filenameEmail.exe
size30720 (0x7800)
md52588cb9e9246e64d5a3299e2d12e6c62
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
109507271
150204131
149210221
1312102220
147210224
123507279
10116
1322102211
148210221
145210221

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4e6756e8
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion9.0
SizeOfCode0x4800
SizeOfInitializedData0x2c00
SizeOfUninitializedData0
AddressOfEntryPoint0x4d06
BaseOfCode0x1000
BaseOfData0x6000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0xb000
SizeOfHeaders0x400
CheckSum0x7fbc
Subsystem3
DllCharacteristics0x8000
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x470f0x4800R-X CODE
.rdata0x60000x12f40x1400R-- IDATA
.data0x80000x4840x200RW- IDATA
.rsrc0x90000x15cc0x1600R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x6c440x78
RESOURCE0x90000x15cc
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x62000x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x64080x40
Bound_IAT00
IAT0x60000x1e0
Delay_IAT00
CLR_Header00
typenamesizecp
YOURS====32831252
VERSION#18441252
MANIFEST#111931252
module_namehintordfunction_name
MAPI32.dll21
MAPI32.dll11
MAPI32.dll75
MAPI32.dll140
MAPI32.dll129
MAPI32.dll13
MAPI32.dll147
MAPI32.dll17
MAPI32.dll23
mfc90.dll5528
mfc90.dll5776
mfc90.dll1568
mfc90.dll780
mfc90.dll2480
mfc90.dll2539
mfc90.dll4481
mfc90.dll2692
mfc90.dll793
mfc90.dll589
mfc90.dll6153
mfc90.dll1252
mfc90.dll3213
mfc90.dll305
mfc90.dll6613
mfc90.dll1611
mfc90.dll5997
mfc90.dll3665
mfc90.dll316
mfc90.dll580
mfc90.dll798
mfc90.dll579
mfc90.dll3178
mfc90.dll2481
mfc90.dll4392
mfc90.dll2691
mfc90.dll1182
mfc90.dll781
mfc90.dll6676
mfc90.dll6682
mfc90.dll4431
mfc90.dll1183
mfc90.dll1603
mfc90.dll817
mfc90.dll310
mfc90.dll300
mfc90.dll4311
mfc90.dll945
mfc90.dll941
mfc90.dll5963
mfc90.dll4506
mfc90.dll910
mfc90.dll601
mfc90.dll800
mfc90.dll820
MSVCR90.dll319_controlfp_s
MSVCR90.dll523_invoke_watson
MSVCR90.dll371_except_handler4_common
MSVCR90.dll54public: void __thiscall type_info::_type_info_dtor_internal_method(void)

?_type_info_dtor_internal_method@type_info@@QAEXXZ

MSVCR90.dll331_crt_debugger_hook
MSVCR90.dll224__set_app_type
MSVCR90.dll207__p__fmode
MSVCR90.dll203__p__commode
MSVCR90.dll267_adjust_fdiv
MSVCR90.dll227__setusermatherr
MSVCR90.dll316_configthreadlocale
MSVCR90.dll517_initterm_e
MSVCR90.dll516_initterm
MSVCR90.dll160__initenv
MSVCR90.dll1228exit
MSVCR90.dll102_XcptFilter
MSVCR90.dll380_exit
MSVCR90.dll300_cexit
MSVCR90.dll159__getmainargs
MSVCR90.dll277_amsg_exit
MSVCR90.dll67void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR90.dll1280isleadbyte
MSVCR90.dll115__CxxFrameHandler3
MSVCR90.dll755_mbsrchr
MSVCR90.dll695_mbsinc
MSVCR90.dll1252free
MSVCR90.dll1322memset
MSVCR90.dll1307malloc
MSVCR90.dll90_CxxThrowException
MSVCR90.dll1318memcpy
MSVCR90.dll998_unlock
MSVCR90.dll150__dllonexit
MSVCR90.dll362_encode_pointer
MSVCR90.dll630_lock
MSVCR90.dll796_onexit
MSVCR90.dll352_decode_pointer
KERNEL32.dll1045SetUnhandledExceptionFilter
KERNEL32.dll602GetTempPathA
KERNEL32.dll893RemoveDirectoryA
KERNEL32.dll281FindClose
KERNEL32.dll302FindNextFileA
KERNEL32.dll192DeleteFileA
KERNEL32.dll285FindFirstFileA
KERNEL32.dll1199lstrcpyA
KERNEL32.dll544GetProcAddress
KERNEL32.dll753LoadLibraryA
KERNEL32.dll591GetSystemTimeAsFileTime
KERNEL32.dll426GetCurrentProcessId
KERNEL32.dll429GetCurrentThreadId
KERNEL32.dll614GetTickCount
KERNEL32.dll852QueryPerformanceCounter
KERNEL32.dll721IsDebuggerPresent
KERNEL32.dll457GetFileAttributesA
KERNEL32.dll1086UnhandledExceptionFilter
KERNEL32.dll425GetCurrentProcess
KERNEL32.dll1069TerminateProcess
KERNEL32.dll698InterlockedCompareExchange
KERNEL32.dll1057Sleep
KERNEL32.dll701InterlockedExchange
ole32.dll267OleUninitialize
ole32.dll244OleInitialize

StringTable 040904b0

CommentsPreRelease Version
CompanyNameCorel, Inc.
FileDescriptionCorel Email
FileVersion3,0,0,00000000.00
InternalNameCorel Email
LegalCopyrightCopyright © 1999-2006 Corel, Inc.
LegalTrademarksCorel Software, Inc.
ProductNameCorel Email
ProductVersion3,0,0,00000000.00

VS_FIXEDFILEINFO

FileVersion3.0.0.0
ProductVersion3.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags2
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
030720EXE09/07/2011 11:35:04#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK