How to Decompile c++/c , Delphi,Vb6,VB.Net, or java programs

Code
File name:

setup_free.exe

Submission date:

2011-01-29 21:32:43 (UTC)

Current status:

finished

Result:

1 /43 (2.3%)



VT Community



not reviewed

 Safety score: - 

Compact

Print results

Antivirus     Version     Last Update     Result

AhnLab-V3     2011.01.27.01     2011.01.27     -

AntiVir     7.11.2.31     2011.01.28     -

Antiy-AVL     2.0.3.7     2011.01.28     Backdoor/Win32.Prorat

Avast     4.8.1351.0     2011.01.29     -

Avast5     5.0.677.0     2011.01.29     -

AVG     10.0.0.1190     2011.01.29     -

BitDefender     7.2     2011.01.29     -

CAT-QuickHeal     11.00     2011.01.29     -

ClamAV     0.96.4.0     2011.01.29     -

Commtouch     5.2.11.5     2011.01.29     -

Comodo     7531     2011.01.29     -

DrWeb     5.0.2.03300     2011.01.29     -

Emsisoft     5.1.0.1     2011.01.29     -

eSafe     7.0.17.0     2011.01.27     -

eTrust-Vet     36.1.8126     2011.01.28     -

F-Prot     4.6.2.117     2011.01.29     -

F-Secure     9.0.16160.0     2011.01.29     -

Fortinet     4.2.254.0     2011.01.29     -

GData     21     2011.01.29     -

Ikarus     T3.1.1.97.0     2011.01.29     -

Jiangmin     13.0.900     2011.01.29     -

K7AntiVirus     9.78.3680     2011.01.29     -

Kaspersky     7.0.0.125     2011.01.29     -

McAfee     5.400.0.1158     2011.01.29     -

McAfee-GW-Edition     2010.1C     2011.01.29     -

Microsoft     1.6502     2011.01.29     -

NOD32     5830     2011.01.29     -

Norman     6.06.12     2011.01.29     -

nProtect     2011-01-18.01     2011.01.18     -

Panda     10.0.3.5     2011.01.29     -

PCTools     7.0.3.5     2011.01.29     -

Prevx     3.0     2011.01.29     -

Rising     23.42.04.06     2011.01.28     -

Sophos     4.61.0     2011.01.29     -

SUPERAntiSpyware     4.40.0.1006     2011.01.29     -

Symantec     20101.3.0.103     2011.01.29     -

TheHacker     6.7.0.1.120     2011.01.26     -

TrendMicro     9.120.0.1004     2011.01.29     -

TrendMicro-HouseCall     9.120.0.1004     2011.01.29     -

VBA32     3.12.14.3     2011.01.29     -

VIPRE     8242     2011.01.29     -

ViRobot     2011.1.29.4282     2011.01.29     -

VirusBuster     13.6.171.1     2011.01.29     -

Additional information

Show all

MD5   : d8d0395cd729c47a7627469be3d3cf83

SHA1  : 8cc4c501e33a61bd7b9ea516d1aa4d13fdfc0f79

SHA256: a8bae7f94e815a276b100779bef8405ebe220786ddcf431d694e07da925904e4

ssdeep: 49152:IGaATZ5U8ZZ79Rx/rbN89GIry7BjqIy2dLc7J3iQ0t:V9TZ5U839r/HuhrEBj9LaJ3/G

File size : 2594922 bytes

First seen: 2007-11-30 20:52:17

Last seen : 2011-01-29 21:32:43

Magic: PE32 executable for MS Windows (GUI) Intel 80386 32-bit

TrID:

86.9% (.EXE) Win32 Executable PowerBASIC/Win 9.x (148303/79/28)

5.0% (.EXE) Win32 Executable Generic (8527/13/3)

4.4% (.DLL) Win32 Dynamic Link Library (generic) (7583/30/2)

1.2% (.EXE) Win16/32 Executable Delphi generic (2072/23)

1.1% (.EXE) Generic Win/DOS Executable (2002/3)

sigcheck:

publisher....: Decompiler-vb.net

copyright....: Copyright (C) Decompiler-VB.net - Sylvain Bruyere

product..: n/a

description..: VBReFormer 2007 Free Setup

original name: n/a

internal name: n/a

file version.:

comments..: This installation was built with Inno Setup: http://www.innosetup.com

signers..: -

signing date.: -

verified..: Unsigned

PEiD: -

packers (Kaspersky): Ezip, PE_Patch.UPX, UPX

PEInfo: PE structure information



[[ basic data ]]

entrypointaddress: 0x98D8

timedatestamp....: 0x2A425E19 (Fri Jun 19 22:22:17 1992)

machinetype..: 0x14C (Intel I386)



[[ 8 section(s) ]]

name, viradd, virsiz, rawdsiz, ntropy, md5

CODE, 0x1000, 0x8FFC, 0x9000, 6.59, ed788fae7220cb2d4e9b894f08f57acf

DATA, 0xA000, 0x248, 0x400, 2.7, 99e336618097147f412e273fe8efec29

BSS, 0xB000, 0xE34, 0x0, 0.0, d41d8cd98f00b204e9800998ecf8427e

.idata, 0xC000, 0x950, 0xA00, 4.43, bd5bdc394dd9459844ea032b48349bc1

.tls, 0xD000, 0x8, 0x0, 0.0, d41d8cd98f00b204e9800998ecf8427e

.rdata, 0xE000, 0x18, 0x200, 0.2, d293bf8d4ebe9826d58e1d27c25fe4b6

.reloc, 0xF000, 0x8A0, 0x0, 0.0, d41d8cd98f00b204e9800998ecf8427e

.rsrc, 0x10000, 0x6DC8, 0x6E00, 5.13, cb86db7079baf8f926bcf021d6e50971



[[ 5 import(s) ]]

advapi32.dll: RegQueryValueExA, RegOpenKeyExA, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA

comctl32.dll: InitCommonControls

kernel32.dll: DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, WideCharToMultiByte, TlsSetValue, TlsGetValue, MultiByteToWideChar, GetModuleHandleA, GetLastError, GetCommandLineA, WriteFile, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetSystemTime, GetFileType, ExitProcess, CreateFileA, CloseHandle

oleaut32.dll: VariantChangeTypeEx, VariantCopyInd, VariantClear, SysStringLen, SysAllocStringLen

user32.dll: MessageBoxA

CWSandbox:

http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=d8d0395cd729c47a7627469be3d3cf83

ExifTool:

file metadata

CharacterSet: Windows, Latin1

CodeSize: 36864

Comments: This installation was built with Inno Setup: http://www.innosetup.com

CompanyName: Decompiler-vb.net

EntryPoint: 0x98d8

FileDescription: VBReFormer 2007 Free Setup

FileFlagsMask: 0x003f

FileOS: Win32

FileSize: 2.5 MB

FileSubtype: 0

FileType: Win32 EXE

FileVersion:

FileVersionNumber: 0.0.0.0

ImageVersion: 0.0

InitializedDataSize: 32256

LanguageCode: English (U.S.)

LegalCopyright: Copyright (C) Decompiler-VB.net - Sylvain Bruyere

LinkerVersion: 2.25

MIMEType: application/octet-stream

MachineType: Intel 386 or later, and compatibles

OSVersion: 1.0

ObjectFileType: Executable application

PEType: PE32

ProductVersionNumber: 0.0.0.0

Subsystem: Windows GUI

SubsystemVersion: 4.0

TimeStamp: 1992:06:20 00:22:17+02:00

UninitializedDataSize: 0