333.exe - hasplms.exe - Sentinel HASP License Manager Service

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	333.exe
size	3750400 (0x393a00)
md5	122d17832ac8daac1546bc5277236575

type	PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0
blocks_in_file	0x22
num_relocs	0
header_paragraphs	0xc0
min_extra_paragraphs	0x400
max_extra_paragraphs	0x400
ss	0x330
sp	0x100
checksum	0
ip	0x2a
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0x100000001
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x40

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4b295ae3
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x30e
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0x2da000
SizeOfInitializedData	0x3b2000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x67b000
BaseOfCode	0x1000
BaseOfData	0x2db000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xa11000
SizeOfHeaders	0x400
CheckSum	0x68dae9
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.sect0	0x1000	0x678007	0	RWX UDATA
.rsrc	0x67a000	0x750	0x3e00	RW- IDATA
.protext	0x67b000	0x502c	0x5200	RWX CODE IDATA UDATA
.prodata	0x681000	0x38f46d	0x38a600	RWX CODE IDATA UDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xa0b298	0xa0
RESOURCE	0x67a000	0x750
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MESSAGETABLE	#1	116	1252
VERSION	#1	1124	1252
MANIFEST	#1	398	1252

module_name	hint	ord	function_name
KERNEL32.dll			Sleep
WSOCK32.dll		151
ADVAPI32.dll			RegCloseKey
USER32.dll			RegisterDeviceNotificationA
dbghelp.dll	12		GetTimestampForLoadedLibrary
WININET.dll	146		InternetOpenA
VERSION.dll	13		VerQueryValueW

StringTable 040904B0

CompanyName	SafeNet Inc.
FileDescription	Sentinel HASP License Manager Service
FileVersion	12.49.1.14179
InternalName	hasplms.exe
LegalTrademarks	HASP(r) is a registered trademark of SafeNet Inc.
LegalCopyright	(c) 2009 SafeNet, Inc., and/or Aladdin Knowledge Systems Ltd. All rights reserved.
OriginalFilename	hasplms.exe
ProductName	HASP License Manager Service
ProductVersion	12.49.1.14179
ProductBuild	1.14179

VS_FIXEDFILEINFO

FileVersion	12.49.1.14179
ProductVersion	12.49.1.14179
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	3750400	EXE	12/16/2009 22:10:43	#
15c1	15	HTM		#
2ba3e4	52	GIF	(3072 x 2560)	#
2bb10e	87	GIF	(495 x 11008)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] invalid DOS stub size -3008