2495953d208cf63409a0912e7bd2968eafb054455c1dc8506b7138ae20a9a0d6
PE
Verdict: HOSTILE
AI
Kawaii-Unicorn VB6 dropper
Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Mc)O₂(As₃Er)H₇(CmDbDsFPoTiU)Md₄(Bi₃BkPa)
↗
Size
184.0 KB
⇩ download
First seen
12 days ago
Analyzed
7 days ago
Source
virussign.com
Also detected by
1 source
Kawaii VB6 write and rename dropper: virussign.com_e9798553f3bd78c77accca789200bc60.vir:0x238
Kawaii-Unicorn VB6 .die rename sabotage: virussign.com_e9798553f3bd78c77accca789200bc60.vir:0x238
Kawaii-Unicorn self-rename command and .die payload marker: virussign.com_e9798553f3bd78c77accca789200bc60.vir:0x29238
| 0x0 | 4d5a90000300000004000000ffff0000 | MZ..............Malformed VB6 shell program carrying Photoshop image metadata |
| 0x10 | b8000000000000004000000000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 000000000000000000000000b8000000 | ................ |
| 0x40 | 0e1fba0e00b409cd21b8014ccd215468 | ........!..L.!Th |
| 0x50 | 69732070726f6772616d2063615d6e6f | is program ca]no |
| 0x60 | 742062652072756e20696e20444f5320 | t be run in DOS |
| 0x70 | 6d6f64652e0d0d0a2400000000000000 | mode....$....... |
| 0x80 | 759ff9db31fe978831fe978831fe9788 | u...1...1...1... |
| 0x90 | b2e2998830fe97887edc9e8830fe9788 | ....0...~...0... |
| 0xa0 | 07d89a8830fe97885269636831fe9788 | ....0...Rich1... |
| 0xb0 | 0000000000000000504500004c010300 | ........PE..L... |
| 0xc0 | 39ddc25c0000000000000000e0000f01 | 9..\............ |
| 0xd0 | 0b01060000b002000020000000000000 | ......... ...... |
| 0xe0 | b01300000010000000c0020000004000 | ..............@. |
| 0xf0 | 00100000001000000400000001000000 | ................ |
| 0x100 | 040000000000000000e0020000100000 | ................ |
| 0x110 | 21970300020000000000100000100000 | !............... |
| 0x120 | 000010 | ... |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL....Malformed VB6 Unicorn Photoshop image-carrier sheller |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...rKawaii VB6 write and rename dropper |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.rMalformed VB6 Unicorn Photoshop image-carrier sheller |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x143c | 00000000000000000000000000000000 | ................ |
| 0x144c | 0000000000ff7c0200507c0200000700 | ......|..P|..... |
| 0x145c | 556e69636f726e000d010b007c276d20 | Unicorn.....|'m Malformed VB6 Unicorn Photoshop image-carrier sheller |
| 0x146c | 556e69636f726e000308000080190100 | Unicorn......... |
| 0x147c | 420021fd7b02006c740000f57b0200ff | B.!.{..lt...{... |
| 0x148c | d8ffe10f554578696600004d4d002a00 | ....UExif..MM.*. |
| 0x149c | 00000800070112000300000001000100 | ................ |
| 0x14ac | 00011a00050000000100000062011b00 | ............b... |
| 0x14bc | 050000000100d6006a01280003000000 | ........j.(..... |
| 0x14cc | 01000200000131000200000022000000 | ......1....."... |
| 0x14dc | 72013200020000001400000094876900 | r.2...........i. |
| 0x14ec | 0400000001000000a8000000d40015f9 | ................ |
| 0x14fc | 00000027100015f9000000271041646f | ...'.......'.AdoMalformed VB6 shell program carrying Photoshop image metadata |
| 0x150c | 62652050686f746f73686f7020434320 | be Photoshop CC |
| 0x151c | 32303138202857696e646f7773290032 | 2018 (Windows).2 |
| 0x152c | 3031393a30313a30372031393a34343a | 019:01:07 19:44: |
| 0x153c | 32370000035601000300000001000100 | 27...V.......... |
| 0x154c | 00a002000400000001000002eea00300 | ................ |
| 0x155c | 04000000010000032b00000000000000 | ........+....... |
| 0x156c | 0601030003000000010006008d011a00 | ................ |
| 0x157c | 050000000100000122011b0005000000 | ........"....... |
| 0x158c | 010000012a0128000300000001000200 | ....*.(......... |
| 0x159c | 00020100040000000100000132020200 | ............2... |
| 0x15ac | 040000000100000e1b00000000000000 | ................ |
| 0x15bc | 48000000010000004800000001ffd8ff | H.......H....... |
| 0x15cc | ed000c41646f62655f434d0001ffee00 | ...Adobe_CM..... |
| 0x15dc | 0e41646f626500648000000001ffdb00 | .Adobe.d........ |
| 0x15ec | 84000c08080809080c09090c110b0a0b | ................ |
| 0x15fc | 11150f0c0c0f1518131315131318110c | ................ |
| 0x160c | 0c0c0c0c0c110c0c0c0c0c0c0c0c0c0c | ................ |
| 0x161c | 0c0c0c0c0c0c0c0c0c0c0c0c0c0c | .............. |
| 0x3cdb | 652e636f6d2f70686f746f73686f702f | e.com/photoshop/ |
| 0x3ceb | 312e302f2220786d6c6e733a786d704d | 1.0/" xmlns:xmpM |
| 0x3cfb | 4d3d22687474703a2f2f6e732e61646f | M="http://ns.ado |
| 0x3d0b | 62652e636f6d2f7861702f312e302f6d | be.com/xap/1.0/m |
| 0x3d1b | 6d2f2220786d6c6e733a73744576743d | m/" xmlns:stEvt= |
| 0x3d2b | 2268746b703a2f2f6e732e61646f6265 | "htkp://ns.adobe |
| 0x3d3b | 2e636f6d2f7861702f3182302f735479 | .com/xap/1.0/sTy |
| 0x3d4b | 70652f5265736f757263654576656e97 | pe/ResourceEven. |
| 0x3d5b | 232220786d6c6e733a73745265663d22 | #" xmlns:stRef="Malformed VB6 shell program carrying Photoshop image metadata |
| 0x3d6b | 687474703a2f2f6e732e61646f62652e | http://ns.adobe. |
| 0x3d7b | 636f6d2f7861702f312e302f73547970 | com/xap/1.0/sTyp |
| 0x3d8b | 652f5265736f75726365526566232220 | e/ResourceRef#" |
| 0x3d9b | 786d703a43726561746f72546f6f6c3d | xmp:CreatorTool= |
| 0x3dab | 2241646f62652050686f746f73686f70 | "Adobe Photoshop |
| 0x3dbb | 2043432032303138202857696e646f77 | CC 2018 (Window |
| 0x3dcb | 73292220786d703a4372656174654461 | s)" xmp:CreateDa |
| 0x3ddb | 74651b22323031382d31322d30325431 | te."2018-12-02T1Kawaii-Unicorn VB6 .die rename sabotage |
| 0x3deb | 353a35303a30362b30383a3030222078 | 5:50:06+08:00" x |
| 0x3dfb | 6d703a4d6f64696679446174653d2232 | mp:ModifyDate="2 |
| 0x3e0b | 3031392d30312d30375431393a34343a | 019-01-07T19:44: |
| 0x3e1b | 32372b30383a30302220786d703a4d65 | 27+08:00" xmp:Me |
| 0x3e2b | 74616461746e446174653d2232303139 | tadatnDate="2019 |
| 0x3e3b | 2d30312d30375431393a34343a32372b | -01-07T19:44:27+ |
| 0x3e4b | 30383a3030222064633a666f726d6174 | 08:00" dc:format |
| 0x3e5b | 3d22696d6167652f6a70656722207068 | ="image/jpeg" ph |
| 0x3e6b | 6f746f73686f703a436f6c6f724d6f64 | otoshop:ColorMod |
| 0x3e7b | 653d2233222070686f746f73686f703a | e="3" photoshop: |
| 0x3e8b | 49434350726f66696c653d2273524742 | ICCProfile="sRGB |
| 0x3e9b | 2049454336313936362d322e31222078 | IEC61966-2.1" x |
| 0x3eab | 6d704d4d3a496e7374616e636549443d | mpMM:InstanceID= |
| 0x3ebb | 22786d702e6969643a64353937343839 | "xmp.iid:d597489 |
| 0x3ecb | 392d636138382d376634322d39353136 | 9-ca88-7f42-9516 |
| 0x3edb | 2d386537363335383038646633222078 | -8e7635808df3" x |
| 0x3eeb | 6d704d4d3a446f63756d656e7449443d | mpMM:DocumentID= |
| 0x3efb | 2261646f62653a646f6369643a70686f | "adobe:docid:pho |
| 0x3f0b | 746f73686f703a39353332373363332d | toshop:953273c3- |
| 0x3f1b | 336661362d386634352d623661302d39 | 3fa6-8f45-b6a0-9 |
| 0x3f2b | 62616633393363616362632220786d70 | baf393cacbc" xmp |
| 0x3f3b | 4d4d3a4f726967696e616c446f63756d | MM:OriginalDocum |
| 0x3f4b | 656e7449443d22786d702e6469643a39 | entID="xmp.did:9 |
| 0x3f5b | 343331 | 431 |
Well-known
| 0x298b8 | 8fe77fbba8fbf653e24ead339966cf11 | .......S.N.3.f.. |
| 0x298c8 | b70c00aa0060d3935465787431000000 | .....`..Text1... |
| 0x298d8 | 2e3dfbfcfaa06810a73808002b3371b5 | .=....h..8..+3q. |
| 0x298e8 | 433a5c50726f6772616d2046696c6573 | C:\Program Files |
| 0x298f8 | 2028783836295c4d6963726f736f6674 | (x86)\Microsoft |
| 0x29908 | 2056697375616c2053747564696f5c56 | Visual Studio\V |
| 0x29918 | 4239385c5642362e4f4c420056420000 | B98\VB6.OLB.VB.. |
| 0x29928 | d89842000000000006cc000009000000 | ..B............. |
| 0x29938 | e8984200249942dad0c2420000000000 | ..B.$.B...B..... |
| 0x29948 | 00000000c86dae00da4ead339966cf11 | .....m...N.3.f.. |
| 0x29958 | b70c00aa0060d3934c6162656c310000 | .....`..Label1.. |
| 0x29968 | 3a4fad330866cf11b70c00aa0060d393 | :O.3.f.......`.. |
| 0x29978 | 466f726d000000002a4fad339966cf11 | Form....*O.3.f.. |
| 0x29988 | b70c00aa0060d39354696d6572320000 | .....`..Timer2.. |
| 0x29998 | 54696d65723100000700000075416572 | Timer1......uAer |
| 0x299a8 | 333200001b0000005365744c61796572 | 32......SetLayer |
| 0x299b8 | 656457696e646f774174747269627574 | edWindowAttribut |
| 0x299c8 | 65730000a4994200b099420000000400 | es....B...B..... |
| 0x299d8 | d4c242000000000000000000a1dcc242 | ..B............B |
| 0x299e8 | 000bc07402ffe068cc994200b8c01240 | ...t...h..B....@ |
| 0x299f8 | 00ffd0ffe00000000f9d000047657457 | ............GetW |
| 0x29a08 | 696e646f774c6f6e67410000a4994200 | indowLongA....B. |
| 0x29a18 | 04b5420000000400e0c2420000000000 | ..B.......B..... |
