e03f3b7a7f8e4f0006ae6384a32c9a99cd232c7e18afec23359cd8beb40c2308

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Feb-11 11:40:27
Detected languages English - United States
Comments This installation was built with Inno Setup.
CompanyName
FileDescription Kopetra Ltd.
FileVersion 2.0.40.78
LegalCopyright ©2023 Kopetra Ltd.
OriginalFileName Kopetra Ltd..exe
ProductName Kopetra Ltd.
ProductVersion 2.0.40.78

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 8.0
Info Interesting strings found in the binary: Contains domain names:
  • https://jrsoftware.org
  • jrsoftware.org
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA256
Uses constants related to SHA512
Suspicious The PE is possibly packed. Unusual section name found: .itext
Unusual section name found: .didata
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • LoadLibraryExW
  • GetProcAddress
  • LoadLibraryW
 Functions which can be used for anti-debugging purposes:
  • SwitchToThread
 Can access the registry:
  • RegOpenKeyExW
  • RegQueryValueExW
  • RegCloseKey
 Possibly launches other programs:
  • CreateProcessW
 Can create temporary files:
  • GetTempPathW
  • CreateFileW
 Memory manipulation functions often used by packers:
  • VirtualProtect
  • VirtualAlloc
 Functions related to the privilege level:
  • AdjustTokenPrivileges
  • OpenProcessToken
 Enumerates local disk drives:
  • GetVolumeInformationW
  • GetDriveTypeW
 Can shut the system down or lock the screen:
  • ExitWindowsEx
Info The PE is digitally signed. Signer: KOPETRA LTD
Issuer: Sectigo Public Code Signing CA EV R36
Malicious VirusTotal score: 16/69 (Scanned on 2026-07-07 13:04:29) ALYac: Gen:Variant.Application.Tedy.53423
Arcabit: Trojan.Application.Tedy.DD0AF
BitDefender: Gen:Variant.Application.Tedy.53423
CTX: exe.unknown.tedy
ESET-NOD32: Win32/OfferCore.E potentially unwanted application
Elastic: malicious (moderate confidence)
Emsisoft: Gen:Variant.Application.Tedy.53423 (B)
GData: Gen:Variant.Application.Tedy.53423
K7AntiVirus: Unwanted-Program ( 005ce0ab1 )
K7GW: Unwanted-Program ( 005ce0ab1 )
Malwarebytes: PUP.Optional.BundleInstaller
MicroWorld-eScan: Gen:Variant.Application.Tedy.53423
Microsoft: PUADlManager:Win32/OfferCore
Symantec: ML.Attribute.HighConfidence
VIPRE: Gen:Variant.Application.Tedy.53423
Webroot: Win.Adware.Suspicious

Hashes

MD5 d0d7536e090a24e24105a81ff1931d47
SHA1 e8c106b8c8e44e26b096cd61862acfbafa322361
SHA256 e03f3b7a7f8e4f0006ae6384a32c9a99cd232c7e18afec23359cd8beb40c2308
SHA3 ccda58dc939dee7fea6dc3a5dcaa427d4a08d45a7086853718f664d4ae65ca59
SSDeep 98304:25OqMSrURINHAa2JiCdJ9YKzoFOqQtAwKLoa2rKO2A44D5kmr:6/M2URXNYKzogqQtAwKLD2L2r4jr
Imports Hash f5a88a72e4e02b464d0e185d6666dbe7

DOS Header

e_magic MZ
e_cblp 0x50
e_cp 0x2
e_crlc 0
e_cparhdr 0x4
e_minalloc 0xf
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0x1a
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 11
TimeDateStamp 2026-Feb-11 11:40:27
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0xb1400
SizeOfInitializedData 0x39000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000B1E60 (Section: .itext)
BaseOfCode 0x1000
BaseOfData 0xb3000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.1
ImageVersion 0.0
SubsystemVersion 6.1
Win32VersionValue 0
SizeOfImage 0xf9000
SizeOfHeaders 0x400
Checksum 0x53caa9
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x4000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 1a67260023dfd031935bb7a42ed8c8b4
SHA1 0e58a8e84b1ccf14bea1848aad3276a06e9114a4
SHA256 4d485808295e129e85b6546e0a8973619f9bee700c6b60671d7ecd71b55843cc
SHA3 8bf78a2e012a6b7b97912df0310066f83a16297cfe93978c078792232482a680
VirtualSize 0xaf80c
VirtualAddress 0x1000
SizeOfRawData 0xafa00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.38362

.itext

MD5 cf1af4b55684ed040ce1bbd7f61e0612
SHA1 af6a5c7a136572f0a4266cf3901ed9b2d717383a
SHA256 a01c87dd7c465d0284faabb9f3e7446455e686aed92b7cc650b069f745fdf5e9
SHA3 d1bfb3b0d34747ab0f21c092ca21b1b092c1b8a0d688e9a9514a6c800f0f4435
VirtualSize 0x18cc
VirtualAddress 0xb1000
SizeOfRawData 0x1a00
PointerToRawData 0xafe00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.04225

.data

MD5 572b4d77ead34ac8988afd3cc57c4cef
SHA1 c4a373ded38cc27d8ea87f5dfab12654ba4fe45f
SHA256 5b07276392772754d8d1ecf8aa5c95fb19dfd9ba88a80d70b4feb98d1cab1456
SHA3 1bed3bb20db4ca8559bb3c2cca1803b90cc5ddf2833b75c033f73f071f7d0f9b
VirtualSize 0x3f3c
VirtualAddress 0xb3000
SizeOfRawData 0x4000
PointerToRawData 0xb1800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.18411

.bss

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x734c
VirtualAddress 0xb7000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata

MD5 4a48c59cbaa4d331b6913c45047362ef
SHA1 8c5a78fa720cc93e9b5ab451be530c0c84425c99
SHA256 c2ec0144d84e181582727d377a1c4787841f218cde892c6410b2bf2aa5282e24
SHA3 e7a4d51c328d2ca4a380f8fc51f4ff3459b370e320b1ec364aec5b0fe79d3a42
VirtualSize 0x1068
VirtualAddress 0xbf000
SizeOfRawData 0x1200
PointerToRawData 0xb5800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.82301

.didata

MD5 f4dcdcd030805001df20b0fdd6c46cb2
SHA1 ac47351a0f50c3ae9ce8e7fa8400b7bca5bf384e
SHA256 765efef8ba3c2190fa77d62cbd7680c9edff090998e151fd42538ecf6301dc58
SHA3 49e9435be9c72e87a457614ddacc3f661087a1a645c02b87cafce95bada22156
VirtualSize 0x1a4
VirtualAddress 0xc1000
SizeOfRawData 0x200
PointerToRawData 0xb6a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.76418

.edata

MD5 962159c3600d79cc1a32bd757eb6ad75
SHA1 12791257f253a68866a2bb98c0246c2742bc5400
SHA256 70e6c5912a8eaed543dfce36ee14f14061932f12455c1ef4f394238ee0f7e3d1
SHA3 a7a5e30935f7889977319db4443bf73b7eb9b0948d91c051bc203b1ed7e375a8
VirtualSize 0x71
VirtualAddress 0xc2000
SizeOfRawData 0x200
PointerToRawData 0xb6c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.33502

.tls

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x18
VirtualAddress 0xc3000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata

MD5 4077d1dbe397a22f8d8c62a9ac2f87a2
SHA1 08fb7c36e037736171d75dff700936dd50e1e966
SHA256 f8bc31927074957901bc7975eec99aa54e759a66cbe2ca8bbbb16a2705caeedc
SHA3 1981e561224a7385c57d6d862c53ea310e35d45aa22680f9fefc822eb03d448c
VirtualSize 0x5d
VirtualAddress 0xc4000
SizeOfRawData 0x200
PointerToRawData 0xb6e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.38146

.reloc

MD5 aa09d180bcb91ff38898ab2932fb8c55
SHA1 e97b93417956f4e6813d6d419b8a2856b357509b
SHA256 f6b86339ea9e79135202d66903e14a64c88b3d9ba3f0c7a6cb124412d44e637b
SHA3 15f759eb5f9d3a631ebefb8bad9ca1a10a1ba44ad659e75be02a5d910ff023d6
VirtualSize 0x11fec
VirtualAddress 0xc5000
SizeOfRawData 0x12000
PointerToRawData 0xb7000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.70174

.rsrc

MD5 e54e8d0f37d36a393bd0d97638abe399
SHA1 140637260739d15f70bbf02671aa2c06606fa276
SHA256 374b67b0e0230d87d2670936e27ff23d2b05acd603c7401470159dcaf8bf4a00
SHA3 2e9d32ecdba16e2620749f996a3bf56fdf325fadabfc9a54496619a5ca191ba9
VirtualSize 0x21644
VirtualAddress 0xd7000
SizeOfRawData 0x21800
PointerToRawData 0xc9000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.78953

Imports

kernel32.dll GetACP
GetExitCodeProcess
CloseHandle
LocalFree
SizeofResource
VirtualProtect
QueryPerformanceFrequency
VirtualFree
GetFullPathNameW
GetProcessHeap
ExitProcess
HeapAlloc
GetCPInfoExW
CompareStringOrdinal
RtlUnwind
SetFilePointerEx
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
GetFileSizeEx
LoadLibraryA
ResetEvent
GetVolumeInformationW
GetVersion
GetDriveTypeW
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
LoadResource
SuspendThread
GetTickCount
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
InitializeCriticalSection
GetSystemWindowsDirectoryW
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetCommandLineW
GetSystemInfo
GetTempPathW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale
comctl32.dll InitCommonControls
user32.dll CreateWindowExW
TranslateMessage
CharLowerBuffW
CallWindowProcW
CharUpperW
PeekMessageW
GetSystemMetrics
SetWindowLongW
MessageBoxW
DestroyWindow
CharUpperBuffW
CharNextW
MsgWaitForMultipleObjects
LoadStringW
ExitWindowsEx
DispatchMessageW
oleaut32.dll SafeArrayPutElement
VariantInit
VariantClear
SysFreeString
SafeArrayAccessData
SysReAllocStringLen
SafeArrayCreate
SafeArrayGetElement
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
VariantChangeType
advapi32.dll ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenThreadToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
OpenProcessToken
FreeSid
AllocateAndInitializeSid
EqualSid
RegQueryValueExW
GetTokenInformation
ConvertSidToStringSidW
RegCloseKey
kernel32.dll (delay-loaded) GetACP
GetExitCodeProcess
CloseHandle
LocalFree
SizeofResource
VirtualProtect
QueryPerformanceFrequency
VirtualFree
GetFullPathNameW
GetProcessHeap
ExitProcess
HeapAlloc
GetCPInfoExW
CompareStringOrdinal
RtlUnwind
SetFilePointerEx
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
GetFileSizeEx
LoadLibraryA
ResetEvent
GetVolumeInformationW
GetVersion
GetDriveTypeW
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
LoadResource
SuspendThread
GetTickCount
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
InitializeCriticalSection
GetSystemWindowsDirectoryW
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetCommandLineW
GetSystemInfo
GetTempPathW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale

Delayed Imports

Attributes 0x1
Name kernel32.dll
ModuleHandle 0xc1080
DelayImportAddressTable 0xc1090
DelayImportNameTable 0xc10b4
BoundDelayImportTable 0xc10d8
UnloadDelayImportTable 0xc10f0
TimeStamp 1970-Jan-01 00:00:00

dbkFCallWrapperAddr

Ordinal 1
Address 0xba63c

__dbk_fcall_wrapper

Ordinal 2
Address 0xe578

100

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x3142
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.91226
Detected Filetype PNG graphic file
MD5 120d48e5394a55c57d9f5f1a44f6646f
SHA1 674c6d3391f7de2b41c7e30aff9d357b1ab293a6
SHA256 2004ecc7fac44ccea256fce35de674dfcbaab6f45950577068c2fbcaf2e61044
SHA3 02910487aecccc7ad7bc9ede793538b8590ccfcf338356bd26e2401c535edf06

101

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.30152
MD5 b50afba78e5e8c68d83864b32ac34579
SHA1 93c38d65bcce69c8ee6bc701bc852f4f83ac8f52
SHA256 6ae98b3ddce443a9d7aae94b80b483666fdaa8a0b6895aae9f46f784f5e41f2f
SHA3 c3346fbf5ef6f0f8c0850108e11ca743d72d21c48c5e323ed17df39712b95b5f

102

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.51849
MD5 6c763b3e548027ad57e8a4a09986a92e
SHA1 78711515d3ec4469a05231f4864d7332d5ec0646
SHA256 5ae0e74abaae59c87e9fc418d58fa3a5759afdec5994c633dea6dabd735fdb20
SHA3 309cd764f7437503d1e8edaba054c03f8e690ef579342af5042683d208f662f2

103

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.74435
MD5 e593e5c4bc9992f6da74579056edee33
SHA1 8cd08963cfaebf64e68d5d7da8f720a9b74b622b
SHA256 7413d14df3fc1812e061e8dddac4717ce3e232efcd791d862f6831f62f04ffed
SHA3 e1d0461a8e3d1ddc5b7236cc304cb321d83f3fc8639b963356695fe5e4468082

104

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.91325
MD5 b652ad527c8cd8d43179cd2eb40800a0
SHA1 80ab33b5a2561ebfc7a44fbf11149e9bce8cefc8
SHA256 5f43663c620e115a6dc4a2fceadce9c48b0247023f366d8dc0b7339a563e4c2b
SHA3 aeed9e519b2ba7eab8f236dc26747856a939f5f59803ac77d16392c02877e976

105

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.51347
MD5 2602d56d3436774277d11471d5c3f105
SHA1 121ede110f2f1642a4c079ee560b67a7a9099a7e
SHA256 7ee3116c9ea496d1321fae40ddc6f6b54a8731aaa6e1d35abd201ec5e5fa1522
SHA3 a55ad96e7ed79d14c5640a798c5a85a7517c46306d5c68e04d9d87bd809b2f47

106

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.74329
MD5 cefb0d0d4e3767319530d6b63a7a9b3e
SHA1 6f5648148a894d301d18f105e2ae14f43776dc94
SHA256 4041cb9bed6c4ef9429e19513510421c629f88d6674f77ba5939f862595e1a3a
SHA3 841aa9118c33b06ca3ff016428b5751f69e5c430023b5cd089134189d31a8984

4085

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x24c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.11364
MD5 bfdeec9b9c10f5470a9b6f2b15ae368d
SHA1 e2f1e0f6fc1d4586803b19cb384bfe0f4edc81f4
SHA256 9a932d990ffa1c05ffff03182707adaf9b0c6c13c3a9d09019cfb606c060c46f
SHA3 c1d8379e018b7922875978f62f488fce6aceadbfe2ded0b50db83877632233dc

4086

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2e4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32885
MD5 f96fdce1c116135874fb82281b493ac0
SHA1 562daa783cc168f8e46b1a798879583176af22cc
SHA256 3ab3b2c63dc1c1810fca5518c1bb174be9ebf36547ed1feae9e357ccf8bc3ef1
SHA3 05d0914dffa4501268059355b689944d50e9aa4a986777d770f0e713d1a8d59c

4087

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x400
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.51239
MD5 7ee56b85a64cd12875800e5eb0f8a8cc
SHA1 aedd1bec33089176851004b6593393629eb0fa6f
SHA256 dc6b3544e2299b1708bb325f9eecdb6d3a7c96755eab1d83ea51fc8b5102715c
SHA3 5b5c207556b66f9b50ed909ae8d9a80068adcd483f406df26c87f8151450bc20

4088

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x3d0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.24302
MD5 44f76d42ead76c495e69824f453e64ec
SHA1 3fb0774ab962aa9cc511af9e8836164c477b9d9e
SHA256 98ffaee3d049334960e4f4bac5dd69ae5ea0e8a8f154a71ce30230508692db8d
SHA3 cbb48eb071e2f28c8b7c315c9192c0a8de0a4c75bcc188e12c72e8bad4b3230e

4089

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x3fc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.34822
MD5 ba10a3e64b7ee79204e6728702cebcf5
SHA1 7c7298de979e3bb2f128be40f110a376be3350fc
SHA256 c0dce66eaf68d1a945a6c5ec96a54baeb9bf8ff533392a1c1d66cc0ac4f7e3fd
SHA3 3bce8f10959f4d33092d14e38f0d70b276193106f38f6066c66fdec4f62571ba

4090

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2d4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.36723
MD5 d2467f70311fc072d9202909bdfa9fcb
SHA1 c8abb69fb38434daf6811309cc88e9d0df65e2cd
SHA256 51209c8034cd5c2127a7b877a3280699d6bad965bcc102e830420c836f535c97
SHA3 4386b5d28f8adc0eccd1a396c2d0689b85cd7cfcf727c8d08a87940c92bd64c7

4091

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xb8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33978
MD5 e8e4995b464abd85d77008d3750ca7af
SHA1 2c39cf9c2c1cfab48077cda2d4d6312fdb53c54b
SHA256 22296669c2c50d3fdfee9de9f7730d0a5cc498b7cc54cd2aa8ded74d7e69f654
SHA3 5480674ca53405ca327424ca774da73700d535e5ca7d51363d86511e5268bb0c

4092

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x9c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.15425
MD5 d0969cc9a96275d54a109de740708a5a
SHA1 2c365c0341faf71f810a39c69859a7eb5bc0de8d
SHA256 3c45c82b39b3c90c9c22342a8f6be98073faf1dcd26dbc578b3a6fa9a499cb46
SHA3 99f949ba47f1c5cd7b313b0b89e2b14f238be4bd78199a590c1f257e4f562967

4093

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x38c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32419
MD5 91f002a78decfcd89251e544aa2d1825
SHA1 20d0672f8144b8f614127b2bc03f4b447b823a7a
SHA256 5eb28cbb468ee711930c5100d15732fee3066a1b49d989207611a66ec2fbee1e
SHA3 206eb7f338ff610b7c3aed4b945f089c0d66e6e64e1c857552a91d8021a1127b

4094

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x398
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.28786
MD5 110abe16232608d8671eaca8ee324f45
SHA1 30704560832bafa440df1fd20693653c2a30f815
SHA256 b33f156b0a8ce96c7182dfb6afa9f6a7020433a6e16ca21f6092ba03695bdd12
SHA3 0179804f22369dabd55b8e4ca79a33645191c197c0474cabc4e13546c7e7fcd6

4095

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x368
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33385
MD5 1c9252919f0a0d2072f3fe0565f0b443
SHA1 dc6002a243c7567105aef957d8b01142df42b3d2
SHA256 734b698aafc2cfabfd0750c88498022d650f6ee025250dc8795de56a6e122445
SHA3 4d0c5d27e1b222f09e17dc6fa9ec0bc174b3e58bba30ce90cb89b3594622e627

4096

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x2a4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.2935
MD5 d1efb0d972603f09c3a2a866a8b36d48
SHA1 64a194ea368bb16ffac3e7a4ca84b3c00bf15920
SHA256 351e7d3c756242cde2e4a2bef16d636d5e073e0cf3e9cfa2b1da1efccd7806ae
SHA3 545cc79af077359ed49f0ba5cdc74b58bef1f6fd71725c976ad9c892dc9a0b56

DVCLAL

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x10
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4
MD5 d8090aba7197fbf9c7e2631c750965a8
SHA1 04f73efb0801b18f6984b14cd057fb56519cd31b
SHA256 88d14cc6638af8a0836f6d868dfab60df92907a2d7becaefbbd7e007acb75610
SHA3 a5a67ad8166061d38fc75cfb2c227911de631166c6531a6664cd49cfb207e8bb

PACKAGEINFO

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x490
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.23345
MD5 c61832360a56f86ecd590fbf994e6fbc
SHA1 65a2b990dbc551553ffac59f8daf0887a94ed1ec
SHA256 26d0d87ff8246c5685cb81279d76592cb6f8699ebcec378e1dd2d48a23946c55
SHA3 649a1230f6fee999aef6681f468921101c9d59db4c6ec369525fc40a17cabd15

11111

Type RT_RCDATA
Language English - United States
Codepage Latin 1 / Western European
Size 0x40
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.60615
MD5 4d16c6f5fe7025a89acb607bdf2f98da
SHA1 e9471d81dadaf25b05bc8907be901cbabe06966c
SHA256 85087fe380d42c46e77fe391ce8574c78613230d94d5b230dfc9579687e14393
SHA3 a489c2a6a294180d4263e24e02cdd84952d89d2eb73d50e0fc8e6e76dcb4e296

MAINICON

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.87994
Detected Filetype Icon file
MD5 1adab4cebfd613d94a067f001f8c3686
SHA1 5b256bc763dd2348d0fdcfd157fe79005dad7b49
SHA256 232cef5205068cdc6acfaa8ba11de48ab898761aa77dd7de2d67be1606e66e5b
SHA3 8950b98c5c4211ac988a153372c9f1fea07a83d1cca20b7ce443fc1af74b91f3

1

Type RT_VERSION
Language English - United States
Codepage Latin 1 / Western European
Size 0x584
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.68491
MD5 e9c9e4a013302c016b377846036a51ed
SHA1 adeb323df7925f3037f8a2263a08a98c4b7a846a
SHA256 f644d364f02d3b5e6560d01052e054d8ac2380a06d0f924240b05a33b9affc23
SHA3 f7098ab686eb6f19c878d3680c5308e4183af974a6431e453db8fb25d0c1f38d

1 (#2)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x7a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.89085
MD5 e07ab8c9030f776ce0f6d9040d41c616
SHA1 593953973c74066bcd09b22402948425dab9b12f
SHA256 75bb01fe4bafdef22d879aaea5b85d1165a30ec0e558536e1b4c6002c4730d5d
SHA3 51b78d43db0954fcaa7c6fd2558eece5eb98a1c5f6e95a3033891777bfd00a7c

String Table contents

No single cast observer with ID %d was added to the observer collection
No multi cast observer with ID %d was added to the observer collection
SHA2: Cannot update a finalized hash
Must wait on at least one event
Cannot call BeginInvoke on a TComponent in the process of destruction
Windows 2000
Windows XP
Windows Server 2003
Windows Server 2003 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019
Windows Server 2022
Windows 8
Windows 8.1
Windows 10
Windows 11
Observer is not supported
Cannot have multiple single cast observers added to the observers collection
The object does not implement the observer interface
Insufficient RTTI available to support this operation
Parameter count mismatch
Type '%s' is not declared in the interface section of a unit
VAR and OUT arguments must match parameter type exactly
Property '%s' is read-only
Property '%s' is write-only
RTTI objects cannot be manually destroyed by application code
%s (Version %d.%d, Build %d, %5:s)
%s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s)
32-bit Edition
64-bit Edition
Windows
Windows Vista
Windows Server 2008
Windows 7
Windows Server 2008 R2
Error reading %s%s%s: %s
Stream read error
Property is read-only
%s.Seek not implemented
Property %s does not exist
Stream write error
Thread creation error: %s
Thread Error: %s (%d)
Cannot terminate an externally created thread
Cannot wait for an externally created thread
Cannot call Start on a running or suspended thread
Invalid argument
Source and Destination arrays must not be the same
SpinCount out of range. Must be between 0 and %d
Argument out of range
Duplicates not allowed
Cannot assign a %s to a %s
CheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
List does not allow duplicates ($0%x)
A component named %s already exists
''%s'' is not a valid component name
Invalid property value
Invalid property path
Invalid property value
List capacity out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d)
. %s range is 0..%d
. %s is empty
Out of memory while expanding memory stream
%s has not been registered as a COM class
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
Invalid source array
Invalid destination array
Character index out of bounds (%d)
Start index out of bounds (%d)
Invalid count (%d)
Invalid destination index (%d)
Invalid code page
No mapping for the Unicode character exists in the target multi-byte code page
Invalid StringBaseIndex
Ancestor for '%s' not found
May
June
July
August
September
October
November
December
Sun
Mon
Tue
Wed
Thu
Fri
Sat
Sunday
Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
Dec
January
February
March
April
Invalid variant type
Operation not supported
Unexpected variant error
External exception %x
Assertion failed
Interface not supported
Exception in safecall method
Object lock not owned
Monitor support function not initialized
Feature not implemented
Method called on disposed object
%s (%s, line %d)
Abstract Error
Access violation at address %p in module '%s' (offset %x). %s of address %p
System Error. Code: %d.
%s%s
A call to an OS function failed
Variant method calls not supported
Read
Write
Execution
Invalid access
Error creating variant or safe array
Variant or safe array index out of bounds
Variant or safe array is locked
Invalid variant type conversion
Invalid variant operation
Invalid NULL variant operation
Invalid variant operation (%s%.8x)
%s
Could not convert variant of type (%s) into type (%s)
Overflow while converting variant of type (%s) into type (%s)
Variant overflow
Invalid argument
Invalid floating point operation
Floating point division by zero
Floating point overflow
Floating point underflow
Invalid pointer operation
Invalid class typecast
Access violation at address %p. %s of address %p
Access violation
Stack overflow
Control-C hit
Privileged instruction
Operation aborted
Exception %s in module %s at %p.
%s%s
Application Error
Format '%s' invalid or incompatible with argument
No argument for format '%s'
'%s' is not a valid integer value
'%d.%d' is not a valid timestamp
Invalid argument to time encode
Invalid argument to date encode
Out of memory
I/O error %d
File not found
Invalid filename
Too many open files
File access denied
Read beyond end of file
Disk full
Invalid numeric input
Division by zero
Range check error
Integer overflow

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2.0.40.78
ProductVersion 2.0.40.78
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments This installation was built with Inno Setup.
CompanyName
FileDescription Kopetra Ltd.
FileVersion (#2) 2.0.40.78
LegalCopyright ©2023 Kopetra Ltd.
OriginalFileName Kopetra Ltd..exe
ProductName Kopetra Ltd.
ProductVersion (#2) 2.0.40.78
Resource LangID English - United States

TLS Callbacks

StartAddressOfRawData 0x4c3000
EndAddressOfRawData 0x4c3018
AddressOfIndex 0x4b3c14
AddressOfCallbacks 0x4c4010
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks (EMPTY)

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0! [*] Warning: Section .tls has a size of 0! [*] Warning: [plugin_authenticode] Hashing algorithm 2.16.840.1.101.3.4.2.2 is not supported.
Leave a comment

No comments yet.