filenameCNMSD38.EXE
size9216 (0x2400)
md54edb8ec5922ddccb33727f15fe71ecc6
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd8

Rich Header

lib idversiontimes used
1990492
6492102
1052
2592109
6991111
28917813
6192101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x3c643783
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.0
SizeOfCode0x1400
SizeOfInitializedData0xc00
SizeOfUninitializedData0
AddressOfEntryPoint0x1c09
BaseOfCode0x1000
BaseOfData0x3000
ImageBase0x600000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0x5000
SizeOfHeaders0x400
CheckSum0xb7b1
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.x >> *SigBy Ahmed18

Sections

namevavsizeraw sizeflags
.text0x10000x13260x1400R-X CODE
.data0x30000x240x200RW- IDATA
.rsrc0x40000x8e80xa00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x1ec40x78
RESOURCE0x40000x8e8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x10f00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000xdc
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
ICON#22960
GROUP_ICON#4101340
VERSION#19120
module_namehintordfunction_name
msvcrt.dll655exit
msvcrt.dll168_acmdln
msvcrt.dll78_XcptFilter
msvcrt.dll109__getmainargs
msvcrt.dll314_initterm
msvcrt.dll154__setusermatherr
msvcrt.dll182_adjust_fdiv
msvcrt.dll128__p__commode
msvcrt.dll133__p__fmode
msvcrt.dll152__set_app_type
msvcrt.dll214_controlfp
msvcrt.dll237_except_handler3
msvcrt.dll200_cexit
msvcrt.dll246_exit
msvcrt.dll197_c_exit
msvcrt.dll625_wtoi
KERNEL32.dll356GetMailslotInfo
KERNEL32.dll260GetComputerNameW
KERNEL32.dll44CloseHandle
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll254GetCommandLineW
KERNEL32.dll912lstrcatW
KERNEL32.dll346GetLastError
KERNEL32.dll395GetProcessHeap
KERNEL32.dll495HeapAlloc
KERNEL32.dll501HeapFree
KERNEL32.dll918lstrcmpiW
KERNEL32.dll77CreateFileW
KERNEL32.dll886WriteFile
KERNEL32.dll85CreateMailslotW
KERNEL32.dll809Sleep
KERNEL32.dll656ReadFile
KERNEL32.dll426GetSystemTime
KERNEL32.dll927lstrlenW
KERNEL32.dll921lstrcpyW
KERNEL32.dll446GetTickCount
USER32.dll47CharPrevW
USER32.dll729wsprintfW
USER32.dll44CharNextW
WINSPOOL.DRV74EndDocPrinter
WINSPOOL.DRV162StartDocPrinterW
WINSPOOL.DRV121GetPrinterW
WINSPOOL.DRV146SetJobW
WINSPOOL.DRV79EnumJobsW
WINSPOOL.DRV124OpenPrinterW
WINSPOOL.DRV27ClosePrinter
WINSPOOL.DRV165WritePrinter
NETAPI32.dll166NetRemoteTOD
NETAPI32.dll93NetApiBufferFree

StringTable 040904B0

CompanyNameCANON INC.
FileDescriptionBJ Status Monitor Closer
FileVersion1.52.2.0
InternalNameCNMSMSD.EXE
LegalCopyrightCopyright CANON INC. 1999-2002 All Rights Reserved
OriginalFilenameCNMSMSD.EXE
ProductNameCanon BJ Raster Printer Driver for Microsoft Windows XP / Windows 2000
ProductVersion1.52.2.0

VS_FIXEDFILEINFO

FileVersion0.3.0.0
ProductVersion1.52.2.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
09216EXE02/08/2002 20:39:31#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK