
| 0x29ab8 | 2b3371b5020000009c9a4200ac9a4200 | +3q.......B...B. |
| 0x29ac8 | 00000000794fad339966cf11b70c00aa | ....yO.3.f...... |
| 0x29ad8 | 0060d393020000005c00000008000000 | .`......\....... |
| 0x29ae8 | 2e006500780065000000000016000000 | ..e.x.e......... |
| 0x29af8 | 04000000010000000000000000007301 | ..............s. |
| 0x29b08 | ffffffff01000000d94ead339966cf11 | .........N.3.f.. |
| 0x29b18 | b70c00aa0060d393120000005c005500 | .....`......\.U. |
| 0x29b28 | 6e00690063006f0072006e002d000000 | n.i.c.o.r.n.-... |
| 0x29b38 | e14ead339966cf11b70c00e00060d393 | .N.3.f.......`.. |
| 0x29b48 | 1e00000063ea6d00640020002f0063f4 | ....c.m.d. ./.c. |
| 0x29b58 | 2000720065006e0061006d0065002000 | .r.e.n.a.m.e. . |
| 0x29b68 | 220000000c0000002e00650078006500 | ".........e.x.e. |
| 0x29b78 | 2200200000000000080020002e006400 | ". ....... ...d. |
| 0x29b88 | 6900650000000000564241362e444c4c | i.e.....VBA6.DLL |
| 0x29b98 | 000000005f5f766261456e6400000000 | ....__vbaEnd.... |
| 0x29ba8 | 5f5f766261523853747200005f5f7662 | __vbaR8Str..__vb |
| 0x3cdb | 652e636f6d2f70686f746f73686f702f | e.com/photoshop/ |
| 0x3ceb | 312e302f2220786d6c6e733a786d704d | 1.0/" xmlns:xmpM |
| 0x3cfb | 4d3d22687474703a2f2f6e732e61646f | M="http://ns.ado |
| 0x3d0b | 62652e636f6d2f7861702f312e302f6d | be.com/xap/1.0/m |
| 0x3d1b | 6d2f2220786d6c6e733a73744576743d | m/" xmlns:stEvt= |
| 0x3d2b | 2268746b703a2f2f6e732e61646f6265 | "htkp://ns.adobe |
| 0x3d3b | 2e636f6d2f7861702f3182302f735479 | .com/xap/1.0/sTy |
| 0x3d4b | 70652f5265736f757263654576656e97 | pe/ResourceEven. |
| 0x3d5b | 232220786d6c6e733a73745265663d22 | #" xmlns:stRef=" |
| 0x3d6b | 687474703a2f2f6e732e61646f62652e | http://ns.adobe. |
| 0x3d7b | 636f6d2f7861702f312e302f73547970 | com/xap/1.0/sTyp |
| 0x3d8b | 652f5265736f75726365526566232220 | e/ResourceRef#" |
| 0x3d9b | 786d703a43726561746f72546f6f6c3d | xmp:CreatorTool= |
| 0x3dab | 2241646f62652050686f746f73686f70 | "Adobe Photoshop |
| 0x3dbb | 2043432032303138202857696e646f77 | CC 2018 (Window |
| 0x3dcb | 73292220786d703a4372656174654461 | s)" xmp:CreateDa |
| 0x3ddb | 74651b22323031382d31322d30325431 | te."2018-12-02T1 |
| 0x3deb | 353a35303a30362b30383a3030222078 | 5:50:06+08:00" x |
| 0x3dfb | 6d703a4d6f64696679446174653d2232 | mp:ModifyDate="2 |
| 0x3e0b | 3031392d30312d30375431393a34343a | 019-01-07T19:44: |
| 0x3e1b | 32372b30383a30302220786d703a4d65 | 27+08:00" xmp:Me |
| 0x3e2b | 74616461746e446174653d2232303139 | tadatnDate="2019 |
| 0x3e3b | 2d30312d30375431393a34343a32372b | -01-07T19:44:27+ |
| 0x3e4b | 30383a3030222064633a666f726d6174 | 08:00" dc:format |
| 0x3e5b | 3d22696d6167652f6a70656722207068 | ="image/jpeg" ph |
| 0x3e6b | 6f746f73686f703a436f6c6f724d6f64 | otoshop:ColorMod |
| 0x3e7b | 653d2233222070686f746f73686f703a | e="3" photoshop: |
| 0x3e8b | 49434350726f66696c653d2273524742 | ICCProfile="sRGB |
| 0x3e9b | 2049454336313936362d322e31222078 | IEC61966-2.1" x |
| 0x3eab | 6d704d4d3a496e7374616e636549443d | mpMM:InstanceID= |
| 0x3ebb | 22786d702e6969643a64353937343839 | "xmp.iid:d597489 |
| 0x3ecb | 392d636138382d376634322d39353136 | 9-ca88-7f42-9516 |
| 0x3edb | 2d386537363335383038646633222078 | -8e7635808df3" x |
| 0x3eeb | 6d704d4d3a446f63756d656e7449443d | mpMM:DocumentID= |
| 0x3efb | 2261646f62653a646f6369643a70686f | "adobe:docid:pho |
| 0x3f0b | 746f73686f703a39353332373363332d | toshop:953273c3- |
| 0x3f1b | 336661362d386634352d623661302d39 | 3fa6-8f45-b6a0-9 |
| 0x3f2b | 62616633393363616362632220786d70 | baf393cacbc" xmp |
| 0x3f3b | 4d4d3a4f726967696e616c446f63756d | MM:OriginalDocum |
| 0x3f4b | 656e7449443d22786d702e6469643a39 | entID="xmp.did:9 |
| 0x3f5b | 343331 | 431 |
| 0x41df | 6e646f777329222073744576743a6368 | ndows)" stEvt:ch |
| 0x41ef | 616e6765643d222f222f3e203c726466 | anged="/"/> <rdf |
| 0x41ff | 3a6c692073744576743a616374696f6e | :li stEvt:action |
