filenamed4a88e69420913f16e57db808c3fe250b49b6d622e456cca76d6bab4c2a0b134
size238592 (0x3a400)
md5df412f046ee51a60769c62a9425376ae
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
1272912
1197821
14729923
9340356
1088
10978297
0035
2297826
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x56eb9fc3
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x122
Magic0x10b
LinkerVersion9.0
SizeOfCode0xf400
SizeOfInitializedData0x2c000
SizeOfUninitializedData0
AddressOfEntryPoint0xfbcc
BaseOfCode0x1000
BaseOfData0x11000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x40000
SizeOfHeaders0x400
CheckSum0x3cc8d
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000xf2620xf400R-X CODE
.rdata0x110000x63960x6400R-- IDATA
.data0x180000xa00c0x8e00RW- IDATA
.rsrc0x230000x187380x18800R-- IDATA
.reloc0x3c0000x31300x3200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x14ba40x12c
RESOURCE0x230000x18738
EXCEPTION00
SECURITY00
BASERELOC0x3c0000x2a88
DEBUG0x12ce00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00x40
Bound_IAT00
IAT0x110000x73c
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP1281+111127360
ICON#116400
ICON#27440
ICON#34880
ICON#42960
ICON#537520
ICON#622160
ICON#717360
ICON#813840
ICON#996400
ICON#1042640
ICON#1124400
ICON#1211280
ICON#134880
ICON#142960
ICON#1556720
ICON#1637520
ICON#1722160
ICON#1817360
ICON#1913840
ICON#2048750
ICON#21169360
ICON#2296400
ICON#2342640
ICON#2424400
ICON#2511280
GROUP_ICON#21211740
GROUP_ICON#21411880
VERSION#19480
module_namehintordfunction_name
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll691GlobalAlloc
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll1238UnmapViewOfFile
KERNEL32.dll693GlobalDeleteAtom
KERNEL32.dll1352lstrcpyW
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll936QueryPerformanceFrequency
KERNEL32.dll1121SetFileAttributesW
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll1048RtlUnwind
KERNEL32.dll143CreateFileW
KERNEL32.dll515GetLocalTime
KERNEL32.dll325FindNextFileW
KERNEL32.dll617GetStringTypeW
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll756IsBadCodePtr
KERNEL32.dll472GetEnvironmentStrings
KERNEL32.dll715HeapAlloc
KERNEL32.dll1260VirtualFree
KERNEL32.dll97CompareStringA
KERNEL32.dll1112SetErrorMode
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll302FindClose
KERNEL32.dll674GetVersion
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll1196SetWaitableTimer
KERNEL32.dll811LCMapStringA
KERNEL32.dll1159SetStdHandle
KERNEL32.dll748InterlockedExchange
KERNEL32.dll390GetCommandLineA
KERNEL32.dll1135SetHandleCount
KERNEL32.dll960ReadFile
KERNEL32.dll645GetTempPathW
KERNEL32.dll718HeapDestroy
KERNEL32.dll1223TlsGetValue
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll1317WriteFile
KERNEL32.dll614GetStringTypeA
KERNEL32.dll498GetFileTime
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll254EnumResourceLanguagesW
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll719HeapFree
KERNEL32.dll689GlobalAddAtomA
KERNEL32.dll906OutputDebugStringW
KERNEL32.dll586GetProcessHeap
KERNEL32.dll2ActivateActCtx
KERNEL32.dll475GetEnvironmentVariableA
KERNEL32.dll1264VirtualProtectEx
KERNEL32.dll829LoadLibraryExA
KERNEL32.dll496GetFileSize
KERNEL32.dll1346lstrcmpW
KERNEL32.dll360GetACP
KERNEL32.dll490GetFileAttributesW
KERNEL32.dll350FormatMessageW
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll852LockResource
KERNEL32.dll232DuplicateHandle
KERNEL32.dll664GetTimeZoneInformation
KERNEL32.dll1271WaitForMultipleObjects
KERNEL32.dll759IsBadReadPtr
KERNEL32.dll813LCMapStringW
KERNEL32.dll292FileTimeToLocalFileTime
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll281ExitProcess
KERNEL32.dll313FindFirstFileW
KERNEL32.dll352FreeEnvironmentStringsA
KERNEL32.dll870MulDiv
KERNEL32.dll100CompareStringW
KERNEL32.dll452GetCurrentThread
KERNEL32.dll117CopyFileW
KERNEL32.dll467GetDriveTypeW
KERNEL32.dll1263VirtualProtect
KERNEL32.dll1323WritePrivateProfileStringW
KERNEL32.dll1126SetFilePointer
KERNEL32.dll1345lstrcmpA
KERNEL32.dll1216TerminateProcess
KERNEL32.dll698GlobalFree
KERNEL32.dll456GetDateFormatW
KERNEL32.dll717HeapCreate
KERNEL32.dll661GetTimeFormatA
KERNEL32.dll627GetSystemInfo
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll724HeapSize
KERNEL32.dll1236UnlockFile
KERNEL32.dll850LockFile
KERNEL32.dll214DeleteFileW
KERNEL32.dll1357lstrlenA
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll1343lstrcatW
KERNEL32.dll1222TlsFree
KERNEL32.dll836LocalAlloc
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll945RaiseException
KERNEL32.dll572GetPrivateProfileIntW
KERNEL32.dll612GetStdHandle
KERNEL32.dll667GetUserDefaultLCID
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll576GetPrivateProfileSectionW
KERNEL32.dll578GetPrivateProfileStringW
KERNEL32.dll194CreateWaitableTimerW
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll454GetDateFormatA
KERNEL32.dll567GetOEMCP
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll1355lstrcpynW
KERNEL32.dll695GlobalFindAtomW
KERNEL32.dll762IsBadWritePtr
KERNEL32.dll833LoadResource
KERNEL32.dll676GetVersionExW
KERNEL32.dll285ExpandEnvironmentStringsW
KERNEL32.dll843LocalReAlloc
KERNEL32.dll663GetTimeFormatW
KERNEL32.dll516GetLocaleInfoA
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll675GetVersionExA
KERNEL32.dll1221TlsAlloc
KERNEL32.dll1201SizeofResource
KERNEL32.dll168CreateProcessW
KERNEL32.dll697GlobalFlags
KERNEL32.dll1110SetEnvironmentVariableA
KERNEL32.dll722HeapReAlloc
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll659GetTickCount
KERNEL32.dll701GlobalHandle
KERNEL32.dll293FileTimeToSystemTime
KERNEL32.dll679GetVolumeInformationW
KERNEL32.dll1224TlsSetValue
KERNEL32.dll499GetFileType
KERNEL32.dll370GetCPInfo
KERNEL32.dll652GetThreadLocale
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll82CloseHandle
KERNEL32.dll485GetFileAttributesA
KERNEL32.dll610GetStartupInfoA
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll1139SetLastError
KERNEL32.dll840LocalFree
KERNEL32.dll1351lstrcpyA
KERNEL32.dll1354lstrcpynA
KERNEL32.dll514GetLastError
KERNEL32.dll828LoadLibraryA
KERNEL32.dll155CreateMutexA
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll581GetProcAddress
KERNEL32.dll1358lstrlenW
KERNEL32.dll504GetFullPathNameA
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll354FreeLibrary
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll21AreFileApisANSI
KERNEL32.dll831LoadLibraryW
USER32.dll402GetWindowDC
USER32.dll301GetForegroundWindow
USER32.dll419GetWindowTextW
USER32.dll270GetClassInfoW
USER32.dll418GetWindowTextLengthW
USER32.dll447InvalidateRgn
USER32.dll14BeginPaint
USER32.dll269GetClassInfoExW
USER32.dll207DrawTextExW
USER32.dll626SendDlgItemMessageA
USER32.dll85CopyRect
USER32.dll710SetWindowPos
USER32.dll342GetMenuState
USER32.dll272GetClassLongW
USER32.dll354GetNextDlgTabItem
USER32.dll648SetCursor
USER32.dll621ScreenToClient
USER32.dll317GetKeyState
USER32.dll521MapWindowPoints
USER32.dll516MapDialogRect
USER32.dll30CallWindowProcW
USER32.dll398GetWindow
USER32.dll796ValidateRect
USER32.dll747SystemParametersInfoA
USER32.dll264GetCapture
USER32.dll563PeekMessageW
USER32.dll611RegisterWindowMessageW
USER32.dll590RegisterClassW
USER32.dll3AdjustWindowRectEx
USER32.dll764TranslateMessage
USER32.dll363GetPropW
USER32.dll715SetWindowTextW
USER32.dll812WindowFromPoint
USER32.dll639SetActiveWindow
USER32.dll380GetSysColorBrush
USER32.dll411GetWindowPlacement
USER32.dll263GetAsyncKeyState
USER32.dll110CreateWindowExW
USER32.dll63CheckMenuItem
USER32.dll446InvalidateRect
USER32.dll656SetDlgItemTextW
USER32.dll533MessageBoxW
USER32.dll274GetClassNameW
USER32.dll333GetMenuCheckMarkDimensions
USER32.dll220EndPaint
USER32.dll300GetFocus
USER32.dll256GetActiveWindow
USER32.dll347GetMessagePos
USER32.dll71ClientToScreen
USER32.dll468IsRectEmpty
USER32.dll243EqualRect
USER32.dll348GetMessageTime
USER32.dll809WinHelpW
USER32.dll461IsDialogMessageW
USER32.dll97CreateDialogIndirectParamW
USER32.dll566PostMessageW
USER32.dll627SendDlgItemMessageW
USER32.dll424GrayStringW
USER32.dll567PostQuitMessage
USER32.dll175DispatchMessageW
USER32.dll476IsWindowEnabled
USER32.dll658SetFocus
USER32.dll672SetMenuItemBitmaps
USER32.dll423GrayStringA
USER32.dll549OffsetRect
USER32.dll686SetRect
USER32.dll412GetWindowRect
USER32.dll216EnableWindow
USER32.dll482IsZoomed
USER32.dll576PtInRect
USER32.dll205DrawTextA
USER32.dll749TabbedTextOutA
USER32.dll612ReleaseCapture
USER32.dll246FillRect
USER32.dll356GetParent
USER32.dll381GetSystemMenu
USER32.dll406GetWindowLongW
USER32.dll457IsChild
USER32.dll705SetWindowContextHelpId
USER32.dll617RemovePropW
USER32.dll353GetNextDlgGroupItem
USER32.dll750TabbedTextOutW
USER32.dll218EndDialog
USER32.dll208DrawTextW
USER32.dll389GetTopWindow
USER32.dll445IntersectRect
USER32.dll708SetWindowLongW
USER32.dll685SetPropW
USER32.dll291GetDesktopWindow
USER32.dll480IsWindowVisible
USER32.dll60CharUpperW
USER32.dll492LoadIconA
USER32.dll819wsprintfW
USER32.dll774UnregisterClassW
USER32.dll479IsWindowUnicode
USER32.dll631SendMessageA
USER32.dll294GetDlgCtrlID
USER32.dll382GetSystemMetrics
USER32.dll640SetCapture
USER32.dll785UpdateWindow
USER32.dll659SetForegroundWindow
USER32.dll416GetWindowTextA
USER32.dll714SetWindowTextA
USER32.dll223EnumChildWindows
USER32.dll155DefWindowProcA
USER32.dll475IsWindow
USER32.dll298GetDlgItemTextW
GDI32.dll30CloseFigure
GDI32.dll18BeginPath
GDI32.dll9AnimatePalette
GDI32.dll23CancelDC
GDI32.dll32ColorCorrectPalette
GDI32.dll1AbortPath
GDI32.dll8AngleArc
GDI32.dll24CheckColorsInGamut
GDI32.dll2AddFontMemResourceEx
GDI32.dll525GetStockObject
GDI32.dllAbortDoc
GDI32.dll624SaveDC
GDI32.dll53CreateDIBSection
GDI32.dll555GetWindowExtEx
GDI32.dll542GetTextExtentPoint32W
GDI32.dll41CreateBitmap
GDI32.dll647SetDIBColorTable
GDI32.dll509GetObjectW
GDI32.dll638SetBkColor
GDI32.dll459GetDeviceCaps
GDI32.dll617RestoreDC
GDI32.dll230DeleteObject
GDI32.dll660SetMapMode
GDI32.dll80CreateRectRgnIndirect
GDI32.dll48CreateCompatibleDC
GDI32.dll227DeleteDC
GDI32.dll448GetClipBox
GDI32.dll697TextOutW
GDI32.dll602PtVisible
GDI32.dll696TextOutA
GDI32.dll73CreatePalette
GDI32.dll601PtInRegion
GDI32.dll78CreatePolygonRgn
GDI32.dll564LPtoDP
GDI32.dll536GetTextColor
GDI32.dll667SetPixel
GDI32.dll34CombineRgn
GDI32.dll79CreateRectRgn
GDI32.dll19BitBlt
GDI32.dll61CreateFontIndirectA
GDI32.dll164DPtoLP
GDI32.dll606RectVisible
GDI32.dll507GetObjectA
GDI32.dll672SetRectRgn
GDI32.dll552GetViewportExtEx
GDI32.dll599Polyline
COMDLG32.dll12GetOpenFileNameW
COMDLG32.dll14GetSaveFileNameW
COMDLG32.dll10GetFileTitleW
ADVAPI32.dll180CryptDecrypt
ADVAPI32.dll637RegSetValueExA
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll288FreeSid
ADVAPI32.dll263EqualSid
ADVAPI32.dll427LsaFreeMemory
ADVAPI32.dll593RegEnumValueA
ADVAPI32.dll203CryptReleaseContext
ADVAPI32.dll583RegDeleteValueA
ADVAPI32.dll608RegOpenKeyExA
ADVAPI32.dll607RegOpenKeyA
ADVAPI32.dll612RegOpenKeyW
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll623RegQueryValueW
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll564RegConnectRegistryW
ADVAPI32.dll602RegLoadKeyW
ADVAPI32.dll641RegUnLoadKeyW
ADVAPI32.dll568RegCreateKeyExA
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll182CryptDestroyHash
ADVAPI32.dll621RegQueryValueExA
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll181CryptDeriveKey
ADVAPI32.dll183CryptDestroyKey
ADVAPI32.dll594RegEnumValueW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll606RegOpenCurrentUser
ADVAPI32.dll592RegEnumKeyW
ADVAPI32.dll179CryptCreateHash
ADVAPI32.dll445LsaOpenPolicy
ADVAPI32.dll413LsaClose
ADVAPI32.dll176CryptAcquireContextA
ADVAPI32.dll200CryptHashData
ADVAPI32.dll384IsTextUnicode
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll186CryptEncrypt
ADVAPI32.dll580RegDeleteKeyW
SHELL32.dll189SHGetFileInfoW
SHELL32.dll207SHGetMalloc
SHELL32.dll213SHGetPathFromIDListA
SHELL32.dll182SHGetDesktopFolder
SHELL32.dll172SHFileOperationW
SHELL32.dll286ShellExecuteA
SHELL32.dll190SHGetFolderLocation
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll120SHBindToParent
SHELL32.dll123SHBrowseForFolderW
ole32.dll95CoRevokeClassObject
ole32.dll373StgOpenStorageOnILockBytes
ole32.dll329OleUninitialize
ole32.dll16CoCreateInstance
ole32.dll6CLSIDFromProgID
ole32.dll376StringFromCLSID
ole32.dll62CoInitialize
ole32.dll108CoUninitialize
ole32.dll104CoTaskMemFree
ole32.dll128CreateILockBytesOnHGlobal
ole32.dll8CLSIDFromString
ole32.dll29CoFreeUnusedLibraries
ole32.dll360StgCreateDocfileOnILockBytes
ole32.dll103CoTaskMemAlloc
ole32.dll38CoGetClassObject
ole32.dll308OleIsCurrentClipboard
ole32.dll86CoRegisterMessageFilter
ole32.dll306OleInitialize
ole32.dll301OleFlushClipboard
COMCTL32.dll83ImageList_Create
COMCTL32.dll84ImageList_Destroy
COMCTL32.dll111ImageList_ReplaceIcon
COMCTL32.dll133PropertySheetW
COMCTL32.dll79ImageList_AddMasked
COMCTL32.dll9CreatePropertySheetPageW
COMCTL32.dll113ImageList_SetBkColor
COMCTL32.dll17
COMCTL32.dll49DestroyPropertySheetPage
COMCTL32.dll123InitCommonControlsEx
COMCTL32.dll146_TrackMouseEvent
SHLWAPI.dll113PathIsUNCW
SHLWAPI.dll151PathStripToRootW
SHLWAPI.dll73PathFindFileNameW
SHLWAPI.dll71PathFindExtensionW
SHLWAPI.dll318StrRetToBufW
VERSION.dll3GetFileVersionInfoSizeA
VERSION.dllGetFileVersionInfoA
VERSION.dll13VerQueryValueA
MPR.dll6WNetAddConnection2W
MPR.dll14WNetCancelConnectionW
oledlg.dll8
oledlg.dll3OleUIBusyW
gdiplus.dll80GdipCreateBitmapFromScan0
gdiplus.dll237GdipFree
gdiplus.dll46GdipBitmapUnlockBits
gdiplus.dll289GdipGetImageGraphicsContext
gdiplus.dll293GdipGetImagePalette
gdiplus.dll290GdipGetImageHeight
gdiplus.dll54GdipCloneImage
gdiplus.dll295GdipGetImagePixelFormat
gdiplus.dll629GdiplusStartup
gdiplus.dll73GdipCreateBitmapFromFile
gdiplus.dll144GdipDeleteGraphics
gdiplus.dll176GdipDrawImageI
gdiplus.dll300GdipGetImageWidth
gdiplus.dll294GdipGetImagePaletteSize
gdiplus.dll152GdipDisposeImage
gdiplus.dll33GdipAlloc
gdiplus.dll628GdiplusShutdown
gdiplus.dll43GdipBitmapLockBits
gdiplus.dll74GdipCreateBitmapFromFileICM
msvcrt.dll395_mbsicmp
msvcrt.dll152__set_app_type
msvcrt.dll182_adjust_fdiv
msvcrt.dll78_XcptFilter
msvcrt.dll133__p__fmode
msvcrt.dll477_setmbcp
msvcrt.dll314_initterm
msvcrt.dll52void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll542_vsnprintf
msvcrt.dll106__dllonexit
msvcrt.dll214_controlfp
msvcrt.dll494_splitpath
msvcrt.dll128__p__commode
msvcrt.dll66_CIsin
msvcrt.dll168_acmdln
msvcrt.dll676free
msvcrt.dll154__setusermatherr
msvcrt.dll71_CxxThrowException
msvcrt.dll109__getmainargs
msvcrt.dll16public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

msvcrt.dll82__CxxFrameHandler
msvcrt.dll435_onexit
msvcrt.dll237_except_handler3
msvcrt.dll389_mbscmp
msvcrt.dll246_exit
msvcrt.dll655exit
msvcrt.dll501_strdup

StringTable 040904b0

CompanyNameDouthsoftware.com
FileDescriptionAdvanced Task Scheduler 32-bit Edition
FileVersion4.1.0.612
InternalNameBdvanced Task Scheduler 32-bit Edition
LegalCopyrightCopyright © Southsoftware.com, 2002-2015
OriginalFilename3dvscheduler_admin.exe
ProductNameAdvanced Task Scheduler 32-bit Edition
ProductVersion4.1.0.612

VS_FIXEDFILEINFO

FileVersion4.1.0.612
ProductVersion4.1.0.612
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0238592EXE03/18/2016 06:27:15#
15c115HTM#
2a5404875PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x0