filename52dae4128bb378dc4a877aab9287fc1ceb7576e1cc8506351a5679c6e9dd2e95
size626688 (0x99000)
md5476b81105a59df1f9913256059d20f6d
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
126503272
1255072724
10950727140
93403515
10171
1105072755
122507271
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x5d833f46
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0x18000
SizeOfInitializedData0x80000
SizeOfUninitializedData0
AddressOfEntryPoint0xa1a3
BaseOfCode0x1000
BaseOfData0x19000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x9b000
SizeOfHeaders0x1000
CheckSum0xa21a6
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x177a00x18000R-X CODE
.rdata0x190000x1a0cf0x1b000R-- IDATA
.data0x340000x34500x2000RW- IDATA
.rsrc0x380000x6232e0x63000R-- IDATA

Data Directory

typevasize
EXPORT0x330900x3f
IMPORT0x323980xa0
RESOURCE0x380000x6232e
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x316500x40
Bound_IAT00
IAT0x190000x288
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#47481252
CURSOR#57481252
BITMAP#1062590661252
BITMAP#1071271721252
BITMAP#11211241252
BITMAP#11611241252
BITMAP#12311241252
BITMAP#15311181252
BITMAP#17011181252
BITMAP#17311181252
ICON#17441252
ICON#22961252
ICON#32961252
DIALOG#1081021252
DIALOG#13710701252
DIALOG#1664261252
DIALOG#16818161252
DIALOG#1793761252
STRING#261160
GROUP_CURSOR#104201252
GROUP_CURSOR#105201252
GROUP_ICON#102341252
GROUP_ICON#103201252
VERSION#18921252
MANIFEST#1861252
idlangstring
4001033140662621
4011033ةلئلئاةدراشروجدلياهدوأحالرحكعرحة
module_namehintordfunction_name
COMCTL32.dll17
COMCTL32.dll50ImageList_Add
COMCTL32.dll55ImageList_Create
COMCTL32.dll93InitCommonControlsEx
comdlg32.dll11GetSaveFileNameA
WS2_32.dll23
WS2_32.dll19
WS2_32.dll9
WS2_32.dll21
WS2_32.dll4
WS2_32.dll115
WS2_32.dll111
WS2_32.dll57
WS2_32.dll52
WS2_32.dll12
WS2_32.dll16
WS2_32.dll116
WS2_32.dll3
KERNEL32.dll381GetModuleFileNameA
KERNEL32.dll206FindClose
KERNEL32.dll210FindFirstFileA
KERNEL32.dll339GetDriveTypeA
KERNEL32.dll412GetPrivateProfileStringA
KERNEL32.dll406GetPrivateProfileIntA
KERNEL32.dll937WritePrivateProfileStringA
KERNEL32.dll383GetModuleHandleA
KERNEL32.dll518GlobalReAlloc
KERNEL32.dll522GlobalUnlock
KERNEL32.dll515GlobalLock
KERNEL32.dll504GlobalAlloc
KERNEL32.dll854Sleep
KERNEL32.dll458GetSystemTimeAsFileTime
KERNEL32.dll679RaiseException
KERNEL32.dll727RtlUnwind
KERNEL32.dll186ExitThread
KERNEL32.dll52CloseHandle
KERNEL32.dll369GetLastError
KERNEL32.dll722ResumeThread
KERNEL32.dll111CreateThread
KERNEL32.dll528HeapAlloc
KERNEL32.dll272GetCommandLineA
KERNEL32.dll534HeapFree
KERNEL32.dll489GetVersionExA
KERNEL32.dll419GetProcessHeap
KERNEL32.dll439GetStartupInfoA
KERNEL32.dll862TerminateProcess
KERNEL32.dll322GetCurrentProcess
KERNEL32.dll878UnhandledExceptionFilter
KERNEL32.dll842SetUnhandledExceptionFilter
KERNEL32.dll569IsDebuggerPresent
KERNEL32.dll152EnterCriticalSection
KERNEL32.dll593LeaveCriticalSection
KERNEL32.dll416GetProcAddress
KERNEL32.dll869TlsGetValue
KERNEL32.dll867TlsAlloc
KERNEL32.dll870TlsSetValue
KERNEL32.dll868TlsFree
KERNEL32.dll556InterlockedIncrement
KERNEL32.dll808SetLastError
KERNEL32.dll326GetCurrentThreadId
KERNEL32.dll552InterlockedDecrement
KERNEL32.dll260GetCPInfo
KERNEL32.dll253GetACP
KERNEL32.dll403GetOEMCP
KERNEL32.dll804SetHandleCount
KERNEL32.dll441GetStdHandle
KERNEL32.dll358GetFileType
KERNEL32.dll129DeleteCriticalSection
KERNEL32.dll185ExitProcess
KERNEL32.dll932WriteFile
KERNEL32.dll916WideCharToMultiByte
KERNEL32.dll290GetConsoleCP
KERNEL32.dll307GetConsoleMode
KERNEL32.dll238FlushFileBuffers
KERNEL32.dll629MultiByteToWideChar
KERNEL32.dll580LCMapStringA
KERNEL32.dll581LCMapStringW
KERNEL32.dll899VirtualFree
KERNEL32.dll897VirtualAlloc
KERNEL32.dll538HeapReAlloc
KERNEL32.dll532HeapDestroy
KERNEL32.dll530HeapCreate
KERNEL32.dll246FreeEnvironmentStringsA
KERNEL32.dll341GetEnvironmentStrings
KERNEL32.dll247FreeEnvironmentStringsW
KERNEL32.dll343GetEnvironmentStringsW
KERNEL32.dll675QueryPerformanceCounter
KERNEL32.dll479GetTickCount
KERNEL32.dll323GetCurrentProcessId
KERNEL32.dll795SetFilePointer
KERNEL32.dll540HeapSize
KERNEL32.dll823SetStdHandle
KERNEL32.dll442GetStringTypeA
KERNEL32.dll445GetStringTypeW
KERNEL32.dll372GetLocaleInfoA
KERNEL32.dll83CreateFileA
KERNEL32.dll547InitializeCriticalSection
KERNEL32.dll693ReadFile
KERNEL32.dll594LoadLibraryA
KERNEL32.dll921WriteConsoleA
KERNEL32.dll309GetConsoleOutputCP
KERNEL32.dll931WriteConsoleW
KERNEL32.dll784SetEndOfFile
USER32.dll460LoadStringW
USER32.dll535RegisterClassExA
USER32.dll442LoadCursorA
USER32.dll446LoadIconA
USER32.dll571SendMessageA
USER32.dll196EnableWindow
USER32.dll96CreateWindowExA
USER32.dll372GetWindowRect
USER32.dll153DestroyWindow
USER32.dll643SetWindowPos
USER32.dll267GetCursorPos
USER32.dll554ReleaseDC
USER32.dll268GetDC
USER32.dll620SetRect
USER32.dll270GetDesktopWindow
USER32.dll658ShowWindow
USER32.dll161DispatchMessageA
USER32.dll682TranslateMessage
USER32.dll417IsDialogMessageA
USER32.dll314GetMessageA
USER32.dll516PostQuitMessage
USER32.dll142DefWindowProcA
USER32.dll598SetFocus
USER32.dll273GetDlgItem
USER32.dll479MessageBoxA
USER32.dll640SetWindowLongA
USER32.dll27CallWindowProcA
USER32.dll200EndPaint
USER32.dll13BeginPaint
USER32.dll255GetClientRect
USER32.dll580SetCapture
USER32.dll553ReleaseCapture
USER32.dll589SetCursor
USER32.dll85CreateDialogParamA
USER32.dll644SetWindowRgn
USER32.dll448LoadImageA
USER32.dll676TrackPopupMenu
USER32.dll8AppendMenuA
USER32.dll94CreatePopupMenu
USER32.dll440LoadBitmapA
GDI32.dll421GetStockObject
GDI32.dll50CreateDIBSection
GDI32.dll412GetPixel
GDI32.dll217ExtCreateRegion
GDI32.dll33CombineRgn
GDI32.dll143DeleteObject
GDI32.dll405GetObjectA
GDI32.dll45CreateCompatibleDC
GDI32.dll526SelectObject
GDI32.dll140DeleteDC
GDI32.dll18BitBlt
SHELL32.dll263ShellExecuteA
ordentry_vafunction_name
10x6c49Run
module_nameMHMS.exe
flags0
timestamp2019-09-19 08:41:42
version0.0
ordinal_base1
nFunctions1
nNames1
Names(1)0x330bc
Functions(1)0x330b8
NameOrdinals(1)0x330c0

StringTable 040904b0

Comments
CompanyNameMonkey Head Software
FileDescriptionMonkey Head Media Stream
FileVersion1, 0, 0, 1
InternalNameMHMS
LegalCopyrightCopyright © 2003
LegalTrademarks
OriginalFilenameMHMS.exe
PrivateBuild
ProductNameMonkey Head Media Stream
ProductVersion1, 0, 0, 1
SpecialBuild

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0626688EXE09/19/2019 08:41:42#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK