filename3DESIGNcadTDESIGN.8202 - Copy.exe
size235520 (0x39800)
md5923289c58b3a7a413807cb9f9a61499f
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4c0d1ede
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x20f
Magic0x10b
LinkerVersion2.56
SizeOfCode0x1e600
SizeOfInitializedData0x38800
SizeOfUninitializedData0xc600
AddressOfEntryPoint0x11d8
BaseOfCode0x1000
BaseOfData0x20000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x49000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x50000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Video-Lan-Client

Sections

namevavsizeraw sizeflags
.text0x10000x1e4ac0x1e600R-X CODE IDATA
.data0x200000x10b80x1200RW- IDATA
.bss0x220000xc5f00RW- UDATA
.idata0x2f0000x14cc0x1600RW- IDATA
.rsrc0x310000x17a000x17a00RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x2f0000x14cc
RESOURCE0x310000x17a00
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#116400
ICON#27440
ICON#32960
ICON#437520
ICON#522160
ICON#613840
ICON#7676240
ICON#896400
ICON#942640
ICON#1011280
DIALOG#1013020
GROUP_ICON#10011460
VERSION#18481200
MANIFEST#17840
module_namehintordfunction_name
ADVAPI32.DLL25AdjustTokenPrivileges
ADVAPI32.DLL278LookupPrivilegeValueA
ADVAPI32.DLL357OpenProcessToken
ADVAPI32.DLL386RegCloseKey
ADVAPI32.DLL390RegCreateKeyExA
ADVAPI32.DLL399RegEnumKeyExA
ADVAPI32.DLL411RegOpenKeyExA
ADVAPI32.DLL421RegQueryValueExA
ADVAPI32.DLL432RegSetValueExA
COMCTL32.DLL87InitCommonControls
KERNEL32.dll4AllocConsole
KERNEL32.dll5AreFileApisANSI
KERNEL32.dll27CloseHandle
KERNEL32.dll45CreateDirectoryA
KERNEL32.dll52CreateFileA
KERNEL32.dll63CreateMutexA
KERNEL32.dll68CreateProcessA
KERNEL32.dll71CreateSemaphoreA
KERNEL32.dll87DeleteFileA
KERNEL32.dll97DuplicateHandle
KERNEL32.dll100EnterCriticalSection
KERNEL32.dll129ExitProcess
KERNEL32.dll148FindClose
KERNEL32.dll152FindFirstFileA
KERNEL32.dll161FindNextFileA
KERNEL32.dll167FindResourceA
KERNEL32.dll182FreeEnvironmentStringsA
KERNEL32.dll206GetCommandLineA
KERNEL32.dll207GetCommandLineW
KERNEL32.dll238GetConsoleOutputCP
KERNEL32.dll240GetConsoleTitleA
KERNEL32.dll248GetCurrentProcess
KERNEL32.dll249GetCurrentProcessId
KERNEL32.dll263GetEnvironmentStrings
KERNEL32.dll266GetEnvironmentVariableA
KERNEL32.dll269GetExitCodeProcess
KERNEL32.dll271GetFileAttributesA
KERNEL32.dll280GetFullPathNameA
KERNEL32.dll284GetLastError
KERNEL32.dll294GetModuleFileNameA
KERNEL32.dll295GetModuleFileNameW
KERNEL32.dll296GetModuleHandleA
KERNEL32.dll320GetProcAddress
KERNEL32.dll337GetShortPathNameA
KERNEL32.dll338GetShortPathNameW
KERNEL32.dll339GetStartupInfoA
KERNEL32.dll359GetTempFileNameA
KERNEL32.dll361GetTempPathA
KERNEL32.dll369GetTickCount
KERNEL32.dll378GetVersionExA
KERNEL32.dll386GetWindowsDirectoryA
KERNEL32.dll431InitializeCriticalSection
KERNEL32.dll437InterlockedIncrement
KERNEL32.dll455LeaveCriticalSection
KERNEL32.dll456LoadLibraryA
KERNEL32.dll461LoadResource
KERNEL32.dll475LockResource
KERNEL32.dll486MultiByteToWideChar
KERNEL32.dll533ReadFile
KERNEL32.dll544ReleaseMutex
KERNEL32.dll545ReleaseSemaphore
KERNEL32.dll546RemoveDirectoryA
KERNEL32.dll558SearchPathA
KERNEL32.dll592SetConsoleTitleA
KERNEL32.dll596SetCurrentDirectoryA
KERNEL32.dll601SetEnvironmentVariableA
KERNEL32.dll609SetFilePointer
KERNEL32.dll616SetLastError
KERNEL32.dll642SetUnhandledExceptionFilter
KERNEL32.dll652SizeofResource
KERNEL32.dll653Sleep
KERNEL32.dll661TerminateProcess
KERNEL32.dll663TlsAlloc
KERNEL32.dll665TlsGetValue
KERNEL32.dll666TlsSetValue
KERNEL32.dll705WaitForSingleObject
KERNEL32.dll709WideCharToMultiByte
KERNEL32.dll722WriteFile
KERNEL32.dll760lstrcpynA
KERNEL32.dll763lstrlenA
msvcrt.dll6_close
msvcrt.dll27_fileno
msvcrt.dll31_fstat
msvcrt.dll41_isatty
msvcrt.dll47_lseek
msvcrt.dll53_open
msvcrt.dll59_read
msvcrt.dll77_stricmp
msvcrt.dll98_wcslwr
msvcrt.dll104_write
msvcrt.dll21_HUGE
msvcrt.dll39__getmainargs
msvcrt.dll47__mb_cur_max
msvcrt.dll59__p__environ
msvcrt.dll78__set_app_type
msvcrt.dll108_assert
msvcrt.dll118_cexit
msvcrt.dll147_errno
msvcrt.dll169_fileno
msvcrt.dll178_fmode
msvcrt.dll181_fpreset
msvcrt.dll222_iob
msvcrt.dll224_isctype
msvcrt.dll332_mkdir
msvcrt.dll344_pctype
msvcrt.dll350_putenv
msvcrt.dll355_rmdir
msvcrt.dll373_setmode
msvcrt.dll405_strupr
msvcrt.dll411_tempnam
msvcrt.dll510abort
msvcrt.dll517atexit
msvcrt.dll519atoi
msvcrt.dll528ctime
msvcrt.dll529difftime
msvcrt.dll531exit
msvcrt.dll534fclose
msvcrt.dll537fflush
msvcrt.dll540fgets
msvcrt.dll545fopen
msvcrt.dll546fprintf
msvcrt.dll551fread
msvcrt.dll552free
msvcrt.dll556fseek
msvcrt.dll559fwprintf
msvcrt.dll560fwrite
msvcrt.dll562getc
msvcrt.dll564getenv
msvcrt.dll603malloc
msvcrt.dll607memchr
msvcrt.dll609memcpy
msvcrt.dll610memmove
msvcrt.dll611memset
msvcrt.dll612mktime
msvcrt.dll616printf
msvcrt.dll624rand
msvcrt.dll626remove
msvcrt.dll633signal
msvcrt.dll636sprintf
msvcrt.dll638srand
msvcrt.dll640strcat
msvcrt.dll641strchr
msvcrt.dll642strcmp
msvcrt.dll644strcpy
msvcrt.dll650strncmp
msvcrt.dll651strncpy
msvcrt.dll653strrchr
msvcrt.dll655strstr
msvcrt.dll657strtok
msvcrt.dll658strtol
msvcrt.dll659strtoul
msvcrt.dll661swprintf
msvcrt.dll666time
msvcrt.dll675vfprintf
msvcrt.dll682wcschr
msvcrt.dll683wcscmp
msvcrt.dll685wcscpy
msvcrt.dll688wcslen
msvcrt.dll690wcsncmp
msvcrt.dll691wcsncpy
SHELL32.DLL52SHGetDesktopFolder
SHELL32.DLL57SHGetMalloc
SHELL32.DLL59SHGetPathFromIDListA
USER32.dll137DispatchMessageA
USER32.dll186EnumWindows
USER32.dll189ExitWindowsEx
USER32.dll191FindWindowA
USER32.dll246GetLastActivePopup
USER32.dll259GetMessageA
USER32.dll299GetWindowTextA
USER32.dll303GetWindowThreadProcessId
USER32.dll334IsIconic
USER32.dll340IsWindowVisible
USER32.dll375MessageBoxA
USER32.dll380MessageBoxW
USER32.dll459SetForegroundWindow
USER32.dll506ShowWindow
USER32.dll528TranslateMessage

StringTable 000004b0

CompanyNameVision Numeric
FileDescriptionVision Numeric 3DESIGNcad software
FileVersionTDESIGN.8202
LegalCopyrightVision numeric
ProductName3DESIGNcad TDESIGN.8202
ProductVersionTDESIGN.8202
OriginalFilename3DESIGNcadTDESIGN.8202.exe
InternalNameVision Numeric 3DESIGNcad

VS_FIXEDFILEINFO

FileVersion0.8202.0.0
ProductVersion0.8202.0.0
StrucVersion0x10000
FileFlagsMask0x17
FileFlags1
FileOS4
FileType0
FileSubtype0
offsetsizetypecomment
0232448EXE06/07/2010 16:31:26#
15c115HTM#
38c003072BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 235520 bytes (230 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK