remote.exe - Remote Support

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	remote.exe
size	940544 (0xe5a00)
md5	473d4e19499a0c3a49a6b29618207516

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
126	50327	4
125	50727	46
110	50727	159
109	50727	252
93	4035	31
1	0	454
105	2067	129
95	4035	134
114	50727	171
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x48995265
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x1eb000
SizeOfInitializedData	0xd9e00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x305001
BaseOfCode	0x1000
BaseOfData	0x1ec000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x30a000
SizeOfHeaders	0x400
CheckSum	0x2ce98b
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

ASPack v2.12

This file is packed with ASPack. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1eb000	0xa9200	RW- IDATA
.rdata	0x1ec000	0x6a000	0x1ea00	RW- IDATA
.data	0x256000	0x5b000	0x4800	RW- IDATA
.tls	0x2b1000	0x1000	0x200	RW- IDATA
.rsrc	0x2b2000	0x53000	0x15600	RW- IDATA
.aspack	0x305000	0x4000	0x3a00	RW- IDATA
.adata	0x309000	0x1000	0	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x305fac	0x33c
RESOURCE	0x2b2000	0x5298a
EXCEPTION	0	0
SECURITY	0x2c4e00	0x1528
BASERELOC	0x305f54	8
DEBUG	0x1f43d0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x305f3c	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0
	0	0x100000

TLS

raw start	raw end	index	callbks	zero fill	flags
0x6b1000	0x6b1001	0x6a6a38	0x5f43ac	0	0

show previews

type	name	size	cp
BITMAP	#9000	802	1252
BITMAP	#10000	1770	1252
BITMAP	#10002	5802	1252
BITMAP	#10006	1888	1252
BITMAP	#10010	1888	1252
BITMAP	#10014	15304	1252
BITMAP	#10090	1770	1252
BITMAP	#10091	1770	1252
BITMAP	#10092	1770	1252
BITMAP	#10093	1770	1252
BITMAP	#10094	1770	1252
BITMAP	#10095	1770	1252
BITMAP	#10099	75886	1252
BITMAP	#10100	802	1252
BITMAP	#10105	1242	1252
BITMAP	#10107	1242	1252
BITMAP	#10109	1242	1252
BITMAP	#10300	808	1252
BITMAP	#10304	712	1252
BITMAP	#10354	112	1252
BITMAP	#10357	2352	1252
BITMAP	#10384	198	1252
BITMAP	#10436	1386	1252
BITMAP	#10437	1386	1252
BITMAP	#10448	28120	1252
BITMAP	#10449	28120	1252
BITMAP	#10451	28120	1252
BITMAP	#10452	712	1252
BITMAP	#10453	712	1252
BITMAP	#10525	11920	1252
ICON	#1	1384	0
ICON	#2	2216	0
ICON	#3	3240	0
ICON	#7	296	1252
ICON	#8	296	1252
ICON	#9	296	1252
ICON	#10	296	1252
ICON	#11	296	1252
MENU	#10390	500	1252
MENU	#10393	332	1252
MENU	#10431	320	1252
MENU	#10433	728	1252
MENU	#10442	296	1252
DIALOG	#1001	220	1252
DIALOG	#1002	220	1252
DIALOG	#1171	176	1252
DIALOG	#10028	764	1252
DIALOG	#10034	1520	1252
DIALOG	#10038	396	1252
DIALOG	#10042	624	1252
DIALOG	#10046	1676	1252
DIALOG	#10062	304	1252
DIALOG	#10102	688	1252
DIALOG	#10333	456	1252
DIALOG	#10353	1172	1252
DIALOG	#10358	404	1252
DIALOG	#10359	108	1252
DIALOG	#10363	1548	1252
DIALOG	#10380	952	1252
DIALOG	#10382	2076	1252
DIALOG	#10420	1764	1252
DIALOG	#10438	608	1252
DIALOG	#10505	740	1252
DIALOG	#10506	1160	1252
DIALOG	#10509	696	1252
DIALOG	#10523	1060	1252
STRING	#63	736	1252
STRING	#64	1376	1252
STRING	#65	1742	1252
STRING	#66	1356	1252
STRING	#67	2198	1252
STRING	#68	1124	1252
STRING	#69	1196	1252
STRING	#70	1556	1252
STRING	#71	2572	1252
STRING	#72	2644	1252
STRING	#73	1568	1252
STRING	#74	556	1252
STRING	#626	1446	1252
STRING	#627	1768	1252
STRING	#628	1064	1252
STRING	#629	654	1252
STRING	#630	1114	1252
STRING	#631	2108	1252
STRING	#632	1096	1252
STRING	#633	2468	1252
STRING	#634	3240	1252
STRING	#635	1832	1252
STRING	#636	1408	1252
STRING	#637	2220	1252
STRING	#638	1264	1252
STRING	#639	1076	1252
STRING	#640	1520	1252
STRING	#641	588	1252
STRING	#642	2404	1252
STRING	#643	940	1252
STRING	#644	1412	1252
STRING	#645	1410	1252
STRING	#646	880	1252
STRING	#647	1628	1252
STRING	#648	1208	1252
STRING	#649	1666	1252
STRING	#650	2158	1252
STRING	#651	1332	1252
STRING	#652	2142	1252
STRING	#653	2264	1252
STRING	#654	1768	1252
STRING	#655	1702	1252
STRING	#656	2048	1252
STRING	#657	2702	1252
STRING	#658	2788	1252
STRING	#659	2234	1252
STRING	#660	1508	1252
ACCELERATORS	#10388	120	1252
GROUP_ICON	#100	48	1252
GROUP_ICON	#1152	20	1252
GROUP_ICON	#1156	20	1252
GROUP_ICON	#1157	20	1252
GROUP_ICON	#1158	20	1252
GROUP_ICON	#10386	20	1252
VERSION	#1	740	1252
MANIFEST	#1	502	1252

