WCExtractor.exe - Web Content Extractor

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	WCExtractor.exe
size	655872 (0xa0200)
md5	71f48be5f917166fba09803e8d65fa81

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x108

Rich Header

lib id	version	times used
2	7303	7
19	8022	19
0	0	16
19	9049	6
19	8034	10
14	7299	2
10	8168	11
1	0	969
11	8168	108
6	1720	1
4	8168	6

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x4f16d84f
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0xbd000
SizeOfInitializedData	0x77000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0xbe000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x1a9000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

ASProtect 1.33 - 2.1 Registered (Alexey Solodovnikov)

Sections

name	va	vsize	raw size	flags
	0x1000	0xbd000	0x36800	RWX IDATA
	0xbe000	0x29000	0xbc00	RWX IDATA
	0xe7000	0xc000	0x3000	RWX IDATA
.rsrc	0xf3000	0x42000	0x1ec00	RWX IDATA
	0x135000	0x1000	0x200	RWX IDATA
.data	0x136000	0x72000	0x3b000	RWX IDATA
.adata	0x1a8000	0x1000	0	RWX IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x136a60	0x314
RESOURCE	0xf3000	0x416a8
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0
	0	0x100000

show previews

type	name	size
DATA	IDR_JSCRIPTFUNCTIONS	2171
DATA	IDR_JSCRIPTLEFTSTRING	903
DATA	IDR_JSCRIPTMAINFUNCTION	137
DATA	IDR_JSCRIPTREPLACETEXT	698
DATA	IDR_JSCRIPTRIGTHSTRING	933
DATA	IDR_JSCRIPTSPLITTEXT	783
DATA	IDR_JSCRIPTSUBSTRING	1171
DATA	IDR_JSCRIPTTRIM	926
DATA	IDR_VBSCRIPTEXTRACTEMAILADDRESSES	953
DATA	IDR_VBSCRIPTEXTRACTPHONENUMBERS	972
DATA	IDR_VBSCRIPTEXTRACTTAGATTRIBUTEVALUE	1553
DATA	IDR_VBSCRIPTFUNCTIONS	3871
DATA	IDR_VBSCRIPTLEFTSTRING	1027
DATA	IDR_VBSCRIPTMAINFUNCTION	144
DATA	IDR_VBSCRIPTREPLACETEXT	505
DATA	IDR_VBSCRIPTRIGTHSTRING	1057
DATA	IDR_VBSCRIPTSPLITTEXT	981
DATA	IDR_VBSCRIPTSTRIPHTMLTAGS	710
DATA	IDR_VBSCRIPTSUBSTRING	2389
DATA	IDR_VBSCRIPTTRIM	971
GIF	#193	33463
GIF	#196	34438
GIF	#260	5474
GIF	#261	2884
JPG	#192	5301
JPG	#220	13837
JPG	#259	2347
BITMAP	#161	2648
BITMAP	#195	2024
ICON	#1	3752
ICON	#2	2216
ICON	#3	1384
ICON	#4	9640
ICON	#5	4264
ICON	#6	1128
ICON	#7	1384
ICON	#8	744
ICON	#9	1384
ICON	#10	1384
ICON	#11	1384
ICON	#12	1384
ICON	#13	1384
ICON	#14	1384
ICON	#15	168
ICON	#16	168
ICON	#17	1384
ICON	#18	1384
ICON	#19	1384
ICON	#20	1496
ICON	#21	1384
ICON	#22	1384
ICON	#23	1384
ICON	#24	1384
ICON	#25	1384
ICON	#26	1384
ICON	#27	872
ICON	#28	1384
ICON	#29	1384
ICON	#30	1384
ICON	#31	1384
ICON	#32	1384
ICON	#33	1384
ICON	#34	1384
ICON	#35	1384
ICON	#36	1496
ICON	#37	1384
ICON	#38	1384
ICON	#39	1384
ICON	#40	1384
ICON	#41	872
ICON	#42	872
ICON	#43	872
ICON	#44	872
MENU	#128	2036
MENU	#158	536
MENU	#159	586
MENU	#273	152
DIALOG	#100	630
DIALOG	#102	1430
DIALOG	#133	770
DIALOG	#138	1016
DIALOG	#139	1670
DIALOG	#151	66
DIALOG	#152	1556
DIALOG	#160	192
DIALOG	#170	2482
DIALOG	#205	892
DIALOG	#212	830
DIALOG	#217	1126
DIALOG	#218	858
DIALOG	#221	1138
DIALOG	#222	1132
DIALOG	#223	420
DIALOG	#228	522
DIALOG	#241	1026
DIALOG	#250	874
DIALOG	#253	680
DIALOG	#264	350
DIALOG	#267	490
DIALOG	#271	54
DIALOG	#274	1684
DIALOG	#283	358
DIALOG	#285	370
DIALOG	#293	1140
DIALOG	#306	236
DIALOG	#307	874
DIALOG	#308	1112
DIALOG	#311	748
DIALOG	#320	964
DIALOG	#324	1590
DIALOG	#326	264
DIALOG	#327	1030
DIALOG	#329	442
DIALOG	#330	390
DIALOG	#333	934
DIALOG	#335	1548
DIALOG	#336	1580
DIALOG	#339	822
DIALOG	#341	1146
DIALOG	#344	512
STRING	#9	220
STRING	#2049	490
STRING	#2050	396
STRING	#2051	116
STRING	#2052	160
STRING	#2053	302
STRING	#2054	724
STRING	#2055	528
STRING	#2069	340
STRING	#2070	272
STRING	#2072	196
STRING	#3585	84
STRING	#3601	326
STRING	#3602	66
STRING	#3603	88
STRING	#3605	262
STRING	#3606	218
STRING	#3713	198
STRING	#3826	218
STRING	#3827	408
STRING	#3828	880
STRING	#3829	804
STRING	#3830	636
STRING	#3831	872
STRING	#3832	1572
STRING	#3833	1010
STRING	#3834	242
STRING	#3835	1170
ACCELERATORS	#128	264
GROUP_ICON	#128	90
GROUP_ICON	#135	20
GROUP_ICON	#140	20
GROUP_ICON	#141	20
GROUP_ICON	#143	20
GROUP_ICON	#144	20
GROUP_ICON	#145	20
GROUP_ICON	#146	20
GROUP_ICON	#147	20
GROUP_ICON	#148	20
GROUP_ICON	#150	20
GROUP_ICON	#154	20
GROUP_ICON	#155	20
GROUP_ICON	#156	20
GROUP_ICON	#157	20
GROUP_ICON	#158	20
GROUP_ICON	#166	20
GROUP_ICON	#167	20
GROUP_ICON	#204	20
GROUP_ICON	#240	20
GROUP_ICON	#241	20
GROUP_ICON	#242	20
GROUP_ICON	#243	20
GROUP_ICON	#244	20
GROUP_ICON	#245	20
GROUP_ICON	#270	20
GROUP_ICON	#277	20
GROUP_ICON	#280	20
GROUP_ICON	#281	20
GROUP_ICON	#282	20
GROUP_ICON	#291	20
GROUP_ICON	#292	20
GROUP_ICON	#295	20
GROUP_ICON	#332	20
GROUP_ICON	#333	20
GROUP_ICON	#334	20
GROUP_ICON	#345	20
GROUP_ICON	#346	20
GROUP_ICON	#348	20
VERSION	#1	992
MANIFEST	#1	798
#240	#102	170
#240	#133	338
#240	#152	170
#240	#205	147
#240	#217	525
#240	#221	475
#240	#222	34
#240	#228	170
#240	#250	170
#240	#267	111
#240	#274	338
#240	#293	35
#240	#307	170
#240	#320	197
#240	#324	552
#240	#327	170
#240	#333	170
#240	#335	85
#240	#336	170

module_name	ord	function_name
kernel32.dll		GetProcAddress
kernel32.dll		GetModuleHandleA
kernel32.dll		LoadLibraryA
mfc42.dll	3574
msvcrt.dll		__CxxFrameHandler
user32.dll		GetWindowLongA
gdi32.dll		CreateDIBSection
advapi32.dll		RegCloseKey
shell32.dll		SHGetPathFromIDListA
comctl32.dll		ImageList_GetImageCount
ole32.dll		OleRun
olepro32.dll	251
oleaut32.dll	12
odbc32.dll	57
wininet.dll		InternetSetOptionA
oleaut32.dll		VariantChangeTypeEx
kernel32.dll		RaiseException

StringTable 040904b0

Comments	http://www.newprosoft.com
CompanyName	Newprosoft
FileDescription	Web Content Extractor
FileVersion	5, 1, 4, 0
InternalName	Web Content Extractor
LegalCopyright	Copyright (C) 2004 - 2012 Newprosoft
LegalTrademarks
OriginalFilename	WCExtractor.exe
PrivateBuild
ProductName	Web Content Extractor
ProductVersion	5, 1, 4, 0
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	5.1.4.0
ProductVersion	5.1.4.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	655872	EXE	01/18/2012 14:33:51	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x130b40

[?] can't find file_offset of VA 0x12f608

[?] can't find file_offset of VA 0x1313c0

[?] can't find file_offset of VA 0x1301d0

[?] can't find file_offset of VA 0x12fe28

[?] can't find file_offset of VA 0x130830

[?] can't find file_offset of VA 0x12f990

[?] can't find file_offset of VA 0x130490

[?] can't find file_offset of VA 0x12e860

[?] can't find file_offset of VA 0x12ec20

[?] can't find file_offset of VA 0x12eff0

[?] can't find file_offset of VA 0x12bab8

[?] can't find file_offset of VA 0x12ca68

[?] can't find file_offset of VA 0x12c9d8

[?] can't find file_offset of VA 0x12dbf0

[?] can't find file_offset of VA 0x12d7c8

[?] can't find file_offset of VA 0x12e1c0

[?] can't find file_offset of VA 0x12e598

[?] can't find file_offset of VA 0x12ce70

[?] can't find file_offset of VA 0x12ddf0

[?] can't find file_offset of VA 0x11c038

[?] can't find file_offset of VA 0x1139b0

[?] can't find file_offset of VA 0x1242f0

[?] can't find file_offset of VA 0x125858

[?] can't find file_offset of VA 0x12a2e0

[?] can't find file_offset of VA 0x1263a0

[?] can't find file_offset of VA 0x1299b0

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x112bb0

[?] can't find file_offset of VA 0x1135f8

[?] can't find file_offset of VA 0x1133a8

[?] can't find file_offset of VA 0x113810

[?] can't find file_offset of VA 0x1319d8

[?] can't find file_offset of VA 0x1329e0

[?] can't find file_offset of VA 0x132d68

[?] can't find file_offset of VA 0x133ff8

[?] can't find file_offset of VA 0x132ef8

[?] can't find file_offset of VA 0x133218

[?] can't find file_offset of VA 0x1336b0

[?] can't find file_offset of VA 0x134070

[?] can't find file_offset of VA 0x134280

[?] can't find file_offset of VA 0x1344d0

[?] can't find file_offset of VA 0x1345e0

[?] can't find file_offset of VA 0x131450

[?] can't find file_offset of VA 0x1314a8

[?] can't find file_offset of VA 0x133988

[?] can't find file_offset of VA 0x1317d8

[?] can't find file_offset of VA 0x1315f0

[?] can't find file_offset of VA 0x1316f8

[?] can't find file_offset of VA 0x131830

[?] can't find file_offset of VA 0x1318f8

[?] can't find file_offset of VA 0x132bd0

[?] can't find file_offset of VA 0x131ab8

[?] can't find file_offset of VA 0x131e28

[?] can't find file_offset of VA 0x132f98

[?] can't find file_offset of VA 0x133348

[?] can't find file_offset of VA 0x1339d0

[?] can't find file_offset of VA 0x132150

[?] can't find file_offset of VA 0x1343d8

[?] can't find file_offset of VA 0x132548

[?] can't find file_offset of VA 0x1138a8

[?] can't find file_offset of VA 0x0

WCExtractor.exe- Web Content Extractor