adobe.snr.patch.v2.0-painter.exe - adobesnr.exe - Universal Adobe Patcher

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	adobe.snr.patch.v2.0-painter.exe
size	601600 (0x92e00)
md5	b31679db7db878992b4553290a9e6c7c

type	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
mimetype	application/x-dosexec

clamav	Win.Malware.Agent-6365699-0 FOUND
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x40
blocks_in_file	1
num_relocs	0
header_paragraphs	2
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0xa
overlay_number	0
reserved0	0xeba1f0e00000000
oem_id	0xb400
oem_info	0xcd09
reserved2	0x4c01b821
reserved3	0x695721cd
reserved4	0x2032336e
reserved5	0x4558452e
reserved6	0x240a0d2e
lfanew	0x40

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 57 69  |........!..L.!Wi|
00000010: 6e 33 32 20 2e 45 58 45  2e 0d 0a 24 40 00 00 00  |n32 .EXE...$@...|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x2a425e19
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x838e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x121000
SizeOfInitializedData	0x7c800
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1a533f
BaseOfCode	0x1000
BaseOfData	0x122000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x1ad000
SizeOfHeaders	0x200
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0xd000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MPRESS v2.12 (MATCODE Software)

Sections

name	va	vsize	raw size	flags
.MPRESS1	0x1000	0x1a4000	0x8b000	RWX CODE IDATA UDATA
.MPRESS2	0x1a5000	0xed8	0x1000	RWX CODE IDATA UDATA
.rsrc	0x1a6000	0x6be4	0x6c00	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1a5000	0x340
RESOURCE	0x1a6000	0x6be4
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x1a5eb0	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x1a517c	0x50
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x5a5ec8	0x5a5ed8	0x5a5ebc	0	0	0

show previews

type	name	size
LIB	VGM	83968
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
CURSOR	#8	308
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
BITMAP	BLUR5	1160
BITMAP	CDROM	192
BITMAP	CLOSEDFOLDER	224
BITMAP	CURRENTFOLDER	224
BITMAP	EXECUTABLE	224
BITMAP	FLOPPY	192
BITMAP	HARD	192
BITMAP	KNOWNFILE	224
BITMAP	MENUBTN	3160
BITMAP	METRIC	808
BITMAP	NETWORK	192
BITMAP	OPENFOLDER	224
BITMAP	PREVIEWGLYPH	232
BITMAP	PS	808
BITMAP	RAM	192
BITMAP	RASTER	808
BITMAP	TTF	808
BITMAP	UNKNOWN	808
BITMAP	UNKNOWNFILE	224
ICON	#1	4604
ICON	#2	9640
ICON	#3	4264
ICON	#4	1128
DIALOG	DLGTEMPLATE	82
STRING	#3682	76
STRING	#3683	170
STRING	#3684	390
STRING	#3685	462
STRING	#3686	324
STRING	#3687	126
STRING	#3688	36
STRING	#4079	416
STRING	#4080	472
STRING	#4081	492
STRING	#4082	236
STRING	#4083	880
STRING	#4084	192
STRING	#4085	252
STRING	#4086	288
STRING	#4087	1196
STRING	#4088	876
STRING	#4089	912
STRING	#4090	1072
STRING	#4091	240
STRING	#4092	216
STRING	#4093	628
STRING	#4094	992
STRING	#4095	904
STRING	#4096	728
RCDATA	ACGL	3263
RCDATA	ACHINT	933
RCDATA	ACSHDA	3416
RCDATA	ACSHDI	3341
RCDATA	DVCLAL	16
RCDATA	PACKAGEINFO	1668
RCDATA	SC	1076
RCDATA	SD	1201
RCDATA	SE	417
RCDATA	SF	1649
RCDATA	SR	1969
RCDATA	TFRMABOUT	1803
RCDATA	TFRMMAIN	108811
RCDATA	TPATHDIALOGFORM	1600
RCDATA	TSCALCFORM	7152
RCDATA	TSCOLORDIALOGFORM	8155
RCDATA	TSPOPUPCALENDAR	755
GROUP_CURSOR	CRASPIPETTE	20
GROUP_CURSOR	#32761	20
GROUP_CURSOR	#32762	20
GROUP_CURSOR	#32763	20
GROUP_CURSOR	#32764	20
GROUP_CURSOR	#32765	20
GROUP_CURSOR	#32766	20
GROUP_CURSOR	#32767	20
GROUP_ICON	MAINICON	62
VERSION	#1	736
MANIFEST	#1	1423

module_name	hint	ord	function_name
KERNEL32.DLL			GetModuleHandleA
KERNEL32.DLL			GetProcAddress
user32.dll			CharNextA
advapi32.dll			RegCloseKey
oleaut32.dll			SysFreeString
version.dll			VerQueryValueA
gdi32.dll			SaveDC
ole32.dll			CoInitialize
comctl32.dll			ImageList_Add
shell32.dll			SHGetFileInfoA
comdlg32.dll			GetOpenFileNameA

StringTable 041904b0

CompanyName	PainteR
FileDescription	Universal Adobe Patcher
FileVersion	2.0.0.0
InternalName	Universal Adobe Patcher
LegalCopyright	PainteR
OriginalFilename	adobesnr.exe
ProductName	Universal Adobe Patcher
ProductVersion	2.0.0.0

VS_FIXEDFILEINFO

FileVersion	2.0.0.0
ProductVersion	2.0.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	601600	EXE	06/19/1992 22:22:17	#
15c1	15	HTM		#
8cc04	4604	PNG	(256 x 256)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x15f64c

[?] can't find file_offset of VA 0x173e4c

[?] can't find file_offset of VA 0x173f80

[?] can't find file_offset of VA 0x1740b4

[?] can't find file_offset of VA 0x1741e8

[?] can't find file_offset of VA 0x17431c

[?] can't find file_offset of VA 0x174450

[?] can't find file_offset of VA 0x174584

[?] can't find file_offset of VA 0x1746b8

[?] can't find file_offset of VA 0x1747ec

[?] can't find file_offset of VA 0x1749bc

[?] can't find file_offset of VA 0x174ba0

[?] can't find file_offset of VA 0x174d70

[?] can't find file_offset of VA 0x174f40

[?] can't find file_offset of VA 0x175110

[?] can't find file_offset of VA 0x1752e0

[?] can't find file_offset of VA 0x1754b0

[?] can't find file_offset of VA 0x175680

[?] can't find file_offset of VA 0x175850

[?] can't find file_offset of VA 0x175a20

[?] can't find file_offset of VA 0x175ea8

[?] can't find file_offset of VA 0x175f68

[?] can't find file_offset of VA 0x176048

[?] can't find file_offset of VA 0x176128

[?] can't find file_offset of VA 0x176208

[?] can't find file_offset of VA 0x1762c8

[?] can't find file_offset of VA 0x176388

[?] can't find file_offset of VA 0x176468

[?] can't find file_offset of VA 0x1770c0

[?] can't find file_offset of VA 0x1773e8

[?] can't find file_offset of VA 0x1774a8

[?] can't find file_offset of VA 0x177588

[?] can't find file_offset of VA 0x177670

[?] can't find file_offset of VA 0x177998

[?] can't find file_offset of VA 0x177a58

[?] can't find file_offset of VA 0x177d80

[?] can't find file_offset of VA 0x1780a8

[?] can't find file_offset of VA 0x1783d0

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x17d164

[?] can't find file_offset of VA 0x17d1b8

[?] can't find file_offset of VA 0x17d204

[?] can't find file_offset of VA 0x17d2b0

[?] can't find file_offset of VA 0x17d438

[?] can't find file_offset of VA 0x17d608

[?] can't find file_offset of VA 0x17d74c

[?] can't find file_offset of VA 0x17d7cc

[?] can't find file_offset of VA 0x17d7f0

[?] can't find file_offset of VA 0x17d990

[?] can't find file_offset of VA 0x17db68

[?] can't find file_offset of VA 0x17dd54

[?] can't find file_offset of VA 0x17de40

[?] can't find file_offset of VA 0x17e1b0

[?] can't find file_offset of VA 0x17e270

[?] can't find file_offset of VA 0x17e36c

[?] can't find file_offset of VA 0x17e48c

[?] can't find file_offset of VA 0x17e938

[?] can't find file_offset of VA 0x17eca4

[?] can't find file_offset of VA 0x17f034

[?] can't find file_offset of VA 0x17f464

[?] can't find file_offset of VA 0x17f554

[?] can't find file_offset of VA 0x17f62c

[?] can't find file_offset of VA 0x17f8a0

[?] can't find file_offset of VA 0x17fc80

[?] can't find file_offset of VA 0x180008

[?] can't find file_offset of VA 0x1802e0

[?] can't find file_offset of VA 0x180fa0

[?] can't find file_offset of VA 0x181348

[?] can't find file_offset of VA 0x1820a0

[?] can't find file_offset of VA 0x182db0

[?] can't find file_offset of VA 0x182dc0

[?] can't find file_offset of VA 0x183444

[?] can't find file_offset of VA 0x183878

[?] can't find file_offset of VA 0x183d2c

[?] can't find file_offset of VA 0x183ed0

[?] can't find file_offset of VA 0x184544

[?] can't find file_offset of VA 0x184cf8

[?] can't find file_offset of VA 0x185404

[?] can't find file_offset of VA 0x19fd10

[?] can't find file_offset of VA 0x1a0350

[?] can't find file_offset of VA 0x1a1f40

[?] can't find file_offset of VA 0x1a3f1c

[?] can't find file_offset of VA 0x1a4210

[?] can't find file_offset of VA 0x1a4224

[?] can't find file_offset of VA 0x1a4238

[?] can't find file_offset of VA 0x1a424c

[?] can't find file_offset of VA 0x1a4260

[?] can't find file_offset of VA 0x1a4274

[?] can't find file_offset of VA 0x1a4288

[?] can't find file_offset of VA 0x1a429c

adobe.snr.patch.v2.0-painter.exe- adobesnr.exe - Universal Adobe Patcher- Win.Malware.Agent-6365699-0