filenameErrorShow.exe
size108544 (0x1a800)
md5011c597b4d79af4bc5b13606a1ede8d1
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
259289005
26128900138
2602890010
259337319
2603373116
2613373140
257289005
10109
260338121
255338121
258338121

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x66aab0dc
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion14.40
SizeOfCode0xde00
SizeOfInitializedData0xda00
SizeOfUninitializedData0
AddressOfEntryPoint0x18f0
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x1e000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xdcf00xde00R-X CODE
.rdata0xf0000x9abc0x9c00R-- IDATA
.data0x190000x1e180xc00RW- IDATA
.pdata0x1b0000xf240x1000R-- IDATA
.rsrc0x1c0000x5180x600R-- IDATA
.reloc0x1d0000x65c0x800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x181040x3c
RESOURCE0x1c0000x518
EXCEPTION0x1b0000xf24
SECURITY00
BASERELOC0x1d0000x65c
DEBUG0x16bc00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x16a800x140
Bound_IAT00
IAT0xf0000x2f0
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
DIALOG#1012920
GROUP_ICON#102200
module_namehintordfunction_name
USER32.dll686PostMessageW
USER32.dll603LoadIconW
USER32.dll276FindWindowW
USER32.dll889SetWindowLongPtrW
USER32.dll489GetWindowLongPtrW
USER32.dll503GetWindowTextLengthW
USER32.dll824SetForegroundWindow
USER32.dll239EnableWindow
USER32.dll563IsDlgButtonChecked
USER32.dll819SetDlgItemTextW
USER32.dll334GetDlgItemInt
USER32.dll817SetDlgItemInt
USER32.dll333GetDlgItem
USER32.dll242EndDialog
USER32.dll186DialogBoxParamW
USER32.dll892SetWindowPos
USER32.dll584IsWindow
USER32.dll791SendMessageW
KERNEL32.dll1257RtlPcToFileHeader
KERNEL32.dll1586WriteConsoleW
KERNEL32.dll137CloseHandle
KERNEL32.dll206CreateFileW
KERNEL32.dll1343SetFilePointerEx
KERNEL32.dll518GetConsoleMode
KERNEL32.dll522GetConsoleOutputCP
KERNEL32.dll425FlushFileBuffers
KERNEL32.dll865HeapReAlloc
KERNEL32.dll867HeapSize
KERNEL32.dll707GetProcessHeap
KERNEL32.dll961LCMapStringW
KERNEL32.dll437FreeLibrary
KERNEL32.dll979LoadLibraryExW
KERNEL32.dll993LocalLock
KERNEL32.dll991LocalFree
KERNEL32.dll433FormatMessageW
KERNEL32.dll1115QueryPerformanceCounter
KERNEL32.dll546GetCurrentProcessId
KERNEL32.dll550GetCurrentThreadId
KERNEL32.dll760GetSystemTimeAsFileTime
KERNEL32.dll888InitializeSListHead
KERNEL32.dll1247RtlCaptureContext
KERNEL32.dll1255RtlLookupFunctionEntry
KERNEL32.dll1262RtlVirtualUnwind
KERNEL32.dll910IsDebuggerPresent
KERNEL32.dll1486UnhandledExceptionFilter
KERNEL32.dll1421SetUnhandledExceptionFilter
KERNEL32.dll735GetStartupInfoW
KERNEL32.dll917IsProcessorFeaturePresent
KERNEL32.dll642GetModuleHandleW
KERNEL32.dll421FlsFree
KERNEL32.dll1261RtlUnwindEx
KERNEL32.dll619GetLastError
KERNEL32.dll1357SetLastError
KERNEL32.dll313EnterCriticalSection
KERNEL32.dll973LeaveCriticalSection
KERNEL32.dll276DeleteCriticalSection
KERNEL32.dll884InitializeCriticalSectionAndSpinCount
KERNEL32.dll1470TlsAlloc
KERNEL32.dll1472TlsGetValue
KERNEL32.dll1473TlsSetValue
KERNEL32.dll1471TlsFree
KERNEL32.dll700GetProcAddress
KERNEL32.dll309EncodePointer
KERNEL32.dll1138RaiseException
KERNEL32.dll737GetStdHandle
KERNEL32.dll1587WriteFile
KERNEL32.dll638GetModuleFileNameW
KERNEL32.dll545GetCurrentProcess
KERNEL32.dll360ExitProcess
KERNEL32.dll1452TerminateProcess
KERNEL32.dll641GetModuleHandleExW
KERNEL32.dll858HeapAlloc
KERNEL32.dll862HeapFree
KERNEL32.dll383FindClose
KERNEL32.dll389FindFirstFileExW
KERNEL32.dll406FindNextFileW
KERNEL32.dll923IsValidCodePage
KERNEL32.dll444GetACP
KERNEL32.dll675GetOEMCP
KERNEL32.dll459GetCPInfo
KERNEL32.dll480GetCommandLineA
KERNEL32.dll481GetCommandLineW
KERNEL32.dll1023MultiByteToWideChar
KERNEL32.dll1567WideCharToMultiByte
KERNEL32.dll578GetEnvironmentStringsW
KERNEL32.dll436FreeEnvironmentStringsW
KERNEL32.dll1384SetStdHandle
KERNEL32.dll601GetFileType
KERNEL32.dll742GetStringTypeW
KERNEL32.dll420FlsAlloc
KERNEL32.dll422FlsGetValue
KERNEL32.dll423FlsSetValue
offsetsizetypecomment
15c115HTM#
15d0102960BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK