filenamefotografie.scr
size154112 (0x25a00)
md5723187d38995646085285544130142d0
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
9340352
1323072931
1493072929
13130729113
1473072913
10144
132210221
148210221
145210221

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x54088827
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion9.0
SizeOfCode0x15000
SizeOfInitializedData0x10600
SizeOfUninitializedData0
AddressOfEntryPoint0x730e
BaseOfCode0x1000
BaseOfData0x16000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x2a000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x14f530x15000R-X CODE
.rdata0x160000x34ca0x3600R-- IDATA
.data0x1a0000x63e40x4800RW- IDATA
.rsrc0x210000x87e40x8800R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x187dc0xa0
RESOURCE0x210000x87e4
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x183300x40
Bound_IAT00
IAT0x160000x228
Delay_IAT00
CLR_Header00
typenamesizecp
DIALOG#10001501252
STRING#40906521252
STRING#40918721252
STRING#40922441252
STRING#40931961252
STRING#40947361252
STRING#40958601252
STRING#40966921252
FONT#16289801252
VERSION#18121252
idlangstring
654240Out of memory while expanding memory stream
654250Error reading %s%s%s: %s
654260Stream read error
654270Property is read-only
654280%s.Seek not implemented
654290Operation not allowed on sorted list
654300Property %s does not exist
654310Stream write error
654320List index out of bounds (%d)
654330List capacity out of bounds (%d)
654340List count out of bounds (%d)
654400Friday
654410Saturday
654420Ancestor for '%s' not found
654430Cannot assign a %s to a %s
654440Class %s not found
654450List does not allow duplicates ($0%x)
654460A component named %s already exists
654470String list does not allow duplicates
654480Cannot create file %s
654490Cannot open file %s
654500''%s'' is not a valid component name
654510Invalid property path
654520Invalid property value
654530List capacity out of bounds (%d)
654540List count out of bounds (%d)
654550List index out of bounds (%d)
654560September
654570October
654580November
654590December
654600Sun
654610Mon
654620Tue
654630Wed
654640Thu
654650Fri
654660Sat
654670Sunday
654680Monday
654690Tuesday
654700Wednesday
654710Thursday
654720May
654730Jun
654740Jul
654750Aug
654760Sep
654770Oct
654780Nov
654790Dec
654800January
654810February
654820March
654830April
654840May
654850June
654860July
654870August
654880Error creating variant array
654890Variant is not an array
654900Variant array index out of bounds
654910External exception %x
654920Assertion failed
654930Interface not supported
654940Exception in safecall method
654950%s (%s, line %d)
654960Abstract Error
654970Access violation at address %p in module '%s'. %s of address %p
654980System Error. Code: %d. %s
654990A call to an OS function failed
655000Jan
655010Feb
655020Mar
655030Apr
655040Floating point underflow
655050Invalid pointer operation
655060Invalid class typecast
655070Access violation at address %p. %s of address %p
655080Stack overflow
655090Control-C hit
655100Privileged instruction
655110Exception %s in module %s at %p. %s%s
655120Application Error
655130Format '%s' invalid or incompatible with argument
655140No argument for format '%s'
655150Invalid variant type conversion
655160Invalid variant operation
655170Variant method calls not supported
655180Read
655190Write
655200'%s' is not a valid integer value
655210Out of memory
655220I/O error %d
655230File not found
655240Invalid filename
655250Too many open files
655260File access denied
655270Read beyond end of file
655280Disk full
655290Invalid numeric input
655300Division by zero
655310Range check error
655320Integer overflow
655330Invalid floating point operation
655340Floating point division by zero
655350Floating point overflow
module_namehintordfunction_name
USER32.dll451IsCharAlphaNumericW
USER32.dll705SetWindowContextHelpId
USER32.dll125DdeDisconnect
USER32.dll362GetPropA
USER32.dll95CreateDialogIndirectParamA
USER32.dll227EnumDesktopsW
USER32.dll174DispatchMessageA
USER32.dll137DdeNameService
USER32.dll323GetKeyboardType
USER32.dll72ClipCursor
urlmon.dll95RevokeFormatEnumerator
urlmon.dll71HlinkSimpleNavigateToString
urlmon.dll106URLOpenBlockingStreamA
urlmon.dll55GetClassURL
ole32.dll85CoRegisterMallocSpy
ole32.dll213MonikerCommonPrefixWith
ole32.dll329OleUninitialize
ole32.dll43CoGetCurrentProcess
ole32.dll74CoMarshalInterface
ole32.dll282OleCreateDefaultHandler
ole32.dll53CoGetObject
ADVAPI32.dll640RegUnLoadKeyA
ADVAPI32.dll712StartServiceCtrlDispatcherW
ADVAPI32.dll537PrivilegedServiceAuditAlarmW
ADVAPI32.dll389IsValidSecurityDescriptor
ADVAPI32.dll681SetFileSecurityA
ADVAPI32.dll401LookupAccountSidW
ADVAPI32.dll636RegSetValueA
ADVAPI32.dll328GetSecurityDescriptorDacl
ADVAPI32.dll326GetPrivateObjectSecurity
GDI32.dll9AnimatePalette
GDI32.dll26Chord
GDI32.dll47CreateCompatibleBitmap
GDI32.dll19BitBlt
GDI32.dll44CreateBrushIndirect
GDI32.dll34CombineRgn
MPR.dll12WNetCancelConnection2W
MPR.dll24WNetDisconnectDialog1A
MPR.dll25WNetDisconnectDialog1W
MPR.dll23WNetDisconnectDialog
MPR.dll55WNetGetUniversalNameA
KERNEL32.dll566LCMapStringA
KERNEL32.dll436GetStringTypeW
KERNEL32.dll615MultiByteToWideChar
KERNEL32.dll567LCMapStringW
KERNEL32.dll283GetConsoleCP
KERNEL32.dll300GetConsoleMode
KERNEL32.dll230FlushFileBuffers
KERNEL32.dll777SetFilePointer
KERNEL32.dll665RaiseException
KERNEL32.dll884VirtualProtect
KERNEL32.dll443GetSystemInfo
KERNEL32.dll886VirtualQuery
KERNEL32.dll900WriteConsoleA
KERNEL32.dll302GetConsoleOutputCP
KERNEL32.dll910WriteConsoleW
KERNEL32.dll805SetStdHandle
KERNEL32.dll56CompareStringW
KERNEL32.dll769SetEnvironmentVariableA
KERNEL32.dll433GetStringTypeA
KERNEL32.dll849TlsGetValue
KERNEL32.dll363GetLocaleInfoA
KERNEL32.dll711RtlUnwind
KERNEL32.dll536InitializeCriticalSection
KERNEL32.dll182ExitProcess
KERNEL32.dll141DosDateTimeToFileTime
KERNEL32.dll130DeleteFileW
KERNEL32.dll129DeleteFileA
KERNEL32.dll82CreateFileW
KERNEL32.dll79CreateFileA
KERNEL32.dll74CreateDirectoryW
KERNEL32.dll71CreateDirectoryA
KERNEL32.dll55CompareStringA
KERNEL32.dll49CloseHandle
KERNEL32.dll584LoadModule
KERNEL32.dll155EnumDateFormatsA
KERNEL32.dll247GetAtomNameA
KERNEL32.dll694RemoveDirectoryW
KERNEL32.dll398GetPrivateProfileIntA
KERNEL32.dll348GetFileSizeEx
KERNEL32.dll609MoveFileExA
KERNEL32.dll448GetSystemTimeAsFileTime
KERNEL32.dll183ExitThread
KERNEL32.dll360GetLastError
KERNEL32.dll523HeapFree
KERNEL32.dll517HeapAlloc
KERNEL32.dll265GetCommandLineA
KERNEL32.dll478GetVersionExA
KERNEL32.dll430GetStartupInfoA
KERNEL32.dll408GetProcAddress
KERNEL32.dll377GetModuleHandleW
KERNEL32.dll847TlsAlloc
KERNEL32.dll850TlsSetValue
KERNEL32.dll848TlsFree
KERNEL32.dll544InterlockedIncrement
KERNEL32.dll790SetLastError
KERNEL32.dll540InterlockedDecrement
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll374GetModuleHandleA
KERNEL32.dll638OutputDebugStringA
KERNEL32.dll150EnterCriticalSection
KERNEL32.dll579LeaveCriticalSection
KERNEL32.dll842TerminateProcess
KERNEL32.dll315GetCurrentProcess
KERNEL32.dll859UnhandledExceptionFilter
KERNEL32.dll822SetUnhandledExceptionFilter
KERNEL32.dll521HeapDestroy
KERNEL32.dll519HeapCreate
KERNEL32.dll881VirtualFree
KERNEL32.dll127DeleteCriticalSection
KERNEL32.dll878VirtualAlloc
KERNEL32.dll527HeapReAlloc
KERNEL32.dll898WideCharToMultiByte
KERNEL32.dll471GetTimeZoneInformation
KERNEL32.dll911WriteFile
KERNEL32.dll432GetStdHandle
KERNEL32.dll372GetModuleFileNameA
KERNEL32.dll238FreeEnvironmentStringsA
KERNEL32.dll333GetEnvironmentStrings
KERNEL32.dll239FreeEnvironmentStringsW
KERNEL32.dll335GetEnvironmentStringsW
KERNEL32.dll786SetHandleCount
KERNEL32.dll350GetFileType
KERNEL32.dll660QueryPerformanceCounter
KERNEL32.dll468GetTickCount
KERNEL32.dll316GetCurrentProcessId
KERNEL32.dll253GetCPInfo
KERNEL32.dll246GetACP
KERNEL32.dll395GetOEMCP
KERNEL32.dll834Sleep
KERNEL32.dll581LoadLibraryExA

StringTable 040904E4

CompanyNameDot swam atomic - www.Luck.com
FileDescriptionPrize Alice driven Jones
FileVersion5.0.0.2
Internal NameOrbit.exe
Legal TrademarksLuck
Original FilenameOrbit.exe
ProductNameLuck
ProductVersion8.0
LegalCopyrightCopyright (C) Luck 2001-2013

VS_FIXEDFILEINFO

FileVersion1.2.0.0
ProductVersion3.5.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x10001
FileType1
FileSubtype0
offsetsizetypecomment
0154112EXE09/04/2014 15:41:27#
15c115HTM#
1e58410756JPG#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK