filenameTmUninst.exe
size278528 (0x44000)
md5864ced07bc939d14e268fbea84e56a9b
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x110

Rich Header

lib idversiontimes used
126503275
1255072730
10950727205
123507272
1145072719
132307291
131307298
1473072929
10586
1980342
11050727161
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5655265d
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion8.0
SizeOfCode0x2e000
SizeOfInitializedData0x15000
SizeOfUninitializedData0
AddressOfEntryPoint0x14c26
BaseOfCode0x1000
BaseOfData0x2f000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x49000
SizeOfHeaders0x1000
CheckSum0x494d1
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x2dec50x2e000R-X CODE
.rdata0x2f0000x9a820xa000R-- IDATA
.data0x390000x71200x3000RW- IDATA
.rsrc0x410000x6740x1000R-- IDATA
.reloc0x420000x6a4e0x7000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x3757c0xc8
RESOURCE0x410000x674
EXCEPTION00
SECURITY00
BASERELOC0x420000x2ad8
DEBUG0x2f4b00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x33f800x40
Bound_IAT00
IAT0x2f0000x3e0
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#19481252
MANIFEST#15411252
module_namehintordfunction_name
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll608RegOpenKeyExA
ADVAPI32.dll621RegQueryValueExA
ADVAPI32.dll607RegOpenKeyA
KERNEL32.dll349FormatMessageA
KERNEL32.dll1317WriteFile
KERNEL32.dll1201SizeofResource
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll331FindResourceA
KERNEL32.dll82CloseHandle
KERNEL32.dll840LocalFree
KERNEL32.dll136CreateFileA
KERNEL32.dll586GetProcessHeap
KERNEL32.dll833LoadResource
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll960ReadFile
KERNEL32.dll719HeapFree
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll664GetTimeZoneInformation
KERNEL32.dll709GlobalUnlock
KERNEL32.dll698GlobalFree
KERNEL32.dll701GlobalHandle
KERNEL32.dll691GlobalAlloc
KERNEL32.dll702GlobalLock
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll143CreateFileW
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll499GetFileType
KERNEL32.dll1126SetFilePointer
KERNEL32.dll659GetTickCount
KERNEL32.dll1148SetNamedPipeHandleState
KERNEL32.dll1280WaitNamedPipeW
KERNEL32.dll715HeapAlloc
KERNEL32.dll722HeapReAlloc
KERNEL32.dll1139SetLastError
KERNEL32.dll836LocalAlloc
KERNEL32.dll1346lstrcmpW
KERNEL32.dll693GlobalDeleteAtom
KERNEL32.dll694GlobalFindAtomA
KERNEL32.dll689GlobalAddAtomA
KERNEL32.dll699GlobalGetAtomNameA
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll1223TlsGetValue
KERNEL32.dll705GlobalReAlloc
KERNEL32.dll1221TlsAlloc
KERNEL32.dll1224TlsSetValue
KERNEL32.dll843LocalReAlloc
KERNEL32.dll1222TlsFree
KERNEL32.dll1345lstrcmpA
KERNEL32.dll697GlobalFlags
KERNEL32.dll516GetLocaleInfoA
KERNEL32.dll370GetCPInfo
KERNEL32.dll567GetOEMCP
KERNEL32.dll652GetThreadLocale
KERNEL32.dll945RaiseException
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll1048RtlUnwind
KERNEL32.dll281ExitProcess
KERNEL32.dll1216TerminateProcess
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll390GetCommandLineA
KERNEL32.dll610GetStartupInfoA
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll724HeapSize
KERNEL32.dll1260VirtualFree
KERNEL32.dll718HeapDestroy
KERNEL32.dll717HeapCreate
KERNEL32.dll612GetStdHandle
KERNEL32.dll360GetACP
KERNEL32.dll778IsValidCodePage
KERNEL32.dll811LCMapStringA
KERNEL32.dll813LCMapStringW
KERNEL32.dll352FreeEnvironmentStringsA
KERNEL32.dll472GetEnvironmentStrings
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll1135SetHandleCount
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll614GetStringTypeA
KERNEL32.dll617GetStringTypeW
KERNEL32.dll410GetConsoleCP
KERNEL32.dll428GetConsoleMode
KERNEL32.dll667GetUserDefaultLCID
KERNEL32.dll269EnumSystemLocalesA
KERNEL32.dll780IsValidLocale
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll1306WriteConsoleA
KERNEL32.dll432GetConsoleOutputCP
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll1159SetStdHandle
KERNEL32.dll1110SetEnvironmentVariableA
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll852LockResource
KERNEL32.dll574GetPrivateProfileSectionNamesA
KERNEL32.dll828LoadLibraryA
KERNEL32.dll581GetProcAddress
KERNEL32.dll571GetPrivateProfileIntA
KERNEL32.dll354FreeLibrary
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll675GetVersionExA
KERNEL32.dll1202Sleep
KERNEL32.dll306FindFirstFileA
KERNEL32.dll302FindClose
KERNEL32.dll686GetWindowsDirectoryA
KERNEL32.dll155CreateMutexA
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll577GetPrivateProfileStringA
KERNEL32.dll1357lstrlenA
KERNEL32.dll100CompareStringW
KERNEL32.dll97CompareStringA
KERNEL32.dll1322WritePrivateProfileStringA
KERNEL32.dll674GetVersion
KERNEL32.dll514GetLastError
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll748InterlockedExchange
USER32.dll63CheckMenuItem
USER32.dll214EnableMenuItem
USER32.dll534ModifyMenuA
USER32.dll486LoadBitmapA
USER32.dll333GetMenuCheckMarkDimensions
USER32.dll672SetMenuItemBitmaps
USER32.dll714SetWindowTextA
USER32.dll71ClientToScreen
USER32.dll796ValidateRect
USER32.dll164DestroyMenu
USER32.dll749TabbedTextOutA
USER32.dll205DrawTextA
USER32.dll206DrawTextExA
USER32.dll423GrayStringA
USER32.dll567PostQuitMessage
USER32.dll773UnregisterClassA
USER32.dll488LoadCursorA
USER32.dll273GetClassNameA
USER32.dll587RegisterClassA
USER32.dll379GetSysColor
USER32.dll3AdjustWindowRectEx
USER32.dll356GetParent
USER32.dll85CopyRect
USER32.dll576PtInRect
USER32.dll294GetDlgCtrlID
USER32.dll155DefWindowProcA
USER32.dll29CallWindowProcA
USER32.dll405GetWindowLongA
USER32.dll707SetWindowLongA
USER32.dll710SetWindowPos
USER32.dll747SystemParametersInfoA
USER32.dll465IsIconic
USER32.dll411GetWindowPlacement
USER32.dll412GetWindowRect
USER32.dll382GetSystemMetrics
USER32.dll398GetWindow
USER32.dll342GetMenuState
USER32.dll338GetMenuItemID
USER32.dll337GetMenuItemCount
USER32.dll378GetSubMenu
USER32.dll631SendMessageA
USER32.dll289GetDC
USER32.dll613ReleaseDC
USER32.dll380GetSysColorBrush
USER32.dll420GetWindowThreadProcessId
USER32.dll476IsWindowEnabled
USER32.dll610RegisterWindowMessageA
USER32.dll492LoadIconA
USER32.dll684SetPropA
USER32.dll362GetPropA
USER32.dll616RemovePropA
USER32.dll300GetFocus
USER32.dll475IsWindow
USER32.dll416GetWindowTextA
USER32.dll301GetForegroundWindow
USER32.dll324GetLastActivePopup
USER32.dll174DispatchMessageA
USER32.dll295GetDlgItem
USER32.dll389GetTopWindow
USER32.dll166DestroyWindow
USER32.dll768UnhookWindowsHookEx
USER32.dll348GetMessageTime
USER32.dll347GetMessagePos
USER32.dll562PeekMessageA
USER32.dll521MapWindowPoints
USER32.dll317GetKeyState
USER32.dll216EnableWindow
USER32.dll659SetForegroundWindow
USER32.dll526MessageBoxA
USER32.dll276GetClientRect
USER32.dll331GetMenu
USER32.dll565PostMessageA
USER32.dll808WinHelpA
USER32.dll264GetCapture
USER32.dll718SetWindowsHookExA
USER32.dll28CallNextHookEx
USER32.dll271GetClassLongA
USER32.dll109CreateWindowExA
USER32.dll268GetClassInfoExA
USER32.dll267GetClassInfoA
ole32.dll63CoInitializeEx
ole32.dll108CoUninitialize
ole32.dll16CoCreateInstance
tmdbg20.dll1000
tmdbg20.dll120
OLEACC.dll4CreateStdAccessibleObject
OLEACC.dll20LresultFromObject
GDI32.dll525GetStockObject
GDI32.dll227DeleteDC
GDI32.dll626ScaleWindowExtEx
GDI32.dll684SetWindowExtEx
GDI32.dll625ScaleViewportExtEx
GDI32.dll680SetViewportExtEx
GDI32.dll574OffsetViewportOrgEx
GDI32.dll681SetViewportOrgEx
GDI32.dll631SelectObject
GDI32.dll302Escape
GDI32.dll696TextOutA
GDI32.dll660SetMapMode
GDI32.dll617RestoreDC
GDI32.dll624SaveDC
GDI32.dll311ExtTextOutA
GDI32.dll230DeleteObject
GDI32.dll41CreateBitmap
GDI32.dll638SetBkColor
GDI32.dll678SetTextColor
GDI32.dll448GetClipBox
GDI32.dll606RectVisible
GDI32.dll602PtVisible
GDI32.dll459GetDeviceCaps
WINSPOOL.DRV143OpenPrinterA
WINSPOOL.DRV29ClosePrinter
WINSPOOL.DRV77DocumentPropertiesA
OLEAUT32.dll8
OLEAUT32.dll12
OLEAUT32.dll9

StringTable 040404b0

FileDescriptionTmUninst
FileVersion5.4.0.1000
InternalNameTmUninst
LegalCopyrightCopyright c 2011
OriginalFilenameTmUninst.exe
CompanyNametrend_company_name
LegalTrademarkstrend_legal_trademarks
PrivateBuildtrend_private_build
ProductNametrend_product_name
ProductVersion5.4
SpecialBuildtrend_special_build

VS_FIXEDFILEINFO

FileVersion5.4.0.1000
ProductVersion5.4.0.1000
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0278528EXE11/25/2015 03:09:17#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK