Edit tour

Windows Analysis Report
H1pXo79CPd

Overview

General Information

Sample name:	H1pXo79CPd renamed because original name is a hash value
Original sample name:	21716bb1c51f01b8ed87151fe565c1d20e837a7a2121567db7915d7f8f6e633d
Analysis ID:	1524372
MD5:	cfdf53f247859f70b66c15ad037463d6
SHA1:	bf644a6a32b9eb6dda2e55119af2692d51421e57
SHA256:	21716bb1c51f01b8ed87151fe565c1d20e837a7a2121567db7915d7f8f6e633d
Infos:

Detection

GhostRat

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for dropped file

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Yara detected GhostRat

Allocates memory in foreign processes

Drops executables to the windows directory (C:\Windows) and starts them

Writes to foreign memory regions

Checks for available system drives (often done to infect USB drives)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates COM task schedule object (often to register a task for autostart)

Creates files inside the system directory

Detected TCP or UDP traffic on non-standard ports

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Installs a global mouse hook

One or more processes crash

Queries information about the installed CPU (vendor, model number etc)

Uses 32bit PE files

Classification

Process Tree

System is w10x64_ra

H1pXo79CPd.exe (PID: 7012 cmdline: "C:\Users\user\Desktop\H1pXo79CPd.exe" MD5: CFDF53F247859F70B66C15AD037463D6)

ClientDaemon.exe (PID: 7068 cmdline: C:\recovery\ClientDaemon.exe MD5: C654F1460F961FA85843230281FC0AB0)

WerFault.exe (PID: 988 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 7068 -s 1220 MD5: C31336C1EFC2CCB44B4326EA793040F2)

ClientDaemon.exe (PID: 6372 cmdline: C:\windows\ClientDaemon.exe MD5: C654F1460F961FA85843230281FC0AB0)

WerFault.exe (PID: 4480 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6372 -s 1196 MD5: C31336C1EFC2CCB44B4326EA793040F2)

cleanup

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
00000003.00000002.1411391226.0000000006480000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_GhostRat	Yara detected GhostRat	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for dropped file

Source: C:\Recovery\nw_elf.dll	Avira: detection malicious, Label: TR/Crypt.Agent.tfakp
Source: C:\Recovery\nw_elf.dll	Avira: detection malicious, Label: TR/Crypt.Agent.avqrq
Source: C:\Recovery\nw_elf.dll	Avira: detection malicious, Label: TR/Crypt.Agent.tfakp
Source: C:\Recovery\nw_elf.dll	Avira: detection malicious, Label: TR/Crypt.Agent.avqrq

Multi AV Scanner detection for dropped file

Source: C:\Recovery\nw_elf.dll	ReversingLabs: Detection: 37%
Source: C:\Windows\nw_elf.dll	ReversingLabs: Detection: 58%

Multi AV Scanner detection for submitted file

Source: H1pXo79CPd

ReversingLabs: Detection: 75%

Source: H1pXo79CPd

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: H1pXo79CPd

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: C:\Windows\ClientDaemon.exe	File opened: z:
Source: C:\Windows\ClientDaemon.exe	File opened: x:
Source: C:\Windows\ClientDaemon.exe	File opened: v:
Source: C:\Windows\ClientDaemon.exe	File opened: t:
Source: C:\Windows\ClientDaemon.exe	File opened: r:
Source: C:\Windows\ClientDaemon.exe	File opened: p:
Source: C:\Windows\ClientDaemon.exe	File opened: n:
Source: C:\Windows\ClientDaemon.exe	File opened: l:
Source: C:\Windows\ClientDaemon.exe	File opened: j:
Source: C:\Windows\ClientDaemon.exe	File opened: h:
Source: C:\Windows\ClientDaemon.exe	File opened: f:
Source: C:\Windows\ClientDaemon.exe	File opened: b:
Source: C:\Windows\ClientDaemon.exe	File opened: y:
Source: C:\Windows\ClientDaemon.exe	File opened: w:
Source: C:\Windows\ClientDaemon.exe	File opened: u:
Source: C:\Windows\ClientDaemon.exe	File opened: s:
Source: C:\Windows\ClientDaemon.exe	File opened: q:
Source: C:\Windows\ClientDaemon.exe	File opened: o:
Source: C:\Windows\ClientDaemon.exe	File opened: m:
Source: C:\Windows\ClientDaemon.exe	File opened: k:
Source: C:\Windows\ClientDaemon.exe	File opened: i:
Source: C:\Windows\ClientDaemon.exe	File opened: g:
Source: C:\Windows\ClientDaemon.exe	File opened: e:
Source: C:\Windows\SysWOW64\WerFault.exe	File opened: c:
Source: C:\Windows\ClientDaemon.exe	File opened: [:

Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer32
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\Elevation
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs

Source: global traffic	TCP traffic: 192.168.2.16:49705 -> 111.67.195.167:8085
Source: global traffic	TCP traffic: 192.168.2.16:49711 -> 103.118.253.78:8099

Source: unknown	TCP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	TCP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	TCP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	UDP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	UDP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	UDP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	UDP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	UDP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	UDP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	UDP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	UDP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	UDP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	TCP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	UDP traffic detected without corresponding DNS query: 111.67.195.167
Source: unknown	TCP traffic detected without corresponding DNS query: 103.118.253.78
Source: unknown	TCP traffic detected without corresponding DNS query: 103.118.253.78
Source: unknown	TCP traffic detected without corresponding DNS query: 103.118.253.78

Source: C:\Recovery\ClientDaemon.exe

Windows user hook set: 0 mouse low level C:\Windows\SYSTEM32\DINPUT8.dll

Source: C:\Users\user\Desktop\H1pXo79CPd.exe	File created: c:\windows\ClientDaemon.exe
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	File created: c:\windows\nw_elf.dll

Source: C:\Recovery\ClientDaemon.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7068 -s 1220

Source: H1pXo79CPd

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: mal84.troj.evad.win@6/11@0/39

Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess6372
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess7068

Source: C:\Windows\SysWOW64\WerFault.exe

File created: C:\ProgramData\Microsoft\Windows\WER\Temp\44fdfb13-a9b5-418e-873b-1d695687a27c

Source: H1pXo79CPd

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\H1pXo79CPd.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: H1pXo79CPd

ReversingLabs: Detection: 75%

Source: unknown	Process created: C:\Users\user\Desktop\H1pXo79CPd.exe "C:\Users\user\Desktop\H1pXo79CPd.exe"
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Process created: C:\Recovery\ClientDaemon.exe C:\recovery\ClientDaemon.exe
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Process created: C:\Recovery\ClientDaemon.exe C:\recovery\ClientDaemon.exe
Source: C:\Recovery\ClientDaemon.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7068 -s 1220
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Process created: C:\Windows\ClientDaemon.exe C:\windows\ClientDaemon.exe
Source: C:\Windows\ClientDaemon.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6372 -s 1196

Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Section loaded: apphelp.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: nw_elf.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: winmm.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: version.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: cryptbase.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: dinput8.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: inputhost.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: coremessaging.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: propsys.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: wintypes.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: coreuicomponents.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: ntmarta.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: kernel.appcore.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: kernel.appcore.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: netapi32.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: mswsock.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: napinsp.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: pnrpnsp.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: wshbth.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: nlaapi.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: iphlpapi.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: dnsapi.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: winrnr.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: fwpuclnt.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: rasadhlp.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: uxtheme.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: ddraw.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: dxgi.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: dciman32.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: d3d10warp.dll
Source: C:\Recovery\ClientDaemon.exe	Section loaded: dxcore.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: nw_elf.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: winmm.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: version.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: cryptbase.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: dinput8.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: inputhost.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: coremessaging.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: propsys.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: wintypes.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: coreuicomponents.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: ntmarta.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: netapi32.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: mswsock.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: napinsp.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: wshbth.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: nlaapi.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: dnsapi.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: winrnr.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: uxtheme.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: ddraw.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: dxgi.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: dciman32.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: d3d10warp.dll
Source: C:\Windows\ClientDaemon.exe	Section loaded: dxcore.dll
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Section loaded: taskschd.dll
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Section loaded: sspicli.dll
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Section loaded: xmllite.dll

Source: C:\Recovery\ClientDaemon.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D7B70EE0-4340-11CF-B063-0020AFC2CD35}\InprocServer32

Source: H1pXo79CPd

Static file information: File size 5196288 > 1048576

Source: H1pXo79CPd	Static PE information: section name: RT_CURSOR
Source: H1pXo79CPd	Static PE information: section name: RT_BITMAP
Source: H1pXo79CPd	Static PE information: section name: RT_ICON
Source: H1pXo79CPd	Static PE information: section name: RT_MENU
Source: H1pXo79CPd	Static PE information: section name: RT_DIALOG
Source: H1pXo79CPd	Static PE information: section name: RT_STRING
Source: H1pXo79CPd	Static PE information: section name: RT_ACCELERATOR
Source: H1pXo79CPd	Static PE information: section name: RT_GROUP_ICON

Source: H1pXo79CPd	Static PE information: Raw size of .data is bigger than: 0x100000 < 0x2fba00
Source: H1pXo79CPd	Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x1aee00

Source: H1pXo79CPd

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: H1pXo79CPd	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: H1pXo79CPd	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: H1pXo79CPd	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: H1pXo79CPd	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: H1pXo79CPd	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Persistence and Installation Behavior

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Users\user\Desktop\H1pXo79CPd.exe

Executable created and started: c:\windows\ClientDaemon.exe

Source: C:\Users\user\Desktop\H1pXo79CPd.exe	File created: C:\Windows\ClientDaemon.exe	Jump to dropped file
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	File created: C:\Recovery\nw_elf.dll	Jump to dropped file
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	File created: C:\Windows\nw_elf.dll	Jump to dropped file

Source: C:\Users\user\Desktop\H1pXo79CPd.exe	File created: C:\Windows\ClientDaemon.exe			Jump to dropped file
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	File created: C:\Windows\nw_elf.dll			Jump to dropped file

Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Windows\ClientDaemon.exe

Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc

Source: C:\Recovery\ClientDaemon.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\ClientDaemon.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\Desktop\H1pXo79CPd.exe

Process information queried: ProcessInformation

Source: C:\Recovery\ClientDaemon.exe	Process queried: DebugPort
Source: C:\Windows\ClientDaemon.exe	Process queried: DebugPort

HIPS / PFW / Operating System Protection Evasion

Allocates memory in foreign processes

Source: C:\Users\user\Desktop\H1pXo79CPd.exe

Memory allocated: C:\Windows\ClientDaemon.exe base: 47B0000 protect: page read and write

Writes to foreign memory regions

Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Memory written: C:\Windows\ClientDaemon.exe base: 47B0000
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Memory written: C:\Windows\ClientDaemon.exe base: 480E2D8
Source: C:\Users\user\Desktop\H1pXo79CPd.exe	Memory written: C:\Windows\ClientDaemon.exe base: 480F1E8

Source: C:\Recovery\ClientDaemon.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Windows\ClientDaemon.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Stealing of Sensitive Information

Yara detected GhostRat

Source: Yara match

File source: 00000003.00000002.1411391226.0000000006480000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Remote Access Functionality

Yara detected GhostRat

Source: Yara match

File source: 00000003.00000002.1411391226.0000000006480000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	1 Scheduled Task/Job	1 Scheduled Task/Job	21 Process Injection	12 Masquerading	1 Input Capture	12 Security Software Discovery	Remote Services	1 Input Capture	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Scheduled Task/Job	2 Virtualization/Sandbox Evasion	LSASS Memory	2 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	Junk Data	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	21 Process Injection	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	11 Peripheral Device Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	12 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Source	Detection	Scanner	Label	Link
H1pXo79CPd	75%	ReversingLabs	Win32.Trojan.Doina

Dropped Files

Source	Detection	Scanner	Label
C:\Recovery\nw_elf.dll	100%	Avira	TR/Crypt.Agent.tfakp
C:\Recovery\nw_elf.dll	100%	Avira	TR/Crypt.Agent.avqrq
C:\Recovery\nw_elf.dll	38%	ReversingLabs	Win32.Trojan.CrypterX
C:\Windows\ClientDaemon.exe	3%	ReversingLabs
C:\Windows\nw_elf.dll	58%	ReversingLabs	Win32.Trojan.CrypterX
C:\Recovery\nw_elf.dll	100%	Avira	TR/Crypt.Agent.tfakp
C:\Recovery\nw_elf.dll	100%	Avira	TR/Crypt.Agent.avqrq

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
103.118.253.78	unknown	China	55933	CLOUDIE-AS-APCloudieLimitedHK	false
20.42.73.29	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.42.65.92	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
111.67.195.167	unknown	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1524372
Start date and time:	2024-10-02 17:53:27 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled
Analysis Mode:	stream
Analysis stop reason:	Timeout
Sample name:	H1pXo79CPd renamed because original name is a hash value
Original Sample Name:	21716bb1c51f01b8ed87151fe565c1d20e837a7a2121567db7915d7f8f6e633d
Detection:	MAL
Classification:	mal84.troj.evad.win@6/11@0/39

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SgrmBroker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.42.73.29
Excluded domains from analysis (whitelisted): fs.microsoft.com, ctldl.windowsupdate.com
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: H1pXo79CPd

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ClientDaemon.exe_ba598b36f84f8d89f975d848c6abb9337824ed7_02b26f1f_7d3f8875-b0d3-4246-a4b5-06fd93ba1207\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	TeX document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.9955778121885941
Encrypted:	false
SSDEEP:
MD5:	0CD620B7555C26384D8F4DD6DB6CFBF0
SHA1:	80EDBA3254829C07EDEC51F913F73D4425CBEE5B
SHA-256:	025CC9985079D3F54D126C9AA1944DF054128B1A90968EECBB6CB851EA61EFA6
SHA-512:	693BF3468C1E7689FE958DD2032629AB109F996173D8A437E55BF23961384AD3D5A29EA6E73575A6615300984688DAD1B806B40A1511AA59B53111FE2C2EE602
Malicious:	false
Reputation:	unknown
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.2.3.5.8.0.5.3.3.5.5.6.3.0.8.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.2.3.5.8.0.5.3.8.0.3.6.7.8.8.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.7.d.3.f.8.8.7.5.-.b.0.d.3.-.4.2.4.6.-.a.4.b.5.-.0.6.f.d.9.3.b.a.1.2.0.7.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.c.7.c.d.e.9.2.c.-.2.0.2.f.-.4.a.b.d.-.a.b.b.7.-.7.a.a.d.a.e.3.1.3.e.f.2.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.C.l.i.e.n.t.D.a.e.m.o.n...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.n.w...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.b.9.c.-.0.0.0.1.-.0.0.1.6.-.2.d.0.d.-.8.7.4.a.e.3.1.4.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.a.6.7.e.5.1.6.d.c.4.3.0.2.f.b.e.8.b.b.7.a.5.c.8.3.c.c.f.3.a.b.b.0.0.0.0.0.9.0.4.!.0.0.0.0.a.0.0.6.8.b.a.0.5.d.d.8.3.6.a.0.6.9.6.b.3.9.2.e.e.1.d.6.a.b.8.9.6.c.2.6.e.1.e.9.!.C.l.i.

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ClientDaemon.exe_ba598b36f84f8d89f975d848c6abb9337824ed7_02b26f1f_eb20255e-ed09-4b2c-a804-77ad66051d32\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	TeX document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.9949214033490823
Encrypted:	false
SSDEEP:
MD5:	9F71F0509E635E91B2D077F9D37A85E2
SHA1:	B67210DA12A0F6BBCF451505BAF716CFE225C20D
SHA-256:	5C420113B0BFDF214CF3F256C59B8845FD350DF6122E45694F5E202F4FF1FA2A
SHA-512:	9C4ABE0FFE7C32BAFC4598D0D146AA79655049D1760BD8B70B229C4CAA4817EBBCF562B8A560F9EE72E04127B4D0037D7C9CFB10FF0F1DD24AEA384ACC92B958
Malicious:	false
Reputation:	unknown
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.2.3.5.8.0.6.9.6.8.1.0.1.2.7.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.2.3.5.8.0.7.0.0.1.3.0.3.3.9.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.e.b.2.0.2.5.5.e.-.e.d.0.9.-.4.b.2.c.-.a.8.0.4.-.7.7.a.d.6.6.0.5.1.d.3.2.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.8.4.4.4.c.e.8.2.-.2.2.f.0.-.4.6.f.6.-.a.b.5.1.-.9.d.9.d.6.4.b.1.1.9.b.f.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.C.l.i.e.n.t.D.a.e.m.o.n...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.n.w...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.8.e.4.-.0.0.0.1.-.0.0.1.6.-.f.f.2.2.-.9.c.5.6.e.3.1.4.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.a.6.7.e.5.1.6.d.c.4.3.0.2.f.b.e.8.b.b.7.a.5.c.8.3.c.c.f.3.a.b.b.0.0.0.0.0.9.0.4.!.0.0.0.0.a.0.0.6.8.b.a.0.5.d.d.8.3.6.a.0.6.9.6.b.3.9.2.e.e.1.d.6.a.b.8.9.6.c.2.6.e.1.e.9.!.C.l.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER6B17.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Wed Oct 2 15:54:13 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	104754
Entropy (8bit):	1.9941956940990657
Encrypted:	false
SSDEEP:
MD5:	1601616054A605FA804CB1EAE200DB07
SHA1:	189D21BD6F56BFAFDAA60E79FA6168F761AAF4CE
SHA-256:	37A4B812CAAF0DB07D890F6665FB78E83A33424D6F740B38FE08F44DFEC4D286
SHA-512:	A0C7CC338DB769763EA770AC657D795A0C15D281918DD056A15C75431B9854A431C3E58B42E4F5F54A9503563F8A80D829EA72DC8B659BFBB4D41007DB21879F
Malicious:	false
Reputation:	unknown
Preview:	MDMP..a..... ........l.f....................................$.... ...........F..........`.......8...........T............-..Zk........... ..........."..............................................................................eJ.......#......GenuineIntel............T............l.f.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER6BF2.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8408
Entropy (8bit):	3.6980248350497567
Encrypted:	false
SSDEEP:
MD5:	C3AAF5714F9FB5EB780780711716F967
SHA1:	A2CB0B061656C07CCD0BDB7D7EBCDF0D40BFE712
SHA-256:	791C5856DF1E96F798FBC6FD113559AD814DA2769D7E12E4BF9E2FD5E422799F
SHA-512:	A015626D81539F6BD1B39ED0407F4A5E37921061EFF59DD5CCCFC70102D05F67E7AA4F04481A01BBBC97FF0089B1B1595EBE01F181538A71510F721D6FCD5D1F
Malicious:	false
Reputation:	unknown
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.7.0.6.8.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER6C51.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4794
Entropy (8bit):	4.471339676420344
Encrypted:	false
SSDEEP:
MD5:	3A3AD490BD06D3B095BC36D61CC1DE80
SHA1:	CF449DD335A4D0D32CCDF7B7E401E546835DCBDE
SHA-256:	09CEE767A6F48B4689F9755F3B899729E2D5D62CD89BCEE855E2BF3540896288
SHA-512:	33F31221FABCDCF5B9D034D60F6E1095C68761824BB51AB094BE2B75FC9CB1EB29CDC227CB02F2CF38AAAE12EE58CB3ECA4295CAFFEAE558057966D3D8319DC3
Malicious:	false
Reputation:	unknown
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="526016" />.. <arg nm="osinsty" val="2" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Recovery\cb.txt

Download File

Process:	C:\Users\user\Desktop\H1pXo79CPd.exe
File Type:	data
Category:	dropped
Size (bytes):	263180
Entropy (8bit):	6.2986359972551895
Encrypted:	false
SSDEEP:
MD5:	68D3C2F7F4DE4284A982E5395DC5DECC
SHA1:	99F91E6F659314E3A7DF65D51CA20F7CEA48FA93
SHA-256:	F06F63BC2E0A043947CA0D67631A001220A6365FD25E2DE5E3E1D85DE7B1F45C
SHA-512:	EF220C326B890DEC8E361482ADD61BA96DF74E3B2AC7EAFF9B3DA6B12776F235B2667BE013DD9A830A8BE7E76551C3C220336A3379FAF34776A377E30E4D9239
Malicious:	false
Reputation:	unknown
Preview:	c{{{{...X.Exr.{{.Er..{.x{.{.{{{..*.H.cx{{{.?.LF.g..{{.............G{{{.`...............A{{{....O{{{......S{{{......]{{{.......W{{{..'.+{{{...'.3{{{.'.?{{{.'./{{{.'.'{{{.'.[{{{....G{{{....A{{{....U{{{....]{{{....W{{{....Q{{{9........:.....9.....:.....9.........:.....9.......9........:......:.........:.....9.......9...........:......:.........:.....9.......9.......:.......9....9...{{{.....{{{:...{{{........{{{.:...{{{......{{{:...{{{....9..%{{{.......#{{{.............{{{<..20...&{{{:...{{{....9...:........:.....:........:.........:......:...{{{......{{{9...{{{.....{{{....{{{.:...{{{......{{{:...{{{........{{{.:...{{{..9...{{{.....{{{c.{{<(.\..kc.{{.S...C{{{....g{{{.....Y{{{...._{{{........c{{{......rI...............................r.rV......................./{{{.......r.rV................{{{.......3{{{.......r.rV................?{{{..........r.rV.x......................'{{{.......r.rV....{{{..........[{{{..........r.rV................+{{{

C:\Recovery\cd.txt

Download File

Process:	C:\Users\user\Desktop\H1pXo79CPd.exe
File Type:	data
Category:	dropped
Size (bytes):	263180
Entropy (8bit):	6.298703423049811
Encrypted:	false
SSDEEP:
MD5:	3E67E6A1B9023FCC3652C8B20577823F
SHA1:	A380E91ECA05E85C465A3E20174F9C3683D87629
SHA-256:	79713F9C82E674C41CA8C20248DBF607F8414548BA742FEB948A92EEEA427D49
SHA-512:	E3B6BFEA8E468AE0ADD8B1B837A771E1ECA458B543B8149E7445A1D1E9353358BAC868CFE46FF522026C81286653290C05561578CAF727AFF63B6EC5DF2FD159
Malicious:	false
Reputation:	unknown
Preview:	c{{{{...X.Exr.{{.Er..{.x{.{.{{{..*.H.cx{{{.?.LF.g..{{.............G{{{.`...............A{{{....O{{{......S{{{......]{{{.......W{{{..'.+{{{...'.3{{{.'.?{{{.'./{{{.'.'{{{.'.[{{{....G{{{....A{{{....U{{{....]{{{....W{{{....Q{{{9........:.....9.....:.....9.........:.....9.......9........:......:.........:.....9.......9...........:......:.........:.....9.......9.......:.......9....9...{{{.....{{{:...{{{........{{{.:...{{{......{{{:...{{{....9..%{{{.......#{{{.............{{{<..20...&{{{:...{{{....9...:........:.....:........:.........:......:...{{{......{{{9...{{{.....{{{....{{{.:...{{{......{{{:...{{{........{{{.:...{{{..9...{{{.....{{{c.{{<(.\..kc.{{.S...C{{{....g{{{.....Y{{{...._{{{........c{{{......rI...............................r.rV......................./{{{.......r.rV................{{{.......3{{{.......r.rV................?{{{..........r.rV.x......................'{{{.......r.rV....{{{..........[{{{..........r.rV................+{{{

C:\Recovery\nw_elf.dll

Download File

Process:	C:\Users\user\Desktop\H1pXo79CPd.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	288768
Entropy (8bit):	6.2188747372209265
Encrypted:	false
SSDEEP:
MD5:	C66D17A8A5FFDCF6575379CE31B8146C
SHA1:	7759E349ABA141B44B80125F5DE697169BA357FE
SHA-256:	918704A5CCBF0FD0509FF3B42AAE3C71419DFB016523B6860B65A2B01FAD3422
SHA-512:	DC6BB0B33B77906F3873A349D7ACEC45215387888C12729D91F368FBFBA772BD5B2E12A649ABD0009B1FDEA75118FF27AB09F8CB7F8447E52C3788D02A08742F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 38% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......U.E...+...+...+...(...+.......+.../...+.C./...+.C.(...+.C...4.+......+....K.+.......+...+...+...)...+.Rich..+.........................PE..L....>.d...........!.....4...B...............P......................................T.....@..........................B.......E..(............................p...!...5...............................5..@............P..0............................text....2.......4.................. ..`.rdata..X....P.......8..............@..@.data........P.......6..............@....reloc...!...p..."...@..............@..B.rsrc................b..............@..@................................................................................................................................................................................................................................................................................................

C:\Windows\ClientDaemon.exe

Download File

Process:	C:\Users\user\Desktop\H1pXo79CPd.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2017280
Entropy (8bit):	6.431580279207075
Encrypted:	false
SSDEEP:
MD5:	C654F1460F961FA85843230281FC0AB0
SHA1:	A0068BA05DD836A0696B392EE1D6AB896C26E1E9
SHA-256:	10A4CEF987F11011694BFB6362FE48C365826F913B172B3586FAEB2F4F27CA17
SHA-512:	F7E122E9BFC4AA5F6C572E92FA685CC2E1B5B778C8BC1CC90F75B896677512A84369C04EBBA40CC22CB04D4E76ABBD44CC6A7AC2D07747F299F435BF32DE5DB4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Pn.[.........."..................9............@.................................(.....@.........................+b..l....b.......p...Y......................\...\G.......................*..........H............h......@_.......................text...3........................... ..`.rdata..d...........................@..@.data...(x......."..................@....00cfg.......0......................@..@.tls.........@......................@...CPADinfo(....P......................@...prot.........`......................@..@.rsrc....Y...p...Z..................@..@.reloc..\...........................@..B................................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.31018438532672
Encrypted:	false
SSDEEP:
MD5:	D1E902A1546D21136E17D10FF84E7241
SHA1:	9B05BB27A92E31CCAD1FF032A7D73855F4211A95
SHA-256:	CF1842F8DEFB24F307938808B2BD156ED04F8201B60D6581DEE5CEFEDC7CB2B1
SHA-512:	1C7965C42785727143556FAD46CA2A91B85449D2D6F7652999C44684CBD416E4D16DC35E480C1FBE647ABC8E9681474CE40964CF154459805100A1DC6B4BBBF0
Malicious:	false
Reputation:	unknown
Preview:	regfF...F....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm...S................................................................................................................................................................................................................................................................................................................................................kO.g........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\nw_elf.dll

Download File

Process:	C:\Users\user\Desktop\H1pXo79CPd.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	288768
Entropy (8bit):	6.219661142785557
Encrypted:	false
SSDEEP:
MD5:	47E66F738A339726FC23615F3B4A6466
SHA1:	91D4ECE7F5D11C17DCE0373CD86E9939F1CA40F1
SHA-256:	F9067342A86BB4564D65162C7D1B0C8FDCCDE5518925CEF92539AA2B07131171
SHA-512:	739C7BBE3B5AEFD7B17442336E30526A69245D4DB13583FF57D925610CB49723D6D36CB43936AC90904300247F573C69A111E440030440F651858F86E4F5EEF3
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 58%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......U.E...+...+...+...(...+.......+.../...+.C./...+.C.(...+.C...4.+......+....K.+.......+...+...+...)...+.Rich..+.........................PE..L....?.d...........!.....4...B...............P............................................@..........................B.......E..(.......i....................p...!...5...............................5..@............P..0............................text....2.......4.................. ..`.rdata..X....P.......8..............@..@.data........P.......6..............@....reloc...!...p..."...@..............@..B.rsrc...i............b..............@..@................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.9372105160344235
TrID:	Win32 Executable (generic) a (10002005/4) 99.53% InstallShield setup (43055/19) 0.43% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	H1pXo79CPd
File size:	5'196'288 bytes
MD5:	cfdf53f247859f70b66c15ad037463d6
SHA1:	bf644a6a32b9eb6dda2e55119af2692d51421e57
SHA256:	21716bb1c51f01b8ed87151fe565c1d20e837a7a2121567db7915d7f8f6e633d
SHA512:	8362c17fc82fd32bb59c1a0e64214d62282c140178630cc160327d87371f92214c21bf6ce6b068606e54c78acb7cb51af59ce0a482b7a3a09998012658309f2d
SSDEEP:	98304:Mxtx/aR65SoMFPLa7Z4OiZrq1DfPHNADtV6v+a:MxdSNJmF4O7NADtV6v+
TLSH:	FA367C11BD78402AEC6A05718C6D97B856EDBC547BB341F7A28039FAE9317C078336DA
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......@.H ..&s..&s..&s...s..&sk..s..&s...s..&sk..sN.&sk..s..&s...s..&s..'sw.&sk..s..&sk..s..&sRich..&s........................PE..L..

File Icon


Icon Hash:	073143c68c1963c7

Static PE Info

General

Entrypoint:	0x4125f0
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x648A509F [Wed Jun 14 23:43:27 2023 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	1d7d90c2d5ed287e7d63ea45890916dd

Entrypoint Preview

Instruction
mov edi, edi
push ebp
mov ebp, esp
call 00007F2B60ECDEEBh
call 00007F2B60EC0796h
pop ebp
ret
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
mov edi, edi
push ebp
mov ebp, esp
push FFFFFFFEh
push 004438B0h
push 00417420h
mov eax, dword ptr fs:[00000000h]
push eax
add esp, FFFFFFE8h
push ebx
push esi
push edi
mov eax, dword ptr [00446668h]
xor dword ptr [ebp-08h], eax
xor eax, ebp
push eax
lea eax, dword ptr [ebp-10h]
mov dword ptr fs:[00000000h], eax
mov dword ptr [ebp-18h], esp
mov dword ptr [ebp-24h], 00000000h
cmp dword ptr [007429E8h], 00000000h
jne 00007F2B60EC0790h
push 00000000h
push 00000000h
push 00000001h
push 00000000h
call dword ptr [004370BCh]
call 00007F2B60EC08FDh
mov dword ptr [ebp-20h], eax
call 00007F2B60EC7815h
test eax, eax
jne 00007F2B60EC078Ch
push 0000001Ch
call 00007F2B60EC08BAh
add esp, 04h
call 00007F2B60EC8C12h
test eax, eax
jne 00007F2B60EC078Ch
push 00000010h
call 00007F2B60EC08A7h
add esp, 04h
push 00000001h
call 00007F2B60EBDA4Dh
add esp, 04h
call 00007F2B60ECD2D5h
mov dword ptr [ebp-04h], 00000000h
call 00007F2B60EC5C19h
test eax, eax
jnl 00007F2B60EC078Ch
push 0000001Bh
call 00007F2B60EC015Eh

Rich Headers

Programming Language:

[ASM] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[C++] VS2010 build 30319
[ C ] VS2010 build 30319
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x44898	0x64	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x34b000	0x1aedf0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x344000	0x2a24	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x429e0	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x37000	0x1a0	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x35501	0x35600	6f360453617910dbe83c7900f08ff243	False	0.44227074795081966	data	6.1865835972464955	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x37000	0xe1c8	0xe200	cfbbef663e05b338b0858c11992232e4	False	0.29117118362831856	data	4.585053608257208	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x46000	0x2fda24	0x2fba00	86a7c534d1013684d2546c10f645596e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.reloc	0x344000	0x6412	0x6600	cd01e3458298364da224401e910d16cc	False	0.3324142156862745	data	3.6515163955515186	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
.rsrc	0x34b000	0x1aedf0	0x1aee00	dff8480deb96600e91181980836305b3	False	0.5343312572526835	data	7.14920575283554	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
PNG	0x362138	0x77	PNG image data, 4 x 4, 8-bit/color RGB, non-interlaced	English	United States	0.9915966386554622
PNG	0x3621b0	0x2f5	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.0145310435931307
PNG	0x3624a8	0x301	PNG image data, 70 x 31, 8-bit/color RGBA, non-interlaced	English	United States	1.0143042912873863
PNG	0x3627ac	0x287	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.017001545595054
PNG	0x362a34	0x36e	PNG image data, 22 x 40, 8-bit/color RGB, non-interlaced	English	United States	1.0125284738041003
PNG	0x362da4	0x15d	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0315186246418337
PNG	0x362f04	0x13e	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0345911949685536
PNG	0x363044	0x115	PNG image data, 30 x 24, 8-bit/color RGB, non-interlaced	English	United States	1.03971119133574
PNG	0x36315c	0x12a	PNG image data, 20 x 40, 8-bit/color RGBA, non-interlaced	English	United States	1.0302013422818792
PNG	0x363288	0x20c	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.0209923664122138
PNG	0x363494	0xfd	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.0276679841897234
PNG	0x363594	0xa6	PNG image data, 7 x 7, 8-bit/color RGB, non-interlaced	English	United States	1.0120481927710843
PNG	0x36363c	0x7c	PNG image data, 3 x 11, 8-bit/color RGBA, non-interlaced	English	United States	0.9919354838709677
PNG	0x3636b8	0x96	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.0133333333333334
PNG	0x363750	0x91	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.006896551724138
PNG	0x3637e4	0x84	PNG image data, 15 x 3, 8-bit/color RGB, non-interlaced	English	United States	0.9848484848484849
PNG	0x363868	0xa3	PNG image data, 7 x 7, 8-bit/color RGB, non-interlaced	English	United States	1.0122699386503067
PNG	0x36390c	0x771	PNG image data, 13 x 156, 8-bit/color RGB, non-interlaced	English	United States	1.005774278215223
PNG	0x364080	0x697	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.006520450503853
PNG	0x364718	0x342	PNG image data, 30 x 16, 8-bit/color RGBA, non-interlaced	English	United States	1.013189448441247
PNG	0x364a5c	0x45f	PNG image data, 24 x 72, 8-bit/color RGB, non-interlaced	English	United States	1.0098302055406614
PNG	0x364ebc	0x1a3	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.026252983293556
PNG	0x365060	0xac8	PNG image data, 24 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0039855072463768
PNG	0x365b28	0x37c	PNG image data, 8 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.0123318385650224
PNG	0x365ea4	0xa50	PNG image data, 24 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0041666666666667
PNG	0x3668f4	0x48e	PNG image data, 9 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.009433962264151
PNG	0x366d84	0xa50	PNG image data, 24 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0041666666666667
PNG	0x3677d4	0x380	PNG image data, 8 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.0122767857142858
PNG	0x367b54	0xab0	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0040204678362572
PNG	0x368604	0xb1f	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0038637161924833
PNG	0x369124	0xa8e	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0040710584752035
PNG	0x369bb4	0xb30	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.003840782122905
PNG	0x36a6e4	0x3a6	PNG image data, 48 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.011777301927195
PNG	0x36aa8c	0x111b	PNG image data, 38 x 114, 8-bit/color RGBA, non-interlaced	English	United States	1.0025119890385932
PNG	0x36bba8	0x3d1	PNG image data, 23 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0112589559877174
PNG	0x36bf7c	0x21b	PNG image data, 11 x 88, 8-bit/color RGB, non-interlaced	English	United States	1.0204081632653061
PNG	0x36c198	0xb12	PNG image data, 50 x 273, 8-bit/color RGBA, non-interlaced	English	United States	1.003881439661256
PNG	0x36ccac	0x7ac	PNG image data, 50 x 162, 8-bit/color RGBA, non-interlaced	English	United States	1.005600814663951
PNG	0x36d458	0xd43	PNG image data, 50 x 264, 8-bit/color RGB, non-interlaced	English	United States	1.003240058910162
PNG	0x36e19c	0x3a4	PNG image data, 22 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.011802575107296
PNG	0x36e540	0x320	PNG image data, 14 x 246, 8-bit/color RGBA, non-interlaced	English	United States	1.01375
PNG	0x36e860	0x31f	PNG image data, 14 x 246, 8-bit/color RGBA, non-interlaced	English	United States	1.0137672090112642
PNG	0x36eb80	0x2bd	PNG image data, 15 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0156918687589158
PNG	0x36ee40	0x273	PNG image data, 15 x 76, 8-bit/color RGBA, non-interlaced	English	United States	1.0175438596491229
PNG	0x36f0b4	0x2c9	PNG image data, 15 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0154277699859748
PNG	0x36f380	0x163	PNG image data, 70 x 66, 8-bit/color RGBA, non-interlaced	English	United States	1.0112676056338028
PNG	0x36f4e4	0x152	PNG image data, 41 x 36, 8-bit/color RGBA, non-interlaced	English	United States	1.032544378698225
PNG	0x36f638	0x38a	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0121412803532008
PNG	0x36f9c4	0x532	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0082706766917293
PNG	0x36fef8	0x19c	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.8810679611650486
PNG	0x370094	0x2296	PNG image data, 72 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.001242376327084
PNG	0x37232c	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0x3729cc	0x1c4	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.8252212389380531
PNG	0x372b90	0x522	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.008371385083714
PNG	0x3730b4	0x2475	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.000750026786671
PNG	0x37552c	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0x375bcc	0x1c3	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.8314855875831486
PNG	0x375d90	0x505	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0085603112840467
PNG	0x376298	0x24d3	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.0004243131430997
PNG	0x37876c	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0x378e0c	0x1c7	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.832967032967033
PNG	0x378fd4	0x536	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0082458770614693
PNG	0x37950c	0x24f0	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.0011632825719121
PNG	0x37b9fc	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0x37c09c	0x1c5	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.8388520971302428
PNG	0x37c264	0x4d9	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.008863819500403
PNG	0x37c740	0x23d3	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.0
PNG	0x37eb14	0x189	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.0279898218829517
PNG	0x37eca0	0x1bc	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	0.7027027027027027
PNG	0x37ee5c	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0x37f4fc	0x1c4	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.827433628318584
PNG	0x37f6c0	0x4ef	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0087094220110848
PNG	0x37fbb0	0x23a2	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.0007673755755317
PNG	0x381f54	0xc5	PNG image data, 3 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0253807106598984
PNG	0x38201c	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0x3826bc	0x1ba	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.8212669683257918
PNG	0x382878	0x4e4	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0087859424920127
PNG	0x382d5c	0x250f	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.0005270369979973
PNG	0x38526c	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0x38590c	0x1c2	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.8288888888888889
PNG	0x385ad0	0x4e9	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0087509944311854
PNG	0x385fbc	0x23c6	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.000436776588775
PNG	0x388384	0xb5	PNG image data, 15 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0165745856353592
PNG	0x38843c	0x186	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.028205128205128
PNG	0x3885c4	0x1b5	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	0.6864988558352403
PNG	0x38877c	0x66	PNG image data, 1 x 46, 8-bit/color RGBA, non-interlaced	English	United States	0.9803921568627451
PNG	0x3887e4	0xf9	PNG image data, 90 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.0321285140562249
PNG	0x3888e0	0x17c3	PNG image data, 86 x 240, 8-bit/color RGBA, non-interlaced	English	United States	0.992931119513398
PNG	0x38a0a4	0x283	PNG image data, 86 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0171073094867806
PNG	0x38a328	0x71	PNG image data, 5 x 8, 8-bit/color RGBA, non-interlaced	English	United States	0.9823008849557522
PNG	0x38a39c	0x71d	PNG image data, 16 x 48, 8-bit/color RGBA, non-interlaced	English	United States	1.0060406370126305
PNG	0x38aabc	0x794	PNG image data, 16 x 48, 8-bit/color RGBA, non-interlaced	English	United States	1.0056701030927835
PNG	0x38b250	0x284	PNG image data, 7 x 39, 8-bit/color RGBA, non-interlaced	English	United States	1.0170807453416149
PNG	0x38b4d4	0x203	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.021359223300971
PNG	0x38b6d8	0x1b5	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.0251716247139588
PNG	0x38b890	0xb2	PNG image data, 2 x 20, 8-bit/color RGB, non-interlaced	English	United States	1.0168539325842696
PNG	0x38b944	0xd1	PNG image data, 11 x 11, 8-bit/color RGBA, non-interlaced	English	United States	0.9760765550239234
PNG	0x38ba18	0x21c	PNG image data, 21 x 42, 8-bit/color RGBA, non-interlaced	English	United States	1.0203703703703704
PNG	0x38bc34	0x21c	PNG image data, 21 x 42, 8-bit/color RGBA, non-interlaced	English	United States	1.0203703703703704
PNG	0x38be50	0x1ae	PNG image data, 21 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0186046511627906
PNG	0x38c000	0x13a	PNG image data, 16 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.0222929936305734
PNG	0x38c13c	0x13f	PNG image data, 21 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0344827586206897
PNG	0x38c27c	0x135	PNG image data, 16 x 56, 8-bit/color RGBA, non-interlaced	English	United States	0.9967637540453075
PNG	0x38c3b4	0xdb	PNG image data, 21 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0228310502283104
PNG	0x38c490	0xc6	PNG image data, 16 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.0252525252525253
PNG	0x38c558	0x1a9	PNG image data, 21 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0141176470588236
PNG	0x38c704	0x19b	PNG image data, 16 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.0194647201946472
PNG	0x38c8a0	0x2296	PNG image data, 72 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.001242376327084
PNG	0x38eb38	0x13e	PNG image data, 72 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0345911949685536
PNG	0x38ec78	0x115	PNG image data, 30 x 24, 8-bit/color RGB, non-interlaced	English	United States	1.03971119133574
PNG	0x38ed90	0x83	PNG image data, 35 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.0076335877862594
PNG	0x38ee14	0xce	PNG image data, 7 x 7, 8-bit/color RGB, non-interlaced	English	United States	1.0242718446601942
PNG	0x38eee4	0xb30	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.003840782122905
PNG	0x38fa14	0x25f	PNG image data, 72 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0181219110378912
PNG	0x38fc74	0x79	PNG image data, 4 x 4, 8-bit/color RGB, non-interlaced	English	United States	0.9752066115702479
PNG	0x38fcf0	0x170	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9755434782608695
PNG	0x38fe60	0x26b	PNG image data, 70 x 31, 8-bit/color RGBA, non-interlaced	English	United States	1.0177705977382876
PNG	0x3900cc	0x105	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9731800766283525
PNG	0x3901d4	0xe6	PNG image data, 22 x 38, 8-bit/color RGB, non-interlaced	English	United States	1.0260869565217392
PNG	0x3902bc	0x38d	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.012101210121012
PNG	0x39064c	0x265	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0179445350734095
PNG	0x3908b4	0x11a	PNG image data, 30 x 24, 8-bit/color RGBA, non-interlaced	English	United States	1.0319148936170213
PNG	0x3909d0	0xaa	PNG image data, 2 x 19, 8-bit/color RGB, non-interlaced	English	United States	1.011764705882353
PNG	0x390a7c	0x12a	PNG image data, 20 x 40, 8-bit/color RGBA, non-interlaced	English	United States	1.0268456375838926
PNG	0x390ba8	0x209	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.021113243761996
PNG	0x390db4	0xf5	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.0244897959183674
PNG	0x390eac	0xa6	PNG image data, 54 x 31, 8-bit/color RGB, non-interlaced	English	United States	1.0180722891566265
PNG	0x390f54	0x150	PNG image data, 54 x 124, 8-bit/color RGB, non-interlaced	English	United States	1.0327380952380953
PNG	0x3910a4	0xac	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0174418604651163
PNG	0x391150	0x89	PNG image data, 3 x 11, 8-bit/color RGBA, non-interlaced	English	United States	1.0
PNG	0x3911dc	0x98	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.006578947368421
PNG	0x391274	0x91	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.006896551724138
PNG	0x391308	0x7d	PNG image data, 15 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.008
PNG	0x391388	0xa6	PNG image data, 7 x 7, 8-bit/color RGB, non-interlaced	English	United States	1.0120481927710843
PNG	0x391430	0xbc	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0159574468085106
PNG	0x3914ec	0xa07	PNG image data, 13 x 156, 8-bit/color RGBA, non-interlaced	English	United States	1.004285157771718
PNG	0x391ef4	0x1de1	PNG image data, 52 x 336, 8-bit/color RGBA, non-interlaced	English	United States	1.0014380964832004
PNG	0x393cd8	0x1be	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.0246636771300448
PNG	0x393e98	0x53b	PNG image data, 30 x 16, 8-bit/color RGBA, non-interlaced	English	United States	1.0082150858849888
PNG	0x3943d4	0x440	PNG image data, 22 x 66, 8-bit/color RGBA, non-interlaced	English	United States	1.010110294117647
PNG	0x394814	0x12e	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.0298013245033113
PNG	0x394944	0x5b1	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0075497597803706
PNG	0x394ef8	0x408	PNG image data, 9 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0106589147286822
PNG	0x395300	0x471	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.009674582233949
PNG	0x395774	0x4b7	PNG image data, 10 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0091135045567523
PNG	0x395c2c	0x481	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0095403295750216
PNG	0x3960b0	0x3ec	PNG image data, 9 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0109561752988048
PNG	0x39649c	0x452	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0099457504520795
PNG	0x3968f0	0x414	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.010536398467433
PNG	0x396d04	0x39e	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.011879049676026
PNG	0x3970a4	0x48d	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.009442060085837
PNG	0x397534	0x1b3	PNG image data, 15 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.025287356321839
PNG	0x3976e8	0xea	PNG image data, 32 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0299145299145298
PNG	0x3977d4	0x1ae0	PNG image data, 38 x 114, 8-bit/color RGBA, non-interlaced	English	United States	1.0015988372093023
PNG	0x3992b4	0xb43	PNG image data, 22 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0038154699965314
PNG	0x399df8	0x609	PNG image data, 11 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0071197411003237
PNG	0x39a404	0x18ae	PNG image data, 43 x 234, 8-bit/color RGBA, non-interlaced	English	United States	1.0017410572966128
PNG	0x39bcb4	0x1177	PNG image data, 43 x 135, 8-bit/color RGBA, non-interlaced	English	United States	1.0024602997092373
PNG	0x39ce2c	0x25ec	PNG image data, 43 x 330, 8-bit/color RGBA, non-interlaced	English	United States	1.0011330861145447
PNG	0x39f418	0xacb	PNG image data, 22 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.0039811798769454
PNG	0x39fee4	0xbc8	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0036472148541113
PNG	0x3a0aac	0xc2e	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0035279025016035
PNG	0x3a16dc	0x5dd	PNG image data, 15 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0073284477015323
PNG	0x3a1cbc	0x597	PNG image data, 15 x 76, 8-bit/color RGBA, non-interlaced	English	United States	1.0076869322152342
PNG	0x3a2254	0x5f8	PNG image data, 15 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.007198952879581
PNG	0x3a284c	0x237	PNG image data, 54 x 69, 8-bit/color RGBA, non-interlaced	English	United States	1.0194003527336861
PNG	0x3a2a84	0x588	PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced	English	United States	1.0077683615819208
PNG	0x3a300c	0x4b6	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0091210613598673
PNG	0x3a34c4	0x532	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0082706766917293
PNG	0x3a39f8	0x5fe	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0071707953063884
PNG	0x3a3ff8	0xdd3	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	0.9960440802486578
PNG	0x3a4dcc	0x7c	PNG image data, 1 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9919354838709677
PNG	0x3a4e48	0x13c1	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021752026893416
PNG	0x3a620c	0x37d	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0123180291153415
PNG	0x3a658c	0x395	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0119956379498365
PNG	0x3a6924	0x125e	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0023394300297745
PNG	0x3a7b84	0x13b4	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021808088818398
PNG	0x3a8f38	0x369	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0126002290950744
PNG	0x3a92a4	0x3cc	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0113168724279835
PNG	0x3a9670	0x1320	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.002246732026144
PNG	0x3aa990	0x13ac	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021842732327244
PNG	0x3abd3c	0x364	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.012672811059908