module_name	ord	function_name
kernel32.dll		GetProcAddress
kernel32.dll		GetModuleHandleA
kernel32.dll		LoadLibraryA
comctl32.dll		ImageList_ReplaceIcon
iphlpapi.dll		GetAdaptersInfo
mpr.dll		WNetEnumResourceW
user32.dll		DestroyCursor
gdi32.dll		GetObjectType
advapi32.dll		ImpersonateLoggedOnUser
shell32.dll	155
ole32.dll		ReleaseStgMedium
oleaut32.dll	277
shlwapi.dll		PathCompactPathW
wsock32.dll	52
wininet.dll		InternetOpenW
crypt32.dll		CertFreeCertificateContext
imagehlp.dll		ImageGetCertificateData

StringTable 040904B0

CompanyName	Remote
FileDescription	Remote Support
FileVersion	1.1
InternalName	Remote
LegalCopyright	©Remote
LegalTrademarks	Remote
OriginalFilename	Remote.exe
PrivateBuild	Remote
ProductName	Remote
ProductVersion	1.1

VS_FIXEDFILEINFO

FileVersion	3.6.4756.0
ProductVersion	3.6.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	940544	EXE	08/06/2008 07:27:33	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x2cf504

[?] can't find file_offset of VA 0x2cf828

[?] can't find file_offset of VA 0x2cfd04

[?] can't find file_offset of VA 0x2d01e0

[?] can't find file_offset of VA 0x2d06bc

[?] can't find file_offset of VA 0x2d09e4

[?] can't find file_offset of VA 0x2d0cac

[?] can't find file_offset of VA 0x2d0d1c

[?] can't find file_offset of VA 0x2d164c

[?] can't find file_offset of VA 0x2d1714

[?] can't find file_offset of VA 0x2d1c80

[?] can't find file_offset of VA 0x2d21ec

[?] can't find file_offset of VA 0x2d8fc4

[?] can't find file_offset of VA 0x2dfd9c

[?] can't find file_offset of VA 0x2e6b74

[?] can't find file_offset of VA 0x2e6e3c

[?] can't find file_offset of VA 0x2e7104

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x2ec014

[?] can't find file_offset of VA 0x2ec208

[?] can't find file_offset of VA 0x2ec354

[?] can't find file_offset of VA 0x2ec494

[?] can't find file_offset of VA 0x2ec76c

[?] can't find file_offset of VA 0x2ec894

[?] can't find file_offset of VA 0x2ec970

[?] can't find file_offset of VA 0x2eca4c

[?] can't find file_offset of VA 0x2ecafc

[?] can't find file_offset of VA 0x2ecdf8

[?] can't find file_offset of VA 0x2ed3e8

[?] can't find file_offset of VA 0x2ed574

[?] can't find file_offset of VA 0x2ed7e4

[?] can't find file_offset of VA 0x2ede70

[?] can't find file_offset of VA 0x2edfa0

[?] can't find file_offset of VA 0x2ee250

[?] can't find file_offset of VA 0x2ee418

[?] can't find file_offset of VA 0x2ee8ac

[?] can't find file_offset of VA 0x2eea40

[?] can't find file_offset of VA 0x2eeaac

[?] can't find file_offset of VA 0x2ef0b8

[?] can't find file_offset of VA 0x2ef470

[?] can't find file_offset of VA 0x2efc8c

[?] can't find file_offset of VA 0x2f0370

[?] can't find file_offset of VA 0x2f05d0

[?] can't find file_offset of VA 0x2f08b4

[?] can't find file_offset of VA 0x2f0d3c

[?] can't find file_offset of VA 0x2f0ff4

[?] can't find file_offset of VA 0x2f1418

[?] can't find file_offset of VA 0x2f16f8

[?] can't find file_offset of VA 0x2f1c58

[?] can't find file_offset of VA 0x2f2328

[?] can't find file_offset of VA 0x2f2874

[?] can't find file_offset of VA 0x2f310c

[?] can't find file_offset of VA 0x2f3570

[?] can't find file_offset of VA 0x2f3a1c

[?] can't find file_offset of VA 0x2f4030

[?] can't find file_offset of VA 0x2f4a3c

[?] can't find file_offset of VA 0x2f5490

[?] can't find file_offset of VA 0x2f5ab0

[?] can't find file_offset of VA 0x2f5cdc

[?] can't find file_offset of VA 0x2f6284

[?] can't find file_offset of VA 0x2f696c

[?] can't find file_offset of VA 0x2f6d94

[?] can't find file_offset of VA 0x2f7024

[?] can't find file_offset of VA 0x2f7480

[?] can't find file_offset of VA 0x2f7cbc

[?] can't find file_offset of VA 0x2f8104

[?] can't find file_offset of VA 0x2f8aa8

[?] can't find file_offset of VA 0x2f9750

[?] can't find file_offset of VA 0x2f9e78

[?] can't find file_offset of VA 0x2fa3f8

[?] can't find file_offset of VA 0x2faca4

[?] can't find file_offset of VA 0x2fb194

[?] can't find file_offset of VA 0x2fb5c8

[?] can't find file_offset of VA 0x2fbbb8

[?] can't find file_offset of VA 0x2fbe04

[?] can't find file_offset of VA 0x2fc768

[?] can't find file_offset of VA 0x2fcb14

[?] can't find file_offset of VA 0x2fd098

[?] can't find file_offset of VA 0x2fd61c

[?] can't find file_offset of VA 0x2fd98c

[?] can't find file_offset of VA 0x2fdfe8

[?] can't find file_offset of VA 0x2fe4a0

[?] can't find file_offset of VA 0x2feb24

[?] can't find file_offset of VA 0x2ff394

[?] can't find file_offset of VA 0x2ff8c8

[?] can't find file_offset of VA 0x300128

[?] can't find file_offset of VA 0x300a00

[?] can't find file_offset of VA 0x3010e8

[?] can't find file_offset of VA 0x301790

[?] can't find file_offset of VA 0x301f90

[?] can't find file_offset of VA 0x302a20

[?] can't find file_offset of VA 0x303504

[?] can't find file_offset of VA 0x303dc0

[?] can't find file_offset of VA 0x3043a4

[?] can't find file_offset of VA 0x2a6a38

[?] can't find file_offset of VA 0x0

remote.exe- Remote Support