SETUP.EXE
19e9c11f18e2ee08d601475ed92110c786700467cb5ed67f85feaec380e77e3f
Identity
| Property | Value |
|---|---|
| Architecture | x86 |
| Source size | 876,776 bytes |
| Preferred image base | 0x400000 |
| Entry RVA | 0x252d0 |
| Imports / exports | 137 / 0 |
| Exception/unwind ranges | 0 |
| Executable raw bytes | 256,000 |
Physical paths:
Installer2\InstallerCore\SETUP.EXE
Decompilation coverage
Complete with errors: 1,054 successful reconstructions, 2 failures, 1,056 attempted entries, 1,056 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
256,000 | 255,978 | yes / no / yes | 6.467 |
.rdata |
0x40000 |
257024 |
72,192 | 71,726 | yes / no / no | 4.808 |
.data |
0x52000 |
329216 |
5,120 | 8,704 | yes / yes / no | 3.8898 |
.fptable |
0x55000 |
334336 |
512 | 128 | yes / yes / no | 0.0 |
.rsrc |
0x56000 |
334848 |
504,320 | 504,184 | yes / no / no | 3.3718 |
.reloc |
0xd2000 |
839168 |
17,408 | 17,296 | yes / no / no | 6.619 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | false |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.