| 0x420f | 3d22636f6e5665727465642220737445 | ="conVerted" stE |
| 0x421f | 76743a706172616d65746572733d2266 | vt:parameters="f |
| 0x422f | 726f6d20696d6167652f706e6720746f | rom image/png to |
| 0x423f | 20696d6167652f6a706567222f3e203c | image/jpeg"/> < |
| 0x424f | 7264663a6c692073744576743a6163a0 | rdf:li stEvt:ac. |
| 0x425f | 696f6e3d226465726976656422207374 | ion="derived" st |
| 0x426f | 4576743a706172616d65746572733d22 | Evt:parameters=" |
| 0x427f | 636f6e7665727465642066726f6d2069 | converted from i |
| 0x428f | 6d6167652f706e6720746f20696d6167 | mage/png to imag |
| 0x429f | 652f6a706567222f3e203c7264663a6c | e/jpeg"/> <rdf:l |
| 0x42af | 692073744576743a616374696f6e3d22 | i stEvt:action=" |
| 0x42bf | 7361766564222073744576743a696e73 | saved" stEvt:ins |
| 0x42cf | 74616e636549443d22786d702e696964 | tanceID="xmp.iid |
| 0x42df | 3a64353937343839392d636138382d37 | :d5974899-ca88-7 |
| 0x42ef | 6634322d393531362d38653736333538 | f42-9516-8e76358 |
| 0x42ff | 3038646633222073744576743a776865 | 08df3" stEvt:whe |
| 0x430f | 6e3d22323031392d30315c3037543139 | n="2019-01\07T19 |
| 0x431f | 3a34343a32372b30383a303022207374 | :44:27+08:00" st |
| 0x432f | 4576743a736f6674776172654167656e | Evt:softwareAgen |
| 0x433f | 743d2241646f62652050686f746f7368 | t="Adobe Photosh |
| 0x434f | 6f702043432032303138202857696e64 | op CC 2018 (Wind |
| 0x435f | 6f777329222073744576743a6368b06e | ows)" stEvt:ch.n |
| 0x436f | 6765643d222f222f3e203c2f7264663a | ged="/"/> </rdf: |
| 0x437f | 5365713e203c2f786d704d4d3a48d073 | Seq> </xmpMM:H.s |
| 0x438f | 746f72793e203c786d704d4d3a446572 | tory> <xmpMM:Der |
| 0x439f | 6976656446726f6d2073745265663a69 | ivedFrom stRef:i |
| 0x43af | 6e7374616e636549443d22786d702e69 | nstanceID="xmp.i |
| 0x43bf | 69643a64396437373430312d37313234 | id:d9d77401-7124 |
| 0x43cf | 2d656434322d386237312d3430313462 | -ed42-8b71-4014b |
Micro-behaviors
| 0x3b06 | 2000500068006f0074006f4c73006800 | .P.h.o.t.oLs.h. |
| 0x3b16 | 6f007000200043004300200032003000 | o.p. .C.C. .2.0. |
| 0x3b26 | 31003800000001006942494d04060000 | 1.8.....iBIM.... |
| 0x3b36 | 000000070008000000010100ffe1117a | ...............z |
| 0x3b46 | 687474703a2f2f6e732e61646f62652e | http://ns.adobe. |
| 0x3b56 | 636f6d2f7861702f312e302f003c3f78 | com/xap/1.0/.<?x |
| 0x3b66 | 7061636b657420626567696e3d22efbb | packet begin=".. |
| 0x3b76 | bf222069643d2257354d304d70436568 | ." id="W5M0MpCeh |
| 0x3b86 | 69487a7265537a4e54637a6b63396422 | iHzreSzNTczkc9d" |
| 0x3b96 | 3f3e203c783a786d706d65746120786d | ?> <x:xmpmeta xm |
| 0x3ba6 | 6c6e733a783d2261646f62653a6e733a | lns:x="adobe:ns: |
| 0x3bb6 | 6d6574612f2220783a786d70746b3d22 | meta/" x:xmptk=" |
| 0x3bc6 | 41646f626520584d5020436f72652035 | Adobe XMP Core 5 |
| 0x3bd6 | 2e362d63 | .6-c |
| 0x4ef4 | 000038f50000039058595a2000000000 | ..8.....XYZ .... |
| 0x4f04 | 000062990000b785000018da58595a20 | ..b.........XYZ |
| 0x4f14 | 00640000000024a000000f840000b6cf | .d....$......... |
| 0x4f24 | 64657363000000000000001649454320 | desc........IEC |
| 0x4f34 | 687474703a2f2f7777772e6965632e63 | http://www.iec.c |
| 0x4f44 | 6800000000000000000000001649a143 | h............I.C |
| 0x4f54 | 20687474703a2f2f7777772e6965632e | http://www.iec. |
| 0x4f64 | 63680000000000000000000000000000 | ch.............. |
| 0x4f74 | 00000000000000000000000000000000 | ................ |
| 0x4f84 | 00000000000000000000000000000000 | ................ |
| 0x4f94 | 64657363000000000000002e49454320 | desc........IEC |
| 0x4fa4 | 36313936362d322e312044656661756c | 61966-2.1 Defaul |
| 0x4fb4 | 742052474220636f6c6f757220737061 | t RGB colour spa |
| 0x4fc4 | 63 | c |
| 0x41df | 6e646f777329222073744576743a6368 | ndows)" stEvt:ch |
| 0x41ef | 616e6765643d222f222f3e203c726466 | anged="/"/> <rdf |
| 0x41ff | 3a6c692073744576743a616374696f6e | :li stEvt:action |
| 0x420f | 3d22636f6e5665727465642220737445 | ="conVerted" stE |
| 0x421f | 76743a706172616d65746572733d2266 | vt:parameters="f |
| 0x422f | 726f6d20696d6167652f706e6720746f | rom image/png to |
| 0x423f | 20696d6167652f6a706567222f3e203c | image/jpeg"/> < |
| 0x424f | 7264663a6c692073744576743a6163a0 | rdf:li stEvt:ac. |
| 0x425f | 696f6e3d226465726976656422207374 | ion="derived" st |
| 0x426f | 4576743a706172616d65746572733d22 | Evt:parameters=" |
| 0x427f | 636f6e7665727465642066726f6d2069 | converted from i |
| 0x428f | 6d6167652f706e6720746f20696d6167 | mage/png to imag |
| 0x429f | 652f6a706567222f3e203c7264663a6c | e/jpeg"/> <rdf:l |
| 0x42af | 692073744576743a616374696f6e3d22 | i stEvt:action=" |
| 0x42bf | 7361766564222073744576743a696e73 | saved" stEvt:ins |
| 0x42cf | 74616e636549443d22786d702e696964 | tanceID="xmp.iid |
| 0x42df | 3a64353937343839392d636138382d37 | :d5974899-ca88-7 |
| 0x42ef | 6634322d393531362d38653736333538 | f42-9516-8e76358 |
| 0x42ff | 3038646633222073744576743a776865 | 08df3" stEvt:whe |
| 0x430f | 6e3d22323031392d30315c3037543139 | n="2019-01\07T19 |
| 0x431f | 3a34343a32372b30383a303022207374 | :44:27+08:00" st |
| 0x432f | 4576743a736f6674776172654167656e | Evt:softwareAgen |
| 0x433f | 743d2241646f62652050686f746f7368 | t="Adobe Photosh |
| 0x434f | 6f702043432032303138202857696e64 | op CC 2018 (Wind |
| 0x435f | 6f777329222073744576743a6368b06e | ows)" stEvt:ch.n |
| 0x436f | 6765643d222f222f3e203c2f7264663a | ged="/"/> </rdf: |
| 0x437f | 5365713e203c2f786d704d4d3a48d073 | Seq> </xmpMM:H.s |
| 0x438f | 746f72793e203c786d704d4d3a446572 | tory> <xmpMM:Der |
| 0x439f | 6976656446726f6d2073745265663a69 | ivedFrom stRef:i |
| 0x43af | 6e7374616e636549443d22786d702e69 | nstanceID="xmp.i |
| 0x43bf | 69643a64396437373430312d37313234 | id:d9d77401-7124 |
| 0x43cf | 2d656434322d386237312d3430313462 | -ed42-8b71-4014b |
| 0x3cdb | 652e636f6d2f70686f746f73686f702f | e.com/photoshop/ |
| 0x3ceb | 312e302f2220786d6c6e733a786d704d | 1.0/" xmlns:xmpM |
| 0x3cfb | 4d3d22687474703a2f2f6e732e61646f | M="http://ns.ado |
| 0x3d0b | 62652e636f6d2f7861702f312e302f6d | be.com/xap/1.0/m |
| 0x3d1b | 6d2f2220786d6c6e733a73744576743d | m/" xmlns:stEvt= |
| 0x3d2b | 2268746b703a2f2f6e732e61646f6265 | "htkp://ns.adobe |
| 0x3d3b | 2e636f6d2f7861702f3182302f735479 | .com/xap/1.0/sTy |
| 0x3d4b | 70652f5265736f757263654576656e97 | pe/ResourceEven. |
| 0x3d5b | 232220786d6c6e733a73745265663d22 | #" xmlns:stRef=" |
| 0x3d6b | 687474703a2f2f6e732e61646f62652e | http://ns.adobe. |
| 0x3d7b | 636f6d2f7861702f312e302f73547970 | com/xap/1.0/sTyp |
| 0x3d8b | 652f5265736f75726365526566232220 | e/ResourceRef#" |
| 0x3d9b | 786d703a43726561746f72546f6f6c3d | xmp:CreatorTool= |
| 0x3dab | 2241646f62652050686f746f73686f70 | "Adobe Photoshop |
| 0x3dbb | 2043432032303138202857696e646f77 | CC 2018 (Window |
| 0x3dcb | 73292220786d703a4372656174654461 | s)" xmp:CreateDa |
| 0x3ddb | 74651b22323031382d31322d30325431 | te."2018-12-02T1 |
| 0x3deb | 353a35303a30362b30383a3030222078 | 5:50:06+08:00" x |
| 0x3dfb | 6d703a4d6f64696679446174653d2232 | mp:ModifyDate="2 |
| 0x3e0b | 3031392d30312d30375431393a34343a | 019-01-07T19:44: |
| 0x3e1b | 32372b30383a30302220786d703a4d65 | 27+08:00" xmp:Me |
| 0x3e2b | 74616461746e446174653d2232303139 | tadatnDate="2019 |
| 0x3e3b | 2d30312d30375431393a34343a32372b | -01-07T19:44:27+ |
| 0x3e4b | 30383a3030222064633a666f726d6174 | 08:00" dc:format |
| 0x3e5b | 3d22696d6167652f6a70656722207068 | ="image/jpeg" ph |
| 0x3e6b | 6f746f73686f703a436f6c6f724d6f64 | otoshop:ColorMod |
| 0x3e7b | 653d2233222070686f746f73686f703a | e="3" photoshop: |
| 0x3e8b | 49434350726f66696c653d2273524742 | ICCProfile="sRGB |
| 0x3e9b | 2049454336313936362d322e31222078 | IEC61966-2.1" x |
| 0x3eab | 6d704d4d3a496e7374616e636549443d | mpMM:InstanceID= |
| 0x3ebb | 22786d702e6969643a64353937343839 | "xmp.iid:d597489 |
