35c2e80bf22a1160b5a9d3ffd0c3514fea6bec4d6290e9414ae3d932472dfac4
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Jun-22 07:17:08 |
| Detected languages |
English - United States
|
| CompanyName | Just Great Software |
| FileDescription | PowerGREP 5 |
| FileVersion | 5.4.1 |
| InternalName | Setup |
| LegalCopyright | Copyright © 2002-2026 Jan Goyvaerts |
| LegalTrademarks | |
| OriginalFilename | |
| ProductName | DeployMaster |
| ProductVersion | 5.4.1 |
| Comments | This installation package is built with Just Great Software DeployMaster. Please visit http://www.DeployMaster.com for more information. |
Plugin Output
| Info | Matching compiler(s): | Borland Delphi v6.0 - v7.0 |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Info | Cryptographic algorithms detected in the binary: | Uses constants related to CRC32 |
| Info | The PE contains common functions which appear in legitimate applications. |
Can access the registry:
|
| Info | The PE is digitally signed. |
Signer: Just Great Software Co. Ltd.
Issuer: Certum Code Signing 2021 CA |
| Safe | VirusTotal score: 0/69 (Scanned on 2026-07-16 23:29:51) | All the AVs think this file is safe. |
Hashes
| MD5 | 4dd49c424398b15d401037308cde440f 🔍 |
|---|---|
| SHA1 | d36ce7228418a05b7388b9f25c7940639ec0268e 🔍 |
| SHA256 | 35c2e80bf22a1160b5a9d3ffd0c3514fea6bec4d6290e9414ae3d932472dfac4 🔍 |
| SHA3 | e069d7846da3eb3d5cbdbcb158a59a28912093bca5ecfc68c92897451f95c70f 🔍 |
| SSDeep | 393216:rU/ysugMOxZPpGClMMtHbecQWNuCO1G1wzXz2o1JAtlGVZ4LuWtOgj8hm/neR:nzOnpkMt7enWOOwbz2o3G4WtObM2R 🔍 |
| Imports Hash | b2d0884286859b960a8b006f9e650e97 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x50 |
| e_cp | 0x2 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0xf |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0x1a |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x100 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 8 |
| TimeDateStamp | 2026-Jun-22 07:17:08 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 2.0 |
| SizeOfCode | 0x9200 |
| SizeOfInitializedData | 0x2b400 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0000A0C4 (Section: .itext) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0xb000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 5.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x3c000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x168a148 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x4000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | ebd5f1dad7260a0bc88c1c2fb11bfe8d 🔍 |
|---|---|
| SHA1 | 5ac2cffa78214602fdece83358dc6ef68e27729b 🔍 |
| SHA256 | 22f91bba817b1ec4ae6f1bb2994883a9c9fe00242c7261ee7a1f4bdadcec5115 🔍 |
| SHA3 | 0fbfc2d7567d3e3caa03da5a6d2fb23273b27b4b5789b1477b42e1c8e9d42784 🔍 |
| VirtualSize | 0x8fd4 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x9000 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.41079 |
.itext
| MD5 | 2e99d8f106a4fb7343f96533e708cb0e 🔍 |
|---|---|
| SHA1 | 0ddde0ce0c5720804f118013f420aa018484e85f 🔍 |
| SHA256 | c623a7b82dfa26117952d04107bc0aaf0bf57028eb7bf110b84d3e7d7a137d93 🔍 |
| SHA3 | 5b59682b39efaa221dd298fd4a095e53bb8ebbb677c9777ad3af9e05e3a02202 🔍 |
| VirtualSize | 0xe0 |
| VirtualAddress | 0xa000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x9400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 2.94045 |
.data
| MD5 | 9c53186e41a90edccb8d304299ea33d0 🔍 |
|---|---|
| SHA1 | 66470ec061c12ef3442da92187aaded615fef144 🔍 |
| SHA256 | 97354a0f6951b3395ce7f2e777a81d6ca759ee12fe19bda860d6d44f4b242ac6 🔍 |
| SHA3 | d1155df225d7966f0719659a9dd131d9fde8413cc69b072e226d8be136206d20 🔍 |
| VirtualSize | 0xbd0 |
| VirtualAddress | 0xb000 |
| SizeOfRawData | 0xc00 |
| PointerToRawData | 0x9600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 4.16103 |
.bss
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x2bac |
| VirtualAddress | 0xc000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0xa200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
.idata
| MD5 | ad27fd79e82508cc76970cfdcbbf95e5 🔍 |
|---|---|
| SHA1 | bc60109980a9fd0614cf5161d99dec50c538e135 🔍 |
| SHA256 | 2e3cc34f702c911159a210297b61586f27b27b62f7833a5840ce0b1a3e62ebb7 🔍 |
| SHA3 | 919598b8619bcc9e3ada0db95cc048cb332ef400460c13f049769471991dd713 🔍 |
| VirtualSize | 0x77e |
| VirtualAddress | 0xf000 |
| SizeOfRawData | 0x800 |
| PointerToRawData | 0xa200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 4.27566 |
.tls
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x8 |
| VirtualAddress | 0x10000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0xaa00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
.rdata
| MD5 | dfbfbc337f639ccc43cc27bf9bfbde49 🔍 |
|---|---|
| SHA1 | 0887d5e6d2ca203678dac64ffddf820c322b9b61 🔍 |
| SHA256 | e0ba3c1b57af4cdc9ad08ff9442ebaa34a9444d7777245ebfaa94ce58943d203 🔍 |
| SHA3 | c16ac4196504f2423eafe166d53686d81cebf506da00632fe129de4ef40733d5 🔍 |
| VirtualSize | 0x18 |
| VirtualAddress | 0x11000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0xaa00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 0.170146 |
.rsrc
| MD5 | 860059e016eea98cbdd05070f35192f8 🔍 |
|---|---|
| SHA1 | 0eafe830bace21f3a85e2a7da3fbd1a21cbd6263 🔍 |
| SHA256 | 6fbf3b6476dadc704a91a274d07786e7c05b1fa76d630d70d15b2e037632add9 🔍 |
| SHA3 | 79f82755fefacd13593b1faa15b58bec658a8f59ec1e6f8c236e3a45c0f7394e 🔍 |
| VirtualSize | 0x29c9c |
| VirtualAddress | 0x12000 |
| SizeOfRawData | 0x29e00 |
| PointerToRawData | 0xac00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 4.36676 |
Imports
| oleaut32.dll |
SysFreeString
SysReAllocStringLen |
|---|---|
| advapi32.dll |
RegQueryValueExW
RegOpenKeyExW RegCloseKey |
| user32.dll |
GetKeyboardType
MessageBoxA |
| kernel32.dll |
GetACP
Sleep VirtualFree VirtualAlloc GetSystemInfo GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar GetStartupInfoA GetModuleFileNameW GetCommandLineW FreeLibrary ExitProcess WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle CloseHandle |
| kernel32.dll (#2) |
GetACP
Sleep VirtualFree VirtualAlloc GetSystemInfo GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar GetStartupInfoA GetModuleFileNameW GetCommandLineW FreeLibrary ExitProcess WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle CloseHandle |
| user32.dll (#2) |
GetKeyboardType
MessageBoxA |
| mpr.dll |
WNetGetUniversalNameW
|
| kernel32.dll (#3) |
GetACP
Sleep VirtualFree VirtualAlloc GetSystemInfo GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar GetStartupInfoA GetModuleFileNameW GetCommandLineW FreeLibrary ExitProcess WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle CloseHandle |
| advapi32.dll (#2) |
RegQueryValueExW
RegOpenKeyExW RegCloseKey |
| shell32.dll |
ShellExecuteExW
|
| kernel32.dll (#4) |
GetACP
Sleep VirtualFree VirtualAlloc GetSystemInfo GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar GetStartupInfoA GetModuleFileNameW GetCommandLineW FreeLibrary ExitProcess WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle CloseHandle |
Delayed Imports
1
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x468 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.23443 |
| MD5 | 39adb34b615e9cff27679e8eed0d14a2 🔍 |
| SHA1 | b20fae585e2fbbc760802a36ae33f68e2cb13f33 🔍 |
| SHA256 | 86346d35620882fa873608421d08e89ea88ae9e0901a8a7fa4c2b727274464f4 🔍 |
| SHA3 | b7d70b6be6a313d7fdec56c45de59e518ade504cb9ffe76ce157f965945cc968 🔍 |
2
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x6b8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.40435 |
| MD5 | 04d46160bb515826bb7774d4f506ad68 🔍 |
| SHA1 | d0e36ceb2e5054aa3f33316bd50bf01fb2aab507 🔍 |
| SHA256 | ae9363cf09a7fd4812ff6b39b85ada1346313e7fe030b341b7cc2f1deb87ba40 🔍 |
| SHA3 | 618896507020e8815b6089bf359e1009acb360680245f431c4918352b937ba9b 🔍 |
3
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x988 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.11815 |
| MD5 | 60787c703340fdf1fae3998752dc2510 🔍 |
| SHA1 | 89c3fb184120911e0a7becb643f8cce128bdcd1b 🔍 |
| SHA256 | 6dac1ea0150150e5ac7de38c34bd79162a613e8835b9b19d7f5e1b70bd652185 🔍 |
| SHA3 | 6a619ff577e672cc10c56b1e28086563e011e4624e54d8a1890acbbfd61cd49a 🔍 |
4
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0xcd8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.21682 |
| MD5 | d7467a4c496aac41b52ee2bf7034c335 🔍 |
| SHA1 | 1c8785f3837a681da4bf54a9863c21ffdb522e8c 🔍 |
| SHA256 | a4e422e085bf173e8cf34154bd847071e17067eeb0afcd1fd5af87625c374dcb 🔍 |
| SHA3 | c95b35873fdaaec3b9d92cbae82597aae06983c17b6ae0e8529c4e0b7e0830aa 🔍 |
5
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x10a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.90427 |
| MD5 | 60a24f1a96ae9e7bb1a4bc2496cdce8d 🔍 |
| SHA1 | 30b63af2bdd3638045cc8b7c8de63e6c10c52ecd 🔍 |
| SHA256 | d813c188aefda81944201a3ac5b3858c3db00190e0b7ffdadd73dfc65b2d603d 🔍 |
| SHA3 | 9c7a8f1a8b37927014612c383c4e79ea5dd4424c6dfe9a664336115b4c611ccb 🔍 |
6
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x1588 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.95965 |
| MD5 | fc52b273d4ab23fc65a176cc07c597fa 🔍 |
| SHA1 | 62aba05f72ffb6fb1ed5eb563d88f2e0e62eb9f4 🔍 |
| SHA256 | e22056b241545916d535e5b52e64bd86c918247ac6674b876ddc4f412e21b839 🔍 |
| SHA3 | 481701a498c5d8f06d7df156fb561fe0181426e179ad7b8f2516160fdb22aa46 🔍 |
7
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x1a68 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.73813 |
| MD5 | f0e7cbcba0aafa0c78a95fd09c07228d 🔍 |
| SHA1 | c184b0ffd952f585979b8507e77f01bd8d206e6f 🔍 |
| SHA256 | 03153b8916d11e8d3add346df456e2accc126291d53c38258acdb8b2fe5eddcd 🔍 |
| SHA3 | ea155606143281c7193e312d991c55b2a97f70eaf3c7f3945bf791f7dc33781e 🔍 |
8
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x25a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.72541 |
| MD5 | 6b4d8baedefef831130d5eb4ced7180b 🔍 |
| SHA1 | 6314dd8cf9c790715d1eb199414220fa72752bab 🔍 |
| SHA256 | 4eba2beda5e24e95a5ab3f0335d3131ee06d5902d568c971c83651a925a47327 🔍 |
| SHA3 | 62f121c34de754f2ef04db316c56cbc7309c3bfc34a60e1eeb85f1cfb7a125df 🔍 |
9
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x32e8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.62379 |
| MD5 | f0a112b92c5001c07b8e4bd88f96d727 🔍 |
| SHA1 | 0bd4f23f8162cf43963caa27fc86fae0b8c4eed6 🔍 |
| SHA256 | 7c6b073de0b0e7d82715139f1d67faa6b9b9a15badf3ce510abec562bb070b81 🔍 |
| SHA3 | 1144dbaf88694c5ed6258877a8da3d80023020c4938cadd28edb006ea715620e 🔍 |
10
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x4228 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.55239 |
| MD5 | bc861317ae39d85ad2fd51f2d0641fd2 🔍 |
| SHA1 | 6295c854e028915e677c44f27d07af19271d5d25 🔍 |
| SHA256 | 6d6b3070b979621b9b2878ebf78a8378f6e52127815db6979f56d19a9627956c 🔍 |
| SHA3 | 3c943fa305d297a0e2fde3997ad75543d5f2021115e34d30acbbea64d7c46bce 🔍 |
11
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x5488 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.39614 |
| MD5 | ae629358a78fab8664ca357fd40f7d1c 🔍 |
| SHA1 | 51d65e21cbd3833cba359bcca50e83fb586a2432 🔍 |
| SHA256 | 8530d1c2039a83837f9645cb98ea74b4659238aa8bbbb34b710de192ddca269c 🔍 |
| SHA3 | 5ec94e6c44f126b9d2270b5f986caaf837cb55ce0dcfa7b2ceb6a004f16d1a96 🔍 |
12
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x67e8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.35127 |
| MD5 | dcf56dddf7e111a5c82f9691ea7d051d 🔍 |
| SHA1 | 413466f73e6b710f78985abbd511c420a3e04df4 🔍 |
| SHA256 | 13afec11d057379e8de4d0a5659124e3415bc324657bf80a9933a8b0b43576b4 🔍 |
| SHA3 | 74ba4bb5832f6c38f18841beeca07a68606e229fc1136e85ed5be07ec629e719 🔍 |
13
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x94a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.60747 |
| MD5 | 3b1c3cd7de0fe01cc3e8ab5c5fcab45e 🔍 |
| SHA1 | 96205c415f4ce8e2176e5abd687c2661b3e07d74 🔍 |
| SHA256 | df30b71de6ea065ff1a35533190716cd895d25aa0bd9ef9fcd6535a3febf79d4 🔍 |
| SHA3 | f5c7928ec6769b76aad00bd4e47f3c28996a239ba6f18814a135bfd36c7118a4 🔍 |
14
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x3fcc |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.96182 |
| Detected Filetype | PNG graphic file |
| MD5 | 02911292055b4821b59ccac392afb15a 🔍 |
| SHA1 | a378136ab79db1fa09c86881bf34f7bc49592206 🔍 |
| SHA256 | edc1f7d7826619591e70d3f241f86cd648a39fb28764f486603da9140b3792a4 🔍 |
| SHA3 | dbd1d502f6f0c32fa473809fbf7e40df4e197fe5de15a7894a4c2b1791cb0b5a 🔍 |
DVCLAL
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x10 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4 |
| MD5 | d8090aba7197fbf9c7e2631c750965a8 🔍 |
| SHA1 | 04f73efb0801b18f6984b14cd057fb56519cd31b 🔍 |
| SHA256 | 88d14cc6638af8a0836f6d868dfab60df92907a2d7becaefbbd7e007acb75610 🔍 |
| SHA3 | a5a67ad8166061d38fc75cfb2c227911de631166c6531a6664cd49cfb207e8bb 🔍 |
PACKAGEINFO
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0xcc |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.16681 |
| MD5 | 50484421c3ddcf8310ec6eb471174236 🔍 |
| SHA1 | efd9fbdd4a6da0d5d97c22305305810f880797fb 🔍 |
| SHA256 | 0ca774b43087738668aa9cb09331da909a198093218a7bcd5b37fdfadea1381b 🔍 |
| SHA3 | 08c2ded3eb4720660b0ef2170f4db5be9af045f4e9606ecd0316b65349e061bd 🔍 |
MAINICON
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0xca |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.31234 |
| Detected Filetype | Icon file |
| MD5 | ba6b9e2f6f0b5b5f3985ccb91330f374 🔍 |
| SHA1 | 32502bd86e65c3ddef7199150405a824cb09d929 🔍 |
| SHA256 | 227110f12c98e60a1badca3874e40acf486747d40f9aa61539ac5045dee866a4 🔍 |
| SHA3 | 9889e6f2a1c0a72ecc50e970fd28df4221ce40b1cbed04de6299c165a63fd983 🔍 |
1 (#2)
| Type |
RT_VERSION
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x474 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.36966 |
| MD5 | 6a6e6b5655118bdce188ad9e59401822 🔍 |
| SHA1 | c2ec625e5d2adeea5d32f83df35ab765f7dac04e 🔍 |
| SHA256 | 70f7d26920bed444b3c03c9cc8beaadac2df6209988179da063d1e63b01cbdef 🔍 |
| SHA3 | c3c477be0c4d47aa995e8873f48a4160f45d67b93ecb8d75be34ac04cf458fae 🔍 |
1 (#3)
| Type |
RT_MANIFEST
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x47a |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.41478 |
| MD5 | d6a6409f0bcd22c3d0c6bc4e612ef7fc 🔍 |
| SHA1 | a7f21e47466ed7287bc2af127d60ea38d7866532 🔍 |
| SHA256 | 18a8322325ccbbf0ebb365453d68bdb51b855a7e5f8cfde227c3ef4cd4504e9c 🔍 |
| SHA3 | 09fe7e4d341954df084f5751a0ee169c96feba37b1c83003cd5026f45d789962 🔍 |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 5.4.1.0 |
| ProductVersion | 5.4.1.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | Just Great Software |
| FileDescription | PowerGREP 5 |
| FileVersion (#2) | 5.4.1 |
| InternalName | Setup |
| LegalCopyright | Copyright © 2002-2026 Jan Goyvaerts |
| LegalTrademarks | |
| OriginalFilename | |
| ProductName | DeployMaster |
| ProductVersion (#2) | 5.4.1 |
| Comments | This installation package is built with Just Great Software DeployMaster. Please visit http://www.DeployMaster.com for more information. |
| Resource LangID | English - United States |
|---|
TLS Callbacks
| StartAddressOfRawData | 0x410000 |
|---|---|
| EndAddressOfRawData | 0x410008 |
| AddressOfIndex | 0x40b7a4 |
| AddressOfCallbacks | 0x411010 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_TYPE_REG
|
| Callbacks | (EMPTY) |
Load Configuration
RICH Header
Errors
[*] Warning: Section .bss has a size of 0!
[*] Warning: Section .tls has a size of 0!
Leave a comment
No comments yet.