| filename | calc.exe | |
|---|---|---|
| size | 918528 (0xe0400) | |
| md5 | 10e4a1d2132ccb5c6759f038cdb6f3c9 | |
| type | PE32+ executable (GUI) x86-64, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0xf0 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 149 | 30729 | 2 |
| 132 | 30729 | 46 |
| 1 | 0 | 404 |
| 147 | 30729 | 33 |
| 131 | 30729 | 23 |
| 138 | 30729 | 87 |
| 148 | 30729 | 1 |
| 145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
StringTable 040904B0
| CompanyName | Microsoft Corporation |
| FileDescription | Windows Calculator |
| FileVersion | 6.1.7600.16385 (win7_rtm.090713-1255) |
| InternalName | CALC |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | CALC.EXE |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 6.1.7600.16385 |
VS_FIXEDFILEINFO
| FileVersion | 6.1.7600.16385 |
| ProductVersion | 6.1.7600.16385 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 0x40004 |
| FileType | 1 |
| FileSubtype | 0 |
| offset | size | type | comment | |
|---|---|---|---|---|
| 15c1 | 15 | HTM | # | |
| 8a7c8 | 27569 | PNG | (256 x 256) | # |
| 99ad0 | 4657 | PNG | (750 x 400) | # |
| 9ad08 | 5454 | PNG | (938 x 500) | # |
| 9c258 | 6855 | PNG | (1125 x 600) | # |
| 9dd20 | 4069 | PNG | (190 x 50) | # |
| 9ed08 | 4372 | PNG | (238 x 63) | # |
| 9fe20 | 4523 | PNG | (285 x 75) | # |
| a0fd0 | 2995 | PNG | (190 x 50) | # |
| a1b88 | 3105 | PNG | (238 x 63) | # |
| a27b0 | 3128 | PNG | (285 x 75) | # |
| a33e8 | 4215 | PNG | (385 x 50) | # |
| a4460 | 4561 | PNG | (482 x 63) | # |
| a5638 | 4718 | PNG | (578 x 75) | # |
| a68a8 | 3040 | PNG | (385 x 50) | # |
| a7488 | 3121 | PNG | (482 x 63) | # |
| a80c0 | 3222 | PNG | (578 x 75) | # |
| a8d58 | 4656 | PNG | (190 x 151) | # |
| a9f88 | 4877 | PNG | (238 x 188) | # |
| ab298 | 5159 | PNG | (285 x 227) | # |
| ac6c0 | 3256 | PNG | (190 x 151) | # |
| ad378 | 3396 | PNG | (238 x 188) | # |
| ae0c0 | 3578 | PNG | (285 x 227) | # |
| aeec0 | 4918 | PNG | (385 x 151) | # |
| b01f8 | 5201 | PNG | (482 x 188) | # |
| b1650 | 5560 | PNG | (578 x 227) | # |
| b2c08 | 3380 | PNG | (385 x 151) | # |
| b3940 | 3792 | PNG | (482 x 188) | # |
| b4810 | 3830 | PNG | (578 x 227) | # |
| b5708 | 3749 | PNG | (68 x 16) | # |
| b65b0 | 3969 | PNG | (88 x 21) | # |
| b7538 | 4164 | PNG | (104 x 25) | # |
| b8580 | 3774 | PNG | (68 x 16) | # |
| b9440 | 4003 | PNG | (88 x 21) | # |
| ba3e8 | 4204 | PNG | (104 x 25) | # |
| bb458 | 4427 | PNG | (136 x 27) | # |
| bc5a8 | 4856 | PNG | (172 x 34) | # |
| bd8a0 | 5178 | PNG | (204 x 41) | # |
| bece0 | 4955 | PNG | (292 x 27) | # |
| c0040 | 5592 | PNG | (364 x 34) | # |
| c1618 | 6209 | PNG | (440 x 41) | # |
| c2e60 | 4189 | PNG | (136 x 27) | # |
| c3ec0 | 4595 | PNG | (172 x 34) | # |
| c50b8 | 4981 | PNG | (204 x 41) | # |
| c6430 | 4706 | PNG | (136 x 59) | # |
| c7698 | 5512 | PNG | (172 x 73) | # |
| c8c20 | 6595 | PNG | (204 x 89) | # |
| ca5e8 | 4126 | PNG | (136 x 27) | # |
| cb608 | 4529 | PNG | (172 x 34) | # |
| cc7c0 | 4932 | PNG | (204 x 41) | # |
| cdb08 | 3097 | PNG | (385 x 62) | # |
| ce728 | 3232 | PNG | (481 x 77) | # |
| cf3c8 | 3349 | PNG | (578 x 93) | # |
| d00e0 | 3023 | PNG | (73 x 91) | # |
| d0cb0 | 3056 | PNG | (92 x 113) | # |
| d18a0 | 3168 | PNG | (110 x 137) | # |
| d2500 | 2965 | PNG | (190 x 27) | # |
| d3098 | 3012 | PNG | (238 x 33) | # |
| d3c60 | 3066 | PNG | (285 x 41) | # |
| d4860 | 3496 | PNG | (296 x 242) | # |
| d5608 | 3871 | PNG | (454 x 303) | # |
| d6528 | 4243 | PNG | (545 x 363) | # |
| d75c0 | 3653 | PNG | (296 x 308) | # |
| d8408 | 4117 | PNG | (454 x 385) | # |
| d9420 | 4586 | PNG | (545 x 461) | # |
| da610 | 3827 | PNG | (363 x 342) | # |
| db508 | 4246 | PNG | (454 x 428) | # |
| dc5a0 | 4766 | PNG | (545 x 513) | # |
| dd840 | 2921 | PNG | (34 x 27) | # |
| de3b0 | 2957 | PNG | (43 x 33) | # |
| def40 | 2993 | PNG | (51 x 41) | # |
| dfaf1 | 2319 | BIN | overlay data past EOF | # |
![]() |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x2e8
offset:( 0x )