| 0x3ecb | 392d636138382d376634322d39353136 | 9-ca88-7f42-9516 |
| 0x3edb | 2d386537363335383038646633222078 | -8e7635808df3" x |
| 0x3eeb | 6d704d4d3a446f63756d656e7449443d | mpMM:DocumentID= |
| 0x3efb | 2261646f62653a646f6369643a70686f | "adobe:docid:pho |
| 0x3f0b | 746f73686f703a39353332373363332d | toshop:953273c3- |
| 0x3f1b | 336661362d386634352d623661302d39 | 3fa6-8f45-b6a0-9 |
| 0x3f2b | 62616633393363616362632220786d70 | baf393cacbc" xmp |
| 0x3f3b | 4d4d3a4f726967696e616c446f63756d | MM:OriginalDocum |
| 0x3f4b | 656e7449443d22786d702e6469643a39 | entID="xmp.did:9 |
| 0x3f5b | 343331 | 431 |
| 0x143c | 00000000000000000000000000000000 | ................ |
| 0x144c | 0000000000ff7c0200507c0200000700 | ......|..P|..... |
| 0x145c | 556e69636f726e000d010b007c276d20 | Unicorn.....|'m |
| 0x146c | 556e69636f726e000308000080190100 | Unicorn......... |
| 0x147c | 420021fd7b02006c740000f57b0200ff | B.!.{..lt...{... |
| 0x148c | d8ffe10f554578696600004d4d002a00 | ....UExif..MM.*. |
| 0x149c | 00000800070112000300000001000100 | ................ |
| 0x14ac | 00011a00050000000100000062011b00 | ............b... |
| 0x14bc | 050000000100d6006a01280003000000 | ........j.(..... |
| 0x14cc | 01000200000131000200000022000000 | ......1....."... |
| 0x14dc | 72013200020000001400000094876900 | r.2...........i. |
| 0x14ec | 0400000001000000a8000000d40015f9 | ................ |
| 0x14fc | 00000027100015f9000000271041646f | ...'.......'.Ado |
| 0x150c | 62652050686f746f73686f7020434320 | be Photoshop CC |
| 0x151c | 32303138202857696e646f7773290032 | 2018 (Windows).2 |
| 0x152c | 3031393a30313a30372031393a34343a | 019:01:07 19:44: |
| 0x153c | 32370000035601000300000001000100 | 27...V.......... |
| 0x154c | 00a002000400000001000002eea00300 | ................ |
| 0x155c | 04000000010000032b00000000000000 | ........+....... |
| 0x156c | 0601030003000000010006008d011a00 | ................ |
| 0x157c | 050000000100000122011b0005000000 | ........"....... |
| 0x158c | 010000012a0128000300000001000200 | ....*.(......... |
| 0x159c | 00020100040000000100000132020200 | ............2... |
| 0x15ac | 040000000100000e1b00000000000000 | ................ |
| 0x15bc | 48000000010000004800000001ffd8ff | H.......H....... |
| 0x15cc | ed000c41646f62655f434d0001ffee00 | ...Adobe_CM..... |
| 0x15dc | 0e41646f626500648000000001ffdb00 | .Adobe.d........ |
| 0x15ec | 84000c08080809080c09090c110b0a0b | ................ |
| 0x15fc | 11150f0c0c0f1518131315131318110c | ................ |
| 0x160c | 0c0c0c0c0c110c0c0c0c0c0c0c0c0c0c | ................ |
| 0x161c | 0c0c0c0c0c0c0c0c0c0c0c0c0c0c | .............. |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x290ae | 696d657232000b032823000007702600 | imer2...(#...p&. |
| 0x290be | 000890150000ff032000000002050054 | ........ ......T |
| 0x290ce | 65787431000204c003d00267021d010b | ext1.......g.... |
| 0x290de | 01003000120100ff031f000000030600 | ..0............. |
| 0x290ee | 54696d657231000b038a0b000007c021 | Timer1.........! |
| 0x290fe | 000008f8070000ff0347000000040600 | .........G...... |
| 0x2910e | 4c6162656c310001010700556e69636f | Label1.....Unico |
| 0x2911e | 726e0004ff00ff000538045811d72837 | rn.......8.X..(7 |
| 0x2912e | 051200001f002501000000bc0280a903 | ......%......... |
| 0x2913e | 000d4d532053616e73205365726966ff | ..MS Sans Serif. |
| 0x2914e | 020406000000fc9c4200070000005c9a | ........B.....\. |
| 0x2915e | 420007000000149a420007000000cc99 | B.......B....... |
| 0x2916e | 420050000000 | B.P... |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x298b8 | 8fe77fbba8fbf653e24ead339966cf11 | .......S.N.3.f.. |
| 0x298c8 | b70c00aa0060d3935465787431000000 | .....`..Text1... |
| 0x298d8 | 2e3dfbfcfaa06810a73808002b3371b5 | .=....h..8..+3q. |
| 0x298e8 | 433a5c50726f6772616d2046696c6573 | C:\Program Files |
| 0x298f8 | 2028783836295c4d6963726f736f6674 | (x86)\Microsoft |
| 0x29908 | 2056697375616c2053747564696f5c56 | Visual Studio\V |
| 0x29918 | 4239385c5642362e4f4c420056420000 | B98\VB6.OLB.VB.. |
| 0x29928 | d89842000000000006cc000009000000 | ..B............. |
| 0x29938 | e8984200249942dad0c2420000000000 | ..B.$.B...B..... |
| 0x29948 | 00000000c86dae00da4ead339966cf11 | .....m...N.3.f.. |
| 0x29958 | b70c00aa0060d3934c6162656c310000 | .....`..Label1.. |
| 0x29968 | 3a4fad330866cf11b70c00aa0060d393 | :O.3.f.......`.. |
| 0x29978 | 466f726d000000002a4fad339966cf11 | Form....*O.3.f.. |
| 0x29988 | b70c00aa0060d39354696d6572320000 | .....`..Timer2.. |
| 0x29998 | 54696d65723100000700000075416572 | Timer1......uAer |
| 0x299a8 | 333200001b0000005365744c61796572 | 32......SetLayer |
| 0x299b8 | 656457696e646f774174747269627574 | edWindowAttribut |
| 0x299c8 | 65730000a4994200b099420000000400 | es....B...B..... |
| 0x299d8 | d4c242000000000000000000a1dcc242 | ..B............B |
| 0x299e8 | 000bc07402ffe068cc994200b8c01240 | ...t...h..B....@ |
| 0x299f8 | 00ffd0ffe00000000f9d000047657457 | ............GetW |
| 0x29a08 | 696e646f774c6f6e67410000a4994200 | indowLongA....B. |
| 0x29a18 | 04b5420000000400e0c2420000000000 | ..B.......B..... |
| 0x29a28 | 00000000a1e8c242000bc07402ffe068 | .......B...t...h |
| 0x29a38 | 149a4200b8c0124000ffd0ffe0000000 | ..B....@........ |
| 0x29a48 | 0f00000053657457696e646f774c6f6e | ....SetWindowLon |
| 0x29a58 | 67410000a49942004c9a420000000400 | gA....B.L.B..... |
| 0x29a68 | ecc242000000000000000000a1f4c242 | ..B............B |
| 0x29a78 | 000bc07402ffe0685c9a4200b8c01240 | ...t...h\.B....@ |
| 0x29a88 | 00ffd0ffe00000000c00500000000000 | ..........P..... |
| 0x29a98 | 00000000233dfbfcfaa06810a7380800 | ....#=....h..8.. |
| 0x29aa8 | 2b3371b5223dfbfcfaa06810a7380800 | +3q."=....h..8.. |
| 0x29ab8 | 2b3371b5020000009c9a4200ac9a4200 | +3q.......B...B. |
| 0x29ac8 | 00000000794fad339966cf11b70c00aa | ....yO.3.f...... |
| 0x29ad8 | 0060d393020000005c00000008000000 | .`......\....... |
| 0x29ae8 | 2e006500780065000000000016000000 | ..e.x.e......... |
| 0x29af8 | 04000000010000000000000000007301 | ..............s. |
| 0x29b08 | ffffffff01000000d94ead339966cf11 | .........N.3.f.. |
| 0x29b18 | b70c00aa0060d393120000005c005500 | .....`......\.U. |
| 0x29b28 | 6e00690063006f0072006e002d000000 | n.i.c.o.r.n.-... |
| 0x29b38 | e14ead339966cf11b70c00e00060d393 | .N.3.f.......`.. |
| 0x29b48 | 1e00000063ea6d00640020002f0063f4 | ....c.m.d. ./.c. |
| 0x29b58 | 2000720065006e0061006d0065002000 | .r.e.n.a.m.e. . |
| 0x29b68 | 220000000c0000002e00650078006500 | ".........e.x.e. |
| 0x29b78 | 2200200000000000080020002e006400 | ". ....... ...d. |
| 0x29b88 | 6900650000000000564241362e444c4c | i.e.....VBA6.DLL |
| 0x29b98 | 000000005f5f766261456e6400000000 | ....__vbaEnd.... |
| 0x29ba8 | 5f5f766261523853747200005f5f7662 | __vbaR8Str..__vb |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
Metadata
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
-
0x0
4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 5d 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 75 9f f9 db 31 fe 97 88 31 fe 97 88 31 fe 97 88 b2 e2 99 88 30 fe 97 88 7e dc 9e 88 30 fe 97 88 07 d8 9a 88 30 fe 97 88 52 69 63 68 31 fe 97 88 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 39 dd c2 5c 00 00 00 00 00 00 00 00 e0 00 0f 01 0b 01 06 00 00 b0 02 00 00 20 00 00 00 00 00 00 b0 13 00 00 00 10 00 00 00 c0 02 00 00 00 40 00 00 10 00 00 00 10 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 e0 02 00 00 10 00 00 21 97 03 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 MZ......................@...............................................!..L.!This program ca]not be run in DOS mode....$.......u...1...1...1.......0...~...0.......0...Rich1...........PE..L...9..\..................... ....................@.................................!..................×2
notable severity, 90% confident.
build
PE carries bound import descriptors
| 0x13780 | 858de7bba8f76f50cb978bf626a8a8a0 | ......oP....&... |
| 0x13790 | a6a9a71ff2875e08b83f9fe9eef616ad | ......^..?...... |
| 0x137a0 | 6fb9aab2e34920fe63fc1d25b684d4e2 | o....I .c..%.... |
| 0x137b0 | 9d045d071797b63fea1f61ee00471ff3 | ..]....?..a..G.. |
| 0x137c0 | b4d9d7ff005af7f667cd2faad94138c7 | .....Z..g./..A8. |
| 0x137d0 | f3eb575541407a3cbec15d24eb0d4450 | ..WUA@z<..]$..DP |
| 0x137e0 | d553cd0cbff2902c7f1f4fafbd50d453 | .S.....,..O..P.S |
| 0x137f0 | 875ee93188cd4d156cdb7729fb390a7f | .^.1..M.l.w).9.. |
| 0x13800 | f8b6541ff97b63c7f687f423f3ede684 | ..T..{c....#.... |
| 0x13810 | d04a32be7f2f9fe5e7d2aa678f4adfaf | .J2../.....g.J.. |
| 0x13820 | b4f23f8742475bfb61f7bbe08e9275e9 | ..?.BG[.a.....u. |
| 0x13830 | 228658fc32c3e68bf1f4e7fa7f4f7a56 | ".X.2........OzV |
| 0x13840 | 64ee56d27ab062a7078271dcff001336 | d.V.z.b...q....6 |
| 0x13850 | d76053c99edb12cbb437cc1aaab079cc | .`S......7....y. |
| 0x13860 | 164729b7f3b455fc95fe15ba70b2e073 | .G)...U.....p..s |
| 0x13870 | f86e3fa31bfb3fdbf7d52be1cea1a3a1 | .n?...?...+..... |
| 0x13880 | 04d380f98cd6be7fe0e8c92f04802902 | .........../..). |
| 0x13890 | bd067d7fde3d8bd6f5b5988ecdaecaef | ..}..=.......... |
| 0x138a0 | 9db38ba8fe1793aa9b1b8d1bef625762 | .............bWb |
| 0x138b0 | d47ab26d822a779e108fa118d195fcff | .z.m.*w......... |
| 0x138c0 | 0096fb5977b5457a3c4b65001ce320d6 | ...Yw.Ez<Ke... . |
| 0x138d0 | 99fe5e54fe7d6cdbf8a0106bd1f3db7b | ..^T.}l....k...{ |
| 0x138e0 | 9703bb70f479edaf98a1cde1f202f4b9 | ...p.y.......... |
| 0x138f0 | 1c7557df50567f8dfe87d862485a362a | .uW.PV.....bHZ6* |
| 0x13900 | eb4207fab8748e58dbf674fe3da791c8 | .B...t.X..t.=... |
| 0x13910 | 3a7a44c08ebafafba953b7c1e07a7ba2 | :zD......S...z{. |
| 0x13920 | bbf2d3e40d17c78e9fceee8866a2a8de | ............f... |
| 0x13930 | f9f076cf5861722d61b877f662eb860c | ..v.Xar-a.w.b... |
| 0x13940 | a082709b7f9c8650dadfc2e89b9fea7d | ..p....P.......} |
| 0x13950 | b36d0dbbddc31c6a340604d0f015fc89 | .m.....j4....... |
| 0x13960 | 2698a703a8f975ba799ea9e7615454ed | &.....u.y...aTT. |
| 0x13970 | 0e8ddcb5d1e766a0ca6ceab8376d2eeb | ......f..l..7m.. |
| 0x13980 | 3045555d0eefc3e61777be67edea1248 | 0EU].....w.g...H |
| 0x13990 | a5ce26649c880ca791fd79f7917cd8b3 | ..&d......y..|.. |
| 0x139a0 | 429b2bc6ca0831529f2a7f83fcfd27eb | B.+...1R.*....'. |
| 0x139b0 | 649f7899d7baf7bf75eebdefdd7baf7b | d.x.....u....{.{ |
| 0x139c0 | f75eebdefdd7baf7bf75eebd07dd7baf | .^.......u....{. |
| 0x139d0 | 7bf75eebdefdd7baf7bf75eebdefdd7b | {.^.......u....{ |
| 0x139e0 | af7bf75eebdefdd7baf7bf75eebdefdd | .{.^.......u.... |
| 0x139f0 | 7baf7bf75eebdefdd7baf7bf75eebdef | {.{.^.......u... |
| 0x13a00 | dd7baf7bf75eebdefdd7baf7bf75eebd | .{.{.^.......u.. |
| 0x13a10 | efdd7baf7bf75eebdefdd7baf7bf59ee | ..{.{.^.......Y. |
| 0x13a20 | bdefdd7baf7bf75eebdefdd7baf7bf75 | ...{.{.^.......u |
| 0x13a30 | eebdefdd7baf7bf75eebdefdd7baf7bf | ....{.{.^....... |
| 0x13a40 | 75eebdefdd7baf7bf75eebdefdd7baf7 | u....{.{.^...... |
| 0x13a50 | bf75eebdefdd7bafffd4dfe3dfbaf75e | .u....{........^ |
| 0x13a60 | f7eebdd7bdfbaf75ef7eebdd7bdfbaf7 | .......u.~..{... |
| 0x13a70 | 5ef7eebdd7bdfbaf75ef7eebdd7bdfba | ^.......u.~..{.. |
| 0x14fe0 | 55937fc70a7febfedfd8d46001d7ba62 | U..........`...b |
| 0x14ff0 | c857c34147356554de0a3c7d2fdd5554 | .W.AG5eT..<}/.UT |
| 0x15000 | 00000000000000000000000000000000 | ................ |
| 0x15010 | 00000000000000000000000000000000 | ................ |
| 0x15020 | 00000000000000000000000000000000 | ................ |
| 0x15030 | 00000000000000000000000000000000 | ................ |
| 0x15040 | 00000000000000000000000000000000 | ................ |
| 0x15050 | 00000000000000000000000000000000 | ................ |
| 0x15060 | 00000000000000000000000000000000 | ................ |
| 0x15070 | 00000000000000000000000000000000 | ................ |
| 0x15080 | 00000000000000000000000000000000 | ................ |
| 0x15090 | 00000000000000000000000000000000 | ................ |
| 0x150a0 | 00000000000000000000000000000000 | ................ |
| 0x150b0 | 00000000000000000000000000000000 | ................ |
| 0x150c0 | 00000000000000000000000000000000 | ................ |
| 0x150d0 | 00000000000000000000000000000000 | ................ |
| 0x150e0 | 00000000000000000000000000000000 | ................ |
| 0x150f0 | 000000000000000000000000000000 | ............... |
| 0x0 | 4d5a90000300000004000000ffff0000 | MZ.............. |
| 0x10 | b8000000000000004000000000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 000000000000000000000000b8000000 | ................ |
| 0x40 | 0e1fba0e00b409cd21b8014ccd215468 | ........!..L.!Th |
| 0x50 | 69732070726f6772616d2063615d6e6f | is program ca]no |
| 0x60 | 742062652072756e20696e20444f5320 | t be run in DOS |
| 0x70 | 6d6f64652e0d0d0a2400000000000000 | mode....$....... |
| 0x80 | 759ff9db31fe978831fe978831fe9788 | u...1...1...1... |
| 0x90 | b2e2998830fe97887edc9e8830fe9788 | ....0...~...0... |
| 0xa0 | 07d89a8830fe97885269636831fe9788 | ....0...Rich1... |
| 0xb0 | 0000000000000000504500004c010300 | ........PE..L... |
| 0xc0 | 39ddc25c0000000000000000e0000f01 | 9..\............ |
| 0xd0 | 0b01060000b002000020000000000000 | ......... ...... |
| 0xe0 | b01300000010000000c0020000004000 | ..............@. |
| 0xf0 | 00100000001000000400000001000000 | ................ |
| 0x100 | 040000000000000000e0020000100000 | ................ |
| 0x110 | 21970300020000000000100000100000 | !............... |
| 0x120 | 000010 | ... |
-
0x0
4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 5d 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 75 9f f9 db 31 fe 97 88 31 fe 97 88 31 fe 97 88 b2 e2 99 88 30 fe 97 88 7e dc 9e 88 30 fe 97 88 07 d8 9a 88 30 fe 97 88 52 69 63 68 31 fe 97 88 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 39 dd c2 5c 00 00 00 00 00 00 00 00 e0 00 0f 01 0b 01 06 00 00 b0 02 00 00 20 00 00 00 00 00 00 b0 13 00 00 00 10 00 00 00 c0 02 00 00 00 40 00 00 10 00 00 00 10 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 e0 02 00 00 10 00 00 21 97 03 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 MZ......................@...............................................!..L.!This program ca]not be run in DOS mode....$.......u...1...1...1.......0...~...0.......0...Rich1...........PE..L...9..\..................... ....................@.................................!..................
| 0x2d126 | 0000dcd40200e8020003b00400000000 | ................ |
| 0x2d136 | 0000c4d7020030010000b00400000000 | ......0......... |
| 0x2d146 | 00000000000000000000340234000000 | ..........4.4... |
| 0x2d156 | 560053005f0056004500520053004900 | V.S._.V.E.R.S.I. |
| 0x2d166 | 4f004e005f0049004e0046004f000000 | O.N._.I.N.F.O... |
| 0x2d176 | 0000bd04effe00000100000001000000 | ................ |
| 0x2d186 | 00000000010000000000000000000000 | ................ |
| 0x2d196 | 00000400000001000000000000000000 | ................ |
| 0x2d1a6 | 00000000000044000000000056006100 | ......D.....V.a. |
| 0x2d1b6 | 7200460069006c00650049006e0066 | r.F.i.l.e.I.n.f |
| 0x2d1f2 | 0000010053007400720069006e006700 | ....S.t.r.i.n.g. |
| 0x2d202 | 460069006c00650049006e0066006f00 | F.i.l.e.I.n.f.o. |
| 0x2d212 | 00007001000001003000380030003400 | ..p.....0.8.0.4. |
| 0x2d222 | 300034004200300000002c000a000100 | 0.4.B.0...,..... |
| 0x2d232 | 43006f006d00700061006e0079004e00 | C.o.m.p.a.n.y.N. |
| 0x2d242 | 61006d00650000000000610061006100 | a.m.e.....a.a.a. |
| 0x2d252 | 61000000000040001e00010050007200 | a.....@.....P.r. |
| 0x2d262 | 6f0064007500630074004e0061006d00 | o.d.u.c.t.N.a.m. |
| 0x2d272 | 6500000000004b006100770061006900 | e.....K.a.w.a.i. |
| 0x2d282 | 69002d0055006e00690063006f007200 | i.-.U.n.i.c.o.r. |
| 0x2d292 | 6e00000000002c000a00010046006900 | n.....,.....F.i. |
| 0x2d2a2 | 6c006500560065007200730069006f00 | l.e.V.e.r.s.i.o. |
| 0x2d2b2 | 6e000000000031002e00300030000000 | n.....1...0.0... |
| 0x2d2c2 | 000030000a000100500072006f006400 | ..0.....P.r.o.d. |
| 0x2d2d2 | 75006300740056006500720073006900 | u.c.t.V.e.r.s.i. |
| 0x2d2e2 | 6f006e00000031002e00300030000000 | o.n...1...0.0... |
| 0x2d2f2 | 000040001e00010049d06e0074006500 | ..@.....I.n.t.e. |
| 0x2d302 | 72006e0061006c004e0061006d006500 | r.n.a.l.N.a.m.e. |
| 0x2d312 | 00004b00610077006100690069002d00 | ..K.a.w.a.i.i.-. |
| 0x2d322 | 55006e00690063006f0072006e000000 | U.n.i.c.o.r.n... |
| 0x2d332 | 00005000260001004f00720069006700 | ..P.&...O.r.i.g. |
| 0x2d342 | 69006e0061006c00460069006c006500 | i.n.a.l.F.i.l.e. |
| 0x2d352 | 6e0061006d00650000004b0061007700 | n.a.m.e...K.a.w. |
| 0x2d362 | 6100690069002d0055006e0069006300 | a.i.i.-.U.n.i.c. |
| 0x2d372 | 6f0072006e002e006500780065000000 | o.r.n...e.x.e... |
| 0x2d382 | 00000000010003002020020001000100 | ........ ...... |
| 0x2d392 | 3001000031752020100001000400e802 | 0...1u ........ |
| 0x2d3a2 | 00003275101010000100040028010000 | ..2u........(... |
| 0x2d3b2 | 33752800000010000000200000000100 | 3u(....... ..... |
| 0x2d3c2 | 040000000000c0000000000000000000 | ................ |
| 0x2d3d2 | 0000000000000000000000000000b600 | ................ |
| 0x2d3e2 | 80000080000000808000800000008000 | ................ |
| 0x2d3f2 | 80008080000080808000c0c0c0000000 | ................ |
| 0x2d402 | ff0000ff000000ffff00ff000000ff00 | ................ |
| 0x2d412 | ff00ffff0000ffffff00000000000000 | ................ |
| 0x2d422 | 000000000000000000000000 | ............ |
20 of 23 traits shown
Identity
| SHA-256 | 13b22613e7d2cb8c13ce3b9765d8da24a1ba334afb20e30c4eb82d1461293a88 |
|---|---|
| Filename | virussign.com_824ab1e53ddf24ae0b1fe27836a950c0.vir |
| Package | 13b22613e7d2cb8c13ce3b9765d8da24a1ba334afb20e30c4eb82d1461293a88 |
Origin
| Source | harvest |
|---|---|
| Feed | virussign |
| Domain | virussign.com |
Timeline
| First seen | 13 Aug 2026 16:31 UTC |
|---|---|
| First analyzed | 15 Aug 2026 18:00 UTC |
| Last analyzed | 15 Aug 2026 18:00 UTC |
| Last updated | 15 Aug 2026 18:00 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 298c2 |
Not seeing what you expected? Let us know