PNG	0x3ac0a0	0x3ba	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0115303983228512
PNG	0x3ac45c	0x1274	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0023285351397122
PNG	0x3ad6d0	0x139f	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021899263388414
PNG	0x3aea70	0x380	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0122767857142858
PNG	0x3aedf0	0x352	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0129411764705882
PNG	0x3af144	0x1288	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.002318718381113
PNG	0x3b03cc	0x211	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.0207939508506616
PNG	0x3b05e0	0x2e4	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	1.0148648648648648
PNG	0x3b08c4	0x13ad	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021838395870557
PNG	0x3b1c74	0x365	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0126582278481013
PNG	0x3b1fdc	0x374	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.012443438914027
PNG	0x3b2350	0x126b	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0023329798515377
PNG	0x3b35bc	0xd4	PNG image data, 3 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.028301886792453
PNG	0x3b3690	0x1394	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.00219473264166
PNG	0x3b4a24	0x374	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.012443438914027
PNG	0x3b4d98	0x3f4	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0108695652173914
PNG	0x3b518c	0x1304	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0022596548890714
PNG	0x3b6490	0x1397	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021934197407776
PNG	0x3b7828	0x373	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0124575311438277
PNG	0x3b7b9c	0x33d	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0132689987937273
PNG	0x3b7edc	0x119e	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.002439024390244
PNG	0x3b907c	0xa6	PNG image data, 15 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0120481927710843
PNG	0x3b9124	0x211	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.0207939508506616
PNG	0x3b9338	0x2f7	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	1.0144927536231885
PNG	0x3b9630	0x16e	PNG image data, 9 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.030054644808743
PNG	0x3b97a0	0x73	PNG image data, 5 x 5, 8-bit/color RGB, non-interlaced	English	United States	0.9826086956521739
PNG	0x3b9814	0x117	PNG image data, 11 x 24, 8-bit/color RGBA, non-interlaced	English	United States	1.021505376344086
PNG	0x3b992c	0x67	PNG image data, 2 x 55, 8-bit/color RGBA, non-interlaced	English	United States	0.9902912621359223
PNG	0x3b9994	0xce	PNG image data, 90 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.0242718446601942
PNG	0x3b9a64	0xa40	PNG image data, 86 x 240, 8-bit/color RGBA, non-interlaced	English	United States	0.9733231707317073
PNG	0x3ba4a4	0x283	PNG image data, 86 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0171073094867806
PNG	0x3ba728	0x93	PNG image data, 5 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0136054421768708
PNG	0x3ba7bc	0x96a	PNG image data, 18 x 54, 8-bit/color RGBA, non-interlaced	English	United States	1.004564315352697
PNG	0x3bb128	0x99b	PNG image data, 18 x 54, 8-bit/color RGBA, non-interlaced	English	United States	1.0044733631557543
PNG	0x3bbac4	0x2f7	PNG image data, 11 x 45, 8-bit/color RGBA, non-interlaced	English	United States	1.0144927536231885
PNG	0x3bbdbc	0x1ff	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.0215264187866928
PNG	0x3bbfbc	0x1f7	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.021868787276342
PNG	0x3bc1b4	0xb6	PNG image data, 2 x 20, 8-bit/color RGB, non-interlaced	English	United States	1.010989010989011
PNG	0x3bc26c	0x94	PNG image data, 11 x 11, 8-bit/color RGBA, non-interlaced	English	United States	1.0135135135135136
PNG	0x3bc300	0x3e6	PNG image data, 17 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.0110220440881763
PNG	0x3bc6e8	0x3e6	PNG image data, 17 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.0110220440881763
PNG	0x3bcad0	0x315	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0139416983523448
PNG	0x3bcde8	0x259	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0183028286189684
PNG	0x3bd044	0x205	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0212765957446808
PNG	0x3bd24c	0x176	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0294117647058822
PNG	0x3bd3c4	0x124	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0136986301369864
PNG	0x3bd4e8	0xd7	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0
PNG	0x3bd5c0	0x28f	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.016793893129771
PNG	0x3bd850	0x225	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0200364298724955
PNG	0x3bda78	0xdd3	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	0.9960440802486578
PNG	0x3be84c	0x123	PNG image data, 72 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0378006872852235
PNG	0x3be970	0x10b	PNG image data, 30 x 24, 8-bit/color RGB, non-interlaced	English	United States	1.0337078651685394
PNG	0x3bea7c	0x83	PNG image data, 35 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.0076335877862594
PNG	0x3beb00	0x12f	PNG image data, 9 x 9, 8-bit/color RGB, non-interlaced	English	United States	1.0264026402640265
PNG	0x3bec30	0x48d	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.009442060085837
PNG	0x3bf0c0	0x261	PNG image data, 72 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0180623973727423
PNG	0x3bf324	0x79	PNG image data, 4 x 4, 8-bit/color RGB, non-interlaced	English	United States	0.9752066115702479
PNG	0x3bf3a0	0x1b5	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9931350114416476
PNG	0x3bf558	0x293	PNG image data, 70 x 31, 8-bit/color RGBA, non-interlaced	English	United States	1.0166919575113809
PNG	0x3bf7ec	0x11a	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9716312056737588
PNG	0x3bf908	0xde	PNG image data, 22 x 38, 8-bit/color RGB, non-interlaced	English	United States	1.027027027027027
PNG	0x3bf9e8	0x38d	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.012101210121012
PNG	0x3bfd78	0x265	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0179445350734095
PNG	0x3bffe0	0x124	PNG image data, 30 x 24, 8-bit/color RGBA, non-interlaced	English	United States	1.0308219178082192
PNG	0x3c0104	0xaa	PNG image data, 2 x 19, 8-bit/color RGB, non-interlaced	English	United States	1.011764705882353
PNG	0x3c01b0	0x12a	PNG image data, 20 x 40, 8-bit/color RGBA, non-interlaced	English	United States	1.0268456375838926
PNG	0x3c02dc	0x209	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.021113243761996
PNG	0x3c04e8	0xf5	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.0244897959183674
PNG	0x3c05e0	0x9f	PNG image data, 54 x 31, 8-bit/color RGB, non-interlaced	English	United States	1.0125786163522013
PNG	0x3c0680	0x148	PNG image data, 54 x 124, 8-bit/color RGB, non-interlaced	English	United States	1.0335365853658536
PNG	0x3c07c8	0xac	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0174418604651163
PNG	0x3c0874	0x8b	PNG image data, 3 x 11, 8-bit/color RGBA, non-interlaced	English	United States	1.014388489208633
PNG	0x3c0900	0xa4	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.0
PNG	0x3c09a4	0x94	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.0067567567567568
PNG	0x3c0a38	0x87	PNG image data, 15 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.0
PNG	0x3c0ac0	0xa6	PNG image data, 7 x 7, 8-bit/color RGB, non-interlaced	English	United States	1.0120481927710843
PNG	0x3c0b68	0xc5	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0203045685279188
PNG	0x3c0c30	0xa54	PNG image data, 13 x 156, 8-bit/color RGBA, non-interlaced	English	United States	1.004160363086233
PNG	0x3c1684	0x1eda	PNG image data, 52 x 336, 8-bit/color RGBA, non-interlaced	English	United States	1.001392757660167
PNG	0x3c3560	0x1cb	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.0239651416122004
PNG	0x3c372c	0x53b	PNG image data, 30 x 16, 8-bit/color RGBA, non-interlaced	English	United States	1.0082150858849888
PNG	0x3c3c68	0x4f3	PNG image data, 22 x 66, 8-bit/color RGBA, non-interlaced	English	United States	1.0086819258089976
PNG	0x3c415c	0x11a	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.024822695035461
PNG	0x3c4278	0x5af	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0075601374570446
PNG	0x3c4828	0x3ff	PNG image data, 9 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.010752688172043
PNG	0x3c4c28	0x461	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0098126672613739
PNG	0x3c508c	0x4cc	PNG image data, 10 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.008957654723127
PNG	0x3c5558	0x474	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0096491228070175
PNG	0x3c59cc	0x3ef	PNG image data, 9 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0109235352532273
PNG	0x3c5dbc	0x44a	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0100182149362478
PNG	0x3c6208	0x41f	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0104265402843602
PNG	0x3c6628	0x39b	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0119176598049837
PNG	0x3c69c4	0x4a1	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.009282700421941
PNG	0x3c6e68	0x1b3	PNG image data, 15 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.025287356321839
PNG	0x3c701c	0xf9	PNG image data, 32 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.036144578313253
PNG	0x3c7118	0x1bfa	PNG image data, 38 x 114, 8-bit/color RGBA, non-interlaced	English	United States	1.001535883831332
PNG	0x3c8d14	0xb43	PNG image data, 22 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0038154699965314
PNG	0x3c9858	0x609	PNG image data, 11 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0071197411003237
PNG	0x3c9e64	0x18ae	PNG image data, 43 x 234, 8-bit/color RGBA, non-interlaced	English	United States	1.0017410572966128
PNG	0x3cb714	0x1177	PNG image data, 43 x 135, 8-bit/color RGBA, non-interlaced	English	United States	1.0024602997092373
PNG	0x3cc88c	0x25ec	PNG image data, 43 x 330, 8-bit/color RGBA, non-interlaced	English	United States	1.0011330861145447
PNG	0x3cee78	0xac7	PNG image data, 22 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.0039869517941282
PNG	0x3cf940	0xa82	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.004089219330855
PNG	0x3d03c4	0xac7	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0039869517941282
PNG	0x3d0e8c	0x5d3	PNG image data, 15 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0073775989268947
PNG	0x3d1460	0x575	PNG image data, 15 x 76, 8-bit/color RGBA, non-interlaced	English	United States	1.0078740157480315
PNG	0x3d19d8	0x5ea	PNG image data, 15 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0072655217965654
PNG	0x3d1fc4	0x222	PNG image data, 54 x 69, 8-bit/color RGBA, non-interlaced	English	United States	1.02014652014652
PNG	0x3d21e8	0x588	PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced	English	United States	1.0077683615819208
PNG	0x3d2770	0x552	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0080763582966226
PNG	0x3d2cc4	0x532	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0082706766917293
PNG	0x3d31f8	0x624	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.006997455470738
PNG	0x3d381c	0xf6f	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0027841052898
PNG	0x3d478c	0x98	PNG image data, 1 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.013157894736842
PNG	0x3d4824	0x13c1	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021752026893416
PNG	0x3d5be8	0x37d	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0123180291153415
PNG	0x3d5f68	0x395	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0119956379498365
PNG	0x3d6300	0xbea	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0036065573770492
PNG	0x3d6eec	0x13b4	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021808088818398
PNG	0x3d82a0	0x369	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0126002290950744
PNG	0x3d860c	0x3cc	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0113168724279835
PNG	0x3d89d8	0xcb2	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0033846153846153
PNG	0x3d968c	0x13ac	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021842732327244
PNG	0x3daa38	0x364	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.012672811059908
PNG	0x3dad9c	0x3ba	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0115303983228512
PNG	0x3db158	0xbff	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0035818951481603
PNG	0x3dbd58	0x139f	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021899263388414
PNG	0x3dd0f8	0x380	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0122767857142858
PNG	0x3dd478	0x352	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0129411764705882
PNG	0x3dd7cc	0xbf8	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0035900783289817
PNG	0x3de3c4	0x1e3	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.0227743271221532
PNG	0x3de5a8	0x3d2	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	1.0112474437627812
PNG	0x3de97c	0x13ad	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021838395870557
PNG	0x3dfd2c	0x365	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0126582278481013
PNG	0x3e0094	0x374	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.012443438914027
PNG	0x3e0408	0xb9a	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0037037037037038
PNG	0x3e0fa4	0xd4	PNG image data, 3 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.028301886792453
PNG	0x3e1078	0x1394	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.00219473264166
PNG	0x3e240c	0x374	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.012443438914027
PNG	0x3e2780	0x3f4	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0108695652173914
PNG	0x3e2b74	0xc62	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0034700315457412
PNG	0x3e37d8	0x1397	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021934197407776
PNG	0x3e4b70	0x373	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0124575311438277
PNG	0x3e4ee4	0x33d	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0132689987937273
PNG	0x3e5224	0xb84	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0003392130257802
PNG	0x3e5da8	0xb1	PNG image data, 15 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0169491525423728
PNG	0x3e5e5c	0x1da	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.0232067510548524
PNG	0x3e6038	0x375	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	1.0124293785310734
PNG	0x3e63b0	0x1a5	PNG image data, 9 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.0261282660332542
PNG	0x3e6558	0x71	PNG image data, 5 x 5, 8-bit/color RGB, non-interlaced	English	United States	0.9911504424778761
PNG	0x3e65cc	0x11a	PNG image data, 11 x 24, 8-bit/color RGBA, non-interlaced	English	United States	1.0283687943262412
PNG	0x3e66e8	0x67	PNG image data, 2 x 55, 8-bit/color RGBA, non-interlaced	English	United States	0.9902912621359223
PNG	0x3e6750	0xe0	PNG image data, 90 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.03125
PNG	0x3e6830	0xa40	PNG image data, 86 x 240, 8-bit/color RGBA, non-interlaced	English	United States	0.9733231707317073
PNG	0x3e7270	0x283	PNG image data, 86 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0171073094867806
PNG	0x3e74f4	0x93	PNG image data, 5 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0136054421768708
PNG	0x3e7588	0x985	PNG image data, 18 x 54, 8-bit/color RGBA, non-interlaced	English	United States	1.00451374640952
PNG	0x3e7f10	0x9ca	PNG image data, 18 x 54, 8-bit/color RGBA, non-interlaced	English	United States	1.00438946528332
PNG	0x3e88dc	0x339	PNG image data, 11 x 45, 8-bit/color RGBA, non-interlaced	English	United States	1.0133333333333334
PNG	0x3e8c18	0x214	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.0206766917293233
PNG	0x3e8e2c	0x22e	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.0197132616487454
PNG	0x3e905c	0xb3	PNG image data, 2 x 20, 8-bit/color RGB, non-interlaced	English	United States	1.011173184357542
PNG	0x3e9110	0x95	PNG image data, 11 x 11, 8-bit/color RGBA, non-interlaced	English	United States	0.9932885906040269
PNG	0x3e91a8	0x414	PNG image data, 17 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.010536398467433
PNG	0x3e95bc	0x414	PNG image data, 17 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.010536398467433
PNG	0x3e99d0	0x1fb	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0216962524654833
PNG	0x3e9bcc	0x179	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0159151193633953
PNG	0x3e9d48	0x179	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0053050397877985
PNG	0x3e9ec4	0x114	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0289855072463767
PNG	0x3e9fd8	0x10e	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.011111111111111
PNG	0x3ea0e8	0xb6	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0054945054945055
PNG	0x3ea1a0	0x17e	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0287958115183247
PNG	0x3ea320	0x15c	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0201149425287357
PNG	0x3ea47c	0xf6f	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0027841052898
PNG	0x3eb3ec	0x143	PNG image data, 72 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0340557275541795
PNG	0x3eb530	0x110	PNG image data, 30 x 24, 8-bit/color RGB, non-interlaced	English	United States	1.0294117647058822
PNG	0x3eb640	0x87	PNG image data, 35 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.0074074074074073
PNG	0x3eb6c8	0x13b	PNG image data, 9 x 9, 8-bit/color RGB, non-interlaced	English	United States	1.0253968253968253
PNG	0x3eb804	0x4a1	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.009282700421941
PNG	0x3ebca8	0x25e	PNG image data, 72 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.018151815181518
PNG	0x3ebf08	0x79	PNG image data, 4 x 4, 8-bit/color RGB, non-interlaced	English	United States	0.9752066115702479
PNG	0x3ebf84	0x167	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9972144846796658
PNG	0x3ec0ec	0x278	PNG image data, 70 x 31, 8-bit/color RGBA, non-interlaced	English	United States	1.0174050632911393
PNG	0x3ec364	0x11a	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9680851063829787
PNG	0x3ec480	0xd4	PNG image data, 22 x 38, 8-bit/color RGB, non-interlaced	English	United States	1.0235849056603774
PNG	0x3ec554	0x38d	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.012101210121012
PNG	0x3ec8e4	0x265	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0179445350734095
PNG	0x3ecb4c	0x11a	PNG image data, 30 x 24, 8-bit/color RGBA, non-interlaced	English	United States	1.0319148936170213
PNG	0x3ecc68	0xaa	PNG image data, 2 x 19, 8-bit/color RGB, non-interlaced	English	United States	1.011764705882353
PNG	0x3ecd14	0x12a	PNG image data, 20 x 40, 8-bit/color RGBA, non-interlaced	English	United States	1.0268456375838926
PNG	0x3ece40	0x209	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.021113243761996
PNG	0x3ed04c	0xf5	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.0244897959183674
PNG	0x3ed144	0xa6	PNG image data, 54 x 31, 8-bit/color RGB, non-interlaced	English	United States	1.0180722891566265
PNG	0x3ed1ec	0x150	PNG image data, 54 x 124, 8-bit/color RGB, non-interlaced	English	United States	1.0327380952380953
PNG	0x3ed33c	0xac	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0174418604651163
PNG	0x3ed3e8	0x8b	PNG image data, 3 x 11, 8-bit/color RGBA, non-interlaced	English	United States	1.0
PNG	0x3ed474	0x98	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.006578947368421
PNG	0x3ed50c	0x91	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.006896551724138
PNG	0x3ed5a0	0x7d	PNG image data, 15 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.008
PNG	0x3ed620	0xa6	PNG image data, 7 x 7, 8-bit/color RGB, non-interlaced	English	United States	1.0120481927710843
PNG	0x3ed6c8	0xbd	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0105820105820107
PNG	0x3ed788	0xa07	PNG image data, 13 x 156, 8-bit/color RGBA, non-interlaced	English	United States	1.004285157771718
PNG	0x3ee190	0x1de1	PNG image data, 52 x 336, 8-bit/color RGBA, non-interlaced	English	United States	1.0014380964832004
PNG	0x3eff74	0x1be	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.0246636771300448
PNG	0x3f0134	0x53b	PNG image data, 30 x 16, 8-bit/color RGBA, non-interlaced	English	United States	1.0082150858849888
PNG	0x3f0670	0x46c	PNG image data, 22 x 66, 8-bit/color RGBA, non-interlaced	English	United States	1.0097173144876326
PNG	0x3f0adc	0xaf	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.0171428571428571
PNG	0x3f0b8c	0x701	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0061349693251533
PNG	0x3f1290	0x498	PNG image data, 9 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0093537414965987
PNG	0x3f1728	0x5c1	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0074677528852682
PNG	0x3f1cec	0x539	PNG image data, 10 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0082273747195214
PNG	0x3f2228	0x5c7	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0074374577417173
PNG	0x3f27f0	0x47f	PNG image data, 9 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.009556907037359
PNG	0x3f2c70	0x585	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0077848549186128
PNG	0x3f31f8	0x546	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0081481481481482
PNG	0x3f3740	0x4e1	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0088070456365092
PNG	0x3f3c24	0x5b0	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.007554945054945
PNG	0x3f41d4	0x1b3	PNG image data, 15 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.025287356321839
PNG	0x3f4388	0xea	PNG image data, 32 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0299145299145298
PNG	0x3f4474	0x1ad9	PNG image data, 38 x 114, 8-bit/color RGBA, non-interlaced	English	United States	1.0016004655899897
PNG	0x3f5f50	0xb43	PNG image data, 22 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0038154699965314
PNG	0x3f6a94	0x609	PNG image data, 11 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0071197411003237
PNG	0x3f70a0	0x18ae	PNG image data, 43 x 234, 8-bit/color RGBA, non-interlaced	English	United States	1.0017410572966128
PNG	0x3f8950	0x1177	PNG image data, 43 x 135, 8-bit/color RGBA, non-interlaced	English	United States	1.0024602997092373
PNG	0x3f9ac8	0x25ec	PNG image data, 43 x 330, 8-bit/color RGBA, non-interlaced	English	United States	1.0011330861145447
PNG	0x3fc0b4	0xad3	PNG image data, 22 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.0039696860339227
PNG	0x3fcb88	0xbc8	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0036472148541113
PNG	0x3fd750	0xc2e	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0035279025016035
PNG	0x3fe380	0x5dd	PNG image data, 15 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0073284477015323
PNG	0x3fe960	0x597	PNG image data, 15 x 76, 8-bit/color RGBA, non-interlaced	English	United States	1.0076869322152342
PNG	0x3feef8	0x5f8	PNG image data, 15 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.007198952879581
PNG	0x3ff4f0	0x228	PNG image data, 54 x 69, 8-bit/color RGBA, non-interlaced	English	United States	1.019927536231884
PNG	0x3ff718	0x588	PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced	English	United States	1.0077683615819208
PNG	0x3ffca0	0x38a	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0121412803532008
PNG	0x40002c	0x532	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0082706766917293
PNG	0x400560	0x32f	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0134969325153373
PNG	0x400890	0xef8	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	0.9950417536534447
PNG	0x401788	0x7c	PNG image data, 1 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9919354838709677
PNG	0x401804	0x13c1	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021752026893416
PNG	0x402bc8	0x37d	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0123180291153415
PNG	0x402f48	0x395	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0119956379498365
PNG	0x4032e0	0x125e	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0023394300297745
PNG	0x404540	0x13b4	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021808088818398
PNG	0x4058f4	0x369	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0126002290950744
PNG	0x405c60	0x3cc	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0113168724279835
PNG	0x40602c	0x1320	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.002246732026144
PNG	0x40734c	0x13ac	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021842732327244
PNG	0x4086f8	0x364	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.012672811059908
PNG	0x408a5c	0x3ba	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0115303983228512
PNG	0x408e18	0x1274	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0023285351397122
PNG	0x40a08c	0x139f	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021899263388414
PNG	0x40b42c	0x380	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0122767857142858
PNG	0x40b7ac	0x352	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0129411764705882
PNG	0x40bb00	0x1288	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.002318718381113
PNG	0x40cd88	0x99d	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.004469727752946
PNG	0x40d728	0x2e6	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	1.0148247978436657
PNG	0x40da10	0x13ad	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021838395870557
PNG	0x40edc0	0x365	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0126582278481013
PNG	0x40f128	0x374	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.012443438914027
PNG	0x40f49c	0x126b	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0023329798515377
PNG	0x410708	0xd4	PNG image data, 3 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.028301886792453
PNG	0x4107dc	0x1394	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.00219473264166
PNG	0x411b70	0x374	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.012443438914027
PNG	0x411ee4	0x3f4	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0108695652173914
PNG	0x4122d8	0x1304	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0022596548890714
PNG	0x4135dc	0x1397	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021934197407776
PNG	0x414974	0x373	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0124575311438277
PNG	0x414ce8	0x33d	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0132689987937273
PNG	0x415028	0x119e	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.002439024390244
PNG	0x4161c8	0xa6	PNG image data, 15 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0120481927710843
PNG	0x416270	0x99d	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.004469727752946
PNG	0x416c10	0x2f7	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	1.0144927536231885
PNG	0x416f08	0x17e	PNG image data, 9 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.0287958115183247
PNG	0x417088	0x71	PNG image data, 5 x 5, 8-bit/color RGB, non-interlaced	English	United States	0.9911504424778761
PNG	0x4170fc	0x117	PNG image data, 11 x 24, 8-bit/color RGBA, non-interlaced	English	United States	1.021505376344086
PNG	0x417214	0x67	PNG image data, 2 x 55, 8-bit/color RGBA, non-interlaced	English	United States	0.9902912621359223
PNG	0x41727c	0xd7	PNG image data, 90 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.0232558139534884
PNG	0x417354	0xa40	PNG image data, 86 x 240, 8-bit/color RGBA, non-interlaced	English	United States	0.9733231707317073
PNG	0x417d94	0x283	PNG image data, 86 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0171073094867806
PNG	0x418018	0x93	PNG image data, 5 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0136054421768708
PNG	0x4180ac	0x96a	PNG image data, 18 x 54, 8-bit/color RGBA, non-interlaced	English	United States	1.004564315352697
PNG	0x418a18	0x99b	PNG image data, 18 x 54, 8-bit/color RGBA, non-interlaced	English	United States	1.0044733631557543
PNG	0x4193b4	0x2f7	PNG image data, 11 x 45, 8-bit/color RGBA, non-interlaced	English	United States	1.0144927536231885
PNG	0x4196ac	0x1d3	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.019271948608137
PNG	0x419880	0x1f8	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.0138888888888888
PNG	0x419a78	0x67	PNG image data, 2 x 20, 8-bit/color RGB, non-interlaced	English	United States	0.9514563106796117
PNG	0x419ae0	0x95	PNG image data, 11 x 11, 8-bit/color RGBA, non-interlaced	English	United States	1.0
PNG	0x419b78	0x39d	PNG image data, 17 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.011891891891892
PNG	0x419f18	0x39d	PNG image data, 17 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.011891891891892
PNG	0x41a2b8	0x1c1	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.024498886414254
PNG	0x41a47c	0x153	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0324483775811208
PNG	0x41a5d0	0x15f	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0113960113960114
PNG	0x41a730	0x100	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.03515625
PNG	0x41a830	0x108	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.018939393939394
PNG	0x41a938	0xb6	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.010989010989011
PNG	0x41a9f0	0x151	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.032640949554896
PNG	0x41ab44	0x135	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.029126213592233
PNG	0x41ac7c	0xdd3	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	0.9960440802486578
PNG	0x41ba50	0x129	PNG image data, 72 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0303030303030303
PNG	0x41bb7c	0x10b	PNG image data, 30 x 24, 8-bit/color RGB, non-interlaced	English	United States	1.0337078651685394
PNG	0x41bc88	0x87	PNG image data, 35 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.0074074074074073
PNG	0x41bd10	0x12f	PNG image data, 9 x 9, 8-bit/color RGB, non-interlaced	English	United States	1.0264026402640265
PNG	0x41be40	0x48d	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.009442060085837
PNG	0x41c2d0	0xdd1	PNG image data, 72 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.003109980209217
PNG	0x41d0a4	0xd61	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0032116788321168
PNG	0x41de08	0x265	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0179445350734095
PNG	0x41e070	0xbb9	PNG image data, 20 x 40, 8-bit/color RGBA, non-interlaced	English	United States	1.0036654448517162
PNG	0x41ec2c	0xc66	PNG image data, 10 x 28, 8-bit/color RGBA, non-interlaced	English	United States	1.0034656584751103
PNG	0x41f894	0xb90	PNG image data, 10 x 28, 8-bit/color RGBA, non-interlaced	English	United States	1.0037162162162163
PNG	0x420424	0xb07	PNG image data, 5 x 5, 8-bit/color RGBA, non-interlaced	English	United States	1.003896563939072
PNG	0x420f2c	0xb50	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0037983425414365
PNG	0x421a7c	0x2885	PNG image data, 42 x 348, 8-bit/color RGBA, non-interlaced	English	United States	1.0010604453870626
PNG	0x424304	0xd8e	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.0031700288184437
PNG	0x425094	0x53b	PNG image data, 30 x 16, 8-bit/color RGBA, non-interlaced	English	United States	1.0082150858849888
PNG	0x4255d0	0x4f3	PNG image data, 22 x 66, 8-bit/color RGBA, non-interlaced	English	United States	1.0086819258089976
PNG	0x425ac4	0x130f	PNG image data, 22 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0022545603607296
PNG	0x426dd4	0xe74	PNG image data, 10 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.002972972972973
PNG	0x427c48	0x11ba	PNG image data, 22 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.002423975319524
PNG	0x428e04	0xece	PNG image data, 11 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0029023746701846
PNG	0x429cd4	0x11ba	PNG image data, 22 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.002423975319524
PNG	0x42ae90	0xe74	PNG image data, 10 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.002972972972973
PNG	0x42bd04	0x1206	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0023840485478976
PNG	0x42cf0c	0x11bc	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0024229074889868
PNG	0x42e0c8	0x112a	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0025034137460174
PNG	0x42f1f4	0x127a	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0023255813953489
PNG	0x430470	0xd3e	PNG image data, 15 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.003244837758112
PNG	0x4311b0	0xbac	PNG image data, 32 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0036813922356091
PNG	0x431d5c	0x146a	PNG image data, 56 x 69, 8-bit/color RGBA, non-interlaced	English	United States	1.0021048603138156
PNG	0x4331c8	0x122f	PNG image data, 22 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0023630504833512
PNG	0x4343f8	0xdec	PNG image data, 11 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0030864197530864
PNG	0x4351e4	0x1100	PNG image data, 42 x 228, 8-bit/color RGBA, non-interlaced	English	United States	1.0025275735294117
PNG	0x4362e4	0x11ed	PNG image data, 42 x 140, 8-bit/color RGBA, non-interlaced	English	United States	1.0023970363913706
PNG	0x4374d4	0x1864	PNG image data, 42 x 330, 8-bit/color RGBA, non-interlaced	English	United States	1.0003203074951954
PNG	0x438d38	0x10b5	PNG image data, 22 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.0025718961889174
PNG	0x439df0	0x124b	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0023489216314327
PNG	0x43b03c	0x1256	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0023434171282488
PNG	0x43c294	0xf2c	PNG image data, 15 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.002832131822863
PNG	0x43d1c0	0xede	PNG image data, 15 x 76, 8-bit/color RGBA, non-interlaced	English	United States	1.0028901734104045
PNG	0x43e0a0	0xf69	PNG image data, 15 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0027883396704689
PNG	0x43f00c	0xe20	PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced	English	United States	1.0030420353982301
PNG	0x43fe2c	0xdc7	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0031187978451943
PNG	0x440bf4	0xbae	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0036789297658864
PNG	0x4417a4	0xd91	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.003167290526922
PNG	0x442538	0xb12	PNG image data, 1 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.003881439661256
PNG	0x44304c	0xbc3	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0036532713384259
PNG	0x443c10	0xc9f	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.003404518724853
PNG	0x4448b0	0xd7d	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031856356791196
PNG	0x445630	0xbf7	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0035912504080966
PNG	0x446228	0xc96	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0034140285536934
PNG	0x446ec0	0xd8c	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031718569780854
PNG	0x447c4c	0xbda	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0036255767963085
PNG	0x448828	0xca0	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0034034653465347
PNG	0x4494c8	0xd80	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031828703703705
PNG	0x44a248	0xbe2	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0036160420775806
PNG	0x44ae2c	0xc8c	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0034246575342465
PNG	0x44bab8	0xd7b	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031874818893074
PNG	0x44c834	0xbe7	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0036101083032491
PNG	0x44d41c	0xc94	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0034161490683229
PNG	0x44e0b0	0xd80	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031828703703705
PNG	0x44ee30	0xd4	PNG image data, 3 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.028301886792453
PNG	0x44ef04	0xbd0	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.003637566137566
PNG	0x44fad4	0xc97	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0034129692832765
PNG	0x45076c	0xd7a	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031884057971014
PNG	0x4514e8	0xbda	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0036255767963085
PNG	0x4520c4	0xc8f	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.003421461897356
PNG	0x452d54	0xd86	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031773541305604
PNG	0x453adc	0x1908	PNG image data, 50 x 178, 8-bit/color RGBA, non-interlaced	English	United States	0.9887640449438202
PNG	0x4553e4	0xb75	PNG image data, 3 x 61, 8-bit/color RGBA, non-interlaced	English	United States	1.0037504261847938
PNG	0x455f5c	0xbd0	PNG image data, 9 x 51, 8-bit/color RGBA, non-interlaced	English	United States	1.003637566137566
PNG	0x456b2c	0x1570	PNG image data, 18 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0020043731778425
PNG	0x45809c	0x1623	PNG image data, 18 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0019410622904534
STYLE_XML	0x4596c0	0x4e01	HTML document, ASCII text, with CRLF line terminators	English	United States	0.1839851770243878
STYLE_XML	0x45e4c4	0x4b09	HTML document, ASCII text, with CRLF line terminators	English	United States	0.20396689052006872
STYLE_XML	0x462fd0	0x4aa6	HTML document, ASCII text, with CRLF line terminators	English	United States	0.20460491889063318
STYLE_XML	0x467a78	0x4a18	HTML document, ASCII text, with CRLF line terminators	English	United States	0.20397511598481655
STYLE_XML	0x46c490	0x1955	HTML document, ASCII text, with CRLF line terminators	English	United States	0.1918272937548188
RT_CURSOR	0x46dde8	0x134	Targa image data - RGB 64 x 65536 x 1 +32 "\001"	English	Canada	0.5422077922077922
RT_CURSOR	0x46df1c	0x134	Targa image data - RGB 64 x 65536 x 1 +32 "\001"	English	Canada	0.512987012987013
RT_CURSOR	0x46e050	0x134	Targa image data - RGB 64 x 65536 x 1 +32 "\001"	English	Canada	0.4772727272727273
RT_CURSOR	0x46e184	0x134	Targa image data - Mono 64 x 65536 x 1 +32 "\001"	English	United States	0.4512987012987013
RT_CURSOR	0x46e2b8	0x134	Targa image data - Mono 64 x 65536 x 1 +32 "\001"	English	United States	0.4967532467532468
RT_CURSOR	0x46e3ec	0x134	data	English	United States	0.20454545454545456
RT_CURSOR	0x46e520	0x134	data	English	United States	0.2857142857142857
RT_CURSOR	0x46e654	0x134	data	English	United States	0.4675324675324675
RT_CURSOR	0x46e788	0x134	data	English	United States	0.2532467532467532
RT_CURSOR	0x46e8bc	0x134	Targa image data - RLE 64 x 65536 x 1 +32 "\001"	English	United States	0.40584415584415584
RT_CURSOR	0x46e9f0	0x134	data	English	United States	0.4383116883116883
RT_CURSOR	0x46eb24	0x134	Targa image data - Mono 64 x 65536 x 1 +32 "\001"	English	United States	0.39285714285714285
RT_CURSOR	0x46ec58	0x134	data	English	United States	0.37337662337662336
RT_CURSOR	0x46ed8c	0x134	data	English	United States	0.4448051948051948
RT_CURSOR	0x46eec0	0x134	data	English	United States	0.525974025974026
RT_CURSOR	0x46eff4	0x134	Targa image data - RGB 64 x 65536 x 1 +32 "\001"	English	United States	0.4805194805194805
RT_CURSOR	0x46f128	0xb4	Targa image data - Map 32 x 65536 x 1 +16 "\001"	English	United States	0.7
RT_CURSOR	0x46f1dc	0x134	Targa image data - RLE 64 x 65536 x 1 +32 "\001"	English	United States	0.4025974025974026
RT_CURSOR	0x46f310	0xb4	data	English	United States	0.55
RT_CURSOR	0x46f3c4	0x134	data	English	United States	0.4090909090909091
RT_CURSOR	0x46f4f8	0xb4	Targa image data - RLE 32 x 65536 x 1 +16 "\001"	English	United States	0.5944444444444444
RT_CURSOR	0x46f5ac	0x134	AmigaOS bitmap font "(", fc_YSize 4294967288, 3840 elements, 2nd "\377\370\037\377\377\370\037\377\377\370\037\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377", 3rd	English	United States	0.32142857142857145
RT_CURSOR	0x46f6e0	0xb4	Targa image data - RLE 32 x 65536 x 1 +16 "\001"	English	United States	0.49444444444444446
RT_CURSOR	0x46f794	0x134	AmigaOS bitmap font "(", fc_YSize 4294967288, 3840 elements, 2nd "\377\360\037\377\377\370?\377\377\374\177\377\377\376\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377", 3rd	English	United States	0.33766233766233766
RT_CURSOR	0x46f8c8	0xb4	Targa image data - RLE 32 x 65536 x 1 +16 "\001"	English	United States	0.5
RT_CURSOR	0x46f97c	0x134	AmigaOS bitmap font "(", fc_YSize 4294966787, 3840 elements, 2nd "\377\003\300\377\377\200\001\377\377\300\003\377\377\340\007\377\377\370\037\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377", 3rd	English	United States	0.5616883116883117
RT_CURSOR	0x46fab0	0xb4	Targa image data - RLE 32 x 65536 x 1 +16 "\001"	English	United States	0.5444444444444444
RT_CURSOR	0x46fb64	0x134	Targa image data 64 x 65536 x 1 +32 "\001"	English	United States	0.37662337662337664
RT_CURSOR	0x46fc98	0x134	AmigaOS bitmap font "(", fc_YSize 4294967264, 5120 elements, 2nd "\377\360?\377\377\370\177\377\377\374\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377", 3rd	English	United States	0.36363636363636365
RT_CURSOR	0x46fdcc	0x134	Targa image data 64 x 65536 x 1 +32 "\001"	English	United States	0.36688311688311687
RT_CURSOR	0x46ff00	0x134	data	English	United States	0.37662337662337664
RT_CURSOR	0x470034	0x134	AmigaOS bitmap font "(", fc_YSize 4294966847, 3840 elements, 2nd "\377?\374\377\377\300\003\377\377\300\003\377\377\340\007\377\377\360\017\377\377\370\037\377\377\374?\377\377\376\177\377\377\377\377\377\377\377\377\377\377\377\377\377", 3rd	English	United States	0.5422077922077922
RT_CURSOR	0x470168	0x134	data	English	United States	0.37337662337662336
RT_CURSOR	0x47029c	0x134	Targa image data - RGB - RLE 64 x 65536 x 1 +32 "\001"	English	United States	0.38636363636363635
RT_CURSOR	0x4703d0	0x134	Targa image data - RLE 64 x 65536 x 1 +32 "\001"	English	United States	0.35714285714285715
RT_CURSOR	0x470504	0x134	Targa image data - Mono - RLE 64 x 65536 x 1 +32 "\001"	English	United States	0.36688311688311687
RT_CURSOR	0x470638	0x134	data	English	United States	0.44155844155844154
RT_CURSOR	0x47076c	0x134	data	English	United States	0.4155844155844156
RT_CURSOR	0x4708a0	0x134	data	English	United States	0.2662337662337662
RT_CURSOR	0x4709d4	0x134	data	English	United States	0.2824675324675325
RT_CURSOR	0x470b08	0x134	data	English	United States	0.3246753246753247
RT_BITMAP	0x470c3c	0x428	Device independent bitmap graphic, 128 x 15 x 4, image size 960, 16 important colors	English	United States	0.3656015037593985
RT_BITMAP	0x471064	0x32c8	Device independent bitmap graphic, 288 x 15 x 24, image size 0	English	United States	0.24584615384615385
RT_BITMAP	0x47432c	0x518	Device independent bitmap graphic, 160 x 15 x 4, image size 1200, 16 important colors	English	United States	0.32975460122699385
RT_BITMAP	0x474844	0xc2a	Device independent bitmap graphic, 64 x 16 x 24, image size 3074, resolution 2834 x 2834 px/m	English	United States	0.2806679511881824
RT_BITMAP	0x475470	0x338	Device independent bitmap graphic, 96 x 15 x 4, image size 720, 16 important colors	English	United States	0.308252427184466
RT_BITMAP	0x4757a8	0x1668	Device independent bitmap graphic, 352 x 32 x 4, image size 5632	English	United States	0.3591352859135286
RT_BITMAP	0x476e10	0x842a	Device independent bitmap graphic, 352 x 32 x 24, image size 33794, resolution 2834 x 2834 px/m	English	United States	0.320919784831826
RT_BITMAP	0x47f23c	0x4e8	Device independent bitmap graphic, 96 x 24 x 4, image size 1152	English	United States	0.23487261146496816
RT_BITMAP	0x47f724	0x1b2a	Device independent bitmap graphic, 96 x 24 x 24, image size 6914, resolution 2834 x 2834 px/m	English	United States	0.17385677308024158
RT_BITMAP	0x481250	0x268	Device independent bitmap graphic, 64 x 16 x 4, image size 512	English	United States	0.4383116883116883
RT_BITMAP	0x4814b8	0xc2a	Device independent bitmap graphic, 64 x 16 x 24, image size 3074, resolution 2834 x 2834 px/m	English	United States	0.6419396274887604
RT_BITMAP	0x4820e4	0x668	Device independent bitmap graphic, 20 x 20 x 32, image size 0	English	United States	0.5792682926829268
RT_BITMAP	0x48274c	0xa68	Device independent bitmap graphic, 316 x 16 x 4, image size 2560, 16 important colors	English	Canada	0.27702702702702703
RT_BITMAP	0x4831b4	0x63e8	Device independent bitmap graphic, 177 x 48 x 24, image size 25536	English	Canada	0.11217547700969659
RT_BITMAP	0x48959c	0x428	Device independent bitmap graphic, 16 x 16 x 32, image size 1024, resolution 2834 x 2834 px/m	English	Canada	0.4276315789473684
RT_BITMAP	0x4899c4	0x428	Device independent bitmap graphic, 16 x 16 x 32, image size 1024, resolution 2834 x 2834 px/m	English	Canada	0.4041353383458647
RT_BITMAP	0x489dec	0x428	Device independent bitmap graphic, 16 x 16 x 32, image size 1024, resolution 2834 x 2834 px/m	English	Canada	0.26033834586466165
RT_BITMAP	0x48a214	0x428	Device independent bitmap graphic, 16 x 16 x 32, image size 1024, resolution 2834 x 2834 px/m	English	Canada	0.44454887218045114
RT_BITMAP	0x48a63c	0x428	Device independent bitmap graphic, 16 x 16 x 32, image size 1024, resolution 2834 x 2834 px/m	English	Canada	0.40977443609022557
RT_BITMAP	0x48aa64	0x680	Device independent bitmap graphic, 208 x 15 x 4, image size 1560, 16 important colors	English	Canada	0.29747596153846156
RT_BITMAP	0x48b0e4	0x4a0	Device independent bitmap graphic, 144 x 15 x 4, image size 1080, 16 important colors	English	Canada	0.3783783783783784
RT_BITMAP	0x48b584	0x428	Device independent bitmap graphic, 16 x 16 x 32, image size 1024, resolution 2834 x 2834 px/m	English	Canada	0.12687969924812031
RT_BITMAP	0x48b9ac	0x428	Device independent bitmap graphic, 16 x 16 x 32, image size 1024, resolution 2834 x 2834 px/m	English	Canada	0.05827067669172932
RT_BITMAP	0x48bdd4	0x8d8	Device independent bitmap graphic, 288 x 15 x 4, image size 2160, 16 important colors	English	Canada	0.22791519434628976
RT_BITMAP	0x48c6ac	0x680	Device independent bitmap graphic, 208 x 15 x 4, image size 1560, 16 important colors	English	Canada	0.21814903846153846
RT_BITMAP	0x48cd2c	0x3400	Device independent bitmap graphic, 207 x 127 x 4, image size 13208, 16 important colors	English	Canada	0.15617487980769232
RT_BITMAP	0x49012c	0x3328	Device independent bitmap graphic, 64 x 68 x 24, image size 13056, resolution 2834 x 2834 px/m	English	Canada	0.0768937080024435
RT_BITMAP	0x493454	0x590	Device independent bitmap graphic, 176 x 15 x 4, image size 1320, 16 important colors	English	Canada	0.3082865168539326
RT_BITMAP	0x4939e4	0x1a8	Device independent bitmap graphic, 34 x 16 x 4, image size 320, 16 important colors	English	Canada	0.27358490566037735
RT_BITMAP	0x493b8c	0xaffc	Device independent bitmap graphic, 124 x 121 x 24, image size 45012, resolution 2834 x 2834 px/m	English	Canada	0.08985172689336766
RT_BITMAP	0x49eb88	0x128	Device independent bitmap graphic, 20 x 16 x 4, image size 192, 16 important colors	English	Canada	0.3141891891891892
RT_BITMAP	0x49ecb0	0x4e8	Device independent bitmap graphic, 143 x 16 x 4, image size 1152, 16 important colors	English	Canada	0.19745222929936307
RT_BITMAP	0x49f198	0x868	Device independent bitmap graphic, 250 x 16 x 4, image size 2048, 16 important colors	English	Canada	0.2337360594795539
RT_BITMAP	0x49fa00	0x2c28	Device independent bitmap graphic, 128 x 80 x 8, image size 10240, 256 important colors	English	Canada	0.46125265392781317
RT_BITMAP	0x4a2628	0x62c	Device independent bitmap graphic, 324 x 9 x 4, image size 1476	English	United States	0.2430379746835443
RT_BITMAP	0x4a2c54	0xe8	Device independent bitmap graphic, 16 x 16 x 4, image size 128	English	United States	0.5818965517241379
RT_BITMAP	0x4a2d3c	0x4a0	Device independent bitmap graphic, 144 x 15 x 4, image size 1080	English	United States	0.3783783783783784
RT_BITMAP	0x4a31dc	0x197a	Device independent bitmap graphic, 144 x 15 x 24, image size 6482, resolution 2834 x 2834 px/m	English	United States	0.380098129408157
RT_BITMAP	0x4a4b58	0xc8	Device independent bitmap graphic, 13 x 12 x 4, image size 96	English	United States	0.51
RT_BITMAP	0x4a4c20	0xc8	Device independent bitmap graphic, 13 x 12 x 4, image size 96	English	United States	0.515
RT_BITMAP	0x4a4ce8	0xc8	Device independent bitmap graphic, 13 x 12 x 4, image size 96	English	United States	0.43
RT_BITMAP	0x4a4db0	0xc8	Device independent bitmap graphic, 13 x 12 x 4, image size 96	English	United States	0.44
RT_BITMAP	0x4a4e78	0x182a	Device independent bitmap graphic, 128 x 16 x 24, image size 6146, resolution 2834 x 2834 px/m	English	United States	0.2924345295829292
RT_BITMAP	0x4a66a4	0x468	Device independent bitmap graphic, 128 x 16 x 4, image size 1024	English	United States	0.3058510638297872
RT_BITMAP	0x4a6b0c	0x528	Device independent bitmap graphic, 16 x 16 x 8, image size 256	English	United States	0.4803030303030303
RT_BITMAP	0x4a7034	0x528	Device independent bitmap graphic, 16 x 16 x 8, image size 256	English	United States	0.4765151515151515
RT_BITMAP	0x4a755c	0x158	Device independent bitmap graphic, 32 x 15 x 4, image size 240	English	United States	0.41569767441860467
RT_BITMAP	0x4a76b4	0x188	Device independent bitmap graphic, 48 x 12 x 4, image size 288	English	United States	0.39285714285714285
RT_BITMAP	0x4a783c	0x1e8	Device independent bitmap graphic, 48 x 16 x 4, image size 384	English	United States	0.5081967213114754
RT_BITMAP	0x4a7a24	0xad2	Device independent bitmap graphic, 29 x 31 x 24, image size 2730, resolution 2834 x 2834 px/m	English	United States	0.18736462093862816
RT_BITMAP	0x4a84f8	0xad2	Device independent bitmap graphic, 29 x 31 x 24, image size 2730, resolution 2834 x 2834 px/m	English	United States	0.1844765342960289
RT_BITMAP	0x4a8fcc	0xb0a	Device independent bitmap graphic, 31 x 29 x 24, image size 2786, resolution 2834 x 2834 px/m	English	United States	0.19497523000707714
RT_BITMAP	0x4a9ad8	0x7e2	Device independent bitmap graphic, 25 x 26 x 24, image size 1978, resolution 2834 x 2834 px/m	English	United States	0.24033696729435083
RT_BITMAP	0x4aa2bc	0xb0a	Device independent bitmap graphic, 31 x 29 x 24, image size 2786, resolution 2834 x 2834 px/m	English	United States	0.1935598018400566
RT_BITMAP	0x4aadc8	0x134	Device independent bitmap graphic, 17 x 17 x 4, image size 204	English	United States	0.37337662337662336
RT_BITMAP	0x4aaefc	0x928	Device independent bitmap graphic, 48 x 16 x 24, image size 0, resolution 2834 x 2834 px/m	English	United States	0.533703071672355
RT_BITMAP	0x4ab824	0x32a	Device independent bitmap graphic, 16 x 16 x 24, image size 770, resolution 2834 x 2834 px/m	English	United States	0.7518518518518519
RT_BITMAP	0x4abb50	0x32a	Device independent bitmap graphic, 16 x 16 x 24, image size 770, resolution 2834 x 2834 px/m	English	United States	0.3790123456790123
RT_BITMAP	0x4abe7c	0xc2a	Device independent bitmap graphic, 64 x 16 x 24, image size 3074, resolution 2834 x 2834 px/m	English	United States	0.42485549132947975
RT_BITMAP	0x4acaa8	0x20a	Device independent bitmap graphic, 13 x 12 x 24, image size 482, resolution 2834 x 2834 px/m	English	United States	0.9367816091954023
RT_BITMAP	0x4accb4	0x20a	Device independent bitmap graphic, 13 x 12 x 24, image size 482, resolution 2834 x 2834 px/m	English	United States	0.4482758620689655
RT_BITMAP	0x4acec0	0x20a	Device independent bitmap graphic, 13 x 12 x 24, image size 482, resolution 2834 x 2834 px/m	English	United States	0.33524904214559387
RT_BITMAP	0x4ad0cc	0x20a	Device independent bitmap graphic, 13 x 12 x 24, image size 482, resolution 2834 x 2834 px/m	English	United States	0.3371647509578544
RT_BITMAP	0x4ad2d8	0x32a	Device independent bitmap graphic, 16 x 16 x 24, image size 770, resolution 2834 x 2834 px/m	English	United States	0.6320987654320988
RT_BITMAP	0x4ad604	0x2256	Device independent bitmap graphic, 324 x 9 x 24, image size 8750, resolution 2834 x 2834 px/m	English	United States	0.0608646188850967
RT_BITMAP	0x4af85c	0x602a	Device independent bitmap graphic, 192 x 32 x 32, image size 24578, resolution 2834 x 2834 px/m	English	United States	0.2250385896498497
RT_BITMAP	0x4b5888	0x2028	Device independent bitmap graphic, 128 x 16 x 32, image size 0	English	United States	0.24708454810495628
RT_BITMAP	0x4b78b0	0x13da	Device independent bitmap graphic, 35 x 36 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.11570247933884298
RT_BITMAP	0x4b8c8c	0x13da	Device independent bitmap graphic, 35 x 36 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.10999606454151908
RT_BITMAP	0x4ba068	0x13da	Device independent bitmap graphic, 36 x 35 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.11511216056670602
RT_BITMAP	0x4bb444	0xeb2	Device independent bitmap graphic, 31 x 30 x 32, image size 3722, resolution 2834 x 2834 px/m	English	United States	0.13157894736842105
RT_BITMAP	0x4bc2f8	0x13da	Device independent bitmap graphic, 36 x 35 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.11983471074380166
RT_BITMAP	0x4bd6d4	0x13da	Device independent bitmap graphic, 35 x 36 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.27371113734750097
RT_BITMAP	0x4beab0	0x13da	Device independent bitmap graphic, 35 x 36 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.2699724517906336
RT_BITMAP	0x4bfe8c	0x13da	Device independent bitmap graphic, 36 x 35 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.2426210153482881
RT_BITMAP	0x4c1268	0xeb2	Device independent bitmap graphic, 31 x 30 x 32, image size 3722, resolution 2834 x 2834 px/m	English	United States	0.3413078149920255
RT_BITMAP	0x4c211c	0x13da	Device independent bitmap graphic, 36 x 35 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.23868555686737505
RT_BITMAP	0x4c34f8	0x5a66	Device independent bitmap graphic, 77 x 75 x 32, image size 23102, resolution 2834 x 2834 px/m	English	United States	0.046365914786967416
RT_BITMAP	0x4c8f60	0xb8	Device independent bitmap graphic, 12 x 10 x 4, image size 80	English	United States	0.44565217391304346
RT_BITMAP	0x4c9018	0x144	Device independent bitmap graphic, 33 x 11 x 4, image size 220	English	United States	0.37962962962962965
RT_ICON	0x4c915c	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors	English	United States	0.4200426439232409
RT_ICON	0x4ca004	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.45442238267148016
RT_ICON	0x4ca8ac	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 576, 256 important colors	English	United States	0.47523041474654376
RT_ICON	0x4caf74	0x3d48	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States	0.997577766445691
RT_ICON	0x4cecbc	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9600	English	United States	0.2924273858921162
RT_ICON	0x4d1264	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4224	English	United States	0.3524859287054409
RT_ICON	0x4d230c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.5036885245901639
RT_ICON	0x4d2c94	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512, 16 important colors	English	United States	0.14650537634408603
RT_ICON	0x4d2f7c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128, 16 important colors	English	United States	0.3547297297297297
RT_ICON	0x4d30a4	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.286101083032491
RT_ICON	0x4d394c	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.4523121387283237
RT_ICON	0x4d3eb4	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512, 16 important colors	English	United States	0.14650537634408603
RT_ICON	0x4d419c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128, 16 important colors	English	United States	0.3547297297297297
RT_ICON	0x4d42c4	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.286101083032491
RT_ICON	0x4d4b6c	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.4523121387283237
RT_ICON	0x4d50d4	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	English	United States	0.0846774193548387
RT_ICON	0x4d53bc	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	English	United States	0.4155405405405405
RT_ICON	0x4d54e4	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	English	United States	0.0846774193548387
RT_ICON	0x4d57cc	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 320	English	United States	0.48916184971098264
RT_ICON	0x4d5d34	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 0	English	United States	0.0793010752688172
RT_ICON	0x4d601c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 0	English	United States	0.3783783783783784
RT_ICON	0x4d6144	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 0	English	United States	0.0793010752688172
RT_ICON	0x4d642c	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0	English	United States	0.7088150289017341
RT_ICON	0x4d6994	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512, 16 important colors	English	United States	0.09005376344086022
RT_ICON	0x4d6c7c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 0	English	United States	0.3783783783783784
RT_ICON	0x4d6da4	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 0	English	United States	0.0793010752688172
RT_ICON	0x4d708c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 0	English	United States	0.3783783783783784
RT_ICON	0x4d71b4	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512, 16 important colors	English	United States	0.16801075268817203
RT_ICON	0x4d749c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128, 16 important colors	English	United States	0.3952702702702703
RT_ICON	0x4d75c4	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.29783393501805056
RT_ICON	0x4d7e6c	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.4667630057803468
RT_ICON	0x4d83d4	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512, 16 important colors	English	United States	0.15591397849462366
RT_ICON	0x4d86bc	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128, 16 important colors	English	United States	0.3581081081081081
RT_ICON	0x4d87e4	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.2933212996389892
RT_ICON	0x4d908c	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.4552023121387283
RT_ICON	0x4d95f4	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512, 16 important colors	English	United States	0.16801075268817203
RT_ICON	0x4d98dc	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128, 16 important colors	English	United States	0.3783783783783784
RT_ICON	0x4d9a04	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.29422382671480146
RT_ICON	0x4da2ac	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.46459537572254334
RT_ICON	0x4da814	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512, 16 important colors	English	United States	0.13709677419354838
RT_ICON	0x4daafc	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128, 16 important colors	English	United States	0.33783783783783783
RT_ICON	0x4dac24	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.2842960288808664
RT_ICON	0x4db4cc	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.444364161849711
RT_ICON	0x4dba34	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512, 16 important colors	English	United States	0.1586021505376344
RT_ICON	0x4dbd1c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128, 16 important colors	English	United States	0.38175675675675674
RT_ICON	0x4dbe44	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.309115523465704
RT_ICON	0x4dc6ec	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.4689306358381503
RT_ICON	0x4dcc54	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512, 16 important colors	English	United States	0.11155913978494623
RT_ICON	0x4dcf3c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128, 16 important colors	English	United States	0.2635135135135135
RT_ICON	0x4dd064	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.2793321299638989
RT_ICON	0x4dd90c	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.4356936416184971
RT_ICON	0x4dde74	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512, 16 important colors	English	United States	0.16532258064516128
RT_ICON	0x4de15c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128, 16 important colors	English	United States	0.3918918918918919
RT_ICON	0x4de284	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.30324909747292417
RT_ICON	0x4deb2c	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.45809248554913296
RT_ICON	0x4df094	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	English	United States	0.33198924731182794
RT_ICON	0x4df37c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	English	United States	0.41216216216216217
RT_ICON	0x4df4a4	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	English	United States	0.42905405405405406
RT_ICON	0x4df5cc	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	English	United States	0.2661290322580645
RT_ICON	0x4df8b4	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512	English	United States	0.18010752688172044
RT_ICON	0x4dfb9c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128	English	United States	0.35135135135135137
RT_ICON	0x4dfcc4	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.06092057761732852
RT_ICON	0x4e056c	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.07658959537572255
RT_ICON	0x4e0ad4	0xca8	Device independent bitmap graphic, 32 x 64 x 24, image size 3072	English	United States	0.042901234567901236
RT_ICON	0x4e177c	0x368	Device independent bitmap graphic, 16 x 32 x 24, image size 768	English	United States	0.10550458715596331
RT_ICON	0x4e1ae4	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	English	United States	0.6400709219858156
RT_ICON	0x4e1f4c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	English	United States	0.5
RT_MENU	0x4e2074	0x2a	data	English	United States	1.0476190476190477
RT_MENU	0x4e20a0	0x6a	Matlab v4 mat-file (little endian) C, numeric, rows 4522128, columns 6881380, imaginary	English	United States	0.7358490566037735
RT_MENU	0x4e210c	0x1e6	data	English	United States	0.5432098765432098
RT_MENU	0x4e22f4	0xe20	data	English	United States	0.3553650442477876
RT_MENU	0x4e3114	0xe8e	data	English	United States	0.35238862050456254
RT_MENU	0x4e3fa4	0x4a	data	English	United States	0.8243243243243243
RT_MENU	0x4e3ff0	0x84	data	English	Canada	0.6515151515151515
RT_MENU	0x4e4074	0x2c	data	English	Canada	1.0681818181818181
RT_MENU	0x4e40a0	0x6f6	data	English	United States	0.4264870931537598
RT_MENU	0x4e4798	0x19c	data	English	United States	0.5315533980582524
RT_MENU	0x4e4934	0x6a	data	English	Canada	0.8018867924528302
RT_MENU	0x4e49a0	0x3c	data	English	Canada	0.9833333333333333
RT_MENU	0x4e49dc	0xa4	data	English	Canada	0.5792682926829268
RT_MENU	0x4e4a80	0x6a	data	English	Canada	0.8018867924528302
RT_MENU	0x4e4aec	0x6f8	data	English	United States	0.40975336322869954
RT_MENU	0x4e51e4	0xbb0	data	English	United States	0.37967914438502676
RT_MENU	0x4e5d94	0x46	data	English	Canada	0.8857142857142857
RT_MENU	0x4e5ddc	0xb10	data	English	United States	0.3880649717514124
RT_MENU	0x4e68ec	0xac6	data	English	United States	0.3883248730964467
RT_MENU	0x4e73b4	0x38	data	English	Canada	1.0357142857142858
RT_MENU	0x4e73ec	0x6ae	data	English	United States	0.41461988304093567
RT_MENU	0x4e7a9c	0x102	data	English	Canada	0.5232558139534884
RT_MENU	0x4e7ba0	0x11c	data	English	United States	0.573943661971831
RT_DIALOG	0x4e7cbc	0x27e	data	English	Canada	0.48746081504702193
RT_DIALOG	0x4e7f3c	0x2c2	data	English	Canada	0.4376770538243626
RT_DIALOG	0x4e8200	0x358	data	English	Canada	0.4462616822429907
RT_DIALOG	0x4e8558	0x436	data	English	Canada	0.4202226345083488
RT_DIALOG	0x4e8990	0xe0	data	English	Canada	0.5580357142857143
RT_DIALOG	0x4e8a70	0x8b0	data	English	Canada	0.3893884892086331
RT_DIALOG	0x4e9320	0x294	data	English	Canada	0.5
RT_DIALOG	0x4e95b4	0x198	data	English	Canada	0.5416666666666666
RT_DIALOG	0x4e974c	0x104	data	English	Canada	0.6038461538461538
RT_DIALOG	0x4e9850	0x1f4	data	English	Canada	0.534
RT_DIALOG	0x4e9a44	0x5b2	data	English	Canada	0.4382716049382716
RT_DIALOG	0x4e9ff8	0x32c	data	English	Canada	0.4815270935960591
RT_DIALOG	0x4ea324	0x2f4	data	English	Canada	0.47354497354497355
RT_DIALOG	0x4ea618	0x120	data	English	Canada	0.6006944444444444
RT_DIALOG	0x4ea738	0x100	data	English	Canada	0.5078125
RT_DIALOG	0x4ea838	0x140	data	English	Canada	0.503125
RT_DIALOG	0x4ea978	0x5f4	data	English	Canada	0.3969816272965879
RT_DIALOG	0x4eaf6c	0x100	data	English	Canada	0.51171875
RT_DIALOG	0x4eb06c	0x228	data	English	Canada	0.5416666666666666
RT_DIALOG	0x4eb294	0x194	data	English	Canada	0.5470297029702971
RT_DIALOG	0x4eb428	0x134	data	English	Canada	0.5844155844155844
RT_DIALOG	0x4eb55c	0x1e0	data	English	Canada	0.42083333333333334
RT_DIALOG	0x4eb73c	0x27c	data	English	Canada	0.47327044025157233
RT_DIALOG	0x4eb9b8	0xbc	dBase III DBT, next free block index 4294901761	English	Canada	0.6436170212765957
RT_DIALOG	0x4eba74	0x57c	data	English	Canada	0.4458689458689459
RT_DIALOG	0x4ebff0	0x802	data	English	Canada	0.375609756097561
RT_DIALOG	0x4ec7f4	0x290	data	English	Canada	0.47560975609756095
RT_DIALOG	0x4eca84	0x350	data	English	Canada	0.3938679245283019
RT_DIALOG	0x4ecdd4	0xe4	data	English	Canada	0.6140350877192983
RT_DIALOG	0x4eceb8	0x11e	data	English	Canada	0.6083916083916084
RT_DIALOG	0x4ecfd8	0x152	data	English	Canada	0.5207100591715976
RT_DIALOG	0x4ed12c	0x318	data	English	Canada	0.4356060606060606
RT_DIALOG	0x4ed444	0x100	data	English	Canada	0.5078125
RT_DIALOG	0x4ed544	0x130	data	English	Canada	0.555921052631579
RT_DIALOG	0x4ed674	0x1a0	data	English	Canada	0.4543269230769231
RT_DIALOG	0x4ed814	0x100	data	English	Canada	0.5078125
RT_DIALOG	0x4ed914	0x152	data	English	Canada	0.5739644970414202
RT_DIALOG	0x4eda68	0x482	data	English	Canada	0.4679376083188908
RT_DIALOG	0x4edeec	0x138	data	English	Canada	0.5993589743589743
RT_DIALOG	0x4ee024	0x60	data	English	Canada	0.7395833333333334
RT_DIALOG	0x4ee084	0x302	data	English	Canada	0.44545454545454544
RT_DIALOG	0x4ee388	0x178	data	English	Canada	0.5212765957446809
RT_DIALOG	0x4ee500	0x70c	data	English	Canada	0.38192904656319293
RT_DIALOG	0x4eec0c	0x1f8	data	English	Canada	0.5277777777777778
RT_DIALOG	0x4eee04	0xec	data	English	Canada	0.6016949152542372
RT_DIALOG	0x4eeef0	0x452	data	English	Canada	0.4701627486437613
RT_DIALOG	0x4ef344	0x2e0	data	English	Canada	0.452445652173913
RT_DIALOG	0x4ef624	0x20e	data	English	Canada	0.5399239543726235
RT_DIALOG	0x4ef834	0x27c	data	English	Canada	0.5125786163522013
RT_DIALOG	0x4efab0	0x13c	data	English	United States	0.5949367088607594
RT_DIALOG	0x4efbec	0x1a4	data	English	United States	0.5380952380952381
RT_DIALOG	0x4efd90	0xe6	data	English	United States	0.6347826086956522
RT_DIALOG	0x4efe78	0x390	data	English	United States	0.4418859649122807
RT_DIALOG	0x4f0208	0x21c	data	English	United States	0.5037037037037037
RT_DIALOG	0x4f0424	0x390	data	English	United States	0.4692982456140351
RT_DIALOG	0x4f07b4	0x1dc	data	English	United States	0.5441176470588235
RT_DIALOG	0x4f0990	0x346	data	English	United States	0.46897374701670647
RT_DIALOG	0x4f0cd8	0x334	data	English	United States	0.43658536585365854
RT_DIALOG	0x4f100c	0x58	data	English	United States	0.8068181818181818
RT_DIALOG	0x4f1064	0x23c	data	English	United States	0.5122377622377622
RT_DIALOG	0x4f12a0	0x1c2	data	English	United States	0.5066666666666667
RT_DIALOG	0x4f1464	0x160	data	English	United States	0.5994318181818182
RT_DIALOG	0x4f15c4	0xb2	data	English	United States	0.7191011235955056
RT_DIALOG	0x4f1678	0x3d4	data	English	United States	0.3408163265306122
RT_DIALOG	0x4f1a4c	0x19e	data	English	United States	0.6280193236714976
RT_DIALOG	0x4f1bec	0x1a2	data	English	United States	0.5741626794258373
RT_DIALOG	0x4f1d90	0x34	data	English	United States	0.8076923076923077
RT_DIALOG	0x4f1dc4	0x2a8	data	English	United States	0.5338235294117647
RT_DIALOG	0x4f206c	0x382	data	English	United States	0.48552338530066813
RT_DIALOG	0x4f23f0	0xe8	data	English	United States	0.6336206896551724
RT_DIALOG	0x4f24d8	0x1a2	data	English	United States	0.4688995215311005
RT_DIALOG	0x4f267c	0x15a	data	English	United States	0.5086705202312138
RT_DIALOG	0x4f27d8	0x34	data	English	United States	0.9038461538461539
RT_STRING	0x4f280c	0xca	data	English	United States	0.5792079207920792
RT_STRING	0x4f28d8	0x60	data	English	United States	0.6458333333333334
RT_STRING	0x4f2938	0x1c0	data	English	United States	0.3169642857142857
RT_STRING	0x4f2af8	0x180	data	English	United States	0.515625
RT_STRING	0x4f2c78	0xd6	data	English	Canada	0.6121495327102804
RT_STRING	0x4f2d50	0x7e	data	English	United States	0.5952380952380952
RT_STRING	0x4f2dd0	0x164	data	English	United States	0.46348314606741575
RT_STRING	0x4f2f34	0x68	data	English	United States	0.6634615384615384
RT_STRING	0x4f2f9c	0x36	data	English	United States	0.6666666666666666
RT_STRING	0x4f2fd4	0x3c	data	English	United States	0.7166666666666667
RT_STRING	0x4f3010	0x28	data	English	United States	0.575
RT_STRING	0x4f3038	0x3be	data	English	United States	0.23277661795407098
RT_STRING	0x4f33f8	0xd8	data	English	United States	0.4212962962962963
RT_STRING	0x4f34d0	0x32c	data	English	United States	0.4125615763546798
RT_STRING	0x4f37fc	0x246	data	English	United States	0.5085910652920962
RT_STRING	0x4f3a44	0x84	data	English	United States	0.5833333333333334
RT_STRING	0x4f3ac8	0x2a4	data	English	United States	0.3609467455621302
RT_STRING	0x4f3d6c	0x20c	data	English	United States	0.3148854961832061
RT_STRING	0x4f3f78	0x24c	data	English	United States	0.4370748299319728
RT_STRING	0x4f41c4	0x3c	data	English	United States	0.65
RT_STRING	0x4f4200	0x16e	data	English	United States	0.39344262295081966
RT_STRING	0x4f4370	0xa6	Matlab v4 mat-file (little endian) T, numeric, rows 0, columns 0	English	United States	0.7228915662650602
RT_STRING	0x4f4418	0x184	data	English	United States	0.4742268041237113
RT_STRING	0x4f459c	0x66	data	English	United States	0.696078431372549
RT_STRING	0x4f4604	0x1d6	Matlab v4 mat-file (little endian) S, numeric, rows 0, columns 0	English	United States	0.35319148936170214
RT_STRING	0x4f47dc	0x186	data	English	United States	0.5384615384615384
RT_STRING	0x4f4964	0xb2	data	English	United States	0.6179775280898876
RT_STRING	0x4f4a18	0x48	Matlab v4 mat-file (little endian) a, numeric, rows 0, columns 0	English	United States	0.7083333333333334
RT_STRING	0x4f4a60	0x11c	data	English	United States	0.4295774647887324
RT_STRING	0x4f4b7c	0x1ba	data	English	United States	0.34615384615384615
RT_STRING	0x4f4d38	0xa2	data	English	United States	0.5617283950617284
RT_STRING	0x4f4ddc	0x44	data	English	Canada	0.6764705882352942
RT_STRING	0x4f4e20	0x140	data	English	United States	0.5375
RT_STRING	0x4f4f60	0x114	data	English	Canada	0.5543478260869565
RT_STRING	0x4f5074	0x16a	data	English	United States	0.4419889502762431
RT_STRING	0x4f51e0	0x100	data	English	Canada	0.53515625
RT_STRING	0x4f52e0	0xec	data	English	United States	0.6059322033898306
RT_STRING	0x4f53cc	0x228	AmigaOS bitmap font "d", fc_YSize 28416, 16640 elements, 2nd "n", 3rd " "	English	United States	0.4746376811594203
RT_STRING	0x4f55f4	0xd8	data	English	Canada	0.5
RT_STRING	0x4f56cc	0x100	data	English	United States	0.60546875
RT_STRING	0x4f57cc	0x11e	data	English	Canada	0.5384615384615384
RT_STRING	0x4f58ec	0x166	data	English	United States	0.39106145251396646
RT_STRING	0x4f5a54	0x86	data	English	United States	0.48507462686567165
RT_STRING	0x4f5adc	0x54	data	English	United States	0.6309523809523809
RT_STRING	0x4f5b30	0xc4	data	English	United States	0.6224489795918368
RT_STRING	0x4f5bf4	0xac	data	English	United States	0.627906976744186
RT_STRING	0x4f5ca0	0x58	data	English	Canada	0.6136363636363636
RT_STRING	0x4f5cf8	0xfa	data	English	United States	0.536
RT_STRING	0x4f5df4	0x36	data	English	United States	0.6296296296296297
RT_STRING	0x4f5e2c	0x30c	data	English	United States	0.3128205128205128
RT_STRING	0x4f6138	0x260	data	English	United States	0.0805921052631579
RT_STRING	0x4f6398	0x328	data	English	United States	0.34405940594059403
RT_STRING	0x4f66c0	0xc4	data	English	Canada	0.5510204081632653
RT_STRING	0x4f6784	0x27c	data	English	United States	0.33176100628930816
RT_STRING	0x4f6a00	0x106	data	English	United States	0.5763358778625954
RT_STRING	0x4f6b08	0xda	data	English	United States	0.43119266055045874
RT_STRING	0x4f6be4	0x18c	data	English	United States	0.398989898989899
RT_STRING	0x4f6d70	0x46	data	English	United States	0.7428571428571429
RT_STRING	0x4f6db8	0x7a	data	English	United States	0.5819672131147541
RT_STRING	0x4f6e34	0x1f8	data	English	United States	0.36706349206349204
RT_STRING	0x4f702c	0xae	data	English	United States	0.5689655172413793
RT_STRING	0x4f70dc	0xd0	StarOffice Gallery theme p, 1929408256 objects, 1st p	English	United States	0.6394230769230769
RT_STRING	0x4f71ac	0x2a	data	English	United States	0.5476190476190477
RT_STRING	0x4f71d8	0x184	data	English	United States	0.48711340206185566
RT_STRING	0x4f735c	0x124	data	English	United States	0.4897260273972603
RT_STRING	0x4f7480	0x4e6	data	English	United States	0.37719298245614036
RT_STRING	0x4f7968	0x264	data	English	United States	0.3333333333333333
RT_STRING	0x4f7bcc	0x2da	data	English	United States	0.3698630136986301
RT_STRING	0x4f7ea8	0x8a	data	English	United States	0.6594202898550725
RT_STRING	0x4f7f34	0xac	data	English	United States	0.45348837209302323
RT_STRING	0x4f7fe0	0xde	data	English	United States	0.536036036036036
RT_STRING	0x4f80c0	0x4a8	data	English	United States	0.3221476510067114
RT_STRING	0x4f8568	0x228	data	English	United States	0.4003623188405797
RT_STRING	0x4f8790	0x2c	data	English	United States	0.5227272727272727
RT_STRING	0x4f87bc	0x53c	data	English	United States	0.2947761194029851
RT_ACCELERATOR	0x4f8cf8	0xa8	data	English	United States	0.6785714285714286
RT_ACCELERATOR	0x4f8da0	0x18	data	English	United States	1.2083333333333333
RT_GROUP_CURSOR	0x4f8db8	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	Canada	1.25
RT_GROUP_CURSOR	0x4f8dcc	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	Canada	1.25
RT_GROUP_CURSOR	0x4f8de0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	Canada	1.3
RT_GROUP_CURSOR	0x4f8df4	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8e08	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8e1c	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8e30	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8e44	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8e58	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8e6c	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8e80	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8e94	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8ea8	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8ebc	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8ed0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8ee4	0x22	Lotus unknown worksheet or configuration, revision 0x2	English	United States	1.0
RT_GROUP_CURSOR	0x4f8f08	0x22	Lotus unknown worksheet or configuration, revision 0x2	English	United States	1.0294117647058822
RT_GROUP_CURSOR	0x4f8f2c	0x22	Lotus unknown worksheet or configuration, revision 0x2	English	United States	1.0294117647058822
RT_GROUP_CURSOR	0x4f8f50	0x22	Lotus unknown worksheet or configuration, revision 0x2	English	United States	1.0294117647058822
RT_GROUP_CURSOR	0x4f8f74	0x22	Lotus unknown worksheet or configuration, revision 0x2	English	United States	1.0294117647058822
RT_GROUP_CURSOR	0x4f8f98	0x22	Lotus unknown worksheet or configuration, revision 0x2	English	United States	1.0294117647058822
RT_GROUP_CURSOR	0x4f8fbc	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8fd0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8fe4	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f8ff8	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f900c	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.25
RT_GROUP_CURSOR	0x4f9020	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f9034	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f9048	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f905c	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f9070	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f9084	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f9098	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f90ac	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0x4f90c0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_ICON	0x4f90d4	0x68	data	English	United States	0.7307692307692307
RT_GROUP_ICON	0x4f913c	0x3e	data	English	United States	0.8709677419354839
RT_GROUP_ICON	0x4f917c	0x3e	data	English	United States	0.8870967741935484
RT_GROUP_ICON	0x4f91bc	0x22	data	English	United States	1.0588235294117647
RT_GROUP_ICON	0x4f91e0	0x22	data	English	United States	1.1470588235294117
RT_GROUP_ICON	0x4f9204	0x22	data	English	United States	1.0588235294117647
RT_GROUP_ICON	0x4f9228	0x22	data	English	United States	1.1470588235294117
RT_GROUP_ICON	0x4f924c	0x22	data	English	United States	1.0588235294117647
RT_GROUP_ICON	0x4f9270	0x22	data	English	United States	1.0588235294117647
RT_GROUP_ICON	0x4f9294	0x3e	data	English	United States	0.8870967741935484
RT_GROUP_ICON	0x4f92d4	0x3e	data	English	United States	0.8709677419354839
RT_GROUP_ICON	0x4f9314	0x3e	data	English	United States	0.8870967741935484
RT_GROUP_ICON	0x4f9354	0x3e	data	English	United States	0.8709677419354839
RT_GROUP_ICON	0x4f9394	0x3e	data	English	United States	0.8870967741935484
RT_GROUP_ICON	0x4f93d4	0x3e	data	English	United States	0.8870967741935484
RT_GROUP_ICON	0x4f9414	0x3e	data	English	United States	0.8870967741935484
RT_GROUP_ICON	0x4f9454	0x22	data	English	United States	1.0588235294117647
RT_GROUP_ICON	0x4f9478	0x22	data	English	United States	1.0588235294117647
RT_GROUP_ICON	0x4f949c	0x5a	data	English	United States	0.7666666666666667
RT_GROUP_ICON	0x4f94f8	0x22	data	English	United States	1.1176470588235294
RT_VERSION	0x4f951c	0x31c	data	English	United States	0.47613065326633164
RT_MANIFEST	0x4f9838	0x428	ASCII text, with CRLF line terminators	English	United States	0.45770676691729323
None	0x4f9c60	0x1e	data	English	United States	1.2
None	0x4f9c80	0x36	data	English	United States	1.0740740740740742
None	0x4f9cb8	0x1e	data	English	United States	1.2666666666666666
None	0x4f9cd8	0x16	data	English	United States	1.3636363636363635
None	0x4f9cf0	0x2c	data	English	Canada	1.0454545454545454
None	0x4f9d1c	0x1e	data	English	Canada	1.2
None	0x4f9d3c	0x2c	data	English	Canada	1.2045454545454546
None	0x4f9d68	0x2c	data	English	Canada	1.0909090909090908
None	0x4f9d94	0x26	data	English	Canada	1.0789473684210527
None	0x4f9dbc	0x1c	data	English	United States	1.2857142857142858
None	0x4f9dd8	0x18	data	English	United States	1.2916666666666667

Imports

DLL	Import
KERNEL32.dll	Process32Next, WinExec, CloseHandle, OpenProcess, Process32First, CreateToolhelp32Snapshot, InterlockedDecrement, SetEndOfFile, VirtualQuery, GetProcessHeap, CreateFileW, CreateFileA, SetStdHandle, GetUserDefaultLCID, EnumSystemLocalesA, IsValidLocale, WideCharToMultiByte, InterlockedIncrement, MultiByteToWideChar, InterlockedExchange, EncodePointer, DecodePointer, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetLastError, lstrlenA, LocalFree, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapValidate, IsBadReadPtr, GetModuleFileNameW, GetProcAddress, GetModuleHandleW, ExitProcess, GetCommandLineA, HeapSetInformation, GetCPInfo, RtlUnwind, RaiseException, LCMapStringW, IsProcessorFeaturePresent, SetHandleCount, GetStdHandle, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, HeapAlloc, GetModuleFileNameA, HeapReAlloc, HeapSize, HeapQueryInformation, HeapFree, HeapCreate, GetACP, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, GetCurrentThreadId, TlsFree, SetLastError, ReadFile, SetFilePointer, FlushFileBuffers, WriteFile, GetConsoleCP, GetConsoleMode, OutputDebugStringA, WriteConsoleW, OutputDebugStringW, LoadLibraryW, FreeLibrary, GetLocaleInfoW, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetStringTypeW, GetLocaleInfoA
ADVAPI32.dll	GetLengthSid, LookupPrivilegeValueA, SetTokenInformation, OpenProcessToken, AdjustTokenPrivileges
ole32.dll	CoInitializeSecurity, CoInitializeEx, CoCreateInstance
OLEAUT32.dll	SysFreeString, VariantInit, VariantClear, SysAllocString

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States
English	Canada

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report H1pXo79CPd

Overview

General Information

Detection

Signatures

Classification

Process Tree

Yara Signatures

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

General Information

Warnings

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ClientDaemon.exe_ba598b36f84f8d89f975d848c6abb9337824ed7_02b26f1f_7d3f8875-b0d3-4246-a4b5-06fd93ba1207\Report.wer

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ClientDaemon.exe_ba598b36f84f8d89f975d848c6abb9337824ed7_02b26f1f_eb20255e-ed09-4b2c-a804-77ad66051d32\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER6B17.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER6BF2.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER6C51.tmp.xml

C:\Recovery\cb.txt

C:\Recovery\cd.txt

C:\Recovery\nw_elf.dll

C:\Windows\ClientDaemon.exe

C:\Windows\appcompat\Programs\Amcache.hve

C:\Windows\nw_elf.dll

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Possible Origin

Windows Analysis Report
H1pXo79CPd