| 0x29a28 | 00000000a1e8c242000bc07402ffe068 | .......B...t...h |
| 0x29a38 | 149a4200b8c0124000ffd0ffe0000000 | ..B....@........ |
| 0x29a48 | 0f00000053657457696e646f774c6f6e | ....SetWindowLon |
| 0x29a58 | 67410000a49942004c9a420000000400 | gA....B.L.B..... |
| 0x29a68 | ecc242000000000000000000a1f4c242 | ..B............B |
| 0x29a78 | 000bc07402ffe0685c9a4200b8c01240 | ...t...h\.B....@ |
| 0x29a88 | 00ffd0ffe00000000c00500000000000 | ..........P..... |
| 0x29a98 | 00000000233dfbfcfaa06810a7380800 | ....#=....h..8.. |
| 0x29aa8 | 2b3371b5223dfbfcfaa06810a7380800 | +3q."=....h..8.. |
| 0x29ab8 | 2b3371b5020000009c9a4200ac9a4200 | +3q.......B...B. |
| 0x29ac8 | 00000000794fad339966cf11b70c00aa | ....yO.3.f...... |
| 0x29ad8 | 0060d393020000005c00000008000000 | .`......\....... |
| 0x29ae8 | 2e006500780065000000000016000000 | ..e.x.e......... |
| 0x29af8 | 04000000010000000000000000007301 | ..............s. |
| 0x29b08 | ffffffff01000000d94ead339966cf11 | .........N.3.f.. |
| 0x29b18 | b70c00aa0060d393120000005c005500 | .....`......\.U. |
| 0x29b28 | 6e00690063006f0072006e002d000000 | n.i.c.o.r.n.-... |
| 0x29b38 | e14ead339966cf11b70c00e00060d393 | .N.3.f.......`.. |
| 0x29b48 | 1e00000063ea6d00640020002f0063f4 | ....c.m.d. ./.c. |
| 0x29b58 | 2000720065006e0061006d0065002000 | .r.e.n.a.m.e. . |
| 0x29b68 | 220000000c0000002e00650078006500 | ".........e.x.e. |
| 0x29b78 | 2200200000000000080020002e006400 | ". ....... ...d. |
| 0x29b88 | 6900650000000000564241362e444c4c | i.e.....VBA6.DLL |
| 0x29b98 | 000000005f5f766261456e6400000000 | ....__vbaEnd.... |
| 0x29ba8 | 5f5f766261523853747200005f5f7662 | __vbaR8Str..__vb |
| 0x2919c | 00000000000000000000000000000000 | ................ |
| 0x291ac | 00000000587d020000000000f8134000 | ....X}........@. |
| 0x291bc | 4c005200564235213626766236636873 | L.R.VB5!6&vb6chs |
| 0x291cc | 2e646c6c000000672a00000000000000 | .dll...g*....... |
| 0x291dc | 0000000000000a000408000000000000 | ................ |
| 0x291ec | 000000005c92420006f8300000ffffff | ....\.B...0..... |
| 0x291fc | 080000000100000001000000e9000000 | ................ |
| 0x2920c | 7091420050914200bc13400078000000 | p.B.P.B...@.x... |
| 0x2921c | 87000000960000009700000000000000 | ................ |
| 0x2922c | 0000000000000000000000004b617761 | ............Kawa |
| 0x2923c | 69692d556e69636f726e004b61776169 | ii-Unicorn.Kawai |
| 0x2924c | 692d556e69636f726e00005662310000 | i-Unicorn..Vb1.. |
| 0x2925c | f4010000d497420000000000409e4200 | ......B.....@.B. |
| 0x2926c | 50ae4200180a000008c00b0036124000 | P.B.........6.@. |
| 0x2927c | 00c04200000000000000000000000000 | ..B............. |
| 0x2928c | 00000000000000000000000000000000 | ................ |
| 0x2929c | 00000000000000000000000000000000 | ................ |
| 0x292ac | 00420000000000000000000000000000 | .B.............. |
| 0x292bc | 00000000000000000000000000000060 | ...............` |
| 0x292cc | 00000000000000000000000000000000 | ................ |
| 0x292dc | 00000000000000000000000000000000 | ................ |
| 0x292ec | 00000000000000000000000000000000 | ................ |
| 0x292fc | 00000000000000000000000000000000 | ................ |
| 0x2930c | 00000000000000000000000000000000 | ................ |
| 0x2931c | 00000000000000000000000000000000 | ................ |
| 0x2932c | 0000000000000000000000000000cf00 | ................ |
| 0x2933c | 00000000000000000000 | .......... |
| 0x2d1f2 | 0000010053007400720069006e006700 | ....S.t.r.i.n.g. |
| 0x2d202 | 460069006c00650049006e0066006f00 | F.i.l.e.I.n.f.o. |
| 0x2d212 | 00007001000001003000380030003400 | ..p.....0.8.0.4. |
| 0x2d222 | 300034004200300000002c000a000100 | 0.4.B.0...,..... |
| 0x2d232 | 43006f006d00700061006e0079004e00 | C.o.m.p.a.n.y.N. |
| 0x2d242 | 61006d00650000000000610061006100 | a.m.e.....a.a.a. |
| 0x2d252 | 61000000000040001e00010050007200 | a.....@.....P.r. |
| 0x2d262 | 6f0064007500630074004e0061006d00 | o.d.u.c.t.N.a.m. |
| 0x2d272 | 6500000000004b006100770061006900 | e.....K.a.w.a.i. |
| 0x2d282 | 69002d0055006e00690063006f007200 | i.-.U.n.i.c.o.r. |
| 0x2d292 | 6e00000000002c000a00010046006900 | n.....,.....F.i. |
| 0x2d2a2 | 6c006500560065007200730069006f00 | l.e.V.e.r.s.i.o. |
| 0x2d2b2 | 6e000000000031002e00300030000000 | n.....1...0.0... |
| 0x2d2c2 | 000030000a000100500072006f006400 | ..0.....P.r.o.d. |
| 0x2d2d2 | 75006300740056006500720073006900 | u.c.t.V.e.r.s.i. |
| 0x2d2e2 | 6f006e00000031002e00300030000000 | o.n...1...0.0... |
| 0x2d2f2 | 000040001e00010049d06e0074006500 | ..@.....I.n.t.e. |
| 0x2d302 | 72006e0061006c004e0061006d006500 | r.n.a.l.N.a.m.e. |
| 0x2d312 | 00004b00610077006100690069002d00 | ..K.a.w.a.i.i.-. |
| 0x2d322 | 55006e00690063006f0072006e000000 | U.n.i.c.o.r.n... |
| 0x2d332 | 00005000260001004f00720069006700 | ..P.&...O.r.i.g. |
| 0x2d342 | 69006e0061006c00460069006c006500 | i.n.a.l.F.i.l.e. |
| 0x2d352 | 6e0061006d00650000004b0061007700 | n.a.m.e...K.a.w. |
| 0x2d362 | 6100690069002d0055006e0069006300 | a.i.i.-.U.n.i.c. |
| 0x2d372 | 6f0072006e002e006500780065000000 | o.r.n...e.x.e... |
| 0x2d382 | 00000000010003002020020001000100 | ........ ...... |
| 0x2d392 | 3001000031752020100001000400e802 | 0...1u ........ |
| 0x2d3a2 | 00003275101010000100040028010000 | ..2u........(... |
| 0x2d3b2 | 33752800000010000000200000000100 | 3u(....... ..... |
| 0x2d3c2 | 040000000000c0000000000000000000 | ................ |
| 0x2d3d2 | 0000000000000000000000000000b600 | ................ |
| 0x2d3e2 | 80000080000000808000800000008000 | ................ |
| 0x2d3f2 | 80008080000080808000c0c0c0000000 | ................ |
| 0x2d402 | ff0000ff000000ffff00ff000000ff00 | ................ |
| 0x2d412 | ff00ffff0000ffffff00000000000000 | ................ |
| 0x2d422 | 000000000000000000000000 | ............ |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x143c | 00000000000000000000000000000000 | ................ |
| 0x144c | 0000000000ff7c0200507c0200000700 | ......|..P|..... |
| 0x145c | 556e69636f726e000d010b007c276d20 | Unicorn.....|'m |
| 0x146c | 556e69636f726e000308000080190100 | Unicorn......... |
| 0x147c | 420021fd7b02006c740000f57b0200ff | B.!.{..lt...{... |
| 0x148c | d8ffe10f554578696600004d4d002a00 | ....UExif..MM.*. |
| 0x149c | 00000800070112000300000001000100 | ................ |
| 0x14ac | 00011a00050000000100000062011b00 | ............b... |
| 0x14bc | 050000000100d6006a01280003000000 | ........j.(..... |
| 0x14cc | 01000200000131000200000022000000 | ......1....."... |
| 0x14dc | 72013200020000001400000094876900 | r.2...........i. |
| 0x14ec | 0400000001000000a8000000d40015f9 | ................ |
| 0x14fc | 00000027100015f9000000271041646f | ...'.......'.Ado |
| 0x150c | 62652050686f746f73686f7020434320 | be Photoshop CC |
| 0x151c | 32303138202857696e646f7773290032 | 2018 (Windows).2 |
| 0x152c | 3031393a30313a30372031393a34343a | 019:01:07 19:44: |
| 0x153c | 32370000035601000300000001000100 | 27...V.......... |
| 0x154c | 00a002000400000001000002eea00300 | ................ |
| 0x155c | 04000000010000032b00000000000000 | ........+....... |
| 0x156c | 0601030003000000010006008d011a00 | ................ |
| 0x157c | 050000000100000122011b0005000000 | ........"....... |
| 0x158c | 010000012a0128000300000001000200 | ....*.(......... |
| 0x159c | 00020100040000000100000132020200 | ............2... |
| 0x15ac | 040000000100000e1b00000000000000 | ................ |
| 0x15bc | 48000000010000004800000001ffd8ff | H.......H....... |
| 0x15cc | ed000c41646f62655f434d0001ffee00 | ...Adobe_CM..... |
| 0x15dc | 0e41646f626500648000000001ffdb00 | .Adobe.d........ |
| 0x15ec | 84000c08080809080c09090c110b0a0b | ................ |
| 0x15fc | 11150f0c0c0f1518131315131318110c | ................ |
| 0x160c | 0c0c0c0c0c110c0c0c0c0c0c0c0c0c0c | ................ |
| 0x161c | 0c0c0c0c0c0c0c0c0c0c0c0c0c0c | .............. |
Objectives
| 0x0 | 4d5a90000300000004000000ffff0000 | MZ.............. |
| 0x10 | b8000000000000004000000000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 000000000000000000000000b8000000 | ................ |
| 0x40 | 0e1fba0e00b409cd21b8014ccd215468 | ........!..L.!Th |
| 0x50 | 69732070726f6772616d2063615d6e6f | is program ca]no |
| 0x60 | 742062652072756e20696e20444f5320 | t be run in DOS |
| 0x70 | 6d6f64652e0d0d0a2400000000000000 | mode....$....... |
| 0x80 | 759ff9db31fe978831fe978831fe9788 | u...1...1...1... |
| 0x90 | b2e2998830fe97887edc9e8830fe9788 | ....0...~...0... |
| 0xa0 | 07d89a8830fe97885269636831fe9788 | ....0...Rich1... |
| 0xb0 | 0000000000000000504500004c010300 | ........PE..L... |
| 0xc0 | 39ddc25c0000000000000000e0000f01 | 9..\............ |
| 0xd0 | 0b01060000b002000020000000000000 | ......... ...... |
| 0xe0 | b01300000010000000c0020000004000 | ..............@. |
| 0xf0 | 00100000001000000400000001000000 | ................ |
| 0x100 | 040000000000000000e0020000100000 | ................ |
| 0x110 | 21970300020000000000100000100000 | !............... |
| 0x120 | 000010 | ... |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x0 | 4d5a90000300000004000000ffff0000 | MZ.............. |
| 0x10 | b8000000000000004000000000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 000000000000000000000000b8000000 | ................ |
| 0x40 | 0e1fba0e00b409cd21b8014ccd215468 | ........!..L.!Th |
| 0x50 | 69732070726f6772616d2063615d6e6f | is program ca]no |
| 0x60 | 742062652072756e20696e20444f5320 | t be run in DOS |
| 0x70 | 6d6f64652e0d0d0a2400000000000000 | mode....$....... |
| 0x80 | 759ff9db31fe978831fe978831fe9788 | u...1...1...1... |
| 0x90 | b2e2998830fe97887edc9e8830fe9788 | ....0...~...0... |
| 0xa0 | 07d89a8830fe97885269636831fe9788 | ....0...Rich1... |
| 0xb0 | 0000000000000000504500004c010300 | ........PE..L... |
| 0xc0 | 39ddc25c0000000000000000e0000f01 | 9..\............ |
| 0xd0 | 0b01060000b002000020000000000000 | ......... ...... |
| 0xe0 | b01300000010000000c0020000004000 | ..............@. |
| 0xf0 | 00100000001000000400000001000000 | ................ |
| 0x100 | 040000000000000000e0020000100000 | ................ |
| 0x110 | 21970300020000000000100000100000 | !............... |
| 0x120 | 000010 | ... |
| 0x143c | 00000000000000000000000000000000 | ................ |
| 0x144c | 0000000000ff7c0200507c0200000700 | ......|..P|..... |
| 0x145c | 556e69636f726e000d010b007c276d20 | Unicorn.....|'m |
| 0x146c | 556e69636f726e000308000080190100 | Unicorn......... |
| 0x147c | 420021fd7b02006c740000f57b0200ff | B.!.{..lt...{... |
| 0x148c | d8ffe10f554578696600004d4d002a00 | ....UExif..MM.*. |
| 0x149c | 00000800070112000300000001000100 | ................ |
| 0x14ac | 00011a00050000000100000062011b00 | ............b... |
| 0x14bc | 050000000100d6006a01280003000000 | ........j.(..... |
| 0x14cc | 01000200000131000200000022000000 | ......1....."... |
| 0x14dc | 72013200020000001400000094876900 | r.2...........i. |
| 0x14ec | 0400000001000000a8000000d40015f9 | ................ |
| 0x14fc | 00000027100015f9000000271041646f | ...'.......'.Ado |
| 0x150c | 62652050686f746f73686f7020434320 | be Photoshop CC |
| 0x151c | 32303138202857696e646f7773290032 | 2018 (Windows).2 |
| 0x152c | 3031393a30313a30372031393a34343a | 019:01:07 19:44: |
| 0x153c | 32370000035601000300000001000100 | 27...V.......... |
| 0x154c | 00a002000400000001000002eea00300 | ................ |
| 0x155c | 04000000010000032b00000000000000 | ........+....... |
| 0x156c | 0601030003000000010006008d011a00 | ................ |
| 0x157c | 050000000100000122011b0005000000 | ........"....... |
| 0x158c | 010000012a0128000300000001000200 | ....*.(......... |
| 0x159c | 00020100040000000100000132020200 | ............2... |
| 0x15ac | 040000000100000e1b00000000000000 | ................ |
| 0x15bc | 48000000010000004800000001ffd8ff | H.......H....... |
| 0x15cc | ed000c41646f62655f434d0001ffee00 | ...Adobe_CM..... |
| 0x15dc | 0e41646f626500648000000001ffdb00 | .Adobe.d........ |
| 0x15ec | 84000c08080809080c09090c110b0a0b | ................ |
| 0x15fc | 11150f0c0c0f1518131315131318110c | ................ |
| 0x160c | 0c0c0c0c0c110c0c0c0c0c0c0c0c0c0c | ................ |
| 0x161c | 0c0c0c0c0c0c0c0c0c0c0c0c0c0c | .............. |
| 0x3cdb | 652e636f6d2f70686f746f73686f702f | e.com/photoshop/ |
| 0x3ceb | 312e302f2220786d6c6e733a786d704d | 1.0/" xmlns:xmpM |
| 0x3cfb | 4d3d22687474703a2f2f6e732e61646f | M="http://ns.ado |
| 0x3d0b | 62652e636f6d2f7861702f312e302f6d | be.com/xap/1.0/m |
| 0x3d1b | 6d2f2220786d6c6e733a73744576743d | m/" xmlns:stEvt= |
| 0x3d2b | 2268746b703a2f2f6e732e61646f6265 | "htkp://ns.adobe |
| 0x3d3b | 2e636f6d2f7861702f3182302f735479 | .com/xap/1.0/sTy |
| 0x3d4b | 70652f5265736f757263654576656e97 | pe/ResourceEven. |
| 0x3d5b | 232220786d6c6e733a73745265663d22 | #" xmlns:stRef=" |
| 0x3d6b | 687474703a2f2f6e732e61646f62652e | http://ns.adobe. |
| 0x3d7b | 636f6d2f7861702f312e302f73547970 | com/xap/1.0/sTyp |
| 0x3d8b | 652f5265736f75726365526566232220 | e/ResourceRef#" |
| 0x3d9b | 786d703a43726561746f72546f6f6c3d | xmp:CreatorTool= |
| 0x3dab | 2241646f62652050686f746f73686f70 | "Adobe Photoshop |
| 0x3dbb | 2043432032303138202857696e646f77 | CC 2018 (Window |
| 0x3dcb | 73292220786d703a4372656174654461 | s)" xmp:CreateDa |
| 0x3ddb | 74651b22323031382d31322d30325431 | te."2018-12-02T1 |
| 0x3deb | 353a35303a30362b30383a3030222078 | 5:50:06+08:00" x |
| 0x3dfb | 6d703a4d6f64696679446174653d2232 | mp:ModifyDate="2 |
| 0x3e0b | 3031392d30312d30375431393a34343a | 019-01-07T19:44: |
| 0x3e1b | 32372b30383a30302220786d703a4d65 | 27+08:00" xmp:Me |
| 0x3e2b | 74616461746e446174653d2232303139 | tadatnDate="2019 |
| 0x3e3b | 2d30312d30375431393a34343a32372b | -01-07T19:44:27+ |
| 0x3e4b | 30383a3030222064633a666f726d6174 | 08:00" dc:format |
| 0x3e5b | 3d22696d6167652f6a70656722207068 | ="image/jpeg" ph |
| 0x3e6b | 6f746f73686f703a436f6c6f724d6f64 | otoshop:ColorMod |
| 0x3e7b | 653d2233222070686f746f73686f703a | e="3" photoshop: |
| 0x3e8b | 49434350726f66696c653d2273524742 | ICCProfile="sRGB |
| 0x3e9b | 2049454336313936362d322e31222078 | IEC61966-2.1" x |
| 0x3eab | 6d704d4d3a496e7374616e636549443d | mpMM:InstanceID= |
| 0x3ebb | 22786d702e6969643a64353937343839 | "xmp.iid:d597489 |
| 0x3ecb | 392d636138382d376634322d39353136 | 9-ca88-7f42-9516 |
| 0x3edb | 2d386537363335383038646633222078 | -8e7635808df3" x |
| 0x3eeb | 6d704d4d3a446f63756d656e7449443d | mpMM:DocumentID= |
| 0x3efb | 2261646f62653a646f6369643a70686f | "adobe:docid:pho |
| 0x3f0b | 746f73686f703a39353332373363332d | toshop:953273c3- |
| 0x3f1b | 336661362d386634352d623661302d39 | 3fa6-8f45-b6a0-9 |
| 0x3f2b | 62616633393363616362632220786d70 | baf393cacbc" xmp |
| 0x3f3b | 4d4d3a4f726967696e616c446f63756d | MM:OriginalDocum |
| 0x3f4b | 656e7449443d22786d702e6469643a39 | entID="xmp.did:9 |
| 0x3f5b | 343331 | 431 |
| 0x41df | 6e646f777329222073744576743a6368 | ndows)" stEvt:ch |
| 0x41ef | 616e6765643d222f222f3e203c726466 | anged="/"/> <rdf |
| 0x41ff | 3a6c692073744576743a616374696f6e | :li stEvt:action |
| 0x420f | 3d22636f6e5665727465642220737445 | ="conVerted" stE |
| 0x421f | 76743a706172616d65746572733d2266 | vt:parameters="f |
| 0x422f | 726f6d20696d6167652f706e6720746f | rom image/png to |
| 0x423f | 20696d6167652f6a706567222f3e203c | image/jpeg"/> < |
| 0x424f | 7264663a6c692073744576743a6163a0 | rdf:li stEvt:ac. |
| 0x425f | 696f6e3d226465726976656422207374 | ion="derived" st |
| 0x426f | 4576743a706172616d65746572733d22 | Evt:parameters=" |
| 0x427f | 636f6e7665727465642066726f6d2069 | converted from i |
| 0x428f | 6d6167652f706e6720746f20696d6167 | mage/png to imag |
| 0x429f | 652f6a706567222f3e203c7264663a6c | e/jpeg"/> <rdf:l |
| 0x42af | 692073744576743a616374696f6e3d22 | i stEvt:action=" |
| 0x42bf | 7361766564222073744576743a696e73 | saved" stEvt:ins |
| 0x42cf | 74616e636549443d22786d702e696964 | tanceID="xmp.iid |
| 0x42df | 3a64353937343839392d636138382d37 | :d5974899-ca88-7 |
| 0x42ef | 6634322d393531362d38653736333538 | f42-9516-8e76358 |
| 0x42ff | 3038646633222073744576743a776865 | 08df3" stEvt:whe |
| 0x430f | 6e3d22323031392d30315c3037543139 | n="2019-01\07T19 |
| 0x431f | 3a34343a32372b30383a303022207374 | :44:27+08:00" st |
| 0x432f | 4576743a736f6674776172654167656e | Evt:softwareAgen |
| 0x433f | 743d2241646f62652050686f746f7368 | t="Adobe Photosh |
| 0x434f | 6f702043432032303138202857696e64 | op CC 2018 (Wind |
| 0x435f | 6f777329222073744576743a6368b06e | ows)" stEvt:ch.n |
| 0x436f | 6765643d222f222f3e203c2f7264663a | ged="/"/> </rdf: |
| 0x437f | 5365713e203c2f786d704d4d3a48d073 | Seq> </xmpMM:H.s |
| 0x438f | 746f72793e203c786d704d4d3a446572 | tory> <xmpMM:Der |
| 0x439f | 6976656446726f6d2073745265663a69 | ivedFrom stRef:i |
| 0x43af | 6e7374616e636549443d22786d702e69 | nstanceID="xmp.i |
| 0x43bf | 69643a64396437373430312d37313234 | id:d9d77401-7124 |
| 0x43cf | 2d656434322d386237312d3430313462 | -ed42-8b71-4014b |
| 0x0 | 4d5a90000300000004000000ffff0000 | MZ.............. |
| 0x10 | b8000000000000004000000000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 000000000000000000000000b8000000 | ................ |
| 0x40 | 0e1fba0e00b409cd21b8014ccd215468 | ........!..L.!Th |
| 0x50 | 69732070726f6772616d2063615d6e6f | is program ca]no |
| 0x60 | 742062652072756e20696e20444f5320 | t be run in DOS |
| 0x70 | 6d6f64652e0d0d0a2400000000000000 | mode....$....... |
| 0x80 | 759ff9db31fe978831fe978831fe9788 | u...1...1...1... |
| 0x90 | b2e2998830fe97887edc9e8830fe9788 | ....0...~...0... |
| 0xa0 | 07d89a8830fe97885269636831fe9788 | ....0...Rich1... |
| 0xb0 | 0000000000000000504500004c010300 | ........PE..L... |
| 0xc0 | 39ddc25c0000000000000000e0000f01 | 9..\............ |
| 0xd0 | 0b01060000b002000020000000000000 | ......... ...... |
| 0xe0 | b01300000010000000c0020000004000 | ..............@. |
| 0xf0 | 00100000001000000400000001000000 | ................ |
| 0x100 | 040000000000000000e0020000100000 | ................ |
| 0x110 | 21970300020000000000100000100000 | !............... |
| 0x120 | 000010 | ... |
| 0x143c | 00000000000000000000000000000000 | ................ |
| 0x144c | 0000000000ff7c0200507c0200000700 | ......|..P|..... |
| 0x145c | 556e69636f726e000d010b007c276d20 | Unicorn.....|'m |
| 0x146c | 556e69636f726e000308000080190100 | Unicorn......... |
| 0x147c | 420021fd7b02006c740000f57b0200ff | B.!.{..lt...{... |
| 0x148c | d8ffe10f554578696600004d4d002a00 | ....UExif..MM.*. |
| 0x149c | 00000800070112000300000001000100 | ................ |
| 0x14ac | 00011a00050000000100000062011b00 | ............b... |
| 0x14bc | 050000000100d6006a01280003000000 | ........j.(..... |
| 0x14cc | 01000200000131000200000022000000 | ......1....."... |
| 0x14dc | 72013200020000001400000094876900 | r.2...........i. |
| 0x14ec | 0400000001000000a8000000d40015f9 | ................ |
| 0x14fc | 00000027100015f9000000271041646f | ...'.......'.Ado |
| 0x150c | 62652050686f746f73686f7020434320 | be Photoshop CC |
| 0x151c | 32303138202857696e646f7773290032 | 2018 (Windows).2 |
| 0x152c | 3031393a30313a30372031393a34343a | 019:01:07 19:44: |
| 0x153c | 32370000035601000300000001000100 | 27...V.......... |
| 0x154c | 00a002000400000001000002eea00300 | ................ |
| 0x155c | 04000000010000032b00000000000000 | ........+....... |
| 0x156c | 0601030003000000010006008d011a00 | ................ |
| 0x157c | 050000000100000122011b0005000000 | ........"....... |
| 0x158c | 010000012a0128000300000001000200 | ....*.(......... |
| 0x159c | 00020100040000000100000132020200 | ............2... |
| 0x15ac | 040000000100000e1b00000000000000 | ................ |
| 0x15bc | 48000000010000004800000001ffd8ff | H.......H....... |
| 0x15cc | ed000c41646f62655f434d0001ffee00 | ...Adobe_CM..... |
| 0x15dc | 0e41646f626500648000000001ffdb00 | .Adobe.d........ |
| 0x15ec | 84000c08080809080c09090c110b0a0b | ................ |
| 0x15fc | 11150f0c0c0f1518131315131318110c | ................ |
| 0x160c | 0c0c0c0c0c110c0c0c0c0c0c0c0c0c0c | ................ |
| 0x161c | 0c0c0c0c0c0c0c0c0c0c0c0c0c0c | .............. |
| 0x3cdb | 652e636f6d2f70686f746f73686f702f | e.com/photoshop/ |
| 0x3ceb | 312e302f2220786d6c6e733a786d704d | 1.0/" xmlns:xmpM |
| 0x3cfb | 4d3d22687474703a2f2f6e732e61646f | M="http://ns.ado |
| 0x3d0b | 62652e636f6d2f7861702f312e302f6d | be.com/xap/1.0/m |
| 0x3d1b | 6d2f2220786d6c6e733a73744576743d | m/" xmlns:stEvt= |
| 0x3d2b | 2268746b703a2f2f6e732e61646f6265 | "htkp://ns.adobe |
| 0x3d3b | 2e636f6d2f7861702f3182302f735479 | .com/xap/1.0/sTy |
| 0x3d4b | 70652f5265736f757263654576656e97 | pe/ResourceEven. |
| 0x3d5b | 232220786d6c6e733a73745265663d22 | #" xmlns:stRef=" |
| 0x3d6b | 687474703a2f2f6e732e61646f62652e | http://ns.adobe. |
| 0x3d7b | 636f6d2f7861702f312e302f73547970 | com/xap/1.0/sTyp |
| 0x3d8b | 652f5265736f75726365526566232220 | e/ResourceRef#" |
| 0x3d9b | 786d703a43726561746f72546f6f6c3d | xmp:CreatorTool= |
| 0x3dab | 2241646f62652050686f746f73686f70 | "Adobe Photoshop |
| 0x3dbb | 2043432032303138202857696e646f77 | CC 2018 (Window |
| 0x3dcb | 73292220786d703a4372656174654461 | s)" xmp:CreateDa |
| 0x3ddb | 74651b22323031382d31322d30325431 | te."2018-12-02T1 |
| 0x3deb | 353a35303a30362b30383a3030222078 | 5:50:06+08:00" x |
| 0x3dfb | 6d703a4d6f64696679446174653d2232 | mp:ModifyDate="2 |
| 0x3e0b | 3031392d30312d30375431393a34343a | 019-01-07T19:44: |
| 0x3e1b | 32372b30383a30302220786d703a4d65 | 27+08:00" xmp:Me |
| 0x3e2b | 74616461746e446174653d2232303139 | tadatnDate="2019 |
| 0x3e3b | 2d30312d30375431393a34343a32372b | -01-07T19:44:27+ |
| 0x3e4b | 30383a3030222064633a666f726d6174 | 08:00" dc:format |
| 0x3e5b | 3d22696d6167652f6a70656722207068 | ="image/jpeg" ph |
| 0x3e6b | 6f746f73686f703a436f6c6f724d6f64 | otoshop:ColorMod |
| 0x3e7b | 653d2233222070686f746f73686f703a | e="3" photoshop: |
| 0x3e8b | 49434350726f66696c653d2273524742 | ICCProfile="sRGB |
| 0x3e9b | 2049454336313936362d322e31222078 | IEC61966-2.1" x |
| 0x3eab | 6d704d4d3a496e7374616e636549443d | mpMM:InstanceID= |
| 0x3ebb | 22786d702e6969643a64353937343839 | "xmp.iid:d597489 |
| 0x3ecb | 392d636138382d376634322d39353136 | 9-ca88-7f42-9516 |
| 0x3edb | 2d386537363335383038646633222078 | -8e7635808df3" x |
| 0x3eeb | 6d704d4d3a446f63756d656e7449443d | mpMM:DocumentID= |
| 0x3efb | 2261646f62653a646f6369643a70686f | "adobe:docid:pho |
| 0x3f0b | 746f73686f703a39353332373363332d | toshop:953273c3- |
| 0x3f1b | 336661362d386634352d623661302d39 | 3fa6-8f45-b6a0-9 |
| 0x3f2b | 62616633393363616362632220786d70 | baf393cacbc" xmp |
| 0x3f3b | 4d4d3a4f726967696e616c446f63756d | MM:OriginalDocum |
| 0x3f4b | 656e7449443d22786d702e6469643a39 | entID="xmp.did:9 |
| 0x3f5b | 343331 | 431 |
| 0x41df | 6e646f777329222073744576743a6368 | ndows)" stEvt:ch |
| 0x41ef | 616e6765643d222f222f3e203c726466 | anged="/"/> <rdf |
| 0x41ff | 3a6c692073744576743a616374696f6e | :li stEvt:action |
| 0x420f | 3d22636f6e5665727465642220737445 | ="conVerted" stE |
| 0x421f | 76743a706172616d65746572733d2266 | vt:parameters="f |
| 0x422f | 726f6d20696d6167652f706e6720746f | rom image/png to |
| 0x423f | 20696d6167652f6a706567222f3e203c | image/jpeg"/> < |
| 0x424f | 7264663a6c692073744576743a6163a0 | rdf:li stEvt:ac. |
| 0x425f | 696f6e3d226465726976656422207374 | ion="derived" st |
| 0x426f | 4576743a706172616d65746572733d22 | Evt:parameters=" |
| 0x427f | 636f6e7665727465642066726f6d2069 | converted from i |
| 0x428f | 6d6167652f706e6720746f20696d6167 | mage/png to imag |
| 0x429f | 652f6a706567222f3e203c7264663a6c | e/jpeg"/> <rdf:l |
| 0x42af | 692073744576743a616374696f6e3d22 | i stEvt:action=" |
| 0x42bf | 7361766564222073744576743a696e73 | saved" stEvt:ins |
| 0x42cf | 74616e636549443d22786d702e696964 | tanceID="xmp.iid |
| 0x42df | 3a64353937343839392d636138382d37 | :d5974899-ca88-7 |
| 0x42ef | 6634322d393531362d38653736333538 | f42-9516-8e76358 |
| 0x42ff | 3038646633222073744576743a776865 | 08df3" stEvt:whe |
| 0x430f | 6e3d22323031392d30315c3037543139 | n="2019-01\07T19 |
| 0x431f | 3a34343a32372b30383a303022207374 | :44:27+08:00" st |
| 0x432f | 4576743a736f6674776172654167656e | Evt:softwareAgen |
| 0x433f | 743d2241646f62652050686f746f7368 | t="Adobe Photosh |
| 0x434f | 6f702043432032303138202857696e64 | op CC 2018 (Wind |
| 0x435f | 6f777329222073744576743a6368b06e | ows)" stEvt:ch.n |
| 0x436f | 6765643d222f222f3e203c2f7264663a | ged="/"/> </rdf: |
| 0x437f | 5365713e203c2f786d704d4d3a48d073 | Seq> </xmpMM:H.s |
| 0x438f | 746f72793e203c786d704d4d3a446572 | tory> <xmpMM:Der |
| 0x439f | 6976656446726f6d2073745265663a69 | ivedFrom stRef:i |
| 0x43af | 6e7374616e636549443d22786d702e69 | nstanceID="xmp.i |
| 0x43bf | 69643a64396437373430312d37313234 | id:d9d77401-7124 |
| 0x43cf | 2d656434322d386237312d3430313462 | -ed42-8b71-4014b |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x143c | 00000000000000000000000000000000 | ................ |
| 0x144c | 0000000000ff7c0200507c0200000700 | ......|..P|..... |
| 0x145c | 556e69636f726e000d010b007c276d20 | Unicorn.....|'m |
| 0x146c | 556e69636f726e000308000080190100 | Unicorn......... |
| 0x147c | 420021fd7b02006c740000f57b0200ff | B.!.{..lt...{... |
| 0x148c | d8ffe10f554578696600004d4d002a00 | ....UExif..MM.*. |
| 0x149c | 00000800070112000300000001000100 | ................ |
| 0x14ac | 00011a00050000000100000062011b00 | ............b... |
| 0x14bc | 050000000100d6006a01280003000000 | ........j.(..... |
| 0x14cc | 01000200000131000200000022000000 | ......1....."... |
| 0x14dc | 72013200020000001400000094876900 | r.2...........i. |
| 0x14ec | 0400000001000000a8000000d40015f9 | ................ |
| 0x14fc | 00000027100015f9000000271041646f | ...'.......'.Ado |
| 0x150c | 62652050686f746f73686f7020434320 | be Photoshop CC |
| 0x151c | 32303138202857696e646f7773290032 | 2018 (Windows).2 |
| 0x152c | 3031393a30313a30372031393a34343a | 019:01:07 19:44: |
| 0x153c | 32370000035601000300000001000100 | 27...V.......... |
| 0x154c | 00a002000400000001000002eea00300 | ................ |
| 0x155c | 04000000010000032b00000000000000 | ........+....... |
| 0x156c | 0601030003000000010006008d011a00 | ................ |
| 0x157c | 050000000100000122011b0005000000 | ........"....... |
| 0x158c | 010000012a0128000300000001000200 | ....*.(......... |
| 0x159c | 00020100040000000100000132020200 | ............2... |
| 0x15ac | 040000000100000e1b00000000000000 | ................ |
| 0x15bc | 48000000010000004800000001ffd8ff | H.......H....... |
| 0x15cc | ed000c41646f62655f434d0001ffee00 | ...Adobe_CM..... |
| 0x15dc | 0e41646f626500648000000001ffdb00 | .Adobe.d........ |
| 0x15ec | 84000c08080809080c09090c110b0a0b | ................ |
| 0x15fc | 11150f0c0c0f1518131315131318110c | ................ |
| 0x160c | 0c0c0c0c0c110c0c0c0c0c0c0c0c0c0c | ................ |
| 0x161c | 0c0c0c0c0c0c0c0c0c0c0c0c0c0c | .............. |
| 0x298b8 | 8fe77fbba8fbf653e24ead339966cf11 | .......S.N.3.f.. |
| 0x298c8 | b70c00aa0060d3935465787431000000 | .....`..Text1... |
| 0x298d8 | 2e3dfbfcfaa06810a73808002b3371b5 | .=....h..8..+3q. |
| 0x298e8 | 433a5c50726f6772616d2046696c6573 | C:\Program Files |
| 0x298f8 | 2028783836295c4d6963726f736f6674 | (x86)\Microsoft |
| 0x29908 | 2056697375616c2053747564696f5c56 | Visual Studio\V |
| 0x29918 | 4239385c5642362e4f4c420056420000 | B98\VB6.OLB.VB.. |
| 0x29928 | d89842000000000006cc000009000000 | ..B............. |
| 0x29938 | e8984200249942dad0c2420000000000 | ..B.$.B...B..... |
| 0x29948 | 00000000c86dae00da4ead339966cf11 | .....m...N.3.f.. |
| 0x29958 | b70c00aa0060d3934c6162656c310000 | .....`..Label1.. |
| 0x29968 | 3a4fad330866cf11b70c00aa0060d393 | :O.3.f.......`.. |
| 0x29978 | 466f726d000000002a4fad339966cf11 | Form....*O.3.f.. |
| 0x29988 | b70c00aa0060d39354696d6572320000 | .....`..Timer2.. |
| 0x29998 | 54696d65723100000700000075416572 | Timer1......uAer |
| 0x299a8 | 333200001b0000005365744c61796572 | 32......SetLayer |
| 0x299b8 | 656457696e646f774174747269627574 | edWindowAttribut |
| 0x299c8 | 65730000a4994200b099420000000400 | es....B...B..... |
| 0x299d8 | d4c242000000000000000000a1dcc242 | ..B............B |
| 0x299e8 | 000bc07402ffe068cc994200b8c01240 | ...t...h..B....@ |
| 0x299f8 | 00ffd0ffe00000000f9d000047657457 | ............GetW |
| 0x29a08 | 696e646f774c6f6e67410000a4994200 | indowLongA....B. |
| 0x29a18 | 04b5420000000400e0c2420000000000 | ..B.......B..... |
| 0x29a28 | 00000000a1e8c242000bc07402ffe068 | .......B...t...h |
| 0x29a38 | 149a4200b8c0124000ffd0ffe0000000 | ..B....@........ |
| 0x29a48 | 0f00000053657457696e646f774c6f6e | ....SetWindowLon |
| 0x29a58 | 67410000a49942004c9a420000000400 | gA....B.L.B..... |
| 0x29a68 | ecc242000000000000000000a1f4c242 | ..B............B |
| 0x29a78 | 000bc07402ffe0685c9a4200b8c01240 | ...t...h\.B....@ |
| 0x29a88 | 00ffd0ffe00000000c00500000000000 | ..........P..... |
| 0x29a98 | 00000000233dfbfcfaa06810a7380800 | ....#=....h..8.. |
| 0x29aa8 | 2b3371b5223dfbfcfaa06810a7380800 | +3q."=....h..8.. |
| 0x29ab8 | 2b3371b5020000009c9a4200ac9a4200 | +3q.......B...B. |
| 0x29ac8 | 00000000794fad339966cf11b70c00aa | ....yO.3.f...... |
| 0x29ad8 | 0060d393020000005c00000008000000 | .`......\....... |
| 0x29ae8 | 2e006500780065000000000016000000 | ..e.x.e......... |
| 0x29af8 | 04000000010000000000000000007301 | ..............s. |
| 0x29b08 | ffffffff01000000d94ead339966cf11 | .........N.3.f.. |
| 0x29b18 | b70c00aa0060d393120000005c005500 | .....`......\.U. |
| 0x29b28 | 6e00690063006f0072006e002d000000 | n.i.c.o.r.n.-... |
| 0x29b38 | e14ead339966cf11b70c00e00060d393 | .N.3.f.......`.. |
| 0x29b48 | 1e00000063ea6d00640020002f0063f4 | ....c.m.d. ./.c. |
| 0x29b58 | 2000720065006e0061006d0065002000 | .r.e.n.a.m.e. . |
| 0x29b68 | 220000000c0000002e00650078006500 | ".........e.x.e. |
| 0x29b78 | 2200200000000000080020002e006400 | ". ....... ...d. |
| 0x29b88 | 6900650000000000564241362e444c4c | i.e.....VBA6.DLL |
| 0x29b98 | 000000005f5f766261456e6400000000 | ....__vbaEnd.... |
| 0x29ba8 | 5f5f766261523853747200005f5f7662 | __vbaR8Str..__vb |
| 0x3cdb | 652e636f6d2f70686f746f73686f702f | e.com/photoshop/ |
| 0x3ceb | 312e302f2220786d6c6e733a786d704d | 1.0/" xmlns:xmpM |
| 0x3cfb | 4d3d22687474703a2f2f6e732e61646f | M="http://ns.ado |
| 0x3d0b | 62652e636f6d2f7861702f312e302f6d | be.com/xap/1.0/m |
| 0x3d1b | 6d2f2220786d6c6e733a73744576743d | m/" xmlns:stEvt= |
| 0x3d2b | 2268746b703a2f2f6e732e61646f6265 | "htkp://ns.adobe |
| 0x3d3b | 2e636f6d2f7861702f3182302f735479 | .com/xap/1.0/sTy |
| 0x3d4b | 70652f5265736f757263654576656e97 | pe/ResourceEven. |
| 0x3d5b | 232220786d6c6e733a73745265663d22 | #" xmlns:stRef=" |
| 0x3d6b | 687474703a2f2f6e732e61646f62652e | http://ns.adobe. |
| 0x3d7b | 636f6d2f7861702f312e302f73547970 | com/xap/1.0/sTyp |
| 0x3d8b | 652f5265736f75726365526566232220 | e/ResourceRef#" |
| 0x3d9b | 786d703a43726561746f72546f6f6c3d | xmp:CreatorTool= |
| 0x3dab | 2241646f62652050686f746f73686f70 | "Adobe Photoshop |
| 0x3dbb | 2043432032303138202857696e646f77 | CC 2018 (Window |
| 0x3dcb | 73292220786d703a4372656174654461 | s)" xmp:CreateDa |
| 0x3ddb | 74651b22323031382d31322d30325431 | te."2018-12-02T1 |
| 0x3deb | 353a35303a30362b30383a3030222078 | 5:50:06+08:00" x |
| 0x3dfb | 6d703a4d6f64696679446174653d2232 | mp:ModifyDate="2 |
| 0x3e0b | 3031392d30312d30375431393a34343a | 019-01-07T19:44: |
| 0x3e1b | 32372b30383a30302220786d703a4d65 | 27+08:00" xmp:Me |
| 0x3e2b | 74616461746e446174653d2232303139 | tadatnDate="2019 |
| 0x3e3b | 2d30312d30375431393a34343a32372b | -01-07T19:44:27+ |
| 0x3e4b | 30383a3030222064633a666f726d6174 | 08:00" dc:format |
| 0x3e5b | 3d22696d6167652f6a70656722207068 | ="image/jpeg" ph |
| 0x3e6b | 6f746f73686f703a436f6c6f724d6f64 | otoshop:ColorMod |
| 0x3e7b | 653d2233222070686f746f73686f703a | e="3" photoshop: |
| 0x3e8b | 49434350726f66696c653d2273524742 | ICCProfile="sRGB |
| 0x3e9b | 2049454336313936362d322e31222078 | IEC61966-2.1" x |
| 0x3eab | 6d704d4d3a496e7374616e636549443d | mpMM:InstanceID= |
| 0x3ebb | 22786d702e6969643a64353937343839 | "xmp.iid:d597489 |
| 0x3ecb | 392d636138382d376634322d39353136 | 9-ca88-7f42-9516 |
| 0x3edb | 2d386537363335383038646633222078 | -8e7635808df3" x |
| 0x3eeb | 6d704d4d3a446f63756d656e7449443d | mpMM:DocumentID= |
| 0x3efb | 2261646f62653a646f6369643a70686f | "adobe:docid:pho |
| 0x3f0b | 746f73686f703a39353332373363332d | toshop:953273c3- |
| 0x3f1b | 336661362d386634352d623661302d39 | 3fa6-8f45-b6a0-9 |
| 0x3f2b | 62616633393363616362632220786d70 | baf393cacbc" xmp |
| 0x3f3b | 4d4d3a4f726967696e616c446f63756d | MM:OriginalDocum |
| 0x3f4b | 656e7449443d22786d702e6469643a39 | entID="xmp.did:9 |
| 0x3f5b | 343331 | 431 |
| 0x41df | 6e646f777329222073744576743a6368 | ndows)" stEvt:ch |
| 0x41ef | 616e6765643d222f222f3e203c726466 | anged="/"/> <rdf |
| 0x41ff | 3a6c692073744576743a616374696f6e | :li stEvt:action |
| 0x420f | 3d22636f6e5665727465642220737445 | ="conVerted" stE |
| 0x421f | 76743a706172616d65746572733d2266 | vt:parameters="f |
| 0x422f | 726f6d20696d6167652f706e6720746f | rom image/png to |
| 0x423f | 20696d6167652f6a706567222f3e203c | image/jpeg"/> < |
| 0x424f | 7264663a6c692073744576743a6163a0 | rdf:li stEvt:ac. |
| 0x425f | 696f6e3d226465726976656422207374 | ion="derived" st |
| 0x426f | 4576743a706172616d65746572733d22 | Evt:parameters=" |
| 0x427f | 636f6e7665727465642066726f6d2069 | converted from i |
| 0x428f | 6d6167652f706e6720746f20696d6167 | mage/png to imag |
| 0x429f | 652f6a706567222f3e203c7264663a6c | e/jpeg"/> <rdf:l |
| 0x42af | 692073744576743a616374696f6e3d22 | i stEvt:action=" |
| 0x42bf | 7361766564222073744576743a696e73 | saved" stEvt:ins |
| 0x42cf | 74616e636549443d22786d702e696964 | tanceID="xmp.iid |
| 0x42df | 3a64353937343839392d636138382d37 | :d5974899-ca88-7 |
| 0x42ef | 6634322d393531362d38653736333538 | f42-9516-8e76358 |
| 0x42ff | 3038646633222073744576743a776865 | 08df3" stEvt:whe |
| 0x430f | 6e3d22323031392d30315c3037543139 | n="2019-01\07T19 |
| 0x431f | 3a34343a32372b30383a303022207374 | :44:27+08:00" st |
| 0x432f | 4576743a736f6674776172654167656e | Evt:softwareAgen |
| 0x433f | 743d2241646f62652050686f746f7368 | t="Adobe Photosh |
| 0x434f | 6f702043432032303138202857696e64 | op CC 2018 (Wind |
| 0x435f | 6f777329222073744576743a6368b06e | ows)" stEvt:ch.n |
| 0x436f | 6765643d222f222f3e203c2f7264663a | ged="/"/> </rdf: |
| 0x437f | 5365713e203c2f786d704d4d3a48d073 | Seq> </xmpMM:H.s |
| 0x438f | 746f72793e203c786d704d4d3a446572 | tory> <xmpMM:Der |
| 0x439f | 6976656446726f6d2073745265663a69 | ivedFrom stRef:i |
| 0x43af | 6e7374616e636549443d22786d702e69 | nstanceID="xmp.i |
| 0x43bf | 69643a64396437373430312d37313234 | id:d9d77401-7124 |
| 0x43cf | 2d656434322d386237312d3430313462 | -ed42-8b71-4014b |
Micro-behaviors
| 0x3b06 | 2000500068006f0074006f4c73006800 | .P.h.o.t.oLs.h. |
| 0x3b16 | 6f007000200043004300200032003000 | o.p. .C.C. .2.0. |
| 0x3b26 | 31003800000001006942494d04060000 | 1.8.....iBIM.... |
| 0x3b36 | 000000070008000000010100ffe1117a | ...............z |
| 0x3b46 | 687474703a2f2f6e732e61646f62652e | http://ns.adobe. |
| 0x3b56 | 636f6d2f7861702f312e302f003c3f78 | com/xap/1.0/.<?x |
| 0x3b66 | 7061636b657420626567696e3d22efbb | packet begin=".. |
| 0x3b76 | bf222069643d2257354d304d70436568 | ." id="W5M0MpCeh |
| 0x3b86 | 69487a7265537a4e54637a6b63396422 | iHzreSzNTczkc9d" |
| 0x3b96 | 3f3e203c783a786d706d65746120786d | ?> <x:xmpmeta xm |
| 0x3ba6 | 6c6e733a783d2261646f62653a6e733a | lns:x="adobe:ns: |
| 0x3bb6 | 6d6574612f2220783a786d70746b3d22 | meta/" x:xmptk=" |
| 0x3bc6 | 41646f626520584d5020436f72652035 | Adobe XMP Core 5 |
| 0x3bd6 | 2e362d63 | .6-c |
| 0x4ef4 | 000038f50000039058595a2000000000 | ..8.....XYZ .... |
| 0x4f04 | 000062990000b785000018da58595a20 | ..b.........XYZ |
| 0x4f14 | 00640000000024a000000f840000b6cf | .d....$......... |
| 0x4f24 | 64657363000000000000001649454320 | desc........IEC |
| 0x4f34 | 687474703a2f2f7777772e6965632e63 | http://www.iec.c |
| 0x4f44 | 6800000000000000000000001649a143 | h............I.C |
| 0x4f54 | 20687474703a2f2f7777772e6965632e | http://www.iec. |
| 0x4f64 | 63680000000000000000000000000000 | ch.............. |
| 0x4f74 | 00000000000000000000000000000000 | ................ |
| 0x4f84 | 00000000000000000000000000000000 | ................ |
| 0x4f94 | 64657363000000000000002e49454320 | desc........IEC |
| 0x4fa4 | 36313936362d322e312044656661756c | 61966-2.1 Defaul |
| 0x4fb4 | 742052474220636f6c6f757220737061 | t RGB colour spa |
| 0x4fc4 | 63 | c |
| 0x3cdb | 652e636f6d2f70686f746f73686f702f | e.com/photoshop/ |
| 0x3ceb | 312e302f2220786d6c6e733a786d704d | 1.0/" xmlns:xmpM |
| 0x3cfb | 4d3d22687474703a2f2f6e732e61646f | M="http://ns.ado |
| 0x3d0b | 62652e636f6d2f7861702f312e302f6d | be.com/xap/1.0/m |
| 0x3d1b | 6d2f2220786d6c6e733a73744576743d | m/" xmlns:stEvt= |
| 0x3d2b | 2268746b703a2f2f6e732e61646f6265 | "htkp://ns.adobe |
| 0x3d3b | 2e636f6d2f7861702f3182302f735479 | .com/xap/1.0/sTy |
| 0x3d4b | 70652f5265736f757263654576656e97 | pe/ResourceEven. |
| 0x3d5b | 232220786d6c6e733a73745265663d22 | #" xmlns:stRef=" |
| 0x3d6b | 687474703a2f2f6e732e61646f62652e | http://ns.adobe. |
| 0x3d7b | 636f6d2f7861702f312e302f73547970 | com/xap/1.0/sTyp |
| 0x3d8b | 652f5265736f75726365526566232220 | e/ResourceRef#" |
| 0x3d9b | 786d703a43726561746f72546f6f6c3d | xmp:CreatorTool= |
| 0x3dab | 2241646f62652050686f746f73686f70 | "Adobe Photoshop |
| 0x3dbb | 2043432032303138202857696e646f77 | CC 2018 (Window |
| 0x3dcb | 73292220786d703a4372656174654461 | s)" xmp:CreateDa |
| 0x3ddb | 74651b22323031382d31322d30325431 | te."2018-12-02T1 |
| 0x3deb | 353a35303a30362b30383a3030222078 | 5:50:06+08:00" x |
| 0x3dfb | 6d703a4d6f64696679446174653d2232 | mp:ModifyDate="2 |
| 0x3e0b | 3031392d30312d30375431393a34343a | 019-01-07T19:44: |
| 0x3e1b | 32372b30383a30302220786d703a4d65 | 27+08:00" xmp:Me |
| 0x3e2b | 74616461746e446174653d2232303139 | tadatnDate="2019 |
| 0x3e3b | 2d30312d30375431393a34343a32372b | -01-07T19:44:27+ |
| 0x3e4b | 30383a3030222064633a666f726d6174 | 08:00" dc:format |
| 0x3e5b | 3d22696d6167652f6a70656722207068 | ="image/jpeg" ph |
| 0x3e6b | 6f746f73686f703a436f6c6f724d6f64 | otoshop:ColorMod |
| 0x3e7b | 653d2233222070686f746f73686f703a | e="3" photoshop: |
| 0x3e8b | 49434350726f66696c653d2273524742 | ICCProfile="sRGB |
| 0x3e9b | 2049454336313936362d322e31222078 | IEC61966-2.1" x |
| 0x3eab | 6d704d4d3a496e7374616e636549443d | mpMM:InstanceID= |
| 0x3ebb | 22786d702e6969643a64353937343839 | "xmp.iid:d597489 |
| 0x3ecb | 392d636138382d376634322d39353136 | 9-ca88-7f42-9516 |
| 0x3edb | 2d386537363335383038646633222078 | -8e7635808df3" x |
| 0x3eeb | 6d704d4d3a446f63756d656e7449443d | mpMM:DocumentID= |
| 0x3efb | 2261646f62653a646f6369643a70686f | "adobe:docid:pho |
| 0x3f0b | 746f73686f703a39353332373363332d | toshop:953273c3- |
| 0x3f1b | 336661362d386634352d623661302d39 | 3fa6-8f45-b6a0-9 |
| 0x3f2b | 62616633393363616362632220786d70 | baf393cacbc" xmp |
| 0x3f3b | 4d4d3a4f726967696e616c446f63756d | MM:OriginalDocum |
| 0x3f4b | 656e7449443d22786d702e6469643a39 | entID="xmp.did:9 |
| 0x3f5b | 343331 | 431 |
| 0x41df | 6e646f777329222073744576743a6368 | ndows)" stEvt:ch |
| 0x41ef | 616e6765643d222f222f3e203c726466 | anged="/"/> <rdf |
| 0x41ff | 3a6c692073744576743a616374696f6e | :li stEvt:action |
| 0x420f | 3d22636f6e5665727465642220737445 | ="conVerted" stE |
| 0x421f | 76743a706172616d65746572733d2266 | vt:parameters="f |
| 0x422f | 726f6d20696d6167652f706e6720746f | rom image/png to |
| 0x423f | 20696d6167652f6a706567222f3e203c | image/jpeg"/> < |
| 0x424f | 7264663a6c692073744576743a6163a0 | rdf:li stEvt:ac. |
| 0x425f | 696f6e3d226465726976656422207374 | ion="derived" st |
| 0x426f | 4576743a706172616d65746572733d22 | Evt:parameters=" |
| 0x427f | 636f6e7665727465642066726f6d2069 | converted from i |
| 0x428f | 6d6167652f706e6720746f20696d6167 | mage/png to imag |
| 0x429f | 652f6a706567222f3e203c7264663a6c | e/jpeg"/> <rdf:l |
| 0x42af | 692073744576743a616374696f6e3d22 | i stEvt:action=" |
| 0x42bf | 7361766564222073744576743a696e73 | saved" stEvt:ins |
| 0x42cf | 74616e636549443d22786d702e696964 | tanceID="xmp.iid |
| 0x42df | 3a64353937343839392d636138382d37 | :d5974899-ca88-7 |
| 0x42ef | 6634322d393531362d38653736333538 | f42-9516-8e76358 |
| 0x42ff | 3038646633222073744576743a776865 | 08df3" stEvt:whe |
| 0x430f | 6e3d22323031392d30315c3037543139 | n="2019-01\07T19 |
| 0x431f | 3a34343a32372b30383a303022207374 | :44:27+08:00" st |
| 0x432f | 4576743a736f6674776172654167656e | Evt:softwareAgen |
| 0x433f | 743d2241646f62652050686f746f7368 | t="Adobe Photosh |
| 0x434f | 6f702043432032303138202857696e64 | op CC 2018 (Wind |
| 0x435f | 6f777329222073744576743a6368b06e | ows)" stEvt:ch.n |
| 0x436f | 6765643d222f222f3e203c2f7264663a | ged="/"/> </rdf: |
| 0x437f | 5365713e203c2f786d704d4d3a48d073 | Seq> </xmpMM:H.s |
| 0x438f | 746f72793e203c786d704d4d3a446572 | tory> <xmpMM:Der |
| 0x439f | 6976656446726f6d2073745265663a69 | ivedFrom stRef:i |
| 0x43af | 6e7374616e636549443d22786d702e69 | nstanceID="xmp.i |
| 0x43bf | 69643a64396437373430312d37313234 | id:d9d77401-7124 |
| 0x43cf | 2d656434322d386237312d3430313462 | -ed42-8b71-4014b |
| 0x143c | 00000000000000000000000000000000 | ................ |
| 0x144c | 0000000000ff7c0200507c0200000700 | ......|..P|..... |
| 0x145c | 556e69636f726e000d010b007c276d20 | Unicorn.....|'m |
| 0x146c | 556e69636f726e000308000080190100 | Unicorn......... |
| 0x147c | 420021fd7b02006c740000f57b0200ff | B.!.{..lt...{... |
| 0x148c | d8ffe10f554578696600004d4d002a00 | ....UExif..MM.*. |
| 0x149c | 00000800070112000300000001000100 | ................ |
| 0x14ac | 00011a00050000000100000062011b00 | ............b... |
| 0x14bc | 050000000100d6006a01280003000000 | ........j.(..... |
| 0x14cc | 01000200000131000200000022000000 | ......1....."... |
| 0x14dc | 72013200020000001400000094876900 | r.2...........i. |
| 0x14ec | 0400000001000000a8000000d40015f9 | ................ |
| 0x14fc | 00000027100015f9000000271041646f | ...'.......'.Ado |
| 0x150c | 62652050686f746f73686f7020434320 | be Photoshop CC |
| 0x151c | 32303138202857696e646f7773290032 | 2018 (Windows).2 |
| 0x152c | 3031393a30313a30372031393a34343a | 019:01:07 19:44: |
| 0x153c | 32370000035601000300000001000100 | 27...V.......... |
| 0x154c | 00a002000400000001000002eea00300 | ................ |
| 0x155c | 04000000010000032b00000000000000 | ........+....... |
| 0x156c | 0601030003000000010006008d011a00 | ................ |
| 0x157c | 050000000100000122011b0005000000 | ........"....... |
| 0x158c | 010000012a0128000300000001000200 | ....*.(......... |
| 0x159c | 00020100040000000100000132020200 | ............2... |
| 0x15ac | 040000000100000e1b00000000000000 | ................ |
| 0x15bc | 48000000010000004800000001ffd8ff | H.......H....... |
| 0x15cc | ed000c41646f62655f434d0001ffee00 | ...Adobe_CM..... |
| 0x15dc | 0e41646f626500648000000001ffdb00 | .Adobe.d........ |
| 0x15ec | 84000c08080809080c09090c110b0a0b | ................ |
| 0x15fc | 11150f0c0c0f1518131315131318110c | ................ |
| 0x160c | 0c0c0c0c0c110c0c0c0c0c0c0c0c0c0c | ................ |
| 0x161c | 0c0c0c0c0c0c0c0c0c0c0c0c0c0c | .............. |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x290ae | 696d657232000b032823000007702600 | imer2...(#...p&. |
| 0x290be | 000890150000ff032000000002050054 | ........ ......T |
| 0x290ce | 65787431000204c003d00267021d010b | ext1.......g.... |
| 0x290de | 01003000120100ff031f000000030600 | ..0............. |
| 0x290ee | 54696d657231000b038a0b000007c021 | Timer1.........! |
| 0x290fe | 000008f8070000ff0347000000040600 | .........G...... |
| 0x2910e | 4c6162656c310001010700556e69636f | Label1.....Unico |
| 0x2911e | 726e0004ff00ff000538045811d72837 | rn.......8.X..(7 |
| 0x2912e | 051200001f002501000000bc0280a903 | ......%......... |
| 0x2913e | 000d4d532053616e73205365726966ff | ..MS Sans Serif. |
| 0x2914e | 020406000000fc9c4200070000005c9a | ........B.....\. |
| 0x2915e | 420007000000149a420007000000cc99 | B.......B....... |
| 0x2916e | 420050000000 | B.P... |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x298b8 | 8fe77fbba8fbf653e24ead339966cf11 | .......S.N.3.f.. |
| 0x298c8 | b70c00aa0060d3935465787431000000 | .....`..Text1... |
| 0x298d8 | 2e3dfbfcfaa06810a73808002b3371b5 | .=....h..8..+3q. |
| 0x298e8 | 433a5c50726f6772616d2046696c6573 | C:\Program Files |
| 0x298f8 | 2028783836295c4d6963726f736f6674 | (x86)\Microsoft |
| 0x29908 | 2056697375616c2053747564696f5c56 | Visual Studio\V |
| 0x29918 | 4239385c5642362e4f4c420056420000 | B98\VB6.OLB.VB.. |
| 0x29928 | d89842000000000006cc000009000000 | ..B............. |
| 0x29938 | e8984200249942dad0c2420000000000 | ..B.$.B...B..... |
| 0x29948 | 00000000c86dae00da4ead339966cf11 | .....m...N.3.f.. |
| 0x29958 | b70c00aa0060d3934c6162656c310000 | .....`..Label1.. |
| 0x29968 | 3a4fad330866cf11b70c00aa0060d393 | :O.3.f.......`.. |
| 0x29978 | 466f726d000000002a4fad339966cf11 | Form....*O.3.f.. |
| 0x29988 | b70c00aa0060d39354696d6572320000 | .....`..Timer2.. |
| 0x29998 | 54696d65723100000700000075416572 | Timer1......uAer |
| 0x299a8 | 333200001b0000005365744c61796572 | 32......SetLayer |
| 0x299b8 | 656457696e646f774174747269627574 | edWindowAttribut |
| 0x299c8 | 65730000a4994200b099420000000400 | es....B...B..... |
| 0x299d8 | d4c242000000000000000000a1dcc242 | ..B............B |
| 0x299e8 | 000bc07402ffe068cc994200b8c01240 | ...t...h..B....@ |
| 0x299f8 | 00ffd0ffe00000000f9d000047657457 | ............GetW |
| 0x29a08 | 696e646f774c6f6e67410000a4994200 | indowLongA....B. |
| 0x29a18 | 04b5420000000400e0c2420000000000 | ..B.......B..... |
| 0x29a28 | 00000000a1e8c242000bc07402ffe068 | .......B...t...h |
| 0x29a38 | 149a4200b8c0124000ffd0ffe0000000 | ..B....@........ |
| 0x29a48 | 0f00000053657457696e646f774c6f6e | ....SetWindowLon |
| 0x29a58 | 67410000a49942004c9a420000000400 | gA....B.L.B..... |
| 0x29a68 | ecc242000000000000000000a1f4c242 | ..B............B |
| 0x29a78 | 000bc07402ffe0685c9a4200b8c01240 | ...t...h\.B....@ |
| 0x29a88 | 00ffd0ffe00000000c00500000000000 | ..........P..... |
| 0x29a98 | 00000000233dfbfcfaa06810a7380800 | ....#=....h..8.. |
| 0x29aa8 | 2b3371b5223dfbfcfaa06810a7380800 | +3q."=....h..8.. |
| 0x29ab8 | 2b3371b5020000009c9a4200ac9a4200 | +3q.......B...B. |
| 0x29ac8 | 00000000794fad339966cf11b70c00aa | ....yO.3.f...... |
| 0x29ad8 | 0060d393020000005c00000008000000 | .`......\....... |
| 0x29ae8 | 2e006500780065000000000016000000 | ..e.x.e......... |
| 0x29af8 | 04000000010000000000000000007301 | ..............s. |
| 0x29b08 | ffffffff01000000d94ead339966cf11 | .........N.3.f.. |
| 0x29b18 | b70c00aa0060d393120000005c005500 | .....`......\.U. |
| 0x29b28 | 6e00690063006f0072006e002d000000 | n.i.c.o.r.n.-... |
| 0x29b38 | e14ead339966cf11b70c00e00060d393 | .N.3.f.......`.. |
| 0x29b48 | 1e00000063ea6d00640020002f0063f4 | ....c.m.d. ./.c. |
| 0x29b58 | 2000720065006e0061006d0065002000 | .r.e.n.a.m.e. . |
| 0x29b68 | 220000000c0000002e00650078006500 | ".........e.x.e. |
| 0x29b78 | 2200200000000000080020002e006400 | ". ....... ...d. |
| 0x29b88 | 6900650000000000564241362e444c4c | i.e.....VBA6.DLL |
| 0x29b98 | 000000005f5f766261456e6400000000 | ....__vbaEnd.... |
| 0x29ba8 | 5f5f766261523853747200005f5f7662 | __vbaR8Str..__vb |
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
Metadata
| 0xfdc | 00000000000000000000000000000000 | ................ |
| 0xfec | 00000000000000000000000000000000 | ................ |
| 0xffc | 000000008693a372f909a372ee6aa472 | .......r...r.j.r |
| 0x100c | 3168a4728dcca1726272a47288bea072 | 1h.r...rbr.r...r |
| 0x101c | ba02a372c39fa1724109a372766aa272 | ...r...rA..rvj.r |
| 0x102c | 3ac3a07274a2a1726e02a372fec1a172 | :..rt..rn..r...r |
| 0x103c | 05cda1723acda1729d49a272f19fa172 | ...r:..r.I.r...r |
| 0x104c | 0603a3720604a372ee94a372ea62a372 | ...r...r...r.b.r |
| 0x105c | 7d41a172749ba0726c57a272fda09472 | }A.rt..rlW.r...r |
| 0x106c | f609a3720ac3a1729b05a272879ba072 | ...r...r...r...r |
| 0x107c | 69cea0729395a372859aa072df47a272 | i..r...r...r.G.r |
| 0x108c | 8906a372ba03a37213a5a4725057a272 | ...r...r...rPW.r |
| 0x109c | 5ac6a1724819a2727d69a2722b94a372 | Z..rH..r}i.r+..r |
| 0x10ac | 103da17237a2a1721856a272ea10a272 | .=.r7..r.V.r...r |
| 0x10bc | 3a03a3723a04a372016ca2726e03a372 | :..r:..r.l.rn..r |
| 0x10cc | a9fda272a43594722f4ea272db76a472 | ...r.5.r/N.r.v.r |
| 0x10dc | c092a372306ca272edeea2724496a372 | ...r0l.r...rD..r |
| 0x10ec | 2198a272134ea27211dda272ec6ba272 | !..r.N.r...r.k.r |
| 0x10fc | af9fa172000000000000000021001400 | ...r........!... |
| 0x110c | 0ba04200000000000000000000000000 | ..B............. |
| 0x111c | 2011400008000000969e42009d9e4200 | .@.......B...B. |
| 0x112c | ab9e4200ef9e4200439f4200559f4200 | ..B...B.C.B.U.B. |
| 0x113c | a39f420004a042000000000027001400 | ..B...B.....'... |
| 0x114c | 61a54200a2a5420069a5420000000000 | a.B...B.i.B..... |
| 0x115c | 601140000e00000075a0420085a04200 | `.@.....u.B...B. |
| 0x116c | 93a04200b9a04200f9a2420021a34200 | ..B...B...B.!.B. |
| 0x117c | 38a3420046a34200afa34200f5a34200 | 8.B.F.B...B...B. |
| 0x118c | 85a442009ca44200aaa442005aa5 | ..B...B...B.Z. |
| 0x1b8 | 28a302000010000000b0020000100000 | (............... |
| 0x1c8 | 000000000000000000000000d5000060 | ...............` |
| 0x1d8 | 2e64617461000000200a000000c00200 | .data... ....... |
| 0x1e8 | 0010000000ee02000000000000000000 | ................ |
| 0x1f8 | 00000000400000c02e72737263000000 | ....@....rsrc... |
| 0x208 | f408000000d002000010000000d00200 | ................ |
| 0x218 | 00000000000000000000000040000040 | ............@..@ |
| 0x228 | 6cda5b4a100000000000000000000000 | l.[J............ |
| 0x238 | 4d535642564d36302e444c4c00000000 | MSVBVM60.DLL.... |
| 0x248 | 00000000000000000000000000000000 | ................ |
| 0x258 | 00000000000000000000000000000000 | ................ |
| 0x268 | 00000000000000000000000000000000 | ................ |
| 0x278 | 00000000000000000000000000000000 | ................ |
| 0x288 | 8a000000000000000000000000000000 | ................ |
| 0x298 | 00000000000000000000000000000000 | ................ |
| 0x2a8 | 00000000000000000000000000000000 | ................ |
| 0x2b8 | 00000000000000000000000000000000 | ................ |
| 0x2c8 | 00000000000000000000000000000000 | ................ |
| 0x2d8 | 00000000000000000000000000000000 | ................ |
| 0x2e8 | 00000000000000000000000000000000 | ................ |
| 0x2f8 | 00000000000000000000000000000000 | ................ |
| 0x308 | 00000000000000000000000000000000 | ................ |
| 0x318 | 00000000000000000000000000000000 | ................ |
| 0x328 | 00000000000000000000000000000000 | ................ |
| 0x338 | 000000000000000000000000 | ............ |
-
0x0
4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 5d 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 75 9f f9 db 31 fe 97 88 31 fe 97 88 31 fe 97 88 b2 e2 99 88 30 fe 97 88 7e dc 9e 88 30 fe 97 88 07 d8 9a 88 30 fe 97 88 52 69 63 68 31 fe 97 88 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 39 dd c2 5c 00 00 00 00 00 00 00 00 e0 00 0f 01 0b 01 06 00 00 b0 02 00 00 20 00 00 00 00 00 00 b0 13 00 00 00 10 00 00 00 c0 02 00 00 00 40 00 00 10 00 00 00 10 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 e0 02 00 00 10 00 00 21 97 03 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 MZ......................@...............................................!..L.!This program ca]not be run in DOS mode....$.......u...1...1...1.......0...~...0.......0...Rich1...........PE..L...9..\..................... ....................@.................................!..................×2
notable severity, 90% confident.
build
PE carries bound import descriptors
| 0xff80 | 4557f95533527f1dda598c8623fe2ef8 | EW.U3R...Y..#... |
| 0xff90 | bdd9d7b9abff0004cd7fe7af29ee29bb | ............).). |
| 0xffa0 | dbe6da2294824e4f9fcfa1cde6c1b473 | ..."..NO.......s |
| 0xffb0 | f853108c547901e63a516dbfe6ebd87b | .S..Ty..:Qm....{ |
| 0xffc0 | 2370d0f53778fc6bdc9b8fcb2a3f87e3 | #p..7x.k....*?.. |
| 0xffd0 | 30551d3d538daea0de15c40ff72788c4 | 0U.=S........'.. |
| 0xffe0 | e6597f82616ff96c9b5bfc3d9ef23d9c | .Y..ao.l.[.=..=. |
| 0xfff0 | dbb5e2761af51fe1ff00570ea1ae7ef6 | ...v......W...~. |
| 0x10000 | be1e578c4c9351684d0d7fce33fe9b57 | ..W.L.QhM...3..W |
| 0x10010 | a63a03f6ef586f6cef6bf564dd99baa8 | .:...Xol.k.d.... |
| 0x10020 | 67cc61e9777f6cee8d938da5fbe1fde0 | g.a.w.l......... |
| 0x10030 | 394ff8ba65b2dff3bbfefc6ecabc87fb | 9O..e......n.... |
| 0x10040 | 8eff00952f7d08e578459edea3481da0 | ..../}..xE...H.. |
| 0x10050 | 7ed1fb3e42b8af58d3ba3d4ba86e15ff | ~..>B..X..=K.n.. |
| 0x10060 | 002f46d3b4f7e51f5aec0dc9bbebe6ff | ./F.....Z....... |
| 0x10070 | 718b3e2ffc9bfe9b321ff2e91fedfd9f | q.>/....2....... |
| 0x10080 | 448af35748a54923e5e63f6f4170b562 | D..WH.I#..?oAp.b |
| 0x10090 | dd174f8f1d0f16023ff4c1da149f7dd9 | ..O.....?.....}. |
| 0x100a0 | 1b8297f8a52d3e4b9fee263f2f6cbdb9 | .....->K..&?/l.. |
| 0x100b0 | ff0097e73fee5721ed65f5cfd4caaead | ....?.W!.e...... |
| 0x100c0 | 441fb0d3047a54d703cc8f407a5d6ff1 | D....zT....@z]o. |
| 0x100d0 | 1ff57af4a3f89bf16f19f31bbafb53be | ..z.....o.....S. |
| 0x100e0 | 3b065cb36c3d9dbc71fb5f66e316a4d1 | ;.\.l=..q._f.... |
| 0x100f0 | 60ab061f17fee5cff5cd7fc5da93e901 | `............... |
| 0x10100 | e30ff8fb8a3dc4e728b69b75b185c998 | .....=..(..u.... |
| 0x10110 | 8a0a1f971635c0c1f524d680d0f4751e | .....5...$....u. |
| 0x10120 | 687cbabfdd91d71b2badb0f060b64edb | h|......+...`.N. |
| 0x10130 | c560f1b4d4df6a171d4a2880fc58fbc7 | .`....j..J(..X.. |
| 0x10140 | 5b9bfb9bd62d3ccd4d550b5a8e946af9 | [....-<.MU.Z..j. |
| 0x10150 | f4b8047fadecb65844b4af5523ae5feb | .......XD..U#._. |
| 0x10160 | fb626816e6168f1d6c1f0a41438eaa0b | .bh.....l..AC... |
| 0x10170 | 7dfc66ec7e82c86efc675f75c1ef8f8c | }.f.~..n.g_u.... |
| 0x10180 | 9bbeab219ea9eb8a7a9c5ff7f3ab6bf2 | ...!....z._...k. |
| 0x10190 | f94199cbe33118acd00bbdb64f3fee2b | .A...1......O?.+ |
| 0x101a0 | 1e3fdca62bfe9b7dc33cd5c8126e2ef2 | .?..+..}.<...n.. |
| 0x101b0 | c69519e1d493cb9ccb1daa2c4efdd4f3 | ...........,N... |
| 0x101c0 | eab5bbd3b1beea3c6f5ef5f6fbed3db9 | .......<o^....=. |
| 0x101d0 | 47fc531f8ba5eaededb3b299ccf9dc3c | G.S............< |
| 0x101e0 | 7f07daf8ac4ef4c17f7fb9ff009d7fb2 | .....N.......... |
| 0x101f0 | 3d8795eeb6c9559e2e1ea3a906df7e49 | =.....U.......~I |
| 0x10200 | ed24d34a9eac03e2dfc19dadb236255f | .$.J.........6%_ |
| 0x10210 | 6c7ca8a2a4cef6e6ed9b179c8296b6ac | l|.............. |
| 0x10220 | e09fa930d03e1a4d99b230b99c267632 | ...0.>.M..0..&v2 |
| 0x10230 | 3fb5e5c2d13806401b8cb0ff0071f6f7 | ?....8.@.....q.. |
| 0x10240 | 33edfbc4f650f8656829c3d7a8cef58d | 3....P.eh)...... |
| 0x10250 | ede4889952684f11e63f3c8a103879d3 | ....RhO..?<..8y. |
| 0x10260 | 15b2be8decbdcb5b9dcd756761d7d2e5 | .......[..uga... |
| 0x10270 | 772e329323b9b666ea4fe1d8f9b7c6c8 | w.2.#..f.O...... |
| 0x0 | 4d5a90000300000004000000ffff0000 | MZ.............. |
| 0x10 | b8000000000000004000000000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 000000000000000000000000b8000000 | ................ |
| 0x40 | 0e1fba0e00b409cd21b8014ccd215468 | ........!..L.!Th |
| 0x50 | 69732070726f6772616d2063615d6e6f | is program ca]no |
| 0x60 | 742062652072756e20696e20444f5320 | t be run in DOS |
| 0x70 | 6d6f64652e0d0d0a2400000000000000 | mode....$....... |
| 0x80 | 759ff9db31fe978831fe978831fe9788 | u...1...1...1... |
| 0x90 | b2e2998830fe97887edc9e8830fe9788 | ....0...~...0... |
| 0xa0 | 07d89a8830fe97885269636831fe9788 | ....0...Rich1... |
| 0xb0 | 0000000000000000504500004c010300 | ........PE..L... |
| 0xc0 | 39ddc25c0000000000000000e0000f01 | 9..\............ |
| 0xd0 | 0b01060000b002000020000000000000 | ......... ...... |
| 0xe0 | b01300000010000000c0020000004000 | ..............@. |
| 0xf0 | 00100000001000000400000001000000 | ................ |
| 0x100 | 040000000000000000e0020000100000 | ................ |
| 0x110 | 21970300020000000000100000100000 | !............... |
| 0x120 | 000010 | ... |
-
0x0
4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 5d 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 75 9f f9 db 31 fe 97 88 31 fe 97 88 31 fe 97 88 b2 e2 99 88 30 fe 97 88 7e dc 9e 88 30 fe 97 88 07 d8 9a 88 30 fe 97 88 52 69 63 68 31 fe 97 88 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 39 dd c2 5c 00 00 00 00 00 00 00 00 e0 00 0f 01 0b 01 06 00 00 b0 02 00 00 20 00 00 00 00 00 00 b0 13 00 00 00 10 00 00 00 c0 02 00 00 00 40 00 00 10 00 00 00 10 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 e0 02 00 00 10 00 00 21 97 03 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 MZ......................@...............................................!..L.!This program ca]not be run in DOS mode....$.......u...1...1...1.......0...~...0.......0...Rich1...........PE..L...9..\..................... ....................@.................................!..................
| 0x2d1f2 | 0000010053007400720069006e006700 | ....S.t.r.i.n.g. |
| 0x2d202 | 460069006c00650049006e0066006f00 | F.i.l.e.I.n.f.o. |
| 0x2d212 | 00007001000001003000380030003400 | ..p.....0.8.0.4. |
| 0x2d222 | 300034004200300000002c000a000100 | 0.4.B.0...,..... |
| 0x2d232 | 43006f006d00700061006e0079004e00 | C.o.m.p.a.n.y.N. |
| 0x2d242 | 61006d00650000000000610061006100 | a.m.e.....a.a.a. |
| 0x2d252 | 61000000000040001e00010050007200 | a.....@.....P.r. |
| 0x2d262 | 6f0064007500630074004e0061006d00 | o.d.u.c.t.N.a.m. |
| 0x2d272 | 6500000000004b006100770061006900 | e.....K.a.w.a.i. |
| 0x2d282 | 69002d0055006e00690063006f007200 | i.-.U.n.i.c.o.r. |
| 0x2d292 | 6e00000000002c000a00010046006900 | n.....,.....F.i. |
| 0x2d2a2 | 6c006500560065007200730069006f00 | l.e.V.e.r.s.i.o. |
| 0x2d2b2 | 6e000000000031002e00300030000000 | n.....1...0.0... |
| 0x2d2c2 | 000030000a000100500072006f006400 | ..0.....P.r.o.d. |
| 0x2d2d2 | 75006300740056006500720073006900 | u.c.t.V.e.r.s.i. |
| 0x2d2e2 | 6f006e00000031002e00300030000000 | o.n...1...0.0... |
| 0x2d2f2 | 000040001e00010049d06e0074006500 | ..@.....I.n.t.e. |
| 0x2d302 | 72006e0061006c004e0061006d006500 | r.n.a.l.N.a.m.e. |
| 0x2d312 | 00004b00610077006100690069002d00 | ..K.a.w.a.i.i.-. |
| 0x2d322 | 55006e00690063006f0072006e000000 | U.n.i.c.o.r.n... |
| 0x2d332 | 00005000260001004f00720069006700 | ..P.&...O.r.i.g. |
| 0x2d342 | 69006e0061006c00460069006c006500 | i.n.a.l.F.i.l.e. |
| 0x2d352 | 6e0061006d00650000004b0061007700 | n.a.m.e...K.a.w. |
| 0x2d362 | 6100690069002d0055006e0069006300 | a.i.i.-.U.n.i.c. |
| 0x2d372 | 6f0072006e002e006500780065000000 | o.r.n...e.x.e... |
| 0x2d382 | 00000000010003002020020001000100 | ........ ...... |
| 0x2d392 | 3001000031752020100001000400e802 | 0...1u ........ |
| 0x2d3a2 | 00003275101010000100040028010000 | ..2u........(... |
| 0x2d3b2 | 33752800000010000000200000000100 | 3u(....... ..... |
| 0x2d3c2 | 040000000000c0000000000000000000 | ................ |
| 0x2d3d2 | 0000000000000000000000000000b600 | ................ |
| 0x2d3e2 | 80000080000000808000800000008000 | ................ |
| 0x2d3f2 | 80008080000080808000c0c0c0000000 | ................ |
| 0x2d402 | ff0000ff000000ffff00ff000000ff00 | ................ |
| 0x2d412 | ff00ffff0000ffffff00000000000000 | ................ |
| 0x2d422 | 000000000000000000000000 | ............ |
| 0x2d126 | 0000dcd40200e8020003b00400000000 | ................ |
| 0x2d136 | 0000c4d7020030010000b00400000000 | ......0......... |
| 0x2d146 | 00000000000000000000340234000000 | ..........4.4... |
| 0x2d156 | 560053005f0056004500520053004900 | V.S._.V.E.R.S.I. |
| 0x2d166 | 4f004e005f0049004e0046004f000000 | O.N._.I.N.F.O... |
| 0x2d176 | 0000bd04effe00000100000001000000 | ................ |
| 0x2d186 | 00000000010000000000000000000000 | ................ |
| 0x2d196 | 00000400000001000000000000000000 | ................ |
| 0x2d1a6 | 00000000000044000000000056006100 | ......D.....V.a. |
| 0x2d1b6 | 7200460069006c00650049006e0066 | r.F.i.l.e.I.n.f |
20 of 23 traits shown
Identity
| SHA-256 | 2495953d208cf63409a0912e7bd2968eafb054455c1dc8506b7138ae20a9a0d6 |
|---|---|
| Filename | virussign.com_e9798553f3bd78c77accca789200bc60.vir |
| Package | 2495953d208cf63409a0912e7bd2968eafb054455c1dc8506b7138ae20a9a0d6 |
Origin
| Source | harvest |
|---|---|
| Feed | virussign |
| Domain | virussign.com |
Timeline
| First seen | 13 Aug 2026 16:31 UTC |
|---|---|
| First analyzed | 18 Aug 2026 04:17 UTC |
| Last analyzed | 18 Aug 2026 04:17 UTC |
| Last updated | 18 Aug 2026 04:17 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 18b13 |
Not seeing what you expected? Let us know