d1c14a19ab0cd446a1e4b8ec1c6bfcedc435a9797ed76d9f0d0b0aa1b9ae2ba3

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2021-Jun-03 08:09:11
Detected languages English - United States
Comments This installation was built with Inno Setup.
CompanyName Shani Sinojiya
FileDescription Calculator Setup
FileVersion
LegalCopyright
OriginalFileName
ProductName Calculator
ProductVersion 2.0.0.1

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • https://jrsoftware.org
  • jrsoftware.org
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • LoadLibraryExW
  • GetProcAddress
  • LoadLibraryW
 Functions which can be used for anti-debugging purposes:
  • SwitchToThread
 Can access the registry:
  • RegQueryValueExW
  • RegCloseKey
  • RegOpenKeyExW
 Possibly launches other programs:
  • CreateProcessW
 Memory manipulation functions often used by packers:
  • VirtualProtect
  • VirtualAlloc
 Functions related to the privilege level:
  • AdjustTokenPrivileges
  • OpenProcessToken
 Queries user information on remote machines:
  • NetWkstaGetInfo
 Can shut the system down or lock the screen:
  • ExitWindowsEx
Suspicious The file contains overlay data. 7165846 bytes of data starting at offset 0xe7600.
The overlay data has an entropy of 7.99997 and is possibly compressed or encrypted.
Overlay data amounts for 88.3194% of the executable.
Suspicious VirusTotal score: 2/70 (Scanned on 2026-08-11 11:00:03) Fortinet: W32/PossibleThreat
Paloalto: generic.ml

Hashes

MD5 c564358bd783bc9b2c91e9930c8b0f4d 🔍
SHA1 3202cee2c977491248ea9b3cd3f1e796e6063edf 🔍
SHA256 d1c14a19ab0cd446a1e4b8ec1c6bfcedc435a9797ed76d9f0d0b0aa1b9ae2ba3 🔍
SHA3 242adb9409ea6c77e9fc265323eeade35ed91599bd374bc0008c0027f5d7747c 🔍
SSDeep 196608:ecvnSjQK8LhKn1mbdIJSHDxnSP6fzsP4oR+JP5A54:eYnSokcbdIWVglw254 🔍
Imports Hash 6e866dd3680f09cc92057c740f13b295 🔍

DOS Header

e_magic MZ
e_cblp 0x50
e_cp 0x2
e_crlc 0
e_cparhdr 0x4
e_minalloc 0xf
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0x1a
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 10
TimeDateStamp 2021-Jun-03 08:09:11
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0xb5000
SizeOfInitializedData 0x32200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000B5EEC (Section: .itext)
BaseOfCode 0x1000
BaseOfData 0xb7000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.1
ImageVersion 6.0
SubsystemVersion 6.1
Win32VersionValue 0
SizeOfImage 0xf5000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x4000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 ad6e46e3a3acdb533eb6a077f6d065af 🔍
SHA1 595ad8ee618b5410e614c2425157fa1a449ec611 🔍
SHA256 b68ad9b352910f95e5496032eea7e00678c3b2f6b0923eb88a6975ef52daf459 🔍
SHA3 d429adc81dde656f7c817a2a18bf6ee935b5060b21035f46be2ef7a3874300f4 🔍
VirtualSize 0xb361c
VirtualAddress 0x1000
SizeOfRawData 0xb3800
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.35606

.itext

MD5 d40fc822339d01f2abcc5493ac101c94 🔍
SHA1 83d77b6dc9d041cc5db064da4cae1e287a80b9e6 🔍
SHA256 b28af33bc028474586bb62da7d4991ddd6f898df7719edb7b2dfce3d0ea1d8c6 🔍
SHA3 6eecf46432a2ab180672b1520726ceff497a830f3496b897281e562ec7bfbea1 🔍
VirtualSize 0x1688
VirtualAddress 0xb5000
SizeOfRawData 0x1800
PointerToRawData 0xb3c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.97275

.data

MD5 4c195d5591f6d61265df08a3733de3a2 🔍
SHA1 38d782fd98f596f5bf4963b930f946cf7fc96162 🔍
SHA256 94346a0e38b0c2ccd03cf9429d1c1bce2562c29110bb29a9b0befc6923618146 🔍
SHA3 16cae5290d5181112eba257d8482ce9139cc964513de88392304537c8b06db7f 🔍
VirtualSize 0x37a4
VirtualAddress 0xb7000
SizeOfRawData 0x3800
PointerToRawData 0xb5400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.0444

.bss

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x6de8
VirtualAddress 0xbb000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata

MD5 a73d686f1e8b9bb06ec767721135e397 🔍
SHA1 42030ea2f06f38d5495913b418e993992e512417 🔍
SHA256 a0936d30641746144eae91e37e8cbed42dc9b3ee3e5fdda8e45ad356180f0461 🔍
SHA3 d35596862294c6059e0a9c90e44a456536abf129960b01e064a5df5107363073 🔍
VirtualSize 0xf36
VirtualAddress 0xc2000
SizeOfRawData 0x1000
PointerToRawData 0xb8c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.8987

.didata

MD5 41b8ce23dd243d14beebc71771885c89 🔍
SHA1 051c6d0acda9716869fbc453e27230d2b36d9e8f 🔍
SHA256 bc86365a38e3c8472413f1656a28b04703d8c77cc50c0187ddf9d0afbb1f9bf7 🔍
SHA3 0b4870f5240ae689b070401b42bb9f9773244ca562c53afe8187bbc59a4a3831 🔍
VirtualSize 0x1a4
VirtualAddress 0xc3000
SizeOfRawData 0x200
PointerToRawData 0xb9c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.75636

.edata

MD5 37c1a5c63717831863e018c0f51dabb7 🔍
SHA1 8aab4ebcf9c4a3faf3fc872d96709460d6bf6378 🔍
SHA256 d975b12871fc3f217b71bb314e5e9ea6340b66ece9e26a0c9cbd46de22368941 🔍
SHA3 3b7e6c35b0ca8ecdf51cd0b1c11c035bf07f4439d1cf5785a593edc437b11ae8 🔍
VirtualSize 0x9a
VirtualAddress 0xc4000
SizeOfRawData 0x200
PointerToRawData 0xb9e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.87222

.tls

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x18
VirtualAddress 0xc5000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata

MD5 8f2f090acd9622c88a6a852e72f94e96 🔍
SHA1 735078338d2c5f1b3f162ce296611076a9ddcf02 🔍
SHA256 61da25d2beb88b55ef629fab530d506a37b56cfabfa95916c6c5091595d936e4 🔍
SHA3 4262d6da74e50fbc7d6e60433db7c15d7d5e5687da986212f46c20e57086ed57 🔍
VirtualSize 0x5d
VirtualAddress 0xc6000
SizeOfRawData 0x200
PointerToRawData 0xba000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.38389

.rsrc

MD5 41935a90682efb7a02ab155676f9b8a1 🔍
SHA1 b502147e803ee3ab624fd78bd9d92c5c2cb1747f 🔍
SHA256 a812c9eebaff79609e2c511798e40e57179ddb6533269b3cfa9f9cae4a31a2be 🔍
SHA3 638cf2fe2af9d8e22e4f58a488f7fe2bac1aa946a063c59af39f1a934a0f016e 🔍
VirtualSize 0x2d218
VirtualAddress 0xc7000
SizeOfRawData 0x2d400
PointerToRawData 0xba200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.03515

Imports

kernel32.dll GetACP
GetExitCodeProcess
LocalFree
CloseHandle
SizeofResource
VirtualProtect
VirtualFree
GetFullPathNameW
ExitProcess
HeapAlloc
GetCPInfoExW
RtlUnwind
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
GetVersion
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GetStartupInfoW
GetFileAttributesW
InitializeCriticalSection
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetSystemInfo
GetCommandLineW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
GetEnvironmentVariableW
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale
comctl32.dll InitCommonControls
version.dll GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
user32.dll CreateWindowExW
TranslateMessage
CharLowerBuffW
CallWindowProcW
CharUpperW
PeekMessageW
GetSystemMetrics
SetWindowLongW
MessageBoxW
DestroyWindow
CharUpperBuffW
CharNextW
MsgWaitForMultipleObjects
LoadStringW
ExitWindowsEx
DispatchMessageW
oleaut32.dll SysAllocStringLen
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
VariantClear
SysFreeString
SysReAllocStringLen
VariantChangeType
SafeArrayCreate
netapi32.dll NetWkstaGetInfo
NetApiBufferFree
advapi32.dll RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
OpenProcessToken
RegOpenKeyExW
kernel32.dll (delay-loaded) GetACP
GetExitCodeProcess
LocalFree
CloseHandle
SizeofResource
VirtualProtect
VirtualFree
GetFullPathNameW
ExitProcess
HeapAlloc
GetCPInfoExW
RtlUnwind
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
GetVersion
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GetStartupInfoW
GetFileAttributesW
InitializeCriticalSection
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetSystemInfo
GetCommandLineW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
GetEnvironmentVariableW
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale

Delayed Imports

Attributes 0x1
Name kernel32.dll
ModuleHandle 0xc3080
DelayImportAddressTable 0xc3090
DelayImportNameTable 0xc30b4
BoundDelayImportTable 0xc30d8
UnloadDelayImportTable 0xc30f0
TimeStamp 1970-Jan-01 00:00:00

dbkFCallWrapperAddr

Ordinal 1
Address 0xbe63c

__dbk_fcall_wrapper

Ordinal 2
Address 0xd0a0

TMethodImplementationIntercept

Ordinal 3
Address 0x54060

1

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x2506
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.8964
Detected Filetype PNG graphic file
MD5 cc66004233171d3cdd99945f6e9fc6ee 🔍
SHA1 0000237886147015a1b98e7244d7faaf84de2d83 🔍
SHA256 e4387ad8ca7c9547bf3e0f4c8cccb361026d55c98947d4d15721a9dc8b5cccdb 🔍
SHA3 07b4f17d803a182b6a07da551b63703254f3b4773357f35b6961b48b4b1ceb52 🔍

2

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.00615
MD5 0984cb8ca38fa1fcac29ad8c6b2499f8 🔍
SHA1 911feb09baa8c5154b24b74e26befbc602579a0f 🔍
SHA256 2e7ec816854f941e1d47950aceea7985b37504bbbb1f67241097b0121a23dfc7 🔍
SHA3 d888e9d06d1b8c239e99fe2ae8d4e508ddd7cc1d81dc6e5a4cd5ea321df85ccc 🔍

3

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.64417
MD5 da09021d621ca78bbcefd106044b5cbd 🔍
SHA1 51407b2533ffdadd1d6e091e0e4567fdb56ef17a 🔍
SHA256 e7ba78fdf298dc5ec5dcaa72449378927345ec937f0629ed93c5b16087d2e825 🔍
SHA3 939213410733cea2bb91a20da50e4d9979ee7166bc202e0ef1b3ed4696f39498 🔍

4

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x5488
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.60887
MD5 d491ba427e5156a3bd65075c3fe5d7e1 🔍
SHA1 3c975193d8dbaa59ba8ce7f501b90038a66ca629 🔍
SHA256 850c0a084e2e06ac15cf069478b6a97d429228e8b8a2e2964beb887f2f130ca3 🔍
SHA3 012fc6028a85e93cf99eb9b47fe377c2da42908064c26cbd3e0a089a30d16bd3 🔍

5

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.33572
MD5 81f10de1b5884703f2f5201af07d14c8 🔍
SHA1 ca5b5b6f32874a99be1d236f2060aa26ae3820e2 🔍
SHA256 e1ab38f2cc7801e1c39f78fbf50ce30de7ff2b44dbb1ec3e7d0b8728747d296d 🔍
SHA3 2f4a1781e63b6210b6f7d4ed4247c49dee21f3b948c8ce41bdb5a51cfcb442cc 🔍

6

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.84865
MD5 95ab9a75f43e7dbe54ec5e7bdf76fe04 🔍
SHA1 4e88730d0154c9f65741410e738241b1fe80cab2 🔍
SHA256 5df67ab650b2220ecb6796e927be8650cbcec4cada76424077fca628e5356818 🔍
SHA3 a28cd1ee4e842b32434ccd1baa30395334e85e0da72d03f625504b396216de0b 🔍

7

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.79056
MD5 0ab158226904154a8c7c4156bf992f32 🔍
SHA1 2552a7def1b0de822aad5fc11871d34f5c957f63 🔍
SHA256 68130ec235f43f2385f5a936ed17f810f7b1643e648eb76829f259a028f1c338 🔍
SHA3 6b1223d17ccd545cd043dd223fdf4179a7cf3745ff8f6a018378f63286033c62 🔍

8

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.26834
MD5 4b9911772fe1a34a387224a5dd49ab0b 🔍
SHA1 ac8ea2d2c02aa037741a96bd48c9f94c77aa7bca 🔍
SHA256 dd7d7f179d5942396343ddd06b28e3c5e0988653561510f881873375eda08a39 🔍
SHA3 95ba3bf7ca32b66a98cf3c6fa958ba2e53a1236827456bc92279a7f9c507f814 🔍

9

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.20063
MD5 736529ad8c2b7cb3d3f27cf3ec26f47c 🔍
SHA1 8ac9505efc1021c710585819332cbd027adc5f4c 🔍
SHA256 c5eac15555a26a9cb7a9708d3715f2443d9942a71e3102d44ddda74489d3037f 🔍
SHA3 6293f2455b519b928f4b83852ba25a56487f5371c657798326a99e4ab110e9ee 🔍

4086

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x360
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.16547
MD5 98da6167be9a4eb3be8bab5877938ff2 🔍
SHA1 95641a365d88f070bcbd921d99bc1c034e92340e 🔍
SHA256 bb650ee3d30d21f22fc7853936b06be7cbfd05b4d88ed105d3e53774dae7f21f 🔍
SHA3 a9d9128c3f3c8d4c2c598c48390a012af7847fd0aadc64df63e86a25983aa7ad 🔍

4087

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x260
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.40938
MD5 21cba6c9d478ce13ad53587cdd7f21f8 🔍
SHA1 ed16991f4f735f8258ff195bed5f1641d1405cc9 🔍
SHA256 0852b5fce0c5b7ff53fe4c4163983daf8a2057d5481911c24253f330bfd65d9a 🔍
SHA3 434f4417d656f3e62678eccd5c3445487e21059d8fc5084f62fc19899ef6d1dd 🔍

4088

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x45c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.31153
MD5 09208f24be8c3f3b08c323e9836db5e6 🔍
SHA1 054aa93663138220373081b25672499d38cb2eaf 🔍
SHA256 4be11ded6c924c3181c0b2a17cbf6f017fbf2b074adadaae213a330711e22cd1 🔍
SHA3 9e72f2e022b1768e8723c2c93ceb39a4909564dee4d43bb3537ddd9ae9e381f3 🔍

4089

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x40c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33977
MD5 aeb11111a0334d20d978e15c3eb3ebab 🔍
SHA1 19969a1f68d497f0114538352da478b41c3d2060 🔍
SHA256 99b7194bf59ac43cbbdc441ab7ca14ab0330449accd33730281da09bb96bcbe3 🔍
SHA3 b734c35baae6e8fb009f07d3a20892bde53b7db5335b1327e1118e89d657251b 🔍

4090

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2d4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.36723
MD5 d2467f70311fc072d9202909bdfa9fcb 🔍
SHA1 c8abb69fb38434daf6811309cc88e9d0df65e2cd 🔍
SHA256 51209c8034cd5c2127a7b877a3280699d6bad965bcc102e830420c836f535c97 🔍
SHA3 4386b5d28f8adc0eccd1a396c2d0689b85cd7cfcf727c8d08a87940c92bd64c7 🔍

4091

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xb8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33978
MD5 e8e4995b464abd85d77008d3750ca7af 🔍
SHA1 2c39cf9c2c1cfab48077cda2d4d6312fdb53c54b 🔍
SHA256 22296669c2c50d3fdfee9de9f7730d0a5cc498b7cc54cd2aa8ded74d7e69f654 🔍
SHA3 5480674ca53405ca327424ca774da73700d535e5ca7d51363d86511e5268bb0c 🔍

4092

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x9c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.15425
MD5 d0969cc9a96275d54a109de740708a5a 🔍
SHA1 2c365c0341faf71f810a39c69859a7eb5bc0de8d 🔍
SHA256 3c45c82b39b3c90c9c22342a8f6be98073faf1dcd26dbc578b3a6fa9a499cb46 🔍
SHA3 99f949ba47f1c5cd7b313b0b89e2b14f238be4bd78199a590c1f257e4f562967 🔍

4093

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x374
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.31895
MD5 4ac29bb5f7361e85771807112cd4ec93 🔍
SHA1 b164bf0882b60c0d7d4643495a2c1db5a20a1343 🔍
SHA256 2e6d8102640132ccabd2fa3c3a61c77c2b41a80d7f60013cf7149819c2b5c9d2 🔍
SHA3 ee5ab8846732cb786d250fc1780293072aff157ae61cf7f671eb4e6e29018bf7 🔍

4094

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x398
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.28786
MD5 110abe16232608d8671eaca8ee324f45 🔍
SHA1 30704560832bafa440df1fd20693653c2a30f815 🔍
SHA256 b33f156b0a8ce96c7182dfb6afa9f6a7020433a6e16ca21f6092ba03695bdd12 🔍
SHA3 0179804f22369dabd55b8e4ca79a33645191c197c0474cabc4e13546c7e7fcd6 🔍

4095

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x368
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33385
MD5 1c9252919f0a0d2072f3fe0565f0b443 🔍
SHA1 dc6002a243c7567105aef957d8b01142df42b3d2 🔍
SHA256 734b698aafc2cfabfd0750c88498022d650f6ee025250dc8795de56a6e122445 🔍
SHA3 4d0c5d27e1b222f09e17dc6fa9ec0bc174b3e58bba30ce90cb89b3594622e627 🔍

4096

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2a4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.2935
MD5 d1efb0d972603f09c3a2a866a8b36d48 🔍
SHA1 64a194ea368bb16ffac3e7a4ca84b3c00bf15920 🔍
SHA256 351e7d3c756242cde2e4a2bef16d636d5e073e0cf3e9cfa2b1da1efccd7806ae 🔍
SHA3 545cc79af077359ed49f0ba5cdc74b58bef1f6fd71725c976ad9c892dc9a0b56 🔍

DVCLAL

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x10
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4
MD5 a40263c75fde7440b1086b7da9c51fc2 🔍
SHA1 139a84f87110fb5cb16a386adade21f30cae98b0 🔍
SHA256 e7dbe99baa5c1045cdf7004edb037018b2e0f639a5edcf800ec4514d5c8e35b5 🔍
SHA3 d3a734fa7d36868d301f9569de92e1bfc551e4b5cf6d7c59eace8d0a554093c0 🔍

PACKAGEINFO

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2c4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.20462
MD5 def52a5b1e8bba58fe020b2c959f5c4f 🔍
SHA1 f9e4dd288cf9c760941cadb475675c52e660a4e3 🔍
SHA256 19151c084fcd30aed2f27deed3ec77351f27a94fd9618da56258ea03bbcbc7f3 🔍
SHA3 b618636930a1e8d8e18593541407308cd9e02d95555415c499c3a292b4693cc4 🔍

11111

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.52263
MD5 0a00349cc21d9127a9ad82420b20f48e 🔍
SHA1 0221c4921dab5997ac967341487ef44cbfc4dd0e 🔍
SHA256 42737a8a8e0dee937a6166e3e170ca9fa1a05e00069e9b55d8f03fba0ca5f2d7 🔍
SHA3 45386a93dd25738fb0abbb77a5f675f9fe1287ac491424c9a8fc6b73b07c671b 🔍

MAINICON

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.00435
Detected Filetype Icon file
MD5 449d83554d0ba19e39c2960ae730dd1e 🔍
SHA1 7ff324e41ca0a0758d6ebd164d41fec98cf630aa 🔍
SHA256 c6f58dd63784a97c701e9ddff38c1316086b15578bc84ea2d2a8f6190abfd229 🔍
SHA3 fdc228f6431fc2e0b68517959a3311b861f4cfecf5161056f0d9657e046a4d68 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage Latin 1 / Western European
Size 0x584
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.52447
MD5 8c945e09cca78aa14dd118cc5ccac57a 🔍
SHA1 f0340f9167052d456bdc14d34b8f9dac97054a37 🔍
SHA256 4e26b1d04c135a95c6942ec3df47aa06ff204ace3d45eb4be6a4f168b04177ff 🔍
SHA3 c8f86f17972716059c7a5ee21134f7fae11232697b70e66f1fe835e1979a3b9a 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x726
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.18295
MD5 efcb7ee0e34bc336adbfd936301ef6cb 🔍
SHA1 7d9455ab6d3830bc65674200e0cda18795024b26 🔍
SHA256 3d9f9ce22c9c99a6d708affcc81bc3c3dc6d057c50e37520c68a8866ed5e97fa 🔍
SHA3 bf016d9e5e2687e6f5720550b9320704ba040982d3e070e52b368be9338ed223 🔍

String Table contents

Windows 8.1
Windows 10
Observer is not supported
Cannot have multiple single cast observers added to the observers collection
The object does not implement the observer interface
No single cast observer with ID %d was added to the observer collection
No multi cast observer with ID %d was added to the observer collection
Must wait on at least one event
Cannot call BeginInvoke on a TComponent in the process of destruction
%s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s)
32-bit Edition
64-bit Edition
Windows
Windows Vista
Windows Server 2008
Windows 7
Windows Server 2008 R2
Windows 2000
Windows XP
Windows Server 2003
Windows Server 2003 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows 8
Property is read-only
%s.Seek not implemented
Property %s does not exist
Stream write error
Thread creation error: %s
Thread Error: %s (%d)
Cannot terminate an externally created thread
Cannot wait for an externally created thread
Cannot call Start on a running or suspended thread
Argument out of range
Duplicates not allowed
Insufficient RTTI available to support this operation
Parameter count mismatch
Type '%s' is not declared in the interface section of a unit
VAR and OUT arguments must match parameter type exactly
%s (Version %d.%d, Build %d, %5:s)
Cannot assign a %s to a %s
CheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
List does not allow duplicates ($0%x)
A component named %s already exists
''%s'' is not a valid component name
Invalid property value
Invalid property path
Invalid property value
List capacity out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d)
Out of memory while expanding memory stream
%s has not been registered as a COM class
Error reading %s%s%s: %s
Stream read error
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
Invalid source array
Invalid destination array
Character index out of bounds (%d)
Start index out of bounds (%d)
Invalid count (%d)
Invalid destination index (%d)
Invalid code page
No mapping for the Unicode character exists in the target multi-byte code page
Invalid StringBaseIndex
Ancestor for '%s' not found
May
June
July
August
September
October
November
December
Sun
Mon
Tue
Wed
Thu
Fri
Sat
Sunday
Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
Dec
January
February
March
April
Invalid variant type
Operation not supported
Unexpected variant error
External exception %x
Assertion failed
Interface not supported
Exception in safecall method
Object lock not owned
Monitor support function not initialized
Feature not implemented
Method called on disposed object
%s (%s, line %d)
Abstract Error
Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
%s%s
A call to an OS function failed
Variant method calls not supported
Read
Write
Execution
Invalid access
Error creating variant or safe array
Variant or safe array index out of bounds
Variant or safe array is locked
Invalid variant type conversion
Invalid variant operation
Invalid NULL variant operation
Invalid variant operation (%s%.8x)
%s
Could not convert variant of type (%s) into type (%s)
Overflow while converting variant of type (%s) into type (%s)
Variant overflow
Invalid argument
Invalid floating point operation
Floating point division by zero
Floating point overflow
Floating point underflow
Invalid pointer operation
Invalid class typecast
Access violation at address %p. %s of address %p
Access violation
Stack overflow
Control-C hit
Privileged instruction
Operation aborted
Exception %s in module %s at %p.
%s%s
Application Error
Format '%s' invalid or incompatible with argument
No argument for format '%s'
'%s' is not a valid integer value
'%d.%d' is not a valid timestamp
Invalid argument to time encode
Invalid argument to date encode
Out of memory
I/O error %d
File not found
Invalid filename
Too many open files
File access denied
Read beyond end of file
Disk full
Invalid numeric input
Division by zero
Range check error
Integer overflow

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 0.0.0.0
ProductVersion 0.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments This installation was built with Inno Setup.
CompanyName Shani Sinojiya
FileDescription Calculator Setup
FileVersion (#2)
LegalCopyright
OriginalFileName
ProductName Calculator
ProductVersion (#2) 2.0.0.1
Resource LangID English - United States

TLS Callbacks

StartAddressOfRawData 0x4c5000
EndAddressOfRawData 0x4c5018
AddressOfIndex 0x4b7c14
AddressOfCallbacks 0x4c6010
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks (EMPTY)

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0! [*] Warning: Section .tls has a size of 0!
Leave a comment

No comments yet.