filename2cae982a-f6b2-490d-a8a9-57974638b334
size71680 (0x11800)
md53627d6b314e56942cf7bd55c554a0915
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
001
9320672
9321797
1070
9530772
9230771
9430521
9030771

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4141ca5c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.10
SizeOfCode0x2000
SizeOfInitializedData0x3a00
SizeOfUninitializedData0
AddressOfEntryPoint0x29aa
BaseOfCode0x1000
BaseOfData0x3000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion4.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x8000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x400
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x1fbd0x2000R-X CODE
.rdata0x30000x8f90xa00R-- IDATA
.data0x40000x3080x200RW- IDATA
.rsrc0x50000x2bc00x2c00R-- IDATA

Data Directory

typevasize
EXPORT0x38900x69
IMPORT0x32ac0x64
RESOURCE0x50000x2bc0
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x30000x128
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#137520
ICON#222160
ICON#313840
ICON#416400
ICON#57440
ICON#62960
GROUP_ICON#108900
VERSION#15880
module_namehintordfunction_name
KERNEL32.dll314GetCurrentProcess
KERNEL32.dll479GetVersionExA
KERNEL32.dll627OpenFile
KERNEL32.dll239FreeLibrary
KERNEL32.dll408GetProcAddress
KERNEL32.dll584LoadLibraryA
KERNEL32.dll935_lcreat
KERNEL32.dll904WinExec
KERNEL32.dll937_lopen
KERNEL32.dll373GetModuleFileNameA
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll264GetCommandLineA
KERNEL32.dll776SetErrorMode
KERNEL32.dll175ExitProcess
KERNEL32.dll939_lwrite
KERNEL32.dll361GetLastError
KERNEL32.dll941lstrcatA
KERNEL32.dll505GlobalLock
KERNEL32.dll234FormatMessageA
KERNEL32.dll594LocalFree
KERNEL32.dll950lstrcpyA
KERNEL32.dll459GetTempPathA
KERNEL32.dll489GetWindowsDirectoryA
KERNEL32.dll457GetTempFileNameA
KERNEL32.dll618MulDiv
KERNEL32.dll956lstrlenA
KERNEL32.dll938_lread
KERNEL32.dll936_llseek
KERNEL32.dll512GlobalUnlock
KERNEL32.dll501GlobalFree
KERNEL32.dll494GlobalAlloc
KERNEL32.dll934_lclose
USER32.dll225ExitWindowsEx
USER32.dll726wsprintfA
USER32.dll96CreateWindowExA
USER32.dll658ShowWindow
USER32.dll643SetWindowPos
USER32.dll699UpdateWindow
USER32.dll634SetTimer
USER32.dll445LoadIconA
USER32.dll441LoadCursorA
USER32.dll534RegisterClassA
USER32.dll478MessageBoxA
USER32.dll13BeginPaint
USER32.dll188DrawTextA
USER32.dll200EndPaint
USER32.dll403InvalidateRect
USER32.dll515PostQuitMessage
USER32.dll142DefWindowProcA
USER32.dll268GetDC
USER32.dll554ReleaseDC
USER32.dll255GetClientRect
USER32.dll571SendMessageA
GDI32.dll572SetTextColor
GDI32.dll534SetBkMode
GDI32.dll526SelectObject
GDI32.dll586StretchDIBits
GDI32.dll57CreateFontA
GDI32.dll590TextOutA
GDI32.dll499RealizePalette
GDI32.dll527SelectPalette
GDI32.dll69CreatePalette
GDI32.dll421GetStockObject
GDI32.dll143DeleteObject
GDI32.dll80CreateSolidBrush
GDI32.dll363GetDeviceCaps
GDI32.dll477PatBlt
ADVAPI32.dll333LookupPrivilegeValueA
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll426OpenProcessToken
ordentry_vafunction_name
10x20a8_MainWndProc@16
20x269d_StubFileWrite@12
module_nameSTUB32.EXE
flags0
timestamp2004-09-10 15:38:04
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x38c0
Functions(2)0x38b8
NameOrdinals(2)0x38c8

StringTable 040904E4

CompanyNamePfizer Global Platform ManagementXXXXXXXXX
FileDescriptionPfizer Internet Explorer Settings 2.0XXXXX
FileVersion17703.2.1XXXXX
LegalCopyrightPfizer Version 3.0.2 - c2006XXXXXXXXXXXX

VS_FIXEDFILEINFO

FileVersion17703.2.1.0
ProductVersion17703.2.1.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x10001
FileType1
FileSubtype0
offsetsizetypecomment
023552EXE09/10/2004 15:38:04#
15c115HTM#
5c0048128BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 71680 bytes (70 KiB)


--
Type = zip
ERRORS:
Unexpected end of archive
Offset = 23758
Physical Size = 108064

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2011-08-22 09:53:12 .....        16824         4872  data~
2011-08-22 09:53:04 .....        36764         8726  data~
2006-10-24 15:30:52 .....       166400        94364  WISE0001.DLL
------------------- ----- ------------ ------------  ------------------------
2011-08-22 09:53:12             219988       107962  3 files

Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] invalid VS_VERSIONINFO child type "\x00\x00\x00\x00\x00\x00"