scancl.exe - scancl

info
MZ
PE
resources
imports
exports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	scancl.exe
size	432488 (0x69968)
md5	36144885b7d7750ec141ee17e7c88909

type	PE32+ executable (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
147	30729	2
150	20413	7
149	30729	2
132	30729	3
137	30729	1
123	50727	13
1	0	293
131	30729	212
146	30729	1
148	21022	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x59ca43ec
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	9.0
SizeOfCode	0x45e00
SizeOfInitializedData	0x23600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x46758
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.2
ImageVersion	0.0
SubsystemVersion	5.2
Reserved1	0
SizeOfImage	0x6f000
SizeOfHeaders	0x400
CheckSum	0x766fb
Subsystem	3
DllCharacteristics	0x8140
SizeOfStackReserve	0x989680
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x45c11	0x45e00	R-X CODE
.rdata	0x47000	0x15634	0x15800	R-- IDATA
.data	0x5d000	0x8670	0x6800	RW- IDATA
.pdata	0x66000	0x5958	0x5a00	R-- IDATA
.rsrc	0x6c000	0x6a8	0x800	R-- IDATA
.reloc	0x6d000	0x1256	0x1400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x5c270	0x3c4
IMPORT	0x5ad30	0x8c
RESOURCE	0x6c000	0x6a8
EXCEPTION	0x66000	0x5958
SECURITY	0	0
BASERELOC	0x6d000	0xe8c
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x47000	0x770
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	944	1252
MANIFEST	#1	600	1252

module_name	hint	ord	function_name
KERNEL32.dll	614		GetTickCount
KERNEL32.dll	1090		UnhandledExceptionFilter
KERNEL32.dll	1049		SetUnhandledExceptionFilter
KERNEL32.dll	715		IsDebuggerPresent
KERNEL32.dll	568		GetShortPathNameW
KERNEL32.dll	965		SetConsoleTextAttribute
KERNEL32.dll	571		GetStdHandle
KERNEL32.dll	412		GetConsoleScreenBufferInfo
KERNEL32.dll	983		SetErrorMode
KERNEL32.dll	846		QueryPerformanceCounter
KERNEL32.dll	905		RtlCaptureContext
KERNEL32.dll	912		RtlLookupFunctionEntry
KERNEL32.dll	1092		UnlockFileEx
KERNEL32.dll	1091		UnlockFile
KERNEL32.dll	768		LockFileEx
KERNEL32.dll	767		LockFile
KERNEL32.dll	454		GetExitCodeProcess
KERNEL32.dll	1073		TerminateProcess
KERNEL32.dll	747		LoadLibraryA
KERNEL32.dll	629		GetVersionExA
KERNEL32.dll	452		GetEnvironmentVariableW
KERNEL32.dll	900		ResetEvent
KERNEL32.dll	885		ReleaseSemaphore
KERNEL32.dll	426		GetCurrentProcess
KERNEL32.dll	369		GetCommandLineW
KERNEL32.dll	652		GlobalFree
KERNEL32.dll	450		GetEnvironmentStringsW
KERNEL32.dll	332		FreeEnvironmentStringsW
KERNEL32.dll	1079		TlsFree
KERNEL32.dll	1078		TlsAlloc
KERNEL32.dll	745		LeaveCriticalSection
KERNEL32.dll	984		SetEvent
KERNEL32.dll	881		ReleaseMutex
KERNEL32.dll	218		EnterCriticalSection
KERNEL32.dll	692		InitializeCriticalSection
KERNEL32.dll	191		DeleteCriticalSection
KERNEL32.dll	749		LoadLibraryExW
KERNEL32.dll	333		FreeLibrary
KERNEL32.dll	115		CreateEventA
KERNEL32.dll	824		PeekNamedPipe
KERNEL32.dll	425		GetCurrentDirectoryW
KERNEL32.dll	443		GetDriveTypeA
KERNEL32.dll	328		FormatMessageA
KERNEL32.dll	460		GetFileAttributesExW
KERNEL32.dll	480		GetFullPathNameW
KERNEL32.dll	463		GetFileAttributesW
KERNEL32.dll	991		SetFileAttributesW
KERNEL32.dll	472		GetFileType
KERNEL32.dll	759		LocalFree
KERNEL32.dll	114		CreateDirectoryW
KERNEL32.dll	293		FindFirstFileW
KERNEL32.dll	305		FindNextFileW
KERNEL32.dll	282		FindClose
KERNEL32.dll	781		MoveFileExW
KERNEL32.dll	196		DeleteFileW
KERNEL32.dll	1024		SetStdHandle
KERNEL32.dll	465		GetFileInformationByHandle
KERNEL32.dll	1128		WaitForSingleObject
KERNEL32.dll	51		CancelIo
KERNEL32.dll	532		GetOverlappedResult
KERNEL32.dll	1061		Sleep
KERNEL32.dll	1071		SystemTimeToTzSpecificLocalTime
KERNEL32.dll	1070		SystemTimeToFileTime
KERNEL32.dll	273		FileTimeToSystemTime
KERNEL32.dll	591		GetSystemTimeAsFileTime
KERNEL32.dll	619		GetTimeZoneInformation
KERNEL32.dll	618		GetTimeFormatW
KERNEL32.dll	487		GetLocalTime
KERNEL32.dll	433		GetDateFormatW
KERNEL32.dll	430		GetCurrentThreadId
KERNEL32.dll	427		GetCurrentProcessId
KERNEL32.dll	821		OutputDebugStringW
KERNEL32.dll	601		GetTempFileNameW
KERNEL32.dll	531		GetOEMCP
KERNEL32.dll	339		GetACP
KERNEL32.dll	788		MultiByteToWideChar
KERNEL32.dll	1150		WideCharToMultiByte
KERNEL32.dll	1008		SetLastError
KERNEL32.dll	1037		SetThreadLocale
KERNEL32.dll	490		GetLocaleInfoW
KERNEL32.dll	621		GetUserDefaultLCID
KERNEL32.dll	492		GetLogicalDriveStringsW
KERNEL32.dll	505		GetModuleHandleW
KERNEL32.dll	544		GetProcAddress
KERNEL32.dll	1169		WriteFile
KERNEL32.dll	996		SetFilePointer
KERNEL32.dll	919		RtlVirtualUnwind
KERNEL32.dll	866		ReadFile
KERNEL32.dll	486		GetLastError
KERNEL32.dll	203		DeviceIoControl
KERNEL32.dll	444		GetDriveTypeW
KERNEL32.dll	128		CreateFileW
KERNEL32.dll	67		CloseHandle
KERNEL32.dll	603		GetTempPathW
KERNEL32.dll	501		GetModuleFileNameW
KERNEL32.dll	633		GetVolumeInformationW
WS2_32.dll		18
WS2_32.dll		151
WS2_32.dll		22
WS2_32.dll		23
WS2_32.dll		2
WS2_32.dll		13
WS2_32.dll		4
WS2_32.dll		19
WS2_32.dll		10
WS2_32.dll		1
WS2_32.dll		3
WS2_32.dll		11
WS2_32.dll		6
WS2_32.dll		14
WS2_32.dll		115
WS2_32.dll		116
WS2_32.dll		52
WS2_32.dll		111
WS2_32.dll		57
WS2_32.dll		16
MSVCR90.dll	463		_initterm_e
MSVCR90.dll	265		_configthreadlocale
MSVCR90.dll	191		__setusermatherr
MSVCR90.dll	264		_commode
MSVCR90.dll	354		_fmode
MSVCR90.dll	188		__set_app_type
MSVCR90.dll	968		_vsnprintf
MSVCR90.dll	131		__crt_debugger_hook
MSVCR90.dll	67		void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCR90.dll	462		_initterm
MSVCR90.dll	212		__winitenv
MSVCR90.dll	249		_cexit
MSVCR90.dll	326		_exit
MSVCR90.dll	85		_XcptFilter
MSVCR90.dll	211		__wgetmainargs
MSVCR90.dll	226		_amsg_exit
MSVCR90.dll	301		_decode_pointer
MSVCR90.dll	740		_onexit
MSVCR90.dll	311		_encode_pointer
MSVCR90.dll	133		__dllonexit
MSVCR90.dll	932		_unlock
MSVCR90.dll	1175		ferror
MSVCR90.dll	1158		calloc
MSVCR90.dll	1256		mbrtowc
MSVCR90.dll	1035		_wcsupr
MSVCR90.dll	1388		wcsstr
MSVCR90.dll	1384		wcsrchr
MSVCR90.dll	818		_snwprintf
MSVCR90.dll	1007		_wcsicmp
MSVCR90.dll	1153		atoi
MSVCR90.dll	1225		islower
MSVCR90.dll	1269		modf
MSVCR90.dll	315		_environ
MSVCR90.dll	1048		_wenviron
MSVCR90.dll	878		_strtoi64
MSVCR90.dll	1316		strerror
MSVCR90.dll	1322		strncmp
MSVCR90.dll	1379		wcsncmp
MSVCR90.dll	1369		wcschr
MSVCR90.dll	1376		wcslen
MSVCR90.dll	1093		_wrename
MSVCR90.dll	259		_chsize
MSVCR90.dll	338		_filelength
MSVCR90.dll	999		_wchmod
MSVCR90.dll	1116		_wstat64i32
MSVCR90.dll	582		_lseek
MSVCR90.dll	1094		_write
MSVCR90.dll	762		_read
MSVCR90.dll	262		_close
MSVCR90.dll	1101		_wsopen
MSVCR90.dll	447		_gmtime64
MSVCR90.dll	1318		strftime
MSVCR90.dll	736		_mktime64
MSVCR90.dll	572		_localtime64_s
MSVCR90.dll	448		_gmtime64_s
MSVCR90.dll	1222		isdigit
MSVCR90.dll	1219		isalnum
MSVCR90.dll	1310		strchr
MSVCR90.dll	993		_waccess
MSVCR90.dll	808		_snprintf
MSVCR90.dll	317		_errno
MSVCR90.dll	1349		toupper
MSVCR90.dll	1220		isalpha
MSVCR90.dll	1348		tolower
MSVCR90.dll	1286		realloc
MSVCR90.dll	1263		memcmp
MSVCR90.dll	1266		memmove
MSVCR90.dll	890		_swprintf
MSVCR90.dll	1377		wcsncat
MSVCR90.dll	1380		wcsncpy
MSVCR90.dll	1259		mbstowcs
MSVCR90.dll	1262		memchr
MSVCR90.dll	1133		_wunlink
MSVCR90.dll	219		_aligned_malloc
MSVCR90.dll	218		_aligned_free
MSVCR90.dll	1066		_wfopen
MSVCR90.dll	1173		fclose
MSVCR90.dll	1207		fwrite
MSVCR90.dll	1204		ftell
MSVCR90.dll	1202		fseek
MSVCR90.dll	1194		fread
MSVCR90.dll	1169		exit
MSVCR90.dll	89		__C_specific_handler
MSVCR90.dll	1264		memcpy
MSVCR90.dll	1100		_wsetlocale
MSVCR90.dll	1296		signal
MSVCR90.dll	904		_time64
MSVCR90.dll	146		__iob_func
MSVCR90.dll	1176		fflush
MSVCR90.dll	1274		printf
MSVCR90.dll	1329		strstr
MSVCR90.dll	1323		strncpy
MSVCR90.dll	1290		scanf
MSVCR90.dll	1211		getchar
MSVCR90.dll	1253		malloc
MSVCR90.dll	1196		free
MSVCR90.dll	1268		memset
MSVCR90.dll	470		_isatty
MSVCR90.dll	422		_getch
MSVCR90.dll	866		_strnicmp
MSVCR90.dll	573		_lock
MSVCR90.dll	435		_getpid
USER32.dll	784		wsprintfW
SHELL32.dll	7		CommandLineToArgvW
ADVAPI32.dll	632		RegSetValueExW
ADVAPI32.dll	566		RegCreateKeyW
ADVAPI32.dll	637		RegisterEventSourceW
ADVAPI32.dll	215		DeregisterEventSource
ADVAPI32.dll	649		ReportEventW
ADVAPI32.dll	282		FreeSid
ADVAPI32.dll	292		GetEffectiveRightsFromAclW
ADVAPI32.dll	31		AllocateAndInitializeSid
ADVAPI32.dll	328		GetSecurityInfo
ADVAPI32.dll	554		RegCloseKey
ADVAPI32.dll	316		GetNamedSecurityInfoW
ADVAPI32.dll	313		GetNamedSecurityInfoA

ord	entry_va	function_name
1	0x1120	DonePrefix
2	0x1f70	FreeCategoryList
3	0x1ae0	FreeSelList
4	0x1de0	GetCategoryList
5	0x1860	GetPrefix
6	0x1d10	GetPrefixCategory
7	0x1520	GetPrefixEx
8	0x2080	GetPrefixQua
9	0x18a0	GetSelList
10	0x1000	InitPrefix
11	0x1b80	IsPrefixActive
12	0x1fe0	IsPrefixHeuristic
13	0x1b20	SetPrefixActive
14	0x2050	SetPrefixQua
15	0x1c50	SetPrefixSelectionFlag
16	0x430d0	avmres_arg_list_add_char
17	0x43100	avmres_arg_list_add_charp
18	0x43050	avmres_arg_list_add_int
19	0x43090	avmres_arg_list_add_long
20	0x43070	avmres_arg_list_add_uint
21	0x430b0	avmres_arg_list_add_ulong
22	0x43130	avmres_arg_list_add_wchar
23	0x43160	avmres_arg_list_add_wcharp
24	0x42fc0	avmres_arg_list_clear
25	0x43530	avmres_arg_list_free
26	0x43210	avmres_arg_list_from_va
27	0x43360	avmres_arg_list_from_va_sentinel
28	0x434a0	avmres_arg_list_get
29	0x43010	avmres_arg_list_length
30	0x42fb0	avmres_arg_list_new
31	0x43190	avmres_arg_list_pop

module_name	scancl.exe
flags	0
timestamp	2017-09-26 12:11:24
version	0.0
ordinal_base	1
nFunctions	31
nNames	31
Names(31)	0x5c314
Functions(31)	0x5c298
NameOrdinals(31)	0x5c390

StringTable 040904b0

CompanyName	Avira GmbH
FileDescription	scancl
FileVersion	1, 9, 161, 5
InternalName	scancl.exe
LegalCopyright	Copyright© 2017 Avira GmbH. All rights reserved.
LegalTrademarks	AVIRA® is a registered trademark of Avira GmbH, Germany
OriginalFilename	scancl
ProductName	Avira Command Line Scanner
ProductVersion	1, 9, 161, 5

VS_FIXEDFILEINFO

FileVersion	1.9.161.5
ProductVersion	1.9.161.5
StrucVersion	0x10000
FileFlagsMask	0x17
FileFlags	0
FileOS	4
FileType	0
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	426904	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 432488 bytes (423 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

scancl.exe-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

scancl.exe
-