filenamesetupov.exe
size722944 (0xb0800)
md537286ce9a260cd2dd66cec3ac566342a
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x6afd228d
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x818e
Magic0x10b
LinkerVersion2.25
SizeOfCode0x5800
SizeOfInitializedData0x4ee5
SizeOfUninitializedData0
AddressOfEntryPoint0x10000
BaseOfCode0x10000
BaseOfData0x20000
ImageBase0x400000
SectionAlignment0x10000
FileAlignment0x200
OperatingSystemVersion1.0
ImageVersion0.0
SubsystemVersion3.10
Reserved10
SizeOfImage0x70000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Borland C++

Sections

namevavsizeraw sizeflags
CODE0x100000x60000x5800R-X CODE
DATA0x200000x20000x1200RW- IDATA
.idata0x300000x10000x800RW- IDATA
.edata0x400000x10000x200R-- IDATA
.reloc0x500000x10000x600R-- IDATA SHARED
.rsrc0x600000x10000x200R-- IDATA SHARED

Data Directory

typevasize
EXPORT0x400000x77
IMPORT0x300000x7a0
RESOURCE0x600000x200
EXCEPTION00
SECURITY00
BASERELOC0x500000x4dc
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
DIALOG#11700
module_namehintordfunction_name
KERNEL32.dlllstrlenA
KERNEL32.dlllstrcpyA
KERNEL32.dllGetVersion
KERNEL32.dllGetWindowsDirectoryA
KERNEL32.dllCreateProcessA
KERNEL32.dllDeleteFileA
KERNEL32.dllGetCurrentThreadId
KERNEL32.dllGlobalHandle
KERNEL32.dllGetDiskFreeSpaceA
KERNEL32.dllFindNextFileA
KERNEL32.dllFreeLibrary
KERNEL32.dllGetCommandLineA
KERNEL32.dllGetCurrentDirectoryA
KERNEL32.dllGetCurrentProcess
KERNEL32.dllCloseHandle
KERNEL32.dllGetDriveTypeA
KERNEL32.dllGlobalUnlock
KERNEL32.dllGetEnvironmentVariableA
KERNEL32.dllRaiseException
KERNEL32.dllGlobalAlloc
KERNEL32.dllGetFileSize
KERNEL32.dllGetFileType
KERNEL32.dllGetFullPathNameA
KERNEL32.dllGetLastError
KERNEL32.dllGetModuleFileNameA
KERNEL32.dllGetModuleHandleA
KERNEL32.dllGetPrivateProfileIntA
KERNEL32.dllGetProcAddress
KERNEL32.dllGetStartupInfoA
KERNEL32.dllGetStdHandle
KERNEL32.dllGetTickCount
KERNEL32.dllExitProcess
KERNEL32.dllCreateDirectoryA
KERNEL32.dllOpenFile
KERNEL32.dllFindClose
KERNEL32.dllLoadLibraryA
KERNEL32.dllGetEnvironmentStrings
KERNEL32.dllGlobalLock
KERNEL32.dllFindFirstFileA
KERNEL32.dllGlobalFree
KERNEL32.dllGetFileAttributesA
KERNEL32.dllRemoveDirectoryA
KERNEL32.dllRtlUnwind
KERNEL32.dllSetConsoleCtrlHandler
KERNEL32.dllSetCurrentDirectoryA
KERNEL32.dllSetEnvironmentVariableA
KERNEL32.dllSetErrorMode
KERNEL32.dllSetFilePointer
KERNEL32.dllSetHandleCount
KERNEL32.dllUnhandledExceptionFilter
KERNEL32.dllVirtualAlloc
KERNEL32.dllVirtualFree
KERNEL32.dllWaitForSingleObject
KERNEL32.dllWinExec
KERNEL32.dllWriteFile
KERNEL32.dllWritePrivateProfileStringA
KERNEL32.dll_hread
KERNEL32.dll_lclose
KERNEL32.dll_llseek
KERNEL32.dll_lread
KERNEL32.dll_lwrite
KERNEL32.dlllstrcatA
ADVAPI32.dllOpenProcessToken
ADVAPI32.dllAdjustTokenPrivileges
ADVAPI32.dllLookupPrivilegeValueA
USER32.dllwsprintfA
USER32.dllTranslateMessage
USER32.dllShowWindow
USER32.dllSetDlgItemTextA
USER32.dllSendMessageA
USER32.dllMoveWindow
USER32.dllMessageBoxA
USER32.dllIsDialogMessageA
USER32.dllGetWindowRect
USER32.dllGetDlgItem
USER32.dllGetDesktopWindow
USER32.dllExitWindowsEx
USER32.dllPeekMessageA
USER32.dllEnumThreadWindows
USER32.dllDispatchMessageA
USER32.dllDestroyWindow
USER32.dllDestroyIcon
USER32.dllCreateDialogParamA
SHELL32.DLLExtractIconA
ordentry_vafunction_name
10x1006e__GetExceptDLLinfo
20x10d48@dlgprocmsgdlg$qp6HWND__uiuil
module_nameinstw.exe
flags0
timestamp0
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x40030
Functions(2)0x40028
NameOrdinals(2)0x40038
offsetsizetypecomment
033280EXE11/18/2026 03:59:09#
15c115HTM#
865230208DLL03/03/2037 14:59:17#
fc52658350BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 722944 bytes (706 KiB)


--
Type = gzip
ERRORS:
There are data after the end of archive
Offset = 64626
Physical Size = 142691
Tail Size = 515627
Headers Size = 10
Streams = 2

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....       319632       142691  data~
------------------- ----- ------------ ------------  ------------------------
                                319632       142691  1 files

Warnings: 1

Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK