filenamefHash.exe
size305664 (0x4aa00)
md529cc8fbe0838d3a4269fe9bcd5101485
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1493072928
13130729159
132210223
1473072925
10515
13230729152
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4f73bb8a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion9.0
SizeOfCode0x31800
SizeOfInitializedData0x18e00
SizeOfUninitializedData0
AddressOfEntryPoint0x1fd1b
BaseOfCode0x1000
BaseOfData0x33000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x51000
SizeOfHeaders0x400
CheckSum0x531f6
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Armadillo v6.0 (Silicon Realms Toolworks)

Sections

namevavsizeraw sizeflags
.text0x10000x316f30x31800R-X CODE
.rdata0x330000xb60c0xb800R-- IDATA
.data0x3f0000x64e40x2800RW- IDATA
.rsrc0x460000xade80xae00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x3cc4c0x104
RESOURCE0x460000xade8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x38e300x40
Bound_IAT00
IAT0x330000x4c0
Delay_IAT0x3cbc40x40
CLR_Header00
typenamesizecp
CURSOR#93081252
CURSOR#101801252
CURSOR#113081252
CURSOR#123081252
CURSOR#133081252
CURSOR#143081252
CURSOR#153081252
CURSOR#163081252
CURSOR#173081252
CURSOR#183081252
CURSOR#193081252
CURSOR#203081252
CURSOR#213081252
CURSOR#223081252
CURSOR#233081252
CURSOR#243081252
BITMAP#309941841252
BITMAP#309963241252
ICON#137521252
ICON#222161252
ICON#313841252
ICON#496401252
ICON#542641252
ICON#611281252
ICON#717361252
ICON#824401252
DIALOG#10210961252
DIALOG#1033001252
DIALOG#1342681252
DIALOG#307212321252
DIALOG#30734521252
STRING#38411301252
STRING#3842421252
STRING#38433881252
STRING#385712541252
STRING#38586121252
STRING#38597301252
STRING#38601381252
STRING#38651721252
STRING#38662221252
STRING#386711921252
STRING#38685521252
STRING#3869441252
STRING#3887661252
GROUP_CURSOR#30977341252
GROUP_CURSOR#30998201252
GROUP_CURSOR#30999201252
GROUP_CURSOR#31000201252
GROUP_CURSOR#31001201252
GROUP_CURSOR#31002201252
GROUP_CURSOR#31003201252
GROUP_CURSOR#31004201252
GROUP_CURSOR#31005201252
GROUP_CURSOR#31006201252
GROUP_CURSOR#31007201252
GROUP_CURSOR#31008201252
GROUP_CURSOR#31009201252
GROUP_CURSOR#31010201252
GROUP_CURSOR#31011201252
GROUP_ICON#1291181252
VERSION#17761252
MANIFEST#17271252
idlangstring
614402052Open
614412052Save As
614422052All Files (*.*)
614432052Untitled
614462052an unnamed file
614572052&Hide
614722052No error message is available.
614732052Attempted an unsupported operation.
614742052A required resource was unavailable.
614752052Out of memory.
614762052An unknown error has occurred.
614772052Encountered an improper argument.
616962052Incorrect filename.
616972052Failed to open document.
616982052Failed to save document.
616992052Save changes to %1?
617002052Failed to create empty document.
617012052The file is too large to open.
617022052Could not start print job.
617032052Failed to launch help.
617042052Internal application error.
617052052Command failed.
617062052Insufficient memory to perform operation.
617072052System registry entries have been removed and the INI file (if any) was deleted.
617082052Not all of the system registry entries (or INI file) were removed.
617092052This program requires the file %s, which was not found on this system.
617102052This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
617122052Enter an integer.
617132052Enter a number.
617142052Enter an integer between %1 and %2.
617152052Enter a number between %1 and %2.
617162052Enter no more than %1 characters.
617172052Select a button.
617182052Enter an integer between 0 and 255.
617192052Enter a positive integer.
617202052Enter a date and/or time.
617212052Enter a currency.
617222052Enter a GUID.
617232052Enter a time.
617242052Enter a date.
617282052Unexpected file format.
617292052%1 Cannot find this file. Verify that the correct path and file name are given.
617302052Destination disk drive is full.
617312052Unable to read from %1, it is opened by someone else.
617322052Unable to write to %1, it is read-only or opened by someone else.
617332052Encountered an unexpected error while reading %1.
617342052Encountered an unexpected error while writing %1.
617442052%1: %2 Continue running script?
617452052Dispatch exception: %1
618362052Unable to read write-only property.
618372052Unable to write read-only property.
618402052Unable to load mail system support.
618412052Mail system DLL is invalid.
618422052Send Mail failed to send message.
618562052No error occurred.
618572052An unknown error occurred while accessing %1.
618582052%1 was not found.
618592052%1 contains an incorrect path.
618602052Could not open %1 because there are too many open files.
618612052Access to %1 was denied.
618622052An incorrect file handle was associated with %1.
618632052Could not remove %1 because it is the current directory.
618642052Could not create %1 because the directory is full.
618652052Seek failed on %1
618662052Encountered a hardware I/O error while accessing %1.
618672052Encountered a sharing violation while accessing %1.
618682052Encountered a locking violation while accessing %1.
618692052Disk full while accessing %1.
618702052Attempted to access %1 past its end.
618722052No error occurred.
618732052An unknown error occurred while accessing %1.
618742052Attempted to write to the reading %1.
618752052Attempted to access %1 past its end.
618762052Attempted to read from the writing %1.
618772052%1 has a bad format.
618782052%1 contained an unexpected object.
618792052%1 contains an incorrect schema.
618882052pixels
621772052Uncheck
621782052Check
621792052Mixed
module_namehintordfunction_name
VERSION.dll13VerQueryValueA
VERSION.dll3GetFileVersionInfoSizeA
VERSION.dllGetFileVersionInfoA
KERNEL32.dll1112SetErrorMode
KERNEL32.dll1048RtlUnwind
KERNEL32.dll1216TerminateProcess
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll945RaiseException
KERNEL32.dll661GetTimeFormatA
KERNEL32.dll454GetDateFormatA
KERNEL32.dll390GetCommandLineA
KERNEL32.dll610GetStartupInfoA
KERNEL32.dll715HeapAlloc
KERNEL32.dll719HeapFree
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll722HeapReAlloc
KERNEL32.dll1202Sleep
KERNEL32.dll281ExitProcess
KERNEL32.dll724HeapSize
KERNEL32.dll360GetACP
KERNEL32.dll778IsValidCodePage
KERNEL32.dll811LCMapStringA
KERNEL32.dll813LCMapStringW
KERNEL32.dll1322WritePrivateProfileStringA
KERNEL32.dll617GetStringTypeW
KERNEL32.dll664GetTimeZoneInformation
KERNEL32.dll1135SetHandleCount
KERNEL32.dll612GetStdHandle
KERNEL32.dll499GetFileType
KERNEL32.dll352FreeEnvironmentStringsA
KERNEL32.dll472GetEnvironmentStrings
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll717HeapCreate
KERNEL32.dll1260VirtualFree
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll659GetTickCount
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll410GetConsoleCP
KERNEL32.dll428GetConsoleMode
KERNEL32.dll1159SetStdHandle
KERNEL32.dll1306WriteConsoleA
KERNEL32.dll432GetConsoleOutputCP
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll100CompareStringW
KERNEL32.dll1110SetEnvironmentVariableA
KERNEL32.dll567GetOEMCP
KERNEL32.dll370GetCPInfo
KERNEL32.dll1222TlsFree
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll843LocalReAlloc
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1221TlsAlloc
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll701GlobalHandle
KERNEL32.dll705GlobalReAlloc
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll1223TlsGetValue
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll836LocalAlloc
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll697GlobalFlags
KERNEL32.dll498GetFileTime
KERNEL32.dll497GetFileSizeEx
KERNEL32.dll485GetFileAttributesA
KERNEL32.dll292FileTimeToLocalFileTime
KERNEL32.dll293FileTimeToSystemTime
KERNEL32.dll136CreateFileA
KERNEL32.dll504GetFullPathNameA
KERNEL32.dll677GetVolumeInformationA
KERNEL32.dll306FindFirstFileA
KERNEL32.dll302FindClose
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll232DuplicateHandle
KERNEL32.dll496GetFileSize
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll1236UnlockFile
KERNEL32.dll850LockFile
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll1126SetFilePointer
KERNEL32.dll1317WriteFile
KERNEL32.dll960ReadFile
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll452GetCurrentThread
KERNEL32.dll105ConvertDefaultLocale
KERNEL32.dll251EnumResourceLanguagesA
KERNEL32.dll516GetLocaleInfoA
KERNEL32.dll829LoadLibraryExA
KERNEL32.dll748InterlockedExchange
KERNEL32.dll1345lstrcmpA
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll699GlobalGetAtomNameA
KERNEL32.dll689GlobalAddAtomA
KERNEL32.dll694GlobalFindAtomA
KERNEL32.dll693GlobalDeleteAtom
KERNEL32.dll354FreeLibrary
KERNEL32.dll97CompareStringA
KERNEL32.dll828LoadLibraryA
KERNEL32.dll1346lstrcmpW
KERNEL32.dll514GetLastError
KERNEL32.dll1139SetLastError
KERNEL32.dll691GlobalAlloc
KERNEL32.dll349FormatMessageA
KERNEL32.dll840LocalFree
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll870MulDiv
KERNEL32.dll702GlobalLock
KERNEL32.dll709GlobalUnlock
KERNEL32.dll698GlobalFree
KERNEL32.dll357FreeResource
KERNEL32.dll627GetSystemInfo
KERNEL32.dll1348lstrcmpiA
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll675GetVersionExA
KERNEL32.dll1357lstrlenA
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll581GetProcAddress
KERNEL32.dll82CloseHandle
KERNEL32.dll181CreateThread
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll331FindResourceA
KERNEL32.dll833LoadResource
KERNEL32.dll852LockResource
KERNEL32.dll1201SizeofResource
KERNEL32.dll614GetStringTypeA
USER32.dll164DestroyMenu
USER32.dll488LoadCursorA
USER32.dll380GetSysColorBrush
USER32.dll57CharUpperA
USER32.dll220EndPaint
USER32.dll14BeginPaint
USER32.dll613ReleaseDC
USER32.dll289GetDC
USER32.dll71ClientToScreen
USER32.dll423GrayStringA
USER32.dll206DrawTextExA
USER32.dll205DrawTextA
USER32.dll749TabbedTextOutA
USER32.dll420GetWindowThreadProcessId
USER32.dll648SetCursor
USER32.dll345GetMessageA
USER32.dll764TranslateMessage
USER32.dll288GetCursorPos
USER32.dll796ValidateRect
USER32.dll567PostQuitMessage
USER32.dll735ShowWindow
USER32.dll714SetWindowTextA
USER32.dll460IsDialogMessageA
USER32.dll672SetMenuItemBitmaps
USER32.dll333GetMenuCheckMarkDimensions
USER32.dll486LoadBitmapA
USER32.dll534ModifyMenuA
USER32.dll214EnableMenuItem
USER32.dll63CheckMenuItem
USER32.dll610RegisterWindowMessageA
USER32.dll626SendDlgItemMessageA
USER32.dll264GetCapture
USER32.dll718SetWindowsHookExA
USER32.dll28CallNextHookEx
USER32.dll271GetClassLongA
USER32.dll273GetClassNameA
USER32.dll684SetPropA
USER32.dll362GetPropA
USER32.dll616RemovePropA
USER32.dll301GetForegroundWindow
USER32.dll324GetLastActivePopup
USER32.dll174DispatchMessageA
USER32.dll768UnhookWindowsHookEx
USER32.dll348GetMessageTime
USER32.dll347GetMessagePos
USER32.dll562PeekMessageA
USER32.dll521MapWindowPoints
USER32.dll668SetMenu
USER32.dll659SetForegroundWindow
USER32.dll480IsWindowVisible
USER32.dll785UpdateWindow
USER32.dll526MessageBoxA
USER32.dll109CreateWindowExA
USER32.dll268GetClassInfoExA
USER32.dll267GetClassInfoA
USER32.dll587RegisterClassA
USER32.dll379GetSysColor
USER32.dll3AdjustWindowRectEx
USER32.dll85CopyRect
USER32.dll576PtInRect
USER32.dll294GetDlgCtrlID
USER32.dll155DefWindowProcA
USER32.dll29CallWindowProcA
USER32.dll331GetMenu
USER32.dll707SetWindowLongA
USER32.dll710SetWindowPos
USER32.dll747SystemParametersInfoA
USER32.dll411GetWindowPlacement
USER32.dll412GetWindowRect
USER32.dll417GetWindowTextLengthA
USER32.dll416GetWindowTextA
USER32.dll398GetWindow
USER32.dll658SetFocus
USER32.dll773UnregisterClassA
USER32.dll808WinHelpA
USER32.dll342GetMenuState
USER32.dll338GetMenuItemID
USER32.dll337GetMenuItemCount
USER32.dll378GetSubMenu
USER32.dll291GetDesktopWindow
USER32.dll256GetActiveWindow
USER32.dll639SetActiveWindow
USER32.dll95CreateDialogIndirectParamA
USER32.dll166DestroyWindow
USER32.dll475IsWindow
USER32.dll405GetWindowLongA
USER32.dll295GetDlgItem
USER32.dll476IsWindowEnabled
USER32.dll356GetParent
USER32.dll354GetNextDlgTabItem
USER32.dll218EndDialog
USER32.dll382GetSystemMetrics
USER32.dll492LoadIconA
USER32.dll483KillTimer
USER32.dll699SetTimer
USER32.dll276GetClientRect
USER32.dll465IsIconic
USER32.dll565PostMessageA
USER32.dll199DrawIcon
USER32.dll300GetFocus
USER32.dll317GetKeyState
USER32.dll631SendMessageA
USER32.dll216EnableWindow
USER32.dll389GetTopWindow
GDI32.dll227DeleteDC
GDI32.dll525GetStockObject
GDI32.dll684SetWindowExtEx
GDI32.dll626ScaleWindowExtEx
GDI32.dll625ScaleViewportExtEx
GDI32.dll680SetViewportExtEx
GDI32.dll574OffsetViewportOrgEx
GDI32.dll681SetViewportOrgEx
GDI32.dll631SelectObject
GDI32.dll302Escape
GDI32.dll311ExtTextOutA
GDI32.dll696TextOutA
GDI32.dll606RectVisible
GDI32.dll459GetDeviceCaps
GDI32.dll84CreateSolidBrush
GDI32.dll230DeleteObject
GDI32.dll660SetMapMode
GDI32.dll639SetBkMode
GDI32.dll617RestoreDC
GDI32.dll624SaveDC
GDI32.dll41CreateBitmap
GDI32.dll507GetObjectA
GDI32.dll638SetBkColor
GDI32.dll678SetTextColor
GDI32.dll448GetClipBox
GDI32.dll602PtVisible
COMDLG32.dll9GetFileTitleA
WINSPOOL.DRV29ClosePrinter
WINSPOOL.DRV143OpenPrinterA
WINSPOOL.DRV77DocumentPropertiesA
ADVAPI32.dll620RegQueryValueA
ADVAPI32.dll607RegOpenKeyA
ADVAPI32.dll589RegEnumKeyA
ADVAPI32.dll573RegDeleteKeyA
ADVAPI32.dll621RegQueryValueExA
ADVAPI32.dll590RegEnumKeyExA
ADVAPI32.dll637RegSetValueExA
ADVAPI32.dll608RegOpenKeyExA
ADVAPI32.dll568RegCreateKeyExA
ADVAPI32.dll560RegCloseKey
SHELL32.dll26DragAcceptFiles
SHELL32.dll27DragFinish
SHELL32.dll29DragQueryFileA
SHELL32.dll286ShellExecuteA
COMCTL32.dll17
SHLWAPI.dll70PathFindExtensionA
SHLWAPI.dll139PathRemoveFileSpecW
SHLWAPI.dll150PathStripToRootA
SHLWAPI.dll72PathFindFileNameA
SHLWAPI.dll108PathIsUNCA
ole32.dll104CoTaskMemFree
ole32.dll16CoCreateInstance
ole32.dll108CoUninitialize
ole32.dll63CoInitializeEx
OLEAUT32.dll9
OLEAUT32.dll12
OLEAUT32.dll8

StringTable 080403a8

CompanyNameSUN Junwen
FileDescriptionfHash: Files' Hash Calculator
FileVersion1.5.9.0
InternalNamefilesmd5.exe
LegalCopyright(C) 2007-2011 SUN Junwen.
OriginalFilenamefHash.exe
ProductNamefHash: Files' Hash Calculator
ProductVersion1.5.9.0

VS_FIXEDFILEINFO

FileVersion1.5.9.0
ProductVersion1.5.9.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0305664EXE03/29/2012 01:31:54#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK