| filename | Cronos.exe | |
|---|---|---|
| size | 8482564 (0x816f04) | |
| md5 | 8b171158173265877a3e987c9e411ad4 | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x128 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 152 | 20115 | 8 |
| 35 | 8350 | 1 |
| 131 | 30729 | 20 |
| 158 | 30319 | 72 |
| 132 | 30729 | 1 |
| 147 | 30729 | 56 |
| 156 | 40219 | 3 |
| 1 | 0 | 1167 |
| 170 | 40219 | 136 |
| 171 | 40219 | 473 |
| 170 | 30319 | 268 |
| 171 | 30319 | 1450 |
| 155 | 30319 | 1 |
| 154 | 30319 | 1 |
| 157 | 30319 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
TLS
| raw start | raw end | index | callbks | zero fill | flags | |
|---|---|---|---|---|---|---|
| 0x1774000 | 0x1774451 | 0x176e450 | 0x1350d20 | 0 | 0 |
| module_name | hint | ord | function_name |
|---|---|---|---|
| kernel32.dll | GetProcAddress | ||
| kernel32.dll | GetModuleHandleA | ||
| kernel32.dll | LoadLibraryA | ||
| crobugs.dll | GetNextStackTraceString | ||
| ws2_32.dll | 17 | ||
| advapi32.dll | RegOpenKeyA | ||
| version.dll | GetFileVersionInfoA | ||
| mpr.dll | WNetOpenEnumA | ||
| msvfw32.dll | DrawDibOpen | ||
| netapi32.dll | NetApiBufferFree | ||
| winmm.dll | PlaySoundA | ||
| imm32.dll | ImmSetCompositionFontA | ||
| shlwapi.dll | PathRemoveFileSpecA | ||
| crypt32.dll | CertDuplicateCertificateContext | ||
| wtsapi32.dll | WTSQuerySessionInformationA | ||
| secur32.dll | GetUserNameExA | ||
| user32.dll | CharUpperBuffA | ||
| gdi32.dll | OffsetRgn | ||
| msimg32.dll | TransparentBlt | ||
| comdlg32.dll | ChooseFontA | ||
| winspool.drv | OpenPrinterA | ||
| shell32.dll | ShellExecuteExA | ||
| comctl32.dll | ImageList_DrawEx | ||
| ole32.dll | OleUninitialize | ||
| oleaut32.dll | 420 | ||
| oledlg.dll | 8 | ||
| wsock32.dll | 112 | ||
| oleacc.dll | AccessibleObjectFromWindow | ||
| gdiplus.dll | GdipCreateBitmapFromScan0 | ||
| wininet.dll | HttpQueryInfoA | ||
| mapi32.dll | 17 | ||
| oleaut32.dll | VariantChangeTypeEx | ||
| kernel32.dll | RaiseException |
| ord | entry_va | function_name |
|---|
| module_name | |
|---|---|
| flags | 0x91baa313 |
| timestamp | 1970-01-01 00:02:08 |
| version | 13538.39994 |
| ordinal_base | 1228014617 |
| nFunctions | 1518003070 |
| nNames | 163459699 |
| Names(163459699) | 0x2c285113 |
| Functions(1518003070) | 0x4c8779c5 |
| NameOrdinals(163459699) | 0xf4e18f26 |
StringTable 041904E3
| CompanyName | НПК Кронос-Информ |
| FileDescription | ИСУБД CronosPro |
| FileVersion | 6.2.30 |
| InternalName | CronosPro |
| LegalCopyright | © 1999-2012 НПК Кронос-Информ |
| OriginalFilename | Cronos.exe |
| ProductName | CronosPro |
| Build Version | 6.2.30 |
| Build Date | 21.05.13 |
| Build Time | 16.28.05 |
VS_FIXEDFILEINFO
| FileVersion | 6.2.30.0 |
| ProductVersion | 1.0.0.0 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 4 |
| FileType | 1 |
| FileSubtype | 0 |
 |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] can't find file_offset of VA 0x15393d8
[?] can't find file_offset of VA 0x1539ee8
[?] can't find file_offset of VA 0x153a9f4
[?] can't find file_offset of VA 0x153b704
[?] can't find file_offset of VA 0x153e528
[?] can't find file_offset of VA 0x1540688
[?] can't find file_offset of VA 0x1541250
[?] can't find file_offset of VA 0x1541fbc
[?] can't find file_offset of VA 0x1542ab8
[?] can't find file_offset of VA 0x15435dc
[?] can't find file_offset of VA 0x1544918
[?] can't find file_offset of VA 0x1546464
[?] can't find file_offset of VA 0x1547168
[?] can't find file_offset of VA 0x15476a4
[?] can't find file_offset of VA 0x15485a8
[?] can't find file_offset of VA 0x15490c8
[?] can't find file_offset of VA 0x154a2e8
[?] can't find file_offset of VA 0x154b24c
[?] can't find file_offset of VA 0x154c414
[?] can't find file_offset of VA 0x154cf48
[?] can't find file_offset of VA 0x154dbd8
[?] can't find file_offset of VA 0x154e760
[?] can't find file_offset of VA 0x154fac0
[?] can't find file_offset of VA 0x1551340
[?] can't find file_offset of VA 0x1552290
[?] can't find file_offset of VA 0x1553b4c
[?] can't find file_offset of VA 0x1555234
[?] can't find file_offset of VA 0x1555db0
[?] can't find file_offset of VA 0x15575d4
[?] can't find file_offset of VA 0x1558778
[?] can't find file_offset of VA 0x15596a8
[?] can't find file_offset of VA 0x155a5d8
[?] can't find file_offset of VA 0x155b38c
[?] can't find file_offset of VA 0x155c10c
[?] can't find file_offset of VA 0x155ceec
[?] can't find file_offset of VA 0x155e294
[?] can't find file_offset of VA 0x1560144
[?] can't find file_offset of VA 0x1561858
[?] can't find file_offset of VA 0x1562714
[?] can't find file_offset of VA 0x15632f0
[?] can't find file_offset of VA 0x1564204
[?] can't find file_offset of VA 0x1564d58
[?] can't find file_offset of VA 0x1565b0c
[?] can't find file_offset of VA 0x15670e4
[?] can't find file_offset of VA 0x1567c1c
[?] can't find file_offset of VA 0x15697c4
[?] can't find file_offset of VA 0x156a32c
[?] can't find file_offset of VA 0x156aeec
[?] can't find file_offset of VA 0x156c8f0
[?] can't find file_offset of VA 0x156d5f0
[?] can't find file_offset of VA 0x156e6b0
[?] can't find file_offset of VA 0x156f830
[?] can't find file_offset of VA 0x15713c0
[?] can't find file_offset of VA 0x1571f2c
[?] can't find file_offset of VA 0x1572ae4
[?] can't find file_offset of VA 0x15744fc
[?] can't find file_offset of VA 0x15751cc
[?] can't find file_offset of VA 0x15762b0
[?] can't find file_offset of VA 0x157744c
[?] can't find file_offset of VA 0x1578f8c
[?] can't find file_offset of VA 0x1579af4
[?] can't find file_offset of VA 0x157a6b0
[?] can't find file_offset of VA 0x157c07c
[?] can't find file_offset of VA 0x157cd68
[?] can't find file_offset of VA 0x157de30
[?] can't find file_offset of VA 0x157efb4
[?] can't find file_offset of VA 0x1580b24
[?] can't find file_offset of VA 0x1581690
[?] can't find file_offset of VA 0x158224c
[?] can't find file_offset of VA 0x1583c70
[?] can't find file_offset of VA 0x1584958
[?] can't find file_offset of VA 0x1585a34
[?] can't find file_offset of VA 0x1586b94
[?] can't find file_offset of VA 0x1588730
[?] can't find file_offset of VA 0x15892a0
[?] can't find file_offset of VA 0x1589e78
[?] can't find file_offset of VA 0x158b894
[?] can't find file_offset of VA 0x158c4c4
[?] can't find file_offset of VA 0x158d594
[?] can't find file_offset of VA 0x158e724
[?] can't find file_offset of VA 0x159029c
[?] can't find file_offset of VA 0x1590e04
[?] can't find file_offset of VA 0x15919bc
[?] can't find file_offset of VA 0x15933d0
[?] can't find file_offset of VA 0x15940ac
[?] can't find file_offset of VA 0x1595158
[?] can't find file_offset of VA 0x159626c
[?] can't find file_offset of VA 0x1597e10
[?] can't find file_offset of VA 0x1598974
[?] can't find file_offset of VA 0x1599534
[?] can't find file_offset of VA 0x159af40
[?] can't find file_offset of VA 0x159bc20
[?] can't find file_offset of VA 0x159ccdc
[?] can't find file_offset of VA 0x159de78
[?] can't find file_offset of VA 0x159e9ac
[?] can't find file_offset of VA 0x15a0368
[?] can't find file_offset of VA 0x15a0fd8
[?] can't find file_offset of VA 0x15a1adc
[?] can't find file_offset of VA 0x15a25f8
[?] can't find file_offset of VA 0x15a3140
[?] can't find file_offset of VA 0x15a3ca8
[?] too many errors getting resource data, stopped on 0 of 1
[?] can't find file_offset of VA 0x136e450
[?] can't find file_offset of VA 0xfeed4597
[?] can't find file_offset of VA 0x4c8779c5
[?] can't find file_offset of VA 0xf4e18f26
[?] can't find file_offset of VA 0x2c285113
[?] can't find file_offset of VA 0x0
[?] can't find file_offset of VA 0x2c285113
[?] can't find file_offset of VA 0x4c8779c5
[?] can't find file_offset of VA 0xf4e18f26