filenameregedit.exe
size389120 (0x5f000)
md57022b480df469b2a94a48bcdb7b6dae2
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
147307292
259282003
2602820022
261282003
2572820033
10375
2642820028
255282001
258282001

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections7
TimeDateStamp0x9aa91683
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion14.23
SizeOfCode0x23000
SizeOfInitializedData0x7d000
SizeOfUninitializedData0
AddressOfEntryPoint0x22ff0
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion10.0
ImageVersion10.0
SubsystemVersion10.0
Reserved10
SizeOfImage0xa1000
SizeOfHeaders0x1000
CheckSum0x62755
Subsystem2
DllCharacteristics0xc160
SizeOfStackReserve0x80000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x22df70x23000R-X CODE
.rdata0x240000x66c80x7000R-- IDATA
.data0x2b0000x428b00x1000RW- IDATA
.pdata0x6e0000x108c0x2000R-- IDATA
.didat0x700000x100x1000RW- IDATA
.rsrc0x710000x2ea880x2f000R-- IDATA
.reloc0xa00000x1980x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x27fa00x168
RESOURCE0x710000x2ea88
EXCEPTION0x6e0000x108c
SECURITY00
BASERELOC0xa00000x198
DEBUG0x266500x54
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x245700x130
Bound_IAT00
IAT0x246a00xbf8
Delay_IAT0x27f300x40
CLR_Header00
typenamesizecp
MUI#12560
REGINSTREGINST8290
CURSOR#333080
CURSOR#348200
CURSOR#3510760
CURSOR#3623560
CURSOR#3741480
ICON#173240
ICON#2169360
ICON#396400
ICON#467600
ICON#542640
ICON#624400
ICON#717200
ICON#811280
ICON#998250
ICON#10169360
ICON#1196400
ICON#1267600
ICON#1342640
ICON#1424400
ICON#1517200
ICON#1611280
ICON#17202450
ICON#18169360
ICON#1996400
ICON#2067600
ICON#2142640
ICON#2224400
ICON#2317200
ICON#2411280
ICON#252960
ICON#2613840
ICON#2711280
ICON#2822160
ICON#292960
ICON#3013840
ICON#3111280
ICON#3222160
GROUP_CURSOR#100760
GROUP_ICON#1001180
GROUP_ICON#1011180
GROUP_ICON#1021180
GROUP_ICON#205620
GROUP_ICON#206620
VERSION#19000
MANIFEST#112060
module_namehintordfunction_name
ADVAPI32.dll655RegOpenKeyW
ADVAPI32.dll627RegDeleteValueW
ADVAPI32.dll615RegCreateKeyW
ADVAPI32.dll641RegGetValueW
ADVAPI32.dll652RegOpenKeyExW
ADVAPI32.dll681RegSetValueExW
ADVAPI32.dll634RegEnumKeyExW
ADVAPI32.dll612RegCreateKeyExW
ADVAPI32.dll635RegEnumKeyW
ADVAPI32.dll645RegLoadKeyW
ADVAPI32.dll684RegUnLoadKeyW
ADVAPI32.dll623RegDeleteKeyW
ADVAPI32.dll659RegQueryInfoKeyW
ADVAPI32.dll667RegRenameKey
ADVAPI32.dll355GetSecurityInfo
ADVAPI32.dll665RegQueryValueExW
ADVAPI32.dll533OpenProcessToken
ADVAPI32.dll676RegSetKeySecurity
ADVAPI32.dll348GetSecurityDescriptorControl
ADVAPI32.dll31AdjustTokenPrivileges
ADVAPI32.dll431LookupPrivilegeValueW
ADVAPI32.dll607RegConnectRegistryW
ADVAPI32.dll637RegEnumValueW
ADVAPI32.dll745SetSecurityDescriptorGroup
ADVAPI32.dll425LookupAccountSidW
ADVAPI32.dll512MapGenericMask
ADVAPI32.dll749SetSecurityInfo
ADVAPI32.dll398InitializeAcl
ADVAPI32.dll399InitializeSecurityDescriptor
ADVAPI32.dll413IsValidSecurityDescriptor
ADVAPI32.dll748SetSecurityDescriptorSacl
ADVAPI32.dll352GetSecurityDescriptorOwner
ADVAPI32.dll343GetNamedSecurityInfoW
ADVAPI32.dll739SetNamedSecurityInfoW
ADVAPI32.dll638RegFlushKey
ADVAPI32.dll364GetSidSubAuthority
ADVAPI32.dll350GetSecurityDescriptorGroup
ADVAPI32.dll365GetSidSubAuthorityCount
ADVAPI32.dll746SetSecurityDescriptorOwner
ADVAPI32.dll349GetSecurityDescriptorDacl
ADVAPI32.dll744SetSecurityDescriptorDacl
ADVAPI32.dll354GetSecurityDescriptorSacl
ADVAPI32.dll682RegSetValueW
ADVAPI32.dll671RegRestoreKeyW
ADVAPI32.dll680RegSetValueExA
ADVAPI32.dll675RegSaveKeyW
ADVAPI32.dll329GetInheritanceSourceW
ADVAPI32.dll603RegCloseKey
KERNEL32.dll639GetModuleHandleExW
KERNEL32.dll435FreeLibrary
KERNEL32.dll789GetTimeFormatW
KERNEL32.dll369FileTimeToLocalFileTime
KERNEL32.dll970LoadLibraryW
KERNEL32.dll370FileTimeToSystemTime
KERNEL32.dll1606lstrcmpW
KERNEL32.dll1552WideCharToMultiByte
KERNEL32.dll596GetFileSize
KERNEL32.dll280DeleteFileW
KERNEL32.dll1013MultiByteToWideChar
KERNEL32.dll205CreateFileW
KERNEL32.dll1330SetFilePointer
KERNEL32.dll1572WriteFile
KERNEL32.dll1256SearchPathW
KERNEL32.dll1145ReadFile
KERNEL32.dll543GetCurrentProcess
KERNEL32.dll358ExitProcess
KERNEL32.dll856HeapSetInformation
KERNEL32.dll630GetLongPathNameW
KERNEL32.dll479GetCommandLineW
KERNEL32.dll1609lstrcmpiW
KERNEL32.dll976LocalAlloc
KERNEL32.dll900IsDebuggerPresent
KERNEL32.dll1193RegisterApplicationRestart
KERNEL32.dll554GetDateFormatW
KERNEL32.dll824GlobalAlloc
KERNEL32.dll695GetProcAddress
KERNEL32.dll835GlobalLock
KERNEL32.dll640GetModuleHandleW
KERNEL32.dll984LocalReAlloc
KERNEL32.dll265DebugBreak
KERNEL32.dll842GlobalUnlock
KERNEL32.dll237CreateSemaphoreExW
KERNEL32.dll852HeapFree
KERNEL32.dll1345SetLastError
KERNEL32.dll1210ReleaseSemaphore
KERNEL32.dll156CompareStringOrdinal
KERNEL32.dll1513WaitForSingleObject
KERNEL32.dll1012MulDiv
KERNEL32.dll701GetProcessHeap
KERNEL32.dll544GetCurrentProcessId
KERNEL32.dll487GetComputerNameW
KERNEL32.dll981LocalFree
KERNEL32.dll219CreateMutexExW
KERNEL32.dll548GetCurrentThreadId
KERNEL32.dll1206ReleaseMutex
KERNEL32.dll431FormatMessageW
KERNEL32.dll617GetLastError
KERNEL32.dll1053OutputDebugStringW
KERNEL32.dll848HeapAlloc
KERNEL32.dll1514WaitForSingleObjectEx
KERNEL32.dll1045OpenSemaphoreW
KERNEL32.dll136CloseHandle
KERNEL32.dll1417Sleep
KERNEL32.dll727GetStartupInfoW
KERNEL32.dll1466UnhandledExceptionFilter
KERNEL32.dll1401SetUnhandledExceptionFilter
KERNEL32.dll1432TerminateProcess
KERNEL32.dll1101QueryPerformanceCounter
KERNEL32.dll752GetSystemTimeAsFileTime
KERNEL32.dll782GetTickCount
KERNEL32.dll1231ResolveDelayLoadedAPI
KERNEL32.dll272DelayLoadFailureHook
KERNEL32.dll635GetModuleFileNameA
GDI32.dll702GetStockObject
GDI32.dll719GetTextExtentPoint32W
GDI32.dll927StartPage
GDI32.dllAbortDoc
GDI32.dll398EndDoc
GDI32.dll384DeleteDC
GDI32.dll918SetViewportOrgEx
GDI32.dll870SetAbortProc
GDI32.dll925StartDocW
GDI32.dll401EndPage
GDI32.dll78CreatePatternBrush
GDI32.dll41CreateBitmap
GDI32.dll777PatBlt
GDI32.dll866SelectClipRgn
GDI32.dll685GetObjectW
GDI32.dll464ExcludeClipRect
GDI32.dll868SelectObject
GDI32.dll635GetDeviceCaps
GDI32.dll727GetTextMetricsW
GDI32.dll915SetTextColor
GDI32.dll875SetBkColor
GDI32.dll387DeleteObject
GDI32.dll67CreateFontIndirectW
GDI32.dll471ExtTextOutW
USER32.dll565IsIconic
USER32.dll339GetDpiForSystem
USER32.dll905ShowCursor
USER32.dll496GetWindowRect
USER32.dll968UpdateWindow
USER32.dll186DialogBoxParamW
USER32.dll686PostQuitMessage
USER32.dll67CheckMenuItem
USER32.dll456GetSystemMetricsForDpi
USER32.dll889SetWindowLongW
USER32.dll806SetCursor
USER32.dll542InsertMenuW
USER32.dll240EndDeferWindowPos
USER32.dll215DrawMenuBar
USER32.dll427GetProcessDefaultLayout
USER32.dll602LoadIconW
USER32.dll942TranslateMessage
USER32.dll940TranslateAcceleratorW
USER32.dll451GetSysColor
USER32.dll872SetThreadDpiAwarenessContext
USER32.dll837SetMenuDefaultItem
USER32.dll890SetWindowPlacement
USER32.dll841SetMenuItemInfoW
USER32.dll77ClientToScreen
USER32.dll177DestroyIcon
USER32.dll189DispatchMessageW
USER32.dll16BeginDeferWindowPos
USER32.dll910ShowWindow
USER32.dll615LoadStringW
USER32.dll594LoadAcceleratorsW
USER32.dll494GetWindowPlacement
USER32.dll732RegisterClassExW
USER32.dll896SetWindowTextW
USER32.dll775ScreenToClient
USER32.dll171DeleteMenu
USER32.dll118CreateWindowExW
USER32.dll340GetDpiForWindow
USER32.dll541InsertMenuItemW
USER32.dll375GetMenu
USER32.dll382GetMenuItemID
USER32.dll685PostMessageW
USER32.dll384GetMenuItemInfoW
USER32.dll168DeferWindowPos
USER32.dll393GetMessageW
USER32.dll489GetWindowLongW
USER32.dll808SetCursorPos
USER32.dll52CharNextW
USER32.dll181DestroyWindow
USER32.dll106CreateDialogParamW
USER32.dll66CheckDlgButton
USER32.dll545IntersectRect
USER32.dll391GetMessagePos
USER32.dll652ModifyMenuW
USER32.dll205DrawAnimatedRects
USER32.dll823SetForegroundWindow
USER32.dll276FindWindowW
USER32.dll19BringWindowToTop
USER32.dll367GetLastActivePopup
USER32.dll681PeekMessageW
USER32.dll561IsDialogMessageW
USER32.dll475GetWindow
USER32.dll62CharUpperBuffW
USER32.dll551IsCharAlphaNumericW
USER32.dll63CharUpperW
USER32.dll322GetDC
USER32.dll891SetWindowPos
USER32.dll888SetWindowLongPtrW
USER32.dll510HideCaret
USER32.dll242EndDialog
USER32.dll455GetSystemMetrics
USER32.dll642MessageBeep
USER32.dll488GetWindowLongPtrW
USER32.dll796SetCaretPos
USER32.dll450GetSubMenu
USER32.dll667OpenClipboard
USER32.dll875SetTimer
USER32.dll79CloseClipboard
USER32.dll232EmptyClipboard
USER32.dll818SetDlgItemTextW
USER32.dll733RegisterClassW
USER32.dll638MapWindowPoints
USER32.dll781SendDlgItemMessageW
USER32.dll656MoveWindow
USER32.dll239EnableWindow
USER32.dll502GetWindowTextLengthW
USER32.dll33CallWindowProcW
USER32.dll333GetDlgItemInt
USER32.dll71CheckRadioButton
USER32.dll790SendMessageW
USER32.dll335GetDlgItemTextW
USER32.dll562IsDlgButtonChecked
USER32.dll178DestroyMenu
USER32.dll821SetFocus
USER32.dll310GetClipboardData
USER32.dll779ScrollWindowEx
USER32.dll600LoadCursorW
USER32.dll174DestroyCaret
USER32.dll794SetCapture
USER32.dll802SetClipboardData
USER32.dll937TrackPopupMenuEx
USER32.dll400GetParent
USER32.dll503GetWindowTextW
USER32.dll860SetScrollInfo
USER32.dll735RegisterClipboardFormatW
USER32.dll167DefWindowProcW
USER32.dll360GetKeyState
USER32.dll49CharLowerW
USER32.dll307GetClientRect
USER32.dll332GetDlgItem
USER32.dll558IsClipboardFormatAvailable
USER32.dll904ShowCaret
USER32.dll592KillTimer
USER32.dll233EnableMenuItem
USER32.dll761ReleaseCapture
USER32.dll546InvalidateRect
USER32.dll762ReleaseDC
USER32.dll17BeginPaint
USER32.dll244EndPaint
USER32.dll612LoadMenuW
USER32.dll604LoadImageW
USER32.dll95CreateCaret
msvcrt.dll91__CxxFrameHandler3
msvcrt.dll211_commode
msvcrt.dll296_fmode
msvcrt.dll163_acmdln
msvcrt.dll382_initterm
msvcrt.dll145__setusermatherr
msvcrt.dll410_ismbblead
msvcrt.dll194_cexit
msvcrt.dll271_exit
msvcrt.dll1075exit
msvcrt.dll143__set_app_type
msvcrt.dll128__getmainargs
msvcrt.dll834_unlock
msvcrt.dll85_XcptFilter
msvcrt.dll1143iswprint
msvcrt.dll681_resetstkoflw
msvcrt.dll1171memcpy
msvcrt.dll124__dllonexit
msvcrt.dll874_vsnwprintf
msvcrt.dll1057atoi
msvcrt.dll1172memcpy_s
msvcrt.dll671_purecall
msvcrt.dll1282wcschr
msvcrt.dll1133isspace
msvcrt.dll917_wcsnicmp
msvcrt.dll1297wcsrchr
msvcrt.dll1292wcsncmp
msvcrt.dll87__C_specific_handler
msvcrt.dll657_onexit
msvcrt.dll47void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll487_lock
msvcrt.dll1173memmove
msvcrt.dll1175memset
msvcrt.dll175_amsg_exit
api-ms-win-core-path-l1-1-0.dll2PathCchAddBackslash
api-ms-win-core-path-l1-1-0.dll9PathCchCombine
SHLWAPI.dll286StrChrW
SHLWAPI.dll323StrRChrW
SHLWAPI.dll388
SHLWAPI.dll219
SHLWAPI.dll344StrToIntW
SHLWAPI.dll283StrChrIW
SHLWAPI.dll335StrStrIW
COMCTL32.dll114ImageList_SetBkColor
COMCTL32.dll112ImageList_ReplaceIcon
COMCTL32.dll410
COMCTL32.dll384
COMCTL32.dll337
COMCTL32.dll236
COMCTL32.dll124InitCommonControlsEx
COMCTL32.dll84ImageList_Create
COMCTL32.dll4
COMCTL32.dll85ImageList_Destroy
COMCTL32.dll2
COMCTL32.dll334
COMCTL32.dll340
COMCTL32.dll413
COMCTL32.dll338
COMCTL32.dll329
COMDLG32.dll12GetOpenFileNameW
COMDLG32.dll14GetSaveFileNameW
COMDLG32.dll3ChooseFontW
COMDLG32.dll20PrintDlgExW
SHELL32.dll38DragFinish
SHELL32.dll42DragQueryFileW
SHELL32.dll367SHGetStockIconInfo
SHELL32.dll6
SHELL32.dll424ShellAboutW
AUTHZ.dll14AuthzInitializeContextFromSid
AUTHZ.dll8AuthzFreeContext
AUTHZ.dll10AuthzFreeResourceManager
AUTHZ.dllAuthzAccessCheck
AUTHZ.dll20AuthzInitializeResourceManager
ACLUI.dll2
ole32.dll140CoTaskMemFree
ole32.dll97CoInitializeEx
ole32.dll473ReleaseStgMedium
ole32.dll144CoUninitialize
ole32.dll43CoCreateInstance
ole32.dll139CoTaskMemAlloc
ulib.dll362public: virtual unsigned char __cdecl DSTRING::SPrintfAppend(unsigned short const * __ptr64, ...) __ptr64

?SPrintfAppend@DSTRING@@UEAAEPEBGZZ

ulib.dll269public: virtual unsigned char __cdecl DSTRING::NewBuf(unsigned long) __ptr64

?NewBuf@DSTRING@@UEAAEK@Z

ulib.dll356public: virtual unsigned char __cdecl DSTRING::Resize(unsigned long) __ptr64

?Resize@DSTRING@@UEAAEK@Z

ulib.dll233public: unsigned char __cdecl WSTRING::Initialize(unsigned short const * __ptr64, unsigned long) __ptr64

?Initialize@WSTRING@@QEAAEPEBGK@Z

ulib.dll234public: unsigned char __cdecl WSTRING::Initialize(class WSTRING const * __ptr64, unsigned long, unsigned long) __ptr64

?Initialize@WSTRING@@QEAAEPEBV1@KK@Z

ulib.dll412public: unsigned char __cdecl WSTRING::Strcat(class WSTRING const * __ptr64) __ptr64

?Strcat@WSTRING@@QEAAEPEBV1@@Z

ulib.dll15public: __cdecl DSTRING::DSTRING(void) __ptr64

??0DSTRING@@QEAA@XZ

ulib.dll59public: virtual __cdecl DSTRING::~DSTRING(void) __ptr64

??1DSTRING@@UEAA@XZ

ulib.dll360public: virtual unsigned char __cdecl DSTRING::SPrintf(unsigned short const * __ptr64, ...) __ptr64

?SPrintf@DSTRING@@UEAAEPEBGZZ

ulib.dll192public: unsigned char __cdecl ARRAY::Initialize(unsigned long, unsigned long) __ptr64

?Initialize@ARRAY@@QEAAEKK@Z

ulib.dll2public: __cdecl ARRAY::ARRAY(void) __ptr64

??0ARRAY@@QEAA@XZ

ulib.dll135public: virtual void __cdecl OBJECT::DebugDump(unsigned char)const __ptr64

?DebugDump@OBJECT@@UEBAXE@Z

ulib.dll32protected: __cdecl OBJECT::OBJECT(void) __ptr64

??0OBJECT@@IEAA@XZ

ulib.dll122public: virtual long __cdecl OBJECT::Compare(class OBJECT const * __ptr64)const __ptr64

?Compare@OBJECT@@UEBAJPEBV1@@Z

ulib.dll70public: virtual __cdecl OBJECT::~OBJECT(void) __ptr64

??1OBJECT@@UEAA@XZ

clb.dll1ClbSetColumnWidths
clb.dllClbAddData
ntdll.dll1579RtlVirtualUnwind
ntdll.dll1260RtlLookupFunctionEntry
ntdll.dll1177RtlIoDecodeMemIoResource
ntdll.dll779RtlCmDecodeMemIoResource
ntdll.dll1016RtlFreeHeap
ntdll.dll724RtlAllocateHeap
ntdll.dll852RtlCreateUnicodeString
ntdll.dll1137RtlInitUnicodeString
ntdll.dll756RtlCaptureContext
ntdll.dll1023RtlFreeUnicodeString
UxTheme.dll81SetWindowTheme

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionRegistry Editor
FileVersion10.0.19645.1 (WinBuild.160101.0800)
InternalNameREGEDIT
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameREGEDIT.EXE
ProductNameMicrosoft® Windows® Operating System
ProductVersion10.0.19645.1

VS_FIXEDFILEINFO

FileVersion10.0.19645.1
ProductVersion10.0.19645.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
305407324PNG(256 x 256)#
3c9e09825PNG(256 x 256)#
4984820245PNG(256 x 256)#
4e75d67747BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER