filenamequartet
size776704 (0xbda00)
md53d8277eae29afe5fa91180fc938f4b3c
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
1255072717
1105072752
10950727122
9340355
10106
114507271
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5360b89c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion8.0
SizeOfCode0x52a00
SizeOfInitializedData0x78200
SizeOfUninitializedData0
AddressOfEntryPoint0x69ec
BaseOfCode0x1000
BaseOfData0x54000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xce000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x529300x52a00R-X CODE
.rdata0x540000x450f60x45200R-- IDATA
.data0x9a0000xeb980x1600RW- IDATA
.rsrc0xa90000x21bb00x21c00R-- IDATA
.reloc0xcb0000x26ee0x2800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x988540x3c
RESOURCE0xa90000x21bb0
EXCEPTION00
SECURITY00
BASERELOC0xcb0000x1604
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x967e00x40
Bound_IAT00
IAT0x540000x184
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#196400
ICON#242640
ICON#311280
RCDATA#811214420
GROUP_ICON#101480
VERSION#16920
MANIFEST#14500
module_namehintordfunction_name
ole32.dll83CoInitialize
ole32.dll177CoTaskMemFree
ole32.dll190CoUninitialize
ole32.dll189CoTaskMemAlloc
KERNEL32.dll964VirtualAlloc
KERNEL32.dll839SetEndOfFile
KERNEL32.dll458GetModuleFileNameA
KERNEL32.dll550GlobalFree
KERNEL32.dll972VirtualProtect
KERNEL32.dll422GetDriveTypeA
KERNEL32.dll221FindFirstChangeNotificationA
KERNEL32.dll420GetCurrentProcessId
KERNEL32.dll397GetLocalTime
KERNEL32.dll870SetSystemTimeAdjustment
KERNEL32.dll609GlobalUnlock
KERNEL32.dll312FindNextChangeNotification
KERNEL32.dll407GetFileTime
KERNEL32.dll600IsBadReadPtr
KERNEL32.dll693QueryPerformanceFrequency
KERNEL32.dll549GlobalAlloc
KERNEL32.dll233FindCloseChangeNotification
KERNEL32.dll589InterlockedIncrement
KERNEL32.dll625InterlockedDecrement
KERNEL32.dll932Sleep
KERNEL32.dll571InitializeCriticalSection
KERNEL32.dll182DeleteCriticalSection
KERNEL32.dll220EnterCriticalSection
KERNEL32.dll660LeaveCriticalSection
KERNEL32.dll395GetLastError
KERNEL32.dll610HeapFree
KERNEL32.dll874TerminateProcess
KERNEL32.dll410GetCurrentProcess
KERNEL32.dll908UnhandledExceptionFilter
KERNEL32.dll913SetUnhandledExceptionFilter
KERNEL32.dll646IsDebuggerPresent
KERNEL32.dll309GetCommandLineA
KERNEL32.dll560GetVersionExA
KERNEL32.dll551HeapAlloc
KERNEL32.dll502GetProcessHeap
KERNEL32.dll520GetStartupInfoA
KERNEL32.dll596LCMapStringA
KERNEL32.dll984WideCharToMultiByte
KERNEL32.dll682MultiByteToWideChar
KERNEL32.dll585LCMapStringW
KERNEL32.dll261GetCPInfo
KERNEL32.dll730RtlUnwind
KERNEL32.dll727RaiseException
KERNEL32.dll439GetProcAddress
KERNEL32.dll411GetModuleHandleA
KERNEL32.dll273ExitProcess
KERNEL32.dll552HeapDestroy
KERNEL32.dll559HeapCreate
KERNEL32.dll924VirtualFree
KERNEL32.dll542HeapReAlloc
KERNEL32.dll810SetHandleCount
KERNEL32.dll472GetStdHandle
KERNEL32.dll423GetFileType
KERNEL32.dll773ReadFile
KERNEL32.dll150CloseHandle
KERNEL32.dll978WriteFile
KERNEL32.dll344GetConsoleCP
KERNEL32.dll374GetConsoleMode
KERNEL32.dll244FlushFileBuffers
KERNEL32.dll832SetFilePointer
KERNEL32.dll961TlsGetValue
KERNEL32.dll917TlsAlloc
KERNEL32.dll923TlsSetValue
KERNEL32.dll891TlsFree
KERNEL32.dll907SetLastError
KERNEL32.dll423GetCurrentThreadId
KERNEL32.dll268FreeEnvironmentStringsA
KERNEL32.dll404GetEnvironmentStrings
KERNEL32.dll272FreeEnvironmentStringsW
KERNEL32.dll368GetEnvironmentStringsW
KERNEL32.dll770QueryPerformanceCounter
KERNEL32.dll528GetTickCount
KERNEL32.dll490GetSystemTimeAsFileTime
KERNEL32.dll334GetACP
KERNEL32.dll492GetOEMCP
KERNEL32.dll579IsValidCodePage
KERNEL32.dll438GetLocaleInfoA
KERNEL32.dll471GetStringTypeA
KERNEL32.dll498GetStringTypeW
KERNEL32.dll504GetUserDefaultLCID
KERNEL32.dll180EnumSystemLocalesA
KERNEL32.dll600IsValidLocale
KERNEL32.dll547HeapSize
KERNEL32.dll624LoadLibraryA
KERNEL32.dll830SetStdHandle
KERNEL32.dll997WriteConsoleA
KERNEL32.dll314GetConsoleOutputCP
KERNEL32.dll982WriteConsoleW
KERNEL32.dll410GetLocaleInfoW
KERNEL32.dll173CreateFileA
KERNEL32.dll86CreateFileW

StringTable 00000000

CompanyNameBrightree
FileDescriptionEarcrowd
FileVersion10.5.667.495
InternalNameEarcrowd
LegalCopyright© 2008, Brightree
LegalTrademarksEarcrowd®
ProductNameEarcrowd
ProductVersion10.5.667.495

VS_FIXEDFILEINFO

FileVersion10.5.667.495
ProductVersion10.5.667.495
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0776704EXE04/30/2014 08:47:24#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK