filename62b9eb6b5510ee9cb4a1d77073fb77d1eaafa5c9a9ac43eeb541e2564ea9f866
size72192 (0x11a00)
md55a4644e7df65746c0a95542f9e1b8ff2
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
6492103
28917811
2592102
93403519
10265
1145072724
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x5272bad6
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0xa000
SizeOfInitializedData0x7600
SizeOfUninitializedData0
AddressOfEntryPoint0xaaca
BaseOfCode0x1000
BaseOfData0xb000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x14000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.x >> *SigBy Ahmed18

Sections

namevavsizeraw sizeflags
.text0x10000x9eae0xa000R-X CODE
.rdata0xb0000x202a0x2200R-- IDATA
.data0xe0000xe240x400RW- IDATA
.rsrc0xf0000x4ef00x5000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xc01c0xdc
RESOURCE0xf0000x4ef0
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#13081252
BITMAP#10410001252
BITMAP#1332161252
BITMAP#1342161252
ICON#222161252
ICON#313841252
ICON#413841252
ICON#513841252
ICON#613841252
ICON#713841252
MENU#1029321252
MENU#1045061252
MENU#108181252
DIALOG#1051621252
DIALOG#1076621252
DIALOG#1122501252
DIALOG#11310361252
DIALOG#10968221252
STRING#13641252
STRING#322801252
STRING#632081252
STRING#641661252
STRING#1261421252
STRING#1322901252
STRING#1381721252
STRING#139581252
ACCELERATORS#103721252
GROUP_CURSOR#103201252
GROUP_ICON#101341252
GROUP_ICON#102201252
GROUP_ICON#109201252
GROUP_ICON#110201252
GROUP_ICON#111201252
VERSION#17121252
MANIFEST#13621252
idlangstring
41033%d item(s)
51033, %d Selected
61033Created by using
71033Select a filename to save
81033Network Resources
91033Yes
101033No
111033Retrieving IP addresses...
121033Do you want to stop the loading process ?
141033Loading... %s
5011033Text File
5021033Tab delimited text file
5031033Tabular Text File
5041033HTML File - Horizontal
5051033HTML File - Vertical
5061033XML File
5071033Comma Delimited Text File
10011033Resource Name
10021033Resource Type
10031033Workgroup / Domain
10041033Comment
10051033Network Provider
10061033Connections
10071033IP Address
10081033Local Path
10091033OS Version
10101033OS Name
10111033Attributes
10121033MAC Address
10131033MAC Address Company
20011033Computer
20021033Disk Share
20031033Printer Share
20041033Admin Share
20051033Special Share
21001033Unknown
21011033Windows 95
21021033Windows 98
21031033Windows ME
21041033Windows NT
21051033Windows 2000
21061033Windows XP
21071033Windows Server 2003
21081033Windows Vista
21091033Windows 7
21101033Windows Server 2008
22011033SQL Server
22021033PDC
22031033BDC
22041033Terminal Server
22051033Domain Master
22061033Print Server
22071033Dial-In Server
22081033Novell Server
module_namehintordfunction_name
KERNEL32.DLLGetStartupInfoA
KERNEL32.DLLSizeofResource
KERNEL32.DLLEnumResourceTypesA
KERNEL32.DLLWriteFile
KERNEL32.DLLOpenProcess
KERNEL32.DLLGetCurrentProcessId
KERNEL32.DLLReadProcessMemory
KERNEL32.DLLGetCurrentProcess
KERNEL32.DLLExitProcess
KERNEL32.DLLDeleteFileA
KERNEL32.DLLGetPrivateProfileIntA
KERNEL32.DLLEnumResourceNamesA
KERNEL32.DLLWritePrivateProfileStringA
KERNEL32.DLLGetPrivateProfileStringA
KERNEL32.DLLMultiByteToWideChar
KERNEL32.DLLWideCharToMultiByte
KERNEL32.DLLLockResource
KERNEL32.DLLGetFileAttributesA
KERNEL32.DLLGlobalLock
KERNEL32.DLLLocalFree
KERNEL32.DLLGetTempPathA
KERNEL32.DLLGetTempFileNameA
KERNEL32.DLLLoadResource
KERNEL32.DLLGetVersionExA
KERNEL32.DLLGetLastError
KERNEL32.DLLGlobalAlloc
KERNEL32.DLLGetLocaleInfoA
KERNEL32.DLLCloseHandle
KERNEL32.DLLWaitForSingleObject
KERNEL32.DLLGetModuleHandleA
KERNEL32.DLLCreateThread
KERNEL32.DLLGetTickCount
KERNEL32.DLLGetProcAddress
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLFreeLibrary
KERNEL32.DLLGetModuleFileNameA
KERNEL32.DLLReadFile
KERNEL32.DLLGetNumberFormatA
KERNEL32.DLLCreateFileA
KERNEL32.DLLLoadLibraryExA
KERNEL32.DLLFormatMessageA
KERNEL32.DLLGetFileSize
KERNEL32.DLLGetWindowsDirectoryA
KERNEL32.DLLFindResourceA
KERNEL32.DLLGlobalUnlock
ADVAPI32.dllRegDeleteKeyA
COMCTL32.dllCreateToolbarEx
COMCTL32.dll6
COMCTL32.dllImageList_Create
COMCTL32.dllImageList_AddMasked
COMCTL32.dllImageList_SetImageCount
COMCTL32.dll17
COMCTL32.dllImageList_ReplaceIcon
comdlg32.dllGetSaveFileNameA
comdlg32.dllFindTextA
GDI32.dllCreateFontIndirectA
GDI32.dllSetBkMode
GDI32.dllDeleteObject
GDI32.dllSetTextColor
GDI32.dllGetStockObject
GDI32.dllGetTextExtentPoint32A
GDI32.dllSetBkColor
GDI32.dllGetDeviceCaps
GDI32.dllSelectObject
MPR.dllWNetCloseEnum
MPR.dllWNetEnumResourceA
MPR.dllWNetOpenEnumA
msvcrt.dll__p__commode
msvcrt.dll_adjust_fdiv
msvcrt.dll__setusermatherr
msvcrt.dll_initterm
msvcrt.dll__getmainargs
msvcrt.dll_acmdln
msvcrt.dllexit
msvcrt.dll_strlwr
msvcrt.dll_mbschr
msvcrt.dll_itoa
msvcrt.dll__p__fmode
msvcrt.dll_memicmp
msvcrt.dllstrrchr
msvcrt.dllmalloc
msvcrt.dllfree
msvcrt.dllmemcmp
msvcrt.dllstrcmp
msvcrt.dllstrtoul
msvcrt.dllstrchr
msvcrt.dll__set_app_type
msvcrt.dll_controlfp
msvcrt.dll_cexit
msvcrt.dll_except_handler3
msvcrt.dll_strcmpi
msvcrt.dllstrlen
msvcrt.dllatoi
msvcrt.dllvoid __cdecl operator delete(void *)

??3@YAXPAX@Z

msvcrt.dll_purecall
msvcrt.dllmemcpy
msvcrt.dllvoid * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

msvcrt.dllstrcpy
msvcrt.dllmemset
msvcrt.dllstrcat
msvcrt.dllstrncat
msvcrt.dllsprintf
msvcrt.dll_XcptFilter
msvcrt.dll_exit
msvcrt.dll_c_exit
msvcrt.dll_onexit
msvcrt.dll__dllonexit
msvcrt.dllstrncpy
SHELL32.dllShellExecuteA
USER32.dllRegisterWindowMessageA
USER32.dllDrawTextExA
USER32.dllIsDialogMessageA
USER32.dllDeferWindowPos
USER32.dllGetMessageA
USER32.dllBeginDeferWindowPos
USER32.dllEndDeferWindowPos
USER32.dllPostQuitMessage
USER32.dllTrackPopupMenu
USER32.dllGetWindowTextA
USER32.dllGetMenuItemInfoA
USER32.dllEnumChildWindows
USER32.dllDestroyMenu
USER32.dllGetDlgCtrlID
USER32.dllDestroyWindow
USER32.dllDialogBoxParamA
USER32.dllModifyMenuA
USER32.dllCreateDialogParamA
USER32.dllLoadStringA
USER32.dllGetParent
USER32.dllLoadMenuA
USER32.dllSetCursor
USER32.dllGetSysColorBrush
USER32.dllShowWindow
USER32.dllChildWindowFromPoint
USER32.dllLoadCursorA
USER32.dllEndDialog
USER32.dllGetDlgItem
USER32.dllCreateWindowExA
USER32.dllSetDlgItemInt
USER32.dllSendDlgItemMessageA
USER32.dllGetDlgItemInt
USER32.dllSetDlgItemTextA
USER32.dllGetDlgItemTextA
USER32.dllSetWindowTextA
USER32.dllMessageBoxA
USER32.dllGetWindowPlacement
USER32.dllSendMessageA
USER32.dllGetWindowRect
USER32.dllRegisterClassA
USER32.dllUpdateWindow
USER32.dllGetSystemMetrics
USER32.dllPostMessageA
USER32.dllSetMenu
USER32.dllLoadAcceleratorsA
USER32.dllSetWindowPos
USER32.dllDefWindowProcA
USER32.dllTranslateAcceleratorA
USER32.dllLoadImageA
USER32.dllDispatchMessageA
USER32.dllTranslateMessage
USER32.dllPeekMessageA
USER32.dllLoadIconA
USER32.dllGetWindowLongA
USER32.dllSetWindowLongA
USER32.dllSetFocus
USER32.dllInvalidateRect
USER32.dllGetMenuStringA
USER32.dllMoveWindow
USER32.dllGetMenu
USER32.dllGetCursorPos
USER32.dllCheckMenuItem
USER32.dllGetDC
USER32.dllGetSysColor
USER32.dllSetClipboardData
USER32.dllEnableWindow
USER32.dllMapWindowPoints
USER32.dllEmptyClipboard
USER32.dllGetClassNameA
USER32.dllEnableMenuItem
USER32.dllGetClientRect
USER32.dllCloseClipboard
USER32.dllReleaseDC
USER32.dllOpenClipboard
USER32.dllGetSubMenu
USER32.dllGetMenuItemCount
WS2_32.dll108
WS2_32.dll111
WS2_32.dll9
WS2_32.dll4
WS2_32.dll112
WS2_32.dll3
WS2_32.dll101
WS2_32.dll103
WS2_32.dll116
WS2_32.dll115

StringTable 040904b0

CompanyNameNirSoft
FileDescriptionNetResView
FileVersion1.27
InternalNameNetResView
LegalCopyrightCopyright © 2005 - 2013 Nir Sofer
OriginalFilenameNetResView.exe
ProductNameNetResView
ProductVersion1.27

VS_FIXEDFILEINFO

FileVersion1.2.7.0
ProductVersion1.2.7.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
072192EXE10/31/2013 20:17:26#
15c115HTM#
b2a084HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK