filenamex키오토.exe
size802606 (0xc3f2e)
md50b4d3670f92f50717308b3fe37273c0d
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1713031952
17030319150
131307297
1473072925
10420
1189663
1583031928
1753031941
154303191
157303191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4d1e6c73
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion10.0
SizeOfCode0x97e00
SizeOfInitializedData0x2bc00
SizeOfUninitializedData0
AddressOfEntryPoint0x86073
BaseOfCode0x1000
BaseOfData0x99000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0xcd000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x400000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x97d610x97e00R-X CODE
.rdata0x990000x2228a0x22400R-- IDATA
.data0xbc0000x99380x2c00RW- IDATA
.rsrc0xc60000x6a180x6c00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xb8ed40x104
RESOURCE0xc60000x3b00
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x990000x6a0
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#142641252
ICON#62961252
ICON#711281252
ICON#82961252
ICON#911281252
ICON#102961252
ICON#1111281252
ICON#127441252
ICON#132961252
ICON#142961252
ICON#152961252
ICON#1611281252
MENU#2117121252
DIALOG#2052321252
ACCELERATORS#212721252
GROUP_ICON#159201252
GROUP_ICON#160201252
GROUP_ICON#206341252
GROUP_ICON#207341252
GROUP_ICON#208341252
GROUP_ICON#228201252
GROUP_ICON#229201252
GROUP_ICON#230341252
VERSION#15081252
MANIFEST#16761252
module_namehintordfunction_name
WSOCK32.dll116
WSOCK32.dll11
WSOCK32.dll52
WSOCK32.dll57
WSOCK32.dll115
WINMM.dll110mixerSetControlDetails
WINMM.dll178waveOutGetVolume
WINMM.dll27joyGetPosEx
WINMM.dll99mixerGetControlDetailsW
WINMM.dll109mixerOpen
WINMM.dll101mixerGetDevCapsW
WINMM.dll104mixerGetLineControlsW
WINMM.dll187waveOutSetVolume
WINMM.dll97mixerClose
WINMM.dll50mciSendStringW
WINMM.dll24joyGetDevCapsW
WINMM.dll106mixerGetLineInfoW
VERSION.dll14VerQueryValueW
VERSION.dll6GetFileVersionInfoW
VERSION.dll5GetFileVersionInfoSizeW
COMCTL32.dll111ImageList_ReplaceIcon
COMCTL32.dll79ImageList_AddMasked
COMCTL32.dll17
COMCTL32.dll99ImageList_GetIconSize
COMCTL32.dll83ImageList_Create
COMCTL32.dll84ImageList_Destroy
COMCTL32.dll12CreateStatusWindowW
KERNEL32.dll168CreateProcessW
KERNEL32.dll490GetFileAttributesW
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll479GetExitCodeProcess
KERNEL32.dll1326WriteProcessMemory
KERNEL32.dll963ReadProcessMemory
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll896OpenProcess
KERNEL32.dll1216TerminateProcess
KERNEL32.dll1149SetPriorityClass
KERNEL32.dll1139SetLastError
KERNEL32.dll476GetEnvironmentVariableW
KERNEL32.dll515GetLocalTime
KERNEL32.dll456GetDateFormatW
KERNEL32.dll663GetTimeFormatW
KERNEL32.dll1112SetErrorMode
KERNEL32.dll463GetDiskFreeSpaceW
KERNEL32.dll1193SetVolumeLabelW
KERNEL32.dll143CreateFileW
KERNEL32.dll221DeviceIoControl
KERNEL32.dll467GetDriveTypeW
KERNEL32.dll679GetVolumeInformationW
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll960ReadFile
KERNEL32.dll1317WriteFile
KERNEL32.dll706GlobalSize
KERNEL32.dll214DeleteFileW
KERNEL32.dll1121SetFileAttributesW
KERNEL32.dll838LocalFileTimeToFileTime
KERNEL32.dll1130SetFileTime
KERNEL32.dll631GetSystemTime
KERNEL32.dll399GetComputerNameW
KERNEL32.dll687GetWindowsDirectoryW
KERNEL32.dll645GetTempPathW
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll609GetShortPathNameW
KERNEL32.dll831LoadLibraryW
KERNEL32.dll354FreeLibrary
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll1263VirtualProtect
KERNEL32.dll100CompareStringW
KERNEL32.dll1027RemoveDirectoryW
KERNEL32.dll117CopyFileW
KERNEL32.dll906OutputDebugStringW
KERNEL32.dll350FormatMessageW
KERNEL32.dll578GetPrivateProfileStringW
KERNEL32.dll576GetPrivateProfileSectionW
KERNEL32.dll575GetPrivateProfileSectionNamesW
KERNEL32.dll1323WritePrivateProfileStringW
KERNEL32.dll1321WritePrivateProfileSectionW
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll360GetACP
KERNEL32.dll499GetFileType
KERNEL32.dll1127SetFilePointerEx
KERNEL32.dll497GetFileSizeEx
KERNEL32.dll1213SystemTimeToFileTime
KERNEL32.dll293FileTimeToSystemTime
KERNEL32.dll496GetFileSize
KERNEL32.dll258EnumResourceNamesW
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll334FindResourceW
KERNEL32.dll833LoadResource
KERNEL32.dll852LockResource
KERNEL32.dll1201SizeofResource
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll136CreateFileA
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1221TlsAlloc
KERNEL32.dll778IsValidCodePage
KERNEL32.dll567GetOEMCP
KERNEL32.dll370GetCPInfo
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll723HeapSetInformation
KERNEL32.dll391GetCommandLineW
KERNEL32.dll721HeapQueryInformation
KERNEL32.dll724HeapSize
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll719HeapFree
KERNEL32.dll722HeapReAlloc
KERNEL32.dll281ExitProcess
KERNEL32.dll715HeapAlloc
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll612GetStdHandle
KERNEL32.dll717HeapCreate
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll867MoveFileW
KERNEL32.dll54Beep
KERNEL32.dll1111SetEnvironmentVariableW
KERNEL32.dll292FileTimeToLocalFileTime
KERNEL32.dll302FindClose
KERNEL32.dll325FindNextFileW
KERNEL32.dll313FindFirstFileW
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll870MulDiv
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll676GetVersionExW
KERNEL32.dll514GetLastError
KERNEL32.dll158CreateMutexW
KERNEL32.dll82CloseHandle
KERNEL32.dll480GetExitCodeThread
KERNEL32.dll1177SetThreadPriority
KERNEL32.dll181CreateThread
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll709GlobalUnlock
KERNEL32.dll698GlobalFree
KERNEL32.dll691GlobalAlloc
KERNEL32.dll702GlobalLock
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll581GetProcAddress
KERNEL32.dll447GetCurrentDirectoryW
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll1101SetCurrentDirectoryW
KERNEL32.dll1202Sleep
KERNEL32.dll659GetTickCount
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll1135SetHandleCount
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll617GetStringTypeW
KERNEL32.dll667GetUserDefaultLCID
KERNEL32.dll1222TlsFree
KERNEL32.dll516GetLocaleInfoA
KERNEL32.dll269EnumSystemLocalesA
KERNEL32.dll780IsValidLocale
KERNEL32.dll813LCMapStringW
KERNEL32.dll945RaiseException
KERNEL32.dll1048RtlUnwind
KERNEL32.dll410GetConsoleCP
KERNEL32.dll428GetConsoleMode
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll1126SetFilePointer
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll1159SetStdHandle
KERNEL32.dll586GetProcessHeap
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1265VirtualQuery
USER32.dll266GetCaretPos
USER32.dll71ClientToScreen
USER32.dll285GetCursor
USER32.dll337GetMenuItemCount
USER32.dll338GetMenuItemID
USER32.dll378GetSubMenu
USER32.dll344GetMenuStringW
USER32.dll476IsWindowEnabled
USER32.dll245ExitWindowsEx
USER32.dll668SetMenu
USER32.dll251FlashWindow
USER32.dll521MapWindowPoints
USER32.dll586RedrawWindow
USER32.dll785UpdateWindow
USER32.dll347GetMessagePos
USER32.dll272GetClassLongW
USER32.dll149DefDlgProcW
USER32.dll30CallWindowProcW
USER32.dll65CheckRadioButton
USER32.dll445IntersectRect
USER32.dll576PtInRect
USER32.dll10AppendMenuW
USER32.dll670SetMenuDefaultItem
USER32.dll615RemoveMenu
USER32.dll674SetMenuItemInfoW
USER32.dll466IsMenu
USER32.dll106CreateMenu
USER32.dll107CreatePopupMenu
USER32.dll671SetMenuInfo
USER32.dll164DestroyMenu
USER32.dll759TrackPopupMenuEx
USER32.dll103CreateIconIndirect
USER32.dll291GetDesktopWindow
USER32.dll84CopyImage
USER32.dll513LookupIconIdFromDirectoryEx
USER32.dll102CreateIconFromResourceEx
USER32.dll398GetWindow
USER32.dll16BringWindowToTop
USER32.dll389GetTopWindow
USER32.dll3AdjustWindowRectEx
USER32.dll208DrawTextW
USER32.dll686SetRect
USER32.dll307GetIconInfo
USER32.dll715SetWindowTextW
USER32.dll480IsWindowVisible
USER32.dll63CheckMenuItem
USER32.dll224EnumClipboardFormats
USER32.dll647SetClipboardViewer
USER32.dll485LoadAcceleratorsW
USER32.dll613ReleaseDC
USER32.dll289GetDC
USER32.dll611RegisterWindowMessageW
USER32.dll331GetMenu
USER32.dll110CreateWindowExW
USER32.dll589RegisterClassExW
USER32.dll491LoadCursorW
USER32.dll495LoadImageW
USER32.dll163DestroyIcon
USER32.dll166DestroyWindow
USER32.dll452IsCharAlphaW
USER32.dll520MapVirtualKeyW
USER32.dll316GetKeyNameTextW
USER32.dll800VkKeyScanExW
USER32.dll419GetWindowTextW
USER32.dll817mouse_event
USER32.dll812WindowFromPoint
USER32.dll382GetSystemMetrics
USER32.dll816keybd_event
USER32.dll662SetKeyboardState
USER32.dll322GetKeyboardState
USER32.dll288GetCursorPos
USER32.dll263GetAsyncKeyState
USER32.dll12AttachThreadInput
USER32.dll630SendInput
USER32.dll776UnregisterHotKey
USER32.dll598RegisterHotKey
USER32.dll567PostQuitMessage
USER32.dll635SendMessageTimeoutW
USER32.dll768UnhookWindowsHookEx
USER32.dll719SetWindowsHookExW
USER32.dll569PostThreadMessageW
USER32.dll456IsCharUpperW
USER32.dll454IsCharLowerW
USER32.dll451IsCharAlphaNumericW
USER32.dll756ToUnicodeEx
USER32.dll318GetKeyboardLayout
USER32.dll28CallNextHookEx
USER32.dll46CharLowerW
USER32.dll550OpenClipboard
USER32.dll278GetClipboardData
USER32.dll280GetClipboardFormatNameW
USER32.dll73CloseClipboard
USER32.dll646SetClipboardData
USER32.dll213EmptyClipboard
USER32.dll525MessageBeep
USER32.dll656SetDlgItemTextW
USER32.dll295GetDlgItem
USER32.dll627SendDlgItemMessageW
USER32.dll172DialogBoxParamW
USER32.dll659SetForegroundWindow
USER32.dll156DefWindowProcW
USER32.dll246FillRect
USER32.dll200DrawIconEx
USER32.dll380GetSysColorBrush
USER32.dll533MessageBoxW
USER32.dll379GetSysColor
USER32.dll566PostMessageW
USER32.dll250FindWindowW
USER32.dll218EndDialog
USER32.dll475IsWindow
USER32.dll175DispatchMessageW
USER32.dll764TranslateMessage
USER32.dll762TranslateAcceleratorW
USER32.dll735ShowWindow
USER32.dll86CountClipboardFormats
USER32.dll708SetWindowLongW
USER32.dll465IsIconic
USER32.dll482IsZoomed
USER32.dll242EnumWindows
USER32.dll418GetWindowTextLengthW
USER32.dll216EnableWindow
USER32.dll446InvalidateRect
USER32.dll710SetWindowPos
USER32.dll711SetWindowRgn
USER32.dll658SetFocus
USER32.dll639SetActiveWindow
USER32.dll223EnumChildWindows
USER32.dll539MoveWindow
USER32.dll364GetQueueStatus
USER32.dll412GetWindowRect
USER32.dll276GetClientRect
USER32.dll214EnableMenuItem
USER32.dll748SystemParametersInfoW
USER32.dll621ScreenToClient
USER32.dll461IsDialogMessageW
USER32.dll636SendMessageW
USER32.dll406GetWindowLongW
USER32.dll317GetKeyState
USER32.dll483KillTimer
USER32.dll563PeekMessageW
USER32.dll300GetFocus
USER32.dll274GetClassNameW
USER32.dll420GetWindowThreadProcessId
USER32.dll301GetForegroundWindow
USER32.dll349GetMessageW
USER32.dll699SetTimer
USER32.dll356GetParent
USER32.dll294GetDlgCtrlID
USER32.dll60CharUpperW
USER32.dll458IsClipboardFormatAvailable
USER32.dll34ChangeClipboardChain
GDI32.dll449GetClipRgn
GDI32.dll322FillRgn
GDI32.dll448GetClipBox
GDI32.dll639SetBkMode
GDI32.dll293EnumFontFamiliesExW
GDI32.dll53CreateDIBSection
GDI32.dll373GdiFlush
GDI32.dll516GetPixel
GDI32.dll305ExcludeClipRect
GDI32.dll678SetTextColor
GDI32.dll19BitBlt
GDI32.dll47CreateCompatibleBitmap
GDI32.dll530GetSystemPaletteEntries
GDI32.dll458GetDIBits
GDI32.dll48CreateCompatibleDC
GDI32.dll78CreatePolygonRgn
GDI32.dll79CreateRectRgn
GDI32.dll81CreateRoundRectRgn
GDI32.dll56CreateEllipticRgn
GDI32.dll227DeleteDC
GDI32.dll509GetObjectW
GDI32.dll550GetTextMetricsW
GDI32.dll548GetTextFaceW
GDI32.dll631SelectObject
GDI32.dll525GetStockObject
GDI32.dll50CreateDCW
GDI32.dll84CreateSolidBrush
GDI32.dll459GetDeviceCaps
GDI32.dll638SetBkColor
GDI32.dll230DeleteObject
GDI32.dll65CreateFontW
COMDLG32.dll12GetOpenFileNameW
COMDLG32.dll14GetSaveFileNameW
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll31AdjustTokenPrivileges
ADVAPI32.dll407LookupPrivilegeValueW
ADVAPI32.dll503OpenProcessToken
ADVAPI32.dll87CloseServiceHandle
ADVAPI32.dll768UnlockServiceDatabase
ADVAPI32.dll392LockServiceDatabase
ADVAPI32.dll505OpenSCManagerW
ADVAPI32.dll357GetUserNameW
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll594RegEnumValueW
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll564RegConnectRegistryW
ADVAPI32.dll584RegDeleteValueW
SHELL32.dll32DragQueryPoint
SHELL32.dll172SHFileOperationW
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll123SHBrowseForFolderW
SHELL32.dll182SHGetDesktopFolder
SHELL32.dll207SHGetMalloc
SHELL32.dll289ShellExecuteExW
SHELL32.dll302Shell_NotifyIconW
SHELL32.dll27DragFinish
SHELL32.dll31DragQueryFileW
SHELL32.dll43ExtractIconW
ole32.dll306OleInitialize
ole32.dll329OleUninitialize
ole32.dll62CoInitialize
ole32.dll16CoCreateInstance
ole32.dll108CoUninitialize
ole32.dll8CLSIDFromString
ole32.dll53CoGetObject
ole32.dll377StringFromGUID2
ole32.dll134CreateStreamOnHGlobal
OLEAUT32.dll22
OLEAUT32.dll18
OLEAUT32.dll148
OLEAUT32.dll21
OLEAUT32.dll17
OLEAUT32.dll20
OLEAUT32.dll19
OLEAUT32.dll2
OLEAUT32.dll12
OLEAUT32.dll9
OLEAUT32.dll15
OLEAUT32.dll6
OLEAUT32.dll7
OLEAUT32.dll35
OLEAUT32.dll16
OLEAUT32.dll418

StringTable 040904b0

FileDescription
FileVersion1.0.91.05
InternalName
LegalCopyright
OriginalFilename
ProductName
ProductVersion1.0.91.05

VS_FIXEDFILEINFO

FileVersion1.0.91.5
ProductVersion1.0.91.5
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0802304EXE12/31/2010 23:51:15#
15c115HTM#
c3e00302BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 802606 bytes (784 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK