48cdc10d3bd31b28cf20db826ef4f2ca16d8367d14d0322fed0fe4c287fc0f40

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Aug-10 09:40:38
Detected languages English - United States
Comments This installation was built with Inno Setup.
CompanyName
FileDescription PowerISO Full 9 5 Portable 2026 Latest.exe Setup
FileVersion 1.0.0.0
LegalCopyright PowerISO Full 9 5 Portable 2026 Latest.exe
OriginalFileName
ProductName PowerISO Full 9 5 Portable 2026 Latest.exe
ProductVersion 1.0.0.0

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • https://jrsoftware.org
  • jrsoftware.org
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA256
Uses constants related to SHA512
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • LoadLibraryExW
  • GetProcAddress
  • LoadLibraryW
 Functions which can be used for anti-debugging purposes:
  • SwitchToThread
 Can access the registry:
  • RegOpenKeyExW
  • RegQueryValueExW
  • RegCloseKey
 Possibly launches other programs:
  • CreateProcessW
 Can create temporary files:
  • GetTempPathW
  • CreateFileW
 Memory manipulation functions often used by packers:
  • VirtualProtect
  • VirtualAlloc
 Functions related to the privilege level:
  • AdjustTokenPrivileges
  • OpenProcessToken
 Enumerates local disk drives:
  • GetVolumeInformationW
  • GetDriveTypeW
 Can shut the system down or lock the screen:
  • ExitWindowsEx
Suspicious The file contains overlay data. 1209739 bytes of data starting at offset 0xd9800.
The overlay data has an entropy of 7.99985 and is possibly compressed or encrypted.
Malicious VirusTotal score: 14/71 (Scanned on 2026-10-19 23:42:50) APEX: Malicious
AhnLab-V3: Infostealer/Win.InnoLoader.R790171
DeepInstinct: MALICIOUS
ESET-NOD32: Win32/TrojanDownloader.Agent.IPE trojan
Elastic: malicious (high confidence)
Fortinet: Riskware/InnoMod
Google: Detected
Ikarus: Trojan-Downloader.Win32.Agent
Kaspersky: HEUR:Trojan-Downloader.Win32.OffLoader.gen
McAfeeD: ti!48CDC10D3BD3
Microsoft: Program:Win32/Wacapew.C!ml
Rising: Downloader.Agent/IFPS!1.10737 (CLASSIC)
Skyhigh: BehavesLike.Win32.Dropper.vc
huorong: HEUR:TrojanDownloader/Agent.a!crit

Hashes

MD5 abcc4566ccf100f416bd603967009b92 🔍
SHA1 499d9e985d4a1541dbb202c4f766f7a774f8cbe3 🔍
SHA256 48cdc10d3bd31b28cf20db826ef4f2ca16d8367d14d0322fed0fe4c287fc0f40 🔍
SHA3 36d8d5dc52cda2d85e4ceda3469d8d85b86493a6e981d5dd7687b15276e00bc4 🔍
SSDeep 24576:iXfPki0RBC19GXIVdIKkgJXpJehyxwKlvdXgKfpXrbEL10B+kM/PfcXmH1bmBXjI:wobOB2+TwKfpbR+/T1bmBXfqN 🔍
Imports Hash f5a88a72e4e02b464d0e185d6666dbe7 🔍

DOS Header

e_magic MZ
e_cblp 0x50
e_cp 0x2
e_crlc 0
e_cparhdr 0x4
e_minalloc 0xf
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0x1a
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 11
TimeDateStamp 2026-Aug-10 09:40:38
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0xb0e00
SizeOfInitializedData 0x28600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000B1E7C (Section: .itext)
BaseOfCode 0x1000
BaseOfData 0xb3000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.1
ImageVersion 0.0
SubsystemVersion 6.1
Win32VersionValue 0
SizeOfImage 0xe9000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x4000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 4b346df67dd3f8b0bfd19e82f3f6c825 🔍
SHA1 8c0d82fa1d03500a9e5e865c0f639e6058614ee8 🔍
SHA256 ada9016f58d44511b6db06db06a9eefdaebdd085b7b0fc42f3ee9e783eaf052c 🔍
SHA3 33b20a6da09ae2cec54d68b837c35db5dc1ce4db6acb1c4220ed5a1a1b514275 🔍
VirtualSize 0xaf2ec
VirtualAddress 0x1000
SizeOfRawData 0xaf400
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.38781

.itext

MD5 3e3fa6815ee6ea4d74b8b9505bde1d59 🔍
SHA1 5b53ba52d9d5231d1352fd2587191fb3efca0d30 🔍
SHA256 0ca0f610f3e5bb89c010d9f0cce8e3d0e9f14a5b60c348fd8c96329bc745e775 🔍
SHA3 ad6e86bc5193ad992708bddca4352cdbe05b33c0e2d96346e533a0641b86c87d 🔍
VirtualSize 0x18d0
VirtualAddress 0xb1000
SizeOfRawData 0x1a00
PointerToRawData 0xaf800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.04777

.data

MD5 1fdf99d4abccc24fe7d0d465532d4913 🔍
SHA1 0cb151f10895bac732070e293ab6d30a7332779d 🔍
SHA256 5908c85ddfc39cdbc57db47fb023eed4148bcec0256d5d0589cdf3d4dad14733 🔍
SHA3 dabfe859db98780b313de9114f822ca0cc5ffdbb538612d5a5bae5eb1db0a6c6 🔍
VirtualSize 0x3f40
VirtualAddress 0xb3000
SizeOfRawData 0x4000
PointerToRawData 0xb1200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.17947

.bss

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x7414
VirtualAddress 0xb7000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata

MD5 4a48c59cbaa4d331b6913c45047362ef 🔍
SHA1 8c5a78fa720cc93e9b5ab451be530c0c84425c99 🔍
SHA256 c2ec0144d84e181582727d377a1c4787841f218cde892c6410b2bf2aa5282e24 🔍
SHA3 e7a4d51c328d2ca4a380f8fc51f4ff3459b370e320b1ec364aec5b0fe79d3a42 🔍
VirtualSize 0x1068
VirtualAddress 0xbf000
SizeOfRawData 0x1200
PointerToRawData 0xb5200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.82301

.didata

MD5 f4dcdcd030805001df20b0fdd6c46cb2 🔍
SHA1 ac47351a0f50c3ae9ce8e7fa8400b7bca5bf384e 🔍
SHA256 765efef8ba3c2190fa77d62cbd7680c9edff090998e151fd42538ecf6301dc58 🔍
SHA3 49e9435be9c72e87a457614ddacc3f661087a1a645c02b87cafce95bada22156 🔍
VirtualSize 0x1a4
VirtualAddress 0xc1000
SizeOfRawData 0x200
PointerToRawData 0xb6400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.76418

.edata

MD5 962159c3600d79cc1a32bd757eb6ad75 🔍
SHA1 12791257f253a68866a2bb98c0246c2742bc5400 🔍
SHA256 70e6c5912a8eaed543dfce36ee14f14061932f12455c1ef4f394238ee0f7e3d1 🔍
SHA3 a7a5e30935f7889977319db4443bf73b7eb9b0948d91c051bc203b1ed7e375a8 🔍
VirtualSize 0x71
VirtualAddress 0xc2000
SizeOfRawData 0x200
PointerToRawData 0xb6600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.33502

.tls

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x18
VirtualAddress 0xc3000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata

MD5 4077d1dbe397a22f8d8c62a9ac2f87a2 🔍
SHA1 08fb7c36e037736171d75dff700936dd50e1e966 🔍
SHA256 f8bc31927074957901bc7975eec99aa54e759a66cbe2ca8bbbb16a2705caeedc 🔍
SHA3 1981e561224a7385c57d6d862c53ea310e35d45aa22680f9fefc822eb03d448c 🔍
VirtualSize 0x5d
VirtualAddress 0xc4000
SizeOfRawData 0x200
PointerToRawData 0xb6800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.38146

.reloc

MD5 50e4e8d978f543a2463177d711dac14c 🔍
SHA1 93f245199aa61d0d57612658f6f956798dbe5a76 🔍
SHA256 4da1e8466dc61f9e99b42e5963834d1434d6ba897604f0359f1bb6126f443db9 🔍
SHA3 5783f4143be64e19382baa8c9f616e274afb058a6f90122c6b3a2dee1c7f9c0c 🔍
VirtualSize 0x1195c
VirtualAddress 0xc5000
SizeOfRawData 0x11a00
PointerToRawData 0xb6a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.71034

.rsrc

MD5 31810ac1c84d366eef6530ef175b9875 🔍
SHA1 95ebe6e1ead3804fcc413c6eeaf8c559407811a1 🔍
SHA256 a515ca98bdab7a9745fa9f579d75255cfb319101b49d855daa47182a226fdda8 🔍
SHA3 df40b076dee4e315833f0c15460d854995bdc568b0353f70862bae39d940375c 🔍
VirtualSize 0x1127c
VirtualAddress 0xd7000
SizeOfRawData 0x11400
PointerToRawData 0xc8400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.76528

Imports

kernel32.dll GetACP
GetExitCodeProcess
CloseHandle
LocalFree
SizeofResource
VirtualProtect
QueryPerformanceFrequency
VirtualFree
GetFullPathNameW
GetProcessHeap
ExitProcess
HeapAlloc
GetCPInfoExW
CompareStringOrdinal
RtlUnwind
SetFilePointerEx
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
GetFileSizeEx
LoadLibraryA
ResetEvent
GetVolumeInformationW
GetVersion
GetDriveTypeW
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
LoadResource
SuspendThread
GetTickCount
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
InitializeCriticalSection
GetSystemWindowsDirectoryW
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetCommandLineW
GetSystemInfo
GetTempPathW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale
comctl32.dll InitCommonControls
user32.dll CreateWindowExW
TranslateMessage
CharLowerBuffW
CallWindowProcW
CharUpperW
PeekMessageW
GetSystemMetrics
SetWindowLongW
MessageBoxW
DestroyWindow
CharUpperBuffW
CharNextW
MsgWaitForMultipleObjects
LoadStringW
ExitWindowsEx
DispatchMessageW
oleaut32.dll SafeArrayPutElement
VariantInit
VariantClear
SysFreeString
SafeArrayAccessData
SysReAllocStringLen
SafeArrayCreate
SafeArrayGetElement
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
VariantChangeType
advapi32.dll ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenThreadToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
OpenProcessToken
FreeSid
AllocateAndInitializeSid
EqualSid
RegQueryValueExW
GetTokenInformation
ConvertSidToStringSidW
RegCloseKey
kernel32.dll (delay-loaded) GetACP
GetExitCodeProcess
CloseHandle
LocalFree
SizeofResource
VirtualProtect
QueryPerformanceFrequency
VirtualFree
GetFullPathNameW
GetProcessHeap
ExitProcess
HeapAlloc
GetCPInfoExW
CompareStringOrdinal
RtlUnwind
SetFilePointerEx
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
GetFileSizeEx
LoadLibraryA
ResetEvent
GetVolumeInformationW
GetVersion
GetDriveTypeW
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
LoadResource
SuspendThread
GetTickCount
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
InitializeCriticalSection
GetSystemWindowsDirectoryW
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetCommandLineW
GetSystemInfo
GetTempPathW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale

Delayed Imports

Attributes 0x1
Name kernel32.dll
ModuleHandle 0xc1080
DelayImportAddressTable 0xc1090
DelayImportNameTable 0xc10b4
BoundDelayImportTable 0xc10d8
UnloadDelayImportTable 0xc10f0
TimeStamp 1970-Jan-01 00:00:00

dbkFCallWrapperAddr

Ordinal 1
Address 0xba63c

__dbk_fcall_wrapper

Ordinal 2
Address 0xe578

1

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0xa68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.74641
MD5 2073a3bce01223d897c6e67e18e677e7 🔍
SHA1 f12d3ad97307acd4b6283883ff2535a1162b847f 🔍
SHA256 dadedca04ae6f15e735054a8844a0bb8c303e28e6a20a7b54393218ac9dac901 🔍
SHA3 e46bdf2c29fbea8826e7fbe4a23b787838298a2c57522375d89b84e0dadafb64 🔍

2

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.98658
MD5 54aab9687517924a6f0872d3db85eefa 🔍
SHA1 62922bb6f27fbb4249513a00d0249079706901df 🔍
SHA256 49e1fd7235582a5fcda21ad7019a28f07be0bf5758e58ce433622ad2c186890f 🔍
SHA3 f088eafbfb352a9b54edad9f0b94b7222fb44a8593945940d99d3dd13d26e8dc 🔍

3

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01586
MD5 57086a45c3525554f76a843b8ea0ceb0 🔍
SHA1 bb3b05066884d9c430e0b242802c280ac263b894 🔍
SHA256 aaa0ec91899e3916e363e4670f8073cdd5de32024c330183e3e06a5c402ee7ae 🔍
SHA3 c79a0a88119906e5258eff43faafc4b86f3f5b6bb2871cce6de3d9cf379d4c66 🔍

4

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.1704
MD5 c9113f4798daee1ff04397b4699fee20 🔍
SHA1 04a77a02cdada1d0adb3af383475cf77ed177e76 🔍
SHA256 029b2163ec401f4b713e6870760f636551fab3fa800dbb940d4b0c547a922072 🔍
SHA3 47db69117d269446375dfe691c9444c7f9bbd176e1d529ba1748f54262d34cb9 🔍

5

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x1628
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.912
MD5 a3ecd0150aa90c103ffd60e970a79b04 🔍
SHA1 155aa3f218939e3accb8578679c03dcbc88f5e52 🔍
SHA256 5426a3cf123eedfefc4fc0e764de1bd8c8f69edf6e0c68af1984438b28074de3 🔍
SHA3 212acca720a6b223f41cece9fd8589bbd1a13bbda47f2594ef695cac349254ba 🔍

6

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.8663
MD5 c519cde0a3de8b3fae65ec263d0211f2 🔍
SHA1 b5ec2ab4e4b832bbce774c34b575512f417dbea1 🔍
SHA256 aaa4217a07f23dc3124979542a8e1105ae36b6bd6e2951fd33e37fb66bfa6e97 🔍
SHA3 d126ff50d5c59f801cea6ba3220990d077af1349152fea03feb60a7e4fe71b0d 🔍

7

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.49649
MD5 07484b7d7d2de97ae274c997b13fcd95 🔍
SHA1 505d59bc4593dc34851764ff10e31a163db98f2d 🔍
SHA256 eab50ea5ff7abfa5e9c64cc691ea9cce1cac6d3a913a599902f486a05ce951e6 🔍
SHA3 fe754e115793dab307b8d9c1cf7eed88457e4fbe84d43324f4ad20d29dbb95dc 🔍

8

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.972379
MD5 d4e7ffb2c44d42dd0361bdf025ddc1cf 🔍
SHA1 b2f0d88ce66caf4e0efca16007174289977cf11b 🔍
SHA256 37265ae581f5649902228e063059ee88f390f5b67176020840d586a5cd55bd24 🔍
SHA3 0f814a879813c5f3705704e6b19fa66a7839ebf98df1941ad9e76825050843d9 🔍

9

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x12e5
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.68913
Detected Filetype PNG graphic file
MD5 2bdb3ce74738954decb4aa7784bc1dad 🔍
SHA1 7c1a93a6508fd2ab9998c87735e2e4cefebfdfef 🔍
SHA256 463eae02434b126bc01fc4aa5b1efd88fcb53313b05d180a199bfe064273cefd 🔍
SHA3 974d364c75b622f15c6c3f9f6fe645353b7aeaaf881f9285c1a568181ea6512d 🔍

10

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.03031
MD5 2f8da60b986b88d85ae9bf8741138629 🔍
SHA1 35b96991f3c9de50adc6a854314d7c4b3b762b4c 🔍
SHA256 83e1da080a4c85ba6c53a8b73a88a43bda96f0af2f63565aeacc8020c57fb711 🔍
SHA3 422e7d3d156266b34b571d202b0d2dcd4c42ebf317ab5755e4d4ab84837f5ed4 🔍

11

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.4506
MD5 b7a61dbaf8fed9e8fd55586271a7a2fe 🔍
SHA1 1bf83736a9459f39e8ad4415a8a55f0fd03031d9 🔍
SHA256 1b9e2b76fb8a6306d71a58e8277e61cf775b329f259833b48539dabc55564dde 🔍
SHA3 ad3d753b9786fa2d2920812cb8dfb9cc077f392df40690a3dcf584e51d55b6e9 🔍

12

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.25978
MD5 74fa412d3b673173879e1694849b16fe 🔍
SHA1 fd666f6bd32077a3b3ad97d4591ed6e170179911 🔍
SHA256 e1cdcfc343bd2be7111edf269de89a61f6bed13a5780a79fec57110350d2b175 🔍
SHA3 59c23cb88d5b074c0e9d5dbc3af87739c0d65b11acab261f17e191f3575af7f4 🔍

13

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.88786
MD5 208b4b138664f95bc9c28daa5d6240b7 🔍
SHA1 79131678428163495ffee79cf6c3cd70a4622804 🔍
SHA256 c98be6a1843a183920435a4ebcfcd9e8b1595b05aa7eb74e646fde7e2a22145b 🔍
SHA3 5f193d529afeb126339e38e17cffc7868ea66de29a81db907d1c031d9c5822e3 🔍

4085

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x24c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.11364
MD5 bfdeec9b9c10f5470a9b6f2b15ae368d 🔍
SHA1 e2f1e0f6fc1d4586803b19cb384bfe0f4edc81f4 🔍
SHA256 9a932d990ffa1c05ffff03182707adaf9b0c6c13c3a9d09019cfb606c060c46f 🔍
SHA3 c1d8379e018b7922875978f62f488fce6aceadbfe2ded0b50db83877632233dc 🔍

4086

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2e4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32885
MD5 f96fdce1c116135874fb82281b493ac0 🔍
SHA1 562daa783cc168f8e46b1a798879583176af22cc 🔍
SHA256 3ab3b2c63dc1c1810fca5518c1bb174be9ebf36547ed1feae9e357ccf8bc3ef1 🔍
SHA3 05d0914dffa4501268059355b689944d50e9aa4a986777d770f0e713d1a8d59c 🔍

4087

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x400
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.51239
MD5 7ee56b85a64cd12875800e5eb0f8a8cc 🔍
SHA1 aedd1bec33089176851004b6593393629eb0fa6f 🔍
SHA256 dc6b3544e2299b1708bb325f9eecdb6d3a7c96755eab1d83ea51fc8b5102715c 🔍
SHA3 5b5c207556b66f9b50ed909ae8d9a80068adcd483f406df26c87f8151450bc20 🔍

4088

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x3d0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.24302
MD5 44f76d42ead76c495e69824f453e64ec 🔍
SHA1 3fb0774ab962aa9cc511af9e8836164c477b9d9e 🔍
SHA256 98ffaee3d049334960e4f4bac5dd69ae5ea0e8a8f154a71ce30230508692db8d 🔍
SHA3 cbb48eb071e2f28c8b7c315c9192c0a8de0a4c75bcc188e12c72e8bad4b3230e 🔍

4089

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x3fc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.34822
MD5 ba10a3e64b7ee79204e6728702cebcf5 🔍
SHA1 7c7298de979e3bb2f128be40f110a376be3350fc 🔍
SHA256 c0dce66eaf68d1a945a6c5ec96a54baeb9bf8ff533392a1c1d66cc0ac4f7e3fd 🔍
SHA3 3bce8f10959f4d33092d14e38f0d70b276193106f38f6066c66fdec4f62571ba 🔍

4090

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2d4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.36723
MD5 d2467f70311fc072d9202909bdfa9fcb 🔍
SHA1 c8abb69fb38434daf6811309cc88e9d0df65e2cd 🔍
SHA256 51209c8034cd5c2127a7b877a3280699d6bad965bcc102e830420c836f535c97 🔍
SHA3 4386b5d28f8adc0eccd1a396c2d0689b85cd7cfcf727c8d08a87940c92bd64c7 🔍

4091

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xb8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33978
MD5 e8e4995b464abd85d77008d3750ca7af 🔍
SHA1 2c39cf9c2c1cfab48077cda2d4d6312fdb53c54b 🔍
SHA256 22296669c2c50d3fdfee9de9f7730d0a5cc498b7cc54cd2aa8ded74d7e69f654 🔍
SHA3 5480674ca53405ca327424ca774da73700d535e5ca7d51363d86511e5268bb0c 🔍

4092

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x9c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.15425
MD5 d0969cc9a96275d54a109de740708a5a 🔍
SHA1 2c365c0341faf71f810a39c69859a7eb5bc0de8d 🔍
SHA256 3c45c82b39b3c90c9c22342a8f6be98073faf1dcd26dbc578b3a6fa9a499cb46 🔍
SHA3 99f949ba47f1c5cd7b313b0b89e2b14f238be4bd78199a590c1f257e4f562967 🔍

4093

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x38c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32419
MD5 91f002a78decfcd89251e544aa2d1825 🔍
SHA1 20d0672f8144b8f614127b2bc03f4b447b823a7a 🔍
SHA256 5eb28cbb468ee711930c5100d15732fee3066a1b49d989207611a66ec2fbee1e 🔍
SHA3 206eb7f338ff610b7c3aed4b945f089c0d66e6e64e1c857552a91d8021a1127b 🔍

4094

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x398
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.28786
MD5 110abe16232608d8671eaca8ee324f45 🔍
SHA1 30704560832bafa440df1fd20693653c2a30f815 🔍
SHA256 b33f156b0a8ce96c7182dfb6afa9f6a7020433a6e16ca21f6092ba03695bdd12 🔍
SHA3 0179804f22369dabd55b8e4ca79a33645191c197c0474cabc4e13546c7e7fcd6 🔍

4095

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x368
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33385
MD5 1c9252919f0a0d2072f3fe0565f0b443 🔍
SHA1 dc6002a243c7567105aef957d8b01142df42b3d2 🔍
SHA256 734b698aafc2cfabfd0750c88498022d650f6ee025250dc8795de56a6e122445 🔍
SHA3 4d0c5d27e1b222f09e17dc6fa9ec0bc174b3e58bba30ce90cb89b3594622e627 🔍

4096

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2a4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.2935
MD5 d1efb0d972603f09c3a2a866a8b36d48 🔍
SHA1 64a194ea368bb16ffac3e7a4ca84b3c00bf15920 🔍
SHA256 351e7d3c756242cde2e4a2bef16d636d5e073e0cf3e9cfa2b1da1efccd7806ae 🔍
SHA3 545cc79af077359ed49f0ba5cdc74b58bef1f6fd71725c976ad9c892dc9a0b56 🔍

DVCLAL

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x10
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4
MD5 d8090aba7197fbf9c7e2631c750965a8 🔍
SHA1 04f73efb0801b18f6984b14cd057fb56519cd31b 🔍
SHA256 88d14cc6638af8a0836f6d868dfab60df92907a2d7becaefbbd7e007acb75610 🔍
SHA3 a5a67ad8166061d38fc75cfb2c227911de631166c6531a6664cd49cfb207e8bb 🔍

PACKAGEINFO

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x3c0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.17949
MD5 c060ca27e7a47373bca3a0cce6a511d8 🔍
SHA1 d40f146d85566666858f1c54fe5f2767df166876 🔍
SHA256 7ce1c6a50ccfd5cad442e312ded47467a6781646d8513767328089688afb4af4 🔍
SHA3 935baa0ea59993cac03a423828fe619f2f3f5302f93f94c452e19e1502ebdbe5 🔍

11111

Type RT_RCDATA
Language English - United States
Codepage Latin 1 / Western European
Size 0x40
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.41281
MD5 4a1271bff6ef208191e46428e7b3e956 🔍
SHA1 cb95aa03eb13fd91050bc20b427f50f2e9a6f338 🔍
SHA256 e917b9c139326a968726f9d6d3216a65c20c56c3662b3fe22c3a3583da088ef7 🔍
SHA3 bf3abcbcbf21d3237345c6cac5dd0e14f7ecdd1683e03c9e0901cf250f1fd9db 🔍

MAINICON

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0xbc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.08095
Detected Filetype Icon file
MD5 ee0da5fbb3d343c27941fb3f8b77164a 🔍
SHA1 c2be29713ab52dcf391d34d14f367cbbab966cc0 🔍
SHA256 81341db39d8fdec0bd34960423a41a5e2ba5c5830b957f070d1563580b52011b 🔍
SHA3 f3d78fc2b713ea2475d919525d0e8019ea390471c9899df1b1345093fb558919 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage Latin 1 / Western European
Size 0x584
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.85053
MD5 31ec7c4a408378bc73071e239220fabc 🔍
SHA1 befc544bf6964e191afd34e92f174805f7fa96ef 🔍
SHA256 e0961caef605f5d12d3326e8a78fdd8d4c6fef907cb20d6f7c0c0ab8787e6116 🔍
SHA3 63d36c3b609e14732c85e832b42a62fea70c115afb79d35d8e038f7ff9c687d9 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x7a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.89085
MD5 e07ab8c9030f776ce0f6d9040d41c616 🔍
SHA1 593953973c74066bcd09b22402948425dab9b12f 🔍
SHA256 75bb01fe4bafdef22d879aaea5b85d1165a30ec0e558536e1b4c6002c4730d5d 🔍
SHA3 51b78d43db0954fcaa7c6fd2558eece5eb98a1c5f6e95a3033891777bfd00a7c 🔍

String Table contents

No single cast observer with ID %d was added to the observer collection
No multi cast observer with ID %d was added to the observer collection
SHA2: Cannot update a finalized hash
Must wait on at least one event
Cannot call BeginInvoke on a TComponent in the process of destruction
Windows 2000
Windows XP
Windows Server 2003
Windows Server 2003 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019
Windows Server 2022
Windows 8
Windows 8.1
Windows 10
Windows 11
Observer is not supported
Cannot have multiple single cast observers added to the observers collection
The object does not implement the observer interface
Insufficient RTTI available to support this operation
Parameter count mismatch
Type '%s' is not declared in the interface section of a unit
VAR and OUT arguments must match parameter type exactly
Property '%s' is read-only
Property '%s' is write-only
RTTI objects cannot be manually destroyed by application code
%s (Version %d.%d, Build %d, %5:s)
%s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s)
32-bit Edition
64-bit Edition
Windows
Windows Vista
Windows Server 2008
Windows 7
Windows Server 2008 R2
Error reading %s%s%s: %s
Stream read error
Property is read-only
%s.Seek not implemented
Property %s does not exist
Stream write error
Thread creation error: %s
Thread Error: %s (%d)
Cannot terminate an externally created thread
Cannot wait for an externally created thread
Cannot call Start on a running or suspended thread
Invalid argument
Source and Destination arrays must not be the same
SpinCount out of range. Must be between 0 and %d
Argument out of range
Duplicates not allowed
Cannot assign a %s to a %s
CheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
List does not allow duplicates ($0%x)
A component named %s already exists
''%s'' is not a valid component name
Invalid property value
Invalid property path
Invalid property value
List capacity out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d)
. %s range is 0..%d
. %s is empty
Out of memory while expanding memory stream
%s has not been registered as a COM class
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
Invalid source array
Invalid destination array
Character index out of bounds (%d)
Start index out of bounds (%d)
Invalid count (%d)
Invalid destination index (%d)
Invalid code page
No mapping for the Unicode character exists in the target multi-byte code page
Invalid StringBaseIndex
Ancestor for '%s' not found
May
June
July
August
September
October
November
December
Sun
Mon
Tue
Wed
Thu
Fri
Sat
Sunday
Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
Dec
January
February
March
April
Invalid variant type
Operation not supported
Unexpected variant error
External exception %x
Assertion failed
Interface not supported
Exception in safecall method
Object lock not owned
Monitor support function not initialized
Feature not implemented
Method called on disposed object
%s (%s, line %d)
Abstract Error
Access violation at address %p in module '%s' (offset %x). %s of address %p
System Error. Code: %d.
%s%s
A call to an OS function failed
Variant method calls not supported
Read
Write
Execution
Invalid access
Error creating variant or safe array
Variant or safe array index out of bounds
Variant or safe array is locked
Invalid variant type conversion
Invalid variant operation
Invalid NULL variant operation
Invalid variant operation (%s%.8x)
%s
Could not convert variant of type (%s) into type (%s)
Overflow while converting variant of type (%s) into type (%s)
Variant overflow
Invalid argument
Invalid floating point operation
Floating point division by zero
Floating point overflow
Floating point underflow
Invalid pointer operation
Invalid class typecast
Access violation at address %p. %s of address %p
Access violation
Stack overflow
Control-C hit
Privileged instruction
Operation aborted
Exception %s in module %s at %p.
%s%s
Application Error
Format '%s' invalid or incompatible with argument
No argument for format '%s'
'%s' is not a valid integer value
'%d.%d' is not a valid timestamp
Invalid argument to time encode
Invalid argument to date encode
Out of memory
I/O error %d
File not found
Invalid filename
Too many open files
File access denied
Read beyond end of file
Disk full
Invalid numeric input
Division by zero
Range check error
Integer overflow

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.0.0
ProductVersion 1.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments This installation was built with Inno Setup.
CompanyName
FileDescription PowerISO Full 9 5 Portable 2026 Latest.exe Setup
FileVersion (#2) 1.0.0.0
LegalCopyright PowerISO Full 9 5 Portable 2026 Latest.exe
OriginalFileName
ProductName PowerISO Full 9 5 Portable 2026 Latest.exe
ProductVersion (#2) 1.0.0.0
Resource LangID English - United States

TLS Callbacks

StartAddressOfRawData 0x4c3000
EndAddressOfRawData 0x4c3018
AddressOfIndex 0x4b3c14
AddressOfCallbacks 0x4c4010
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks (EMPTY)

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0! [*] Warning: Section .tls has a size of 0!
Leave a comment

No comments yet.