b6faad27adb1000396238bfa83dcc8c31607bb5faf5adf2edd8e7f6ec8154752

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2009-Aug-15 19:29:32
Detected languages English - United States
Comments This installation was built with Inno Setup.
CompanyName VSG
FileDescription
FileVersion
LegalCopyright
ProductName
ProductVersion

Plugin Output

Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryExW
  • GetProcAddress
  • LoadLibraryW
 Can access the registry:
  • RegQueryValueExW
  • RegOpenKeyExW
  • RegCloseKey
 Possibly launches other programs:
  • CreateProcessW
 Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
 Functions related to the privilege level:
  • OpenProcessToken
  • AdjustTokenPrivileges
 Can shut the system down or lock the screen:
  • ExitWindowsEx
Suspicious The file contains overlay data. 3009518 bytes of data starting at offset 0x23a00.
The overlay data has an entropy of 7.99994 and is possibly compressed or encrypted.
Overlay data amounts for 95.3756% of the executable.
Safe VirusTotal score: 0/68 (Scanned on 2026-07-12 04:50:58) All the AVs think this file is safe.

Hashes

MD5 c454c7ff5773530dcdf8957bacbe5fef 🔍
SHA1 8b5fa5f0d78cb12efe929765b50b2f27980bba4f 🔍
SHA256 b6faad27adb1000396238bfa83dcc8c31607bb5faf5adf2edd8e7f6ec8154752 🔍
SHA3 548c410ceadc18884c89c22484fae98eaf794f82b9df7517a85de721608eeb46 🔍
SSDeep 49152:gLfjYOoO0mT7mj+W/063lIFIHV9riakrZB98EV6rd5liqMvfk5dS9d1eFqCyy2l:Cfc/O0+yIFI1NiNyoQ+vf4dZFqCyy2l 🔍
Imports Hash 9d8fb47598991ad8c0094898c32a6c3b 🔍

DOS Header

e_magic MZ
e_cblp 0x50
e_cp 0x2
e_crlc 0
e_cparhdr 0x4
e_minalloc 0xf
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0x1a
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 9
TimeDateStamp 2009-Aug-15 19:29:32
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0x15000
SizeOfInitializedData 0xe600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000163C4 (Section: .itext)
BaseOfCode 0x1000
BaseOfData 0x17000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 5.0
ImageVersion 6.0
SubsystemVersion 5.0
Win32VersionValue 0
SizeOfImage 0x30000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x4000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 cda3f5db2a563079f68ff49207a072e8 🔍
SHA1 7f8a97dc635c8a71069c3a7b7cdb06cc9bea59cd 🔍
SHA256 1d5aae4bc6f41b1bd3e9ade5730db8051d18572ef8e402107678d84d7eff584f 🔍
SHA3 f3fbb6e288c2d9323a3e7325b5a4c73d304c9dfd1bcbf486adde37fcbae10bb2 🔍
VirtualSize 0x143d4
VirtualAddress 0x1000
SizeOfRawData 0x14400
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.47911

.itext

MD5 751be2588cbfe7e40eb201c2cff8a4c7 🔍
SHA1 830a360a320c6cd9bcabbb7d06ab8c0ff82f5857 🔍
SHA256 f2ae11f289056d567c4856febca97253f8e97d3daa79b17a6229d2afdbe792de 🔍
SHA3 a2fedf08547663f5a64ebe402074dd8640ecaa89b391b23a4ee32591d4f10816 🔍
VirtualSize 0xb2c
VirtualAddress 0x16000
SizeOfRawData 0xc00
PointerToRawData 0x14800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.7344

.data

MD5 e62932c7214c54c4c642c26544c71fc3 🔍
SHA1 98901d465b7cf7322d0f22d9a73e340c1219f772 🔍
SHA256 f128330e01595cbd0310d68e9271f5a80437cde1903594784def728adae54c84 🔍
SHA3 6cc96dffdfd9c92ec1ef025d7d86cd6687271841cfd98f5f9f655352580d3c08 🔍
VirtualSize 0xd9c
VirtualAddress 0x17000
SizeOfRawData 0xe00
PointerToRawData 0x15400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.66817

.bss

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x56d8
VirtualAddress 0x18000
SizeOfRawData 0
PointerToRawData 0x16200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata

MD5 0c8776d0bdc06df93ba1292a2e0aaaeb 🔍
SHA1 2a3cebdb8091f4c4fe323bfa640aceddd63dfb5b 🔍
SHA256 118b86e5e72a3d5c124bd06f1ed5b6406408fbf0138ec1511769a8c7dc1456c4 🔍
SHA3 86216d9bad395500accc0599691e80473b6dc965b47fb500da11a5c17c02cf2d 🔍
VirtualSize 0xf96
VirtualAddress 0x1e000
SizeOfRawData 0x1000
PointerToRawData 0x16200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.96271

.tls

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x8
VirtualAddress 0x1f000
SizeOfRawData 0
PointerToRawData 0x17200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata

MD5 3746f5876803f8f30db5bb2deb8772ae 🔍
SHA1 65e8dad930c8c32d40ca9aff4890630f20d87074 🔍
SHA256 9c8a4b346c5df43a9f90f5d15227c2dea3e7dfabfbe8402bcba85c3b2e9c84ae 🔍
SHA3 956c3695e53f796282349fc0b391c557d3f9bef6abb0d58045dacccc70b3a4cf 🔍
VirtualSize 0x18
VirtualAddress 0x20000
SizeOfRawData 0x200
PointerToRawData 0x17200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 0.190489

.reloc

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x1954
VirtualAddress 0x21000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc

MD5 8b52d6a52809a3aadb9289feb5280dff 🔍
SHA1 c791747ea9a84f4f7f82677a8a7010594a2c6679 🔍
SHA256 1b8c76fe5db34b0c41619e7e1492ee89f294fcec420d9793bf15287487dd16ba 🔍
SHA3 3ffa2d9d4ecf3e108bf959bcd42f5f1145d8c78993af0fd5c724b3cc6d932778 🔍
VirtualSize 0xc490
VirtualAddress 0x23000
SizeOfRawData 0xc600
PointerToRawData 0x17400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.76184

Imports

oleaut32.dll SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32.dll RegQueryValueExW
RegOpenKeyExW
RegCloseKey
user32.dll GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
kernel32.dll GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
kernel32.dll (#2) GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
user32.dll (#2) GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
kernel32.dll (#3) GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
advapi32.dll (#2) RegQueryValueExW
RegOpenKeyExW
RegCloseKey
comctl32.dll InitCommonControls
kernel32.dll (#4) GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
advapi32.dll (#3) RegQueryValueExW
RegOpenKeyExW
RegCloseKey
oleaut32.dll (#2) SysFreeString
SysReAllocStringLen
SysAllocStringLen

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.76641
MD5 5962ff7180609c591b776b407cbe60fb 🔍
SHA1 1c90cefc51048f96bd2ff60ed14761cd06ee220f 🔍
SHA256 aa45aad1f080606bf2334baefc207c87b6ce2cfcdf93b99166554dd49c73b09e 🔍
SHA3 696fd3543b4fc04c90e7a1a90908fbfa2071ef3ece0bf22ddb79410bd2840618 🔍

4091

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xc4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.13038
MD5 d2772bcc007d8465cf41352da64ed008 🔍
SHA1 3cb80c1ec7e649f89f425b6d7fdd11dd5333e052 🔍
SHA256 57fbdcb9b1d61d1269f5e9bc3e4f325029bd89778123d7703251761eebe26dea 🔍
SHA3 28c495a2cc8d92c07ea21db55f8e6ea142d60465f042d175b590db37884f5eb4 🔍

4092

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xcc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.36196
MD5 1bb1699f3e79a261a1cb71a60a1ace7c 🔍
SHA1 268f9a2602e1187b881d96db521e82c8d051d656 🔍
SHA256 a073bc06540956a93a3ef6eaa7d558de6f92de721edd29d6a93551a0fab23c08 🔍
SHA3 a0d833ced8297a2d82be5b80dd79fa9f61b84033377016f4c588ff2cfc168cf9 🔍

4093

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x174
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.34841
MD5 b6bedb71d6a6fa5215e4afdd1e983bdc 🔍
SHA1 7541a76c3ab32506ab00c3ab56076bf01532b267 🔍
SHA256 203e2c213958348f4911dd2e3188ea694f7d1d97f9ea9a82f89f5ee7af8c9607 🔍
SHA3 3ad5273f1d88b58db23b17b0ecd52f1280b9c279f64aad4404f5487b5d8f264e 🔍

4094

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x39c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.29351
MD5 0b1533b447231c6319c4a10d84508e60 🔍
SHA1 f5477d91942bfe92a5dc3c46897a66fb663a124f 🔍
SHA256 6fa3bbc46b4cc3a979f4ebfc293c50453912eb51ef76d2ea3c7d3d86d7223e86 🔍
SHA3 aed1581927a66228d158a903e015bdfa9a12e44865ff24c991ba8e2c1a9de8c1 🔍

4095

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x34c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.34579
MD5 2596d19a6b88cbba9c9c9cb003affbc6 🔍
SHA1 37091a716fd1eed000e0c3bb195fbd589a750608 🔍
SHA256 7f63f3f944a0b62f8f3b35a60141081599f7f175605ced7e1b4dcb80fda58c8a 🔍
SHA3 0b2581dd0c1b08d882b1f4c4014652d2e7d046d95aa3df236690e9d22572b27c 🔍

4096

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x294
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.28057
MD5 1f9009e4d5b61392e05aa8ac6eceb6aa 🔍
SHA1 4af6f3144fff0951da37370a3d200e8d74fc4862 🔍
SHA256 cb21f2b28bfc6b8046348c7a96bf97149dc5f91e1cc1a4f2904a1044a008425a 🔍
SHA3 c1aebde06ed543947facd67a9541283cbec74e559e267c1b84c168a2bf839812 🔍

CHARTABLE

Type RT_RCDATA
Language English - United States
Codepage Latin 1 / Western European
Size 0x82e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.5072
MD5 6e9c1c8c0a0ec8d73165779560cd7ba4 🔍
SHA1 d044c45e2ffd24e1abef00079577df385e325ab4 🔍
SHA256 677245e2a6b2eb5495b4965b8c26025a4b26e8b8c21a825f658cb390b493b9a0 🔍
SHA3 3ec7819e8561ecad66b1ef2652d4f3b275030f7cf402f276daa38f28d288e4e7 🔍

DVCLAL

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x10
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4
MD5 d8090aba7197fbf9c7e2631c750965a8 🔍
SHA1 04f73efb0801b18f6984b14cd057fb56519cd31b 🔍
SHA256 88d14cc6638af8a0836f6d868dfab60df92907a2d7becaefbbd7e007acb75610 🔍
SHA3 a5a67ad8166061d38fc75cfb2c227911de631166c6531a6664cd49cfb207e8bb 🔍

PACKAGEINFO

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x180
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.2284
MD5 98ec1fe524012b4d8654f7e01c44dac5 🔍
SHA1 fe5caa2503936543be6e1023dd443541acda7639 🔍
SHA256 906feffafc48fd76f3d15a5f5944a46a58634e7e2876a64f91e0d991c54d9e99 🔍
SHA3 6d9573800860b1df064d54a18cad1f9feac9d413f3319be6980dece251ff85ac 🔍

11111

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.52263
MD5 6babc1df06f0ae17ec10fd3781953507 🔍
SHA1 33a531445f2b7549b029cc69284a0ca9a30a979f 🔍
SHA256 571e3b0b70712526316394601ae28df65ebb1fead4d52c22c27c26ba68f08d00 🔍
SHA3 eb3821fd875585da2eb70af96bca89dc18917950ccdf72f3ddac6b5ed34fab6b 🔍

MAINICON

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.91924
Detected Filetype Icon file
MD5 6da8e7d5ae1d5d15e0230a67a7c16c6d 🔍
SHA1 678db52cbe5d617c33c6269bfd4b6d8d1a17f956 🔍
SHA256 6eb54801f91b6d8effccbfaefe6b2d7705a274a75940e6226e24e0d4ec58c396 🔍
SHA3 994fc217c7b8bc8008ac262ff58044403206de6eceafd424d4640ecad395eb2f 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage Latin 1 / Western European
Size 0x4b8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.43165
MD5 5af56b7fb99b859dffed7ca758a18e28 🔍
SHA1 46580f326abc6e503cdce27ec02c05a6bc8b3d8e 🔍
SHA256 587ec9b92c7db0dbb92bc3ccc3fa8638b5c6f420c4ce8a00fe8a5bb44c854e4b 🔍
SHA3 8a2a1f3f7679ee288b44a1f48a7c83e5e8b5c3afe22424f7c06478b6ff0ab4f4 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x56b
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.04657
MD5 404a5522519dc05554e93482e7abdf47 🔍
SHA1 24a9c7f8d79148b2078833d0ad43430517ddd7ff 🔍
SHA256 b4f72b11d003ad504b4aed916c9c52aefe1d9d06da90584ba6a72c9ce89ef51d 🔍
SHA3 13c4e5375dfae3c7e9932960d0f88dd0e66a9b5716471a4c72cdd592de94a22d 🔍

String Table contents

Thu
Fri
Sat
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
Invalid file name - %s
January
February
March
April
May
June
July
August
September
October
November
December
Sun
Mon
Tue
Wed
Monitor support function not initialized
%s (%s, line %d)
Abstract Error
Access violation at address %p in module '%s'. %s of address %p
Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
Dec
Variant or safe array is locked
Invalid variant type conversion
Invalid variant operation
Invalid variant operation (%s%.8x)
%s
Could not convert variant of type (%s) into type (%s)
Overflow while converting variant of type (%s) into type (%s)
Variant overflow
Invalid argument
Invalid variant type
Operation not supported
Unexpected variant error
External exception %x
Assertion failed
Interface not supported
Exception in safecall method
Object lock not owned
Invalid class typecast
Access violation at address %p. %s of address %p
Access violation
Stack overflow
Control-C hit
Privileged instruction
Operation aborted
Exception %s in module %s at %p.
%s%s
Application Error
Format '%s' invalid or incompatible with argument
No argument for format '%s'
Variant method calls not supported
Read
Write
Error creating variant or safe array
Variant or safe array index out of bounds
Out of memory
I/O error %d
File not found
Too many open files
File access denied
Read beyond end of file
Disk full
Invalid numeric input
Division by zero
Range check error
Integer overflow
Invalid floating point operation
Floating point division by zero
Floating point overflow
Floating point underflow
Invalid pointer operation

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 0.0.0.0
ProductVersion 0.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments This installation was built with Inno Setup.
CompanyName VSG
FileDescription
FileVersion (#2)
LegalCopyright
ProductName
ProductVersion (#2)
Resource LangID English - United States

TLS Callbacks

StartAddressOfRawData 0x41f000
EndAddressOfRawData 0x41f008
AddressOfIndex 0x4177b4
AddressOfCallbacks 0x420010
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks (EMPTY)

Load Configuration

RICH Header

Errors

[*] Warning: directory 5 has a size of 0! This PE may have been manually crafted! [!] Error: Could not reach the requested directory (offset=0x0). [*] Warning: Section .bss has a size of 0! [*] Warning: Section .tls has a size of 0! [*] Warning: Section .reloc has a size of 0!
Leave a comment

No comments yet.