filenameTAPITNA.EXE
size8704 (0x2200)
md517e4cba3e9494b2e9c54c287c1f303ef
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x308ed935
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion2.60
SizeOfCode0x800
SizeOfInitializedData0x1600
SizeOfUninitializedData0
AddressOfEntryPoint0x1040
BaseOfCode0x1000
BaseOfData0x2000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x6000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x1400
SizeOfStackCommit0x1000
SizeOfHeapReserve0x1000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

FASM v1.5x

Sections

namevavsizeraw sizeflags
.text0x10000x7e40x800R-X CODE
.data0x20000xda0x200RW- IDATA
.idata0x30000x4a20x600RW- IDATA
.rsrc0x40000xb180xc00R-- IDATA
.reloc0x50000x1520x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x17b00x34
IMPORT0x30000x64
RESOURCE0x40000xb18
EXCEPTION00
SECURITY00
BASERELOC0x50000xf0
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x31240xac
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
ICON#22960
MENU#6011380
STRING#262460
GROUP_ICON#501340
VERSION#19440
idlangstring
4011033Telephony Location Selector
4021033Choose dialing location from this list:
4031033Telephony Location Selector - Version 0.5
module_namehintordfunction_name
KERNEL32.dll249GetModuleHandleA
KERNEL32.dll479RegisterServiceProcess
KERNEL32.dll342GlobalFree
KERNEL32.dll352GlobalUnlock
KERNEL32.dll346GlobalLock
KERNEL32.dll335GlobalAlloc
KERNEL32.dll345GlobalHandle
USER32.dll521TrackPopupMenu
USER32.dll128DestroyMenu
USER32.dll505ShowWindow
USER32.dll465SetMenuDefaultItem
USER32.dll4AppendMenuA
USER32.dll129DestroyWindow
USER32.dll458SetForegroundWindow
USER32.dll398PostMessageA
USER32.dll522TrackPopupMenuEx
USER32.dll274GetSubMenu
USER32.dll356LoadMenuA
USER32.dll400PostQuitMessage
USER32.dll352LoadImageA
USER32.dll120DefWindowProcA
USER32.dll360LoadStringA
USER32.dll350LoadIconA
USER32.dll405RegisterClassA
USER32.dll80CreateWindowExA
USER32.dll255GetMessageA
USER32.dll134DispatchMessageA
USER32.dll527TranslateMessage
USER32.dll79CreatePopupMenu
USER32.dll420RemoveMenu
USER32.dll215GetCursorPos
TAPI32.dll43lineInitialize
TAPI32.dll78lineTranslateDialog
TAPI32.dll65lineSetCurrentLocation
TAPI32.dll75lineShutdown
TAPI32.dll40lineGetTranslateCaps
SHELL32.dll91Shell_NotifyIconA
SHELL32.dll84ShellExecuteA
SHELL32.dll82ShellAboutA
ordentry_vafunction_name
module_nametapitna.EXE
flags0
timestamp1995-10-26 00:41:24
version0.0
ordinal_base1
nFunctions0
nNames0
Names(0)0x17d8
Functions(0)0x17d8
NameOrdinals(0)0x17d8

StringTable 040904E4

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft® Windows(TM) Telephony Taskbar Notification App
FileVersion4.10.1309
InternalNametapitna
LegalCopyrightCopyright © Microsoft Corporation 1995. All Rights Reserved.
OriginalFilenameTAPITNA.EXE
ProductNameMicrosoft® Windows(TM) Operating System
ProductVersion4.10.1309

VS_FIXEDFILEINFO

FileVersion4.10.0.1309
ProductVersion4.10.0.1309
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x10001
FileType2
FileSubtype0
offsetsizetypecomment
08704EXE10/26/1995 00:41:25#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK