filename | calc.exe | |
---|---|---|
size | 918528 (0xe0400) | |
md5 | 10e4a1d2132ccb5c6759f038cdb6f3c9 | |
type | PE32+ executable (GUI) x86-64, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xf0 |
Rich Header
lib id | version | times used |
---|---|---|
149 | 30729 | 2 |
132 | 30729 | 46 |
1 | 0 | 404 |
147 | 30729 | 33 |
131 | 30729 | 23 |
138 | 30729 | 87 |
148 | 30729 | 1 |
145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
StringTable 040904B0
CompanyName | Microsoft Corporation |
FileDescription | Windows Calculator |
FileVersion | 6.1.7600.16385 (win7_rtm.090713-1255) |
InternalName | CALC |
LegalCopyright | © Microsoft Corporation. All rights reserved. |
OriginalFilename | CALC.EXE |
ProductName | Microsoft® Windows® Operating System |
ProductVersion | 6.1.7600.16385 |
VS_FIXEDFILEINFO
FileVersion | 6.1.7600.16385 |
ProductVersion | 6.1.7600.16385 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 0x40004 |
FileType | 1 |
FileSubtype | 0 |
offset | size | type | comment | |
---|---|---|---|---|
15c1 | 15 | HTM | # | |
8a7c8 | 27569 | PNG | (256 x 256) | # |
99ad0 | 4657 | PNG | (750 x 400) | # |
9ad08 | 5454 | PNG | (938 x 500) | # |
9c258 | 6855 | PNG | (1125 x 600) | # |
9dd20 | 4069 | PNG | (190 x 50) | # |
9ed08 | 4372 | PNG | (238 x 63) | # |
9fe20 | 4523 | PNG | (285 x 75) | # |
a0fd0 | 2995 | PNG | (190 x 50) | # |
a1b88 | 3105 | PNG | (238 x 63) | # |
a27b0 | 3128 | PNG | (285 x 75) | # |
a33e8 | 4215 | PNG | (385 x 50) | # |
a4460 | 4561 | PNG | (482 x 63) | # |
a5638 | 4718 | PNG | (578 x 75) | # |
a68a8 | 3040 | PNG | (385 x 50) | # |
a7488 | 3121 | PNG | (482 x 63) | # |
a80c0 | 3222 | PNG | (578 x 75) | # |
a8d58 | 4656 | PNG | (190 x 151) | # |
a9f88 | 4877 | PNG | (238 x 188) | # |
ab298 | 5159 | PNG | (285 x 227) | # |
ac6c0 | 3256 | PNG | (190 x 151) | # |
ad378 | 3396 | PNG | (238 x 188) | # |
ae0c0 | 3578 | PNG | (285 x 227) | # |
aeec0 | 4918 | PNG | (385 x 151) | # |
b01f8 | 5201 | PNG | (482 x 188) | # |
b1650 | 5560 | PNG | (578 x 227) | # |
b2c08 | 3380 | PNG | (385 x 151) | # |
b3940 | 3792 | PNG | (482 x 188) | # |
b4810 | 3830 | PNG | (578 x 227) | # |
b5708 | 3749 | PNG | (68 x 16) | # |
b65b0 | 3969 | PNG | (88 x 21) | # |
b7538 | 4164 | PNG | (104 x 25) | # |
b8580 | 3774 | PNG | (68 x 16) | # |
b9440 | 4003 | PNG | (88 x 21) | # |
ba3e8 | 4204 | PNG | (104 x 25) | # |
bb458 | 4427 | PNG | (136 x 27) | # |
bc5a8 | 4856 | PNG | (172 x 34) | # |
bd8a0 | 5178 | PNG | (204 x 41) | # |
bece0 | 4955 | PNG | (292 x 27) | # |
c0040 | 5592 | PNG | (364 x 34) | # |
c1618 | 6209 | PNG | (440 x 41) | # |
c2e60 | 4189 | PNG | (136 x 27) | # |
c3ec0 | 4595 | PNG | (172 x 34) | # |
c50b8 | 4981 | PNG | (204 x 41) | # |
c6430 | 4706 | PNG | (136 x 59) | # |
c7698 | 5512 | PNG | (172 x 73) | # |
c8c20 | 6595 | PNG | (204 x 89) | # |
ca5e8 | 4126 | PNG | (136 x 27) | # |
cb608 | 4529 | PNG | (172 x 34) | # |
cc7c0 | 4932 | PNG | (204 x 41) | # |
cdb08 | 3097 | PNG | (385 x 62) | # |
ce728 | 3232 | PNG | (481 x 77) | # |
cf3c8 | 3349 | PNG | (578 x 93) | # |
d00e0 | 3023 | PNG | (73 x 91) | # |
d0cb0 | 3056 | PNG | (92 x 113) | # |
d18a0 | 3168 | PNG | (110 x 137) | # |
d2500 | 2965 | PNG | (190 x 27) | # |
d3098 | 3012 | PNG | (238 x 33) | # |
d3c60 | 3066 | PNG | (285 x 41) | # |
d4860 | 3496 | PNG | (296 x 242) | # |
d5608 | 3871 | PNG | (454 x 303) | # |
d6528 | 4243 | PNG | (545 x 363) | # |
d75c0 | 3653 | PNG | (296 x 308) | # |
d8408 | 4117 | PNG | (454 x 385) | # |
d9420 | 4586 | PNG | (545 x 461) | # |
da610 | 3827 | PNG | (363 x 342) | # |
db508 | 4246 | PNG | (454 x 428) | # |
dc5a0 | 4766 | PNG | (545 x 513) | # |
dd840 | 2921 | PNG | (34 x 27) | # |
de3b0 | 2957 | PNG | (43 x 33) | # |
def40 | 2993 | PNG | (51 x 41) | # |
dfaf1 | 2319 | BIN | overlay data past EOF | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x2e8