5a7f281ab5b5bfd0bca46870f20319907734457a9fb2b204d7198ac393d9b859

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2014-Jul-09 07:58:13
Detected languages English - United States
Comments This installation was built with Inno Setup.
CompanyName RePack by Canek77
FileDescription Dying Light 2 Setup
FileVersion
LegalCopyright Canek77™
ProductName Dying Light 2
ProductVersion

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • http://www.jrsoftware.org
  • http://www.jrsoftware.org/ishelp/index.php?topic
  • jrsoftware.org
  • www.jrsoftware.org
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryExW
  • GetProcAddress
  • LoadLibraryW
 Can access the registry:
  • RegQueryValueExW
  • RegOpenKeyExW
  • RegCloseKey
 Possibly launches other programs:
  • CreateProcessW
 Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
 Functions related to the privilege level:
  • OpenProcessToken
  • AdjustTokenPrivileges
 Can shut the system down or lock the screen:
  • ExitWindowsEx
Suspicious The file contains overlay data. 1420838 bytes of data starting at offset 0x86e00.
The overlay data has an entropy of 7.99987 and is possibly compressed or encrypted.
Suspicious VirusTotal score: 1/68 (Scanned on 2026-09-19 03:01:48) Webroot: W32.Riskware.Repack

Hashes

MD5 968d56c29d34f146634c7b9da8b5fdf2 🔍
SHA1 fa910924eea0d242a0bfe0143696d21e900302d3 🔍
SHA256 5a7f281ab5b5bfd0bca46870f20319907734457a9fb2b204d7198ac393d9b859 🔍
SHA3 77cb59968784f95af36f132b196a120bf38e98af785b2cbf71683b874fc7a392 🔍
SSDeep 24576:kxGehPWuVD0DgQZViG6WG8AIydcR/ZfYaIeTo3t6dFQ+WuQQis/qt:J0pVEh6VPIMctZfY96o3t2C+WRQ56 🔍
Imports Hash c60f9a83fcd28ab2eb686b76b194eb79 🔍

DOS Header

e_magic MZ
e_cblp 0x50
e_cp 0x2
e_crlc 0
e_cparhdr 0x4
e_minalloc 0xf
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0x1a
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 8
TimeDateStamp 2014-Jul-09 07:58:13
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0xfe00
SizeOfInitializedData 0x76c00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000113BC (Section: .itext)
BaseOfCode 0x1000
BaseOfData 0x12000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 5.0
ImageVersion 6.0
SubsystemVersion 5.0
Win32VersionValue 0
SizeOfImage 0x91000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x4000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 3a126e478661f20816f9d9285615f98e 🔍
SHA1 e446317d7cb464e9ab9c259129ffb390c0e85bbc 🔍
SHA256 dc180f94aef37a4dd045f59040ace3a17d4c009644bba1492300cff94a1ab660 🔍
SHA3 cfda01e42a8e06ccf82d4a430132d82477efc589570aa87e785cede7d31e76fd 🔍
VirtualSize 0xf12c
VirtualAddress 0x1000
SizeOfRawData 0xf200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.39148

.itext

MD5 ba48b9b17b3dd8b92da3bd93f20ddb34 🔍
SHA1 3ee09b4d597b2047cd658a1acfa454edb77e09c7 🔍
SHA256 32890d767e5e23e3e538c87cbb41ff5ce98dd329c069467c4cd556fb5ba618c9 🔍
SHA3 ec46821fa99cbddc600875f6eb7e4b34240d0f2e3167c9a37af603f6fb6a06d7 🔍
VirtualSize 0xb44
VirtualAddress 0x11000
SizeOfRawData 0xc00
PointerToRawData 0xf600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.73207

.data

MD5 d7fd5f4b562d7961758f3d6a8c834fd0 🔍
SHA1 04e9419b80ec90dff0906e2b7ef0749593fd8648 🔍
SHA256 54a41d6d92705a381f85668d43ece5cf07750f582985eb152fb62bbbb5800a78 🔍
SHA3 553391203f25d793c5f95e0efccdaa93bbfd3da8cb5515cec8f8b4871f3739f0 🔍
VirtualSize 0xc88
VirtualAddress 0x12000
SizeOfRawData 0xe00
PointerToRawData 0x10200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.24631

.bss

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x56b4
VirtualAddress 0x13000
SizeOfRawData 0
PointerToRawData 0x11000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata

MD5 93d91a2b90e60bd758fc0c4908856ae1 🔍
SHA1 391bdc96affa3aca04b3ed0fdce8edbd5a888a76 🔍
SHA256 87a62dbf1079da4759be08abcac1d4057824eb72be12cddad633200a6df3d267 🔍
SHA3 74535fa748cef59b8fbcbc2f73db78b397a804d24d3ee6adbefe0cdd3bd86d35 🔍
VirtualSize 0xdd0
VirtualAddress 0x19000
SizeOfRawData 0xe00
PointerToRawData 0x11000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.97188

.tls

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x8
VirtualAddress 0x1a000
SizeOfRawData 0
PointerToRawData 0x11e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata

MD5 3dffc444ccc131c9dcee18db49ee6403 🔍
SHA1 45d8f890e32cc1adf7ded113fd19004c8869f419 🔍
SHA256 821b0bda5922cc6f5fb74fb3a160e39c97727c21beb1ecf4f96e3bcfad9edbe3 🔍
SHA3 426ea652dcd361ec016030230ec1c87a2bc522f69cfb4c2af6313465cb2c516f 🔍
VirtualSize 0x18
VirtualAddress 0x1b000
SizeOfRawData 0x200
PointerToRawData 0x11e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 0.204488

.rsrc

MD5 7fcf4d76e906ed766b5126c0f6192199 🔍
SHA1 19c9e2e21d37662dc3a3eb292af1ce9bf7d995a6 🔍
SHA256 fa00c7798d71794241bbf4752d182076a28f67876e628cc8630572566e017a31 🔍
SHA3 dd557395147987c0d175add4d1cd0b6a818af3af78194739c57320b0158b1b40 🔍
VirtualSize 0x74c08
VirtualAddress 0x1c000
SizeOfRawData 0x74e00
PointerToRawData 0x12000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.54922

Imports

oleaut32.dll SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32.dll RegQueryValueExW
RegOpenKeyExW
RegCloseKey
user32.dll GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
kernel32.dll GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
kernel32.dll (#2) GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
user32.dll (#2) GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
kernel32.dll (#3) GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
advapi32.dll (#2) RegQueryValueExW
RegOpenKeyExW
RegCloseKey
comctl32.dll InitCommonControls
kernel32.dll (#4) GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
advapi32.dll (#3) RegQueryValueExW
RegOpenKeyExW
RegCloseKey

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x695b
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.86874
Detected Filetype PNG graphic file
MD5 9e2914c03f872dcb9b6082564344dbef 🔍
SHA1 66173af49e3ba55de2179bb3cd07f3806be31386 🔍
SHA256 5f1f15274f1f6124251e806a20f23df1cb5e84ad848d743ad468ca5253788217 🔍
SHA3 9b3c72f110916d0a2136877731b2c9be6423c3ebbf901d2e121db012e7930fd5 🔍

2

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.54676
MD5 1c0024f35008c3b75c6d6d7b8749b914 🔍
SHA1 0d71155bbae5fddb10a6ff423774cdf78a776e55 🔍
SHA256 15254ddb0f321d7c7b6c2b1ba35f9dfda778ba181513f0332b85828e614657bc 🔍
SHA3 a631b9fd60a018c645bf4087e30173a575895e671d1a99b3d113be219c7ac5ad 🔍

3

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.642
MD5 672551a6f459472c30ae30d3dee8b319 🔍
SHA1 59daf3d2764be314011e0dd5ff5c7cec75a9cd5d 🔍
SHA256 07ed623cdda137f99df28e1fa21993e8e59d612b81afd55ea407e2a88d367c5f 🔍
SHA3 5c5e3c055e5e3e1d64da13ceba7124744cd11abae5424be31ec9123fbd67a9a9 🔍

4

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.68904
MD5 47aaaaea35734512cd52c964d0f9b4c2 🔍
SHA1 f530bc778c1ea391f40f266ecb73f0f13afcb6db 🔍
SHA256 d9a19bde7df13bbc87606e968d1d6b7e4c72226b6cfa47e91f142c8c517ada6c 🔍
SHA3 a311379e55dfa40df137fd23fed7bf94d8458187218ecd15904c604158281b9e 🔍

5

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.78098
MD5 58e9d0b6efc09e1e8a5946e4a5b836a4 🔍
SHA1 958ad7a9b9c49386b370f388569e3e3dfbd6d007 🔍
SHA256 4791ca71acf9cb13c15a256a2790d2e6523fec0d3339fead616ae8db8fb8c24f 🔍
SHA3 174b4691ae01af38ec0970d648296d1832506a8d6ddd1134370820c9bf6fbe95 🔍

6

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.84193
MD5 2ea3404461cab9e1bf44b4180f6908ef 🔍
SHA1 d5a8284a92b80712a688c851c235ac82ce69a6d5 🔍
SHA256 4273a0e1c77532d34440e4686c79634c3ba947d388dfc0c4f787a36579c4209b 🔍
SHA3 1e10d08c721f832bea30108981b34e30b4707d2ee729549761e0c831ab5e0ddd 🔍

7

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.96572
MD5 a296a24fd46fcc27cbd57f77ea8771e8 🔍
SHA1 b551cf2dbfa476a24f89e68e8fdbc94bd4f011af 🔍
SHA256 81efe0795810096c90e10949498db7feb6f9b17f641850454359aaab2d20aad7 🔍
SHA3 c81d8b0e2a511871b2d024a883cd344b79a04e2817e8ce5825c484f41208df2f 🔍

8

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.09711
MD5 fa5b46fc68eef9affeafad4ecd78fbce 🔍
SHA1 c1114c69e3b926440ebca9e900fe24ca1eb16928 🔍
SHA256 d5793dc624d5c216e0bf1490c8f91896a44bdca7185ff23dba9773353e587c51 🔍
SHA3 8056e16bed07044eb506b35180876115968037d40c20435ada110cc0dd224c6f 🔍

9

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.1712
MD5 b2ce70a1a3c033dba963b8cd221ba87f 🔍
SHA1 82e5da757553f885c472e9786a7b3eb0d18194da 🔍
SHA256 fd5493e47f219dce794a6f5904227b55b85f1140b872d9ccfca386f74ea266a7 🔍
SHA3 898dc727e08bca471be4ba0ad95fced9f35ab40a5b288ce84656f22ffbe9337b 🔍

4091

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.56031
MD5 e518b8ae009986dd90363fcc61d7fff7 🔍
SHA1 24ed3f9f44fce167e79b53ea5f9b0505c4d567e1 🔍
SHA256 34ea1c2173226ecc593f8a2b0224c51ebbee1928715bda9339eec7717a822b89 🔍
SHA3 519dec097566117a56d9c49b0a711e82451c0f81fbb53f042549a61cd51122e6 🔍

4092

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xd4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.25287
MD5 ac85ded4e576ce909f5460536b63a4f1 🔍
SHA1 07e0380006e58eec02eaaa047a58aceeef1552d3 🔍
SHA256 e1d818d622875ce2cf81883816ef982aa05a724c46f82b3e67875e0bc24228b1 🔍
SHA3 d70f10064348a4608f8b92740e05f739736144b222db3aa5c51187c75c5cc4eb 🔍

4093

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xa4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.26919
MD5 519a33f5d2b4442ef3caf6d4501995fb 🔍
SHA1 e54df9d112555eb11a132bfee15b69ac186b422e 🔍
SHA256 80bc91470ef70d527d0c4e0824945bc3b17ff84f464bca425661c3e7e1972ce7 🔍
SHA3 88c911ed5f1b1354c3379baaaef2540d70c370fd877f536d069dc0ea55cd0b13 🔍

4094

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33268
MD5 234c2763997eec9c8a72ef190b928d68 🔍
SHA1 089fcaabba97f63455ce8a47e2d5d07fa56ba55b 🔍
SHA256 33ef72f38fc1fe2842c44e11bb351f94385bb186fee0fadbefc9364ed52aeb93 🔍
SHA3 10cbb07d784f332702d9d3451649950c1af6fb999ac1c2dac82df168cba5f302 🔍

4095

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x34c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.34579
MD5 2596d19a6b88cbba9c9c9cb003affbc6 🔍
SHA1 37091a716fd1eed000e0c3bb195fbd589a750608 🔍
SHA256 7f63f3f944a0b62f8f3b35a60141081599f7f175605ced7e1b4dcb80fda58c8a 🔍
SHA3 0b2581dd0c1b08d882b1f4c4014652d2e7d046d95aa3df236690e9d22572b27c 🔍

4096

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x294
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.28057
MD5 1f9009e4d5b61392e05aa8ac6eceb6aa 🔍
SHA1 4af6f3144fff0951da37370a3d200e8d74fc4862 🔍
SHA256 cb21f2b28bfc6b8046348c7a96bf97149dc5f91e1cc1a4f2904a1044a008425a 🔍
SHA3 c1aebde06ed543947facd67a9541283cbec74e559e267c1b84c168a2bf839812 🔍

CHARTABLE

Type RT_RCDATA
Language English - United States
Codepage Latin 1 / Western European
Size 0x82e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.5072
MD5 6e9c1c8c0a0ec8d73165779560cd7ba4 🔍
SHA1 d044c45e2ffd24e1abef00079577df385e325ab4 🔍
SHA256 677245e2a6b2eb5495b4965b8c26025a4b26e8b8c21a825f658cb390b493b9a0 🔍
SHA3 3ec7819e8561ecad66b1ef2652d4f3b275030f7cf402f276daa38f28d288e4e7 🔍

DVCLAL

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x10
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4
MD5 d8090aba7197fbf9c7e2631c750965a8 🔍
SHA1 04f73efb0801b18f6984b14cd057fb56519cd31b 🔍
SHA256 88d14cc6638af8a0836f6d868dfab60df92907a2d7becaefbbd7e007acb75610 🔍
SHA3 a5a67ad8166061d38fc75cfb2c227911de631166c6531a6664cd49cfb207e8bb 🔍

PACKAGEINFO

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x150
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.17906
MD5 8383ba160a86b918ac500521efb456a7 🔍
SHA1 f22c6fdd31aa68c5f9e247f8ccf0f565e14a0189 🔍
SHA256 abd66b63471de2699c97d06e41cfe0702144237079f76a9e0bd965b1a1862231 🔍
SHA3 efd13cc0570151797c6c4b7e4b3761f636efa32240f45d0558ce27bb27985147 🔍

11111

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.65899
MD5 e70c707d83fae1d93f3169a95caf543d 🔍
SHA1 2ce2da066d63e5851648b0151b6ddcf2f751caf9 🔍
SHA256 af97e43bbfdb1144d3fc1072c128cd23bb9ce14ea08775b24b2c8be72c6b61bc 🔍
SHA3 833f3fc00c8caf8fd907e75fe4cca3e1071146a5c56e63a90f6a1815e46baeb9 🔍

MAINICON

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.92847
Detected Filetype Icon file
MD5 ae5afb08900a9fa954bdad50dd4f81d8 🔍
SHA1 fd84cd34fe137ef39e3eea272184a2afabac6e2f 🔍
SHA256 76b8d8594172dda56eb9f05f6d25098245a8a1f494b5a0d1a64f41ba2974429f 🔍
SHA3 fe6bfbd05adf19c0e032b57a32ad73324e7b5282fff7af699f45f7832e6f288d 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage Latin 1 / Western European
Size 0x4f4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.61409
MD5 28080d44659cf5ca88044be73e5a01f3 🔍
SHA1 ecb2d2705dd96d4629d0015e176cab5914099af9 🔍
SHA256 b013928c000e90363a14982c52dcc6ea40116a8e32796edf3559aa68c67da4e5 🔍
SHA3 aa2f94b728ac65df4cea1ca031fb616a401ef3b00c66ff50ef25b1289c9453d2 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x5e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.11919
MD5 a561f3d4bfa3931040422a49ec17c06e 🔍
SHA1 9a27136c8b8073f832d2f3a9239a49f0c14cfaf6 🔍
SHA256 8d51d4405593fb12ba0d4a2708507e2300b363f7ce3cf538cb65c25cc1d3044f 🔍
SHA3 5ef4d8131a8cc50f1295dc3ebde9c211384f3ca41c657f5c8b18fd6b3a5c7c75 🔍

String Table contents

Friday
Saturday
Invalid file name - %s
September
October
November
December
Sun
Mon
Tue
Wed
Thu
Fri
Sat
Sunday
Monday
Tuesday
Wednesday
Thursday
May
Jun
Jul
Aug
Sep
Oct
Nov
Dec
January
February
March
April
May
June
July
August
Invalid variant type conversion
Invalid variant operation
Invalid argument
External exception %x
Assertion failed
Interface not supported
Exception in safecall method
Object lock not owned
Monitor support function not initialized
%s (%s, line %d)
Abstract Error
Access violation at address %p in module '%s'. %s of address %p
Jan
Feb
Mar
Apr
Invalid class typecast
Access violation at address %p. %s of address %p
Access violation
Stack overflow
Control-C hit
Privileged instruction
Operation aborted
Exception %s in module %s at %p.
%s%s
Application Error
Format '%s' invalid or incompatible with argument
No argument for format '%s'
Variant method calls not supported
Read
Write
Error creating variant or safe array
Variant or safe array index out of bounds
Out of memory
I/O error %d
File not found
Too many open files
File access denied
Read beyond end of file
Disk full
Invalid numeric input
Division by zero
Range check error
Integer overflow
Invalid floating point operation
Floating point division by zero
Floating point overflow
Floating point underflow
Invalid pointer operation

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 0.0.0.0
ProductVersion 0.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments This installation was built with Inno Setup.
CompanyName RePack by Canek77
FileDescription Dying Light 2 Setup
FileVersion (#2)
LegalCopyright Canek77™
ProductName Dying Light 2
ProductVersion (#2)
Resource LangID English - United States

TLS Callbacks

StartAddressOfRawData 0x41a000
EndAddressOfRawData 0x41a008
AddressOfIndex 0x4127ac
AddressOfCallbacks 0x41b010
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks (EMPTY)

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0! [*] Warning: Section .tls has a size of 0!
Leave a comment

No comments yet.