filenameAuP5PcFN334.exe
size183296 (0x2cc00)
md5b1c5ab53705387921e8cda144c0bf25d
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 16 f3 e2 25  24 00 00 00 00 00 00 00  |mode...%$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x42ace285
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion9.0
SizeOfCode0xe200
SizeOfInitializedData0x1e600
SizeOfUninitializedData0
AddressOfEntryPoint0x64d4
BaseOfCode0x1000
BaseOfData0x10000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x67000
SizeOfHeaders0x400
CheckSum0x370e2
Subsystem2
DllCharacteristics0x540
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xe2000xe200R-X CODE
.rdata0x100000xee000xee00R-- IDATA
.data0x1f0000x460000xee00RW- IDATA
.rsrc0x650000x6000x600R-- IDATA
.reloc0x660000x4000x400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x115000x78
RESOURCE0x650000x549
EXCEPTION00
SECURITY00
BASERELOC0x660000x378
DEBUG0xeff40x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x1f0000x40
Bound_IAT00
IAT0x2d9100x38c
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#16120
MANIFEST#15810
module_namehintordfunction_name
ODBCBCP.dll9bcp_getcolfmt
ODBCBCP.dll961dbprtypeA
ODBCBCP.dll387bcp_control
ODBCBCP.dll302SQLLinkedCatalogsW
ODBCBCP.dll1071bcp_sendrow
ODBCBCP.dll554bcp_bind
ODBCBCP.dll454SQLLinkedServers
ODBCBCP.dll1270SQLGetNextEnumeration
ODBCBCP.dll69bcp_batch
ODBCBCP.dll1246bcp_writefmtW
ODBCBCP.dll176bcp_exec
ODBCBCP.dll247SQLCloseEnumServers
ODBCBCP.dll852bcp_readfmtA
ODBCBCP.dll311bcp_readfmtW
ODBCBCP.dll1272bcp_colfmt
ODBCBCP.dll659bcp_initW
ODBCBCP.dll578LibMain
ODBCBCP.dll960dbprtypeW
ODBCBCP.dll92bcp_initA
ODBCBCP.dll551bcp_collen
ODBCBCP.dll1038bcp_writefmtA
ODBCBCP.dll345bcp_colptr
ODBCBCP.dll1081bcp_done
ODBCBCP.dll542SQLInitEnumServers
ODBCBCP.dll799bcp_setcolfmt
ODBCBCP.dll914SQLLinkedCatalogsA
ODBCBCP.dll489bcp_columns
ODBCBCP.dll99bcp_moretext
QUERY.dll1092public: virtual long __stdcall CDbProperties::QueryInterface(struct _GUID const &, void * *)

?QueryInterface@CDbProperties@@UAGJABU_GUID@@PAPAX@Z

QUERY.dll1034public: int __thiscall CDbColId::operator==(class CDbColId const &)const

??8CDbColId@@QBEHABV0@@Z

QUERY.dll597public: void __thiscall CBaseStorageVariant::Marshall(class PSerStream &)const

?Marshall@CBaseStorageVariant@@QBEXAAVPSerStream@@@Z

QUERY.dll1118private: unsigned int __thiscall CPropStoreInfo::Lookup(unsigned long)

?Lookup@CPropStoreInfo@@AAEIK@Z

QUERY.dll331public: long __thiscall CDbCmdTreeNode::GetWeight(void)const

?GetWeight@CDbCmdTreeNode@@QBEJXZ

QUERY.dll195public: unsigned long * __thiscall CPhysStorage::BorrowNewBuffer(unsigned long)

?BorrowNewBuffer@CPhysStorage@@QAEPAKK@Z

QUERY.dll483public: virtual void __thiscall CMemDeSerStream::SkipBlob(unsigned long)

?SkipBlob@CMemDeSerStream@@UAEXK@Z

QUERY.dll1103public: virtual class CPropEntry const * __thiscall CStaticPropertyList::Next(void)

?Next@CStaticPropertyList@@UAEPBVCPropEntry@@XZ

QUERY.dll567public: virtual long __stdcall CEnumString::Skip(unsigned long)

?Skip@CEnumString@@UAGJK@Z

QUERY.dll886public: void __thiscall CNodeRestriction::AddChild(class CRestriction *, unsigned int &)

?AddChild@CNodeRestriction@@QAEXPAVCRestriction@@AAI@Z

QUERY.dll692public: static unsigned short const * __stdcall CEmptyPropertyList::GetPropTypeName(unsigned int)

?GetPropTypeName@CEmptyPropertyList@@SGPBGI@Z

QUERY.dll407public: __thiscall CVirtualString::~CVirtualString(void)

??1CVirtualString@@QAE@XZ

QUERY.dll285public: int __thiscall CMachineAdmin::IsCIPaused(void)

?IsCIPaused@CMachineAdmin@@QAEHXZ

QUERY.dll1099public: static struct IWordBreaker * __stdcall CCiOle::NewWordBreaker(struct _GUID const &)

?NewWordBreaker@CCiOle@@SGPAUIWordBreaker@@ABU_GUID@@@Z

QUERY.dll779public: virtual class CPropEntry const * __thiscall CPropertyList::Next(void)

?Next@CPropertyList@@UAEPBVCPropEntry@@XZ

QUERY.dll1096public: void __thiscall CStorageVariant::SetDATE(double, unsigned int)

?SetDATE@CStorageVariant@@QAEXNI@Z

QUERY.dll578public: class PStorage & __thiscall CPropStoreManager::GetStorage(unsigned long)

?GetStorage@CPropStoreManager@@QAEAAVPStorage@@K@Z

QUERY.dll140public: void __thiscall CPidLookupTable::MakeBackupCopy(class PRcovStorageObj &, class PSaveProgressTracker &)

?MakeBackupCopy@CPidLookupTable@@QAEXAAVPRcovStorageObj@@AAVPSaveProgressTracker@@@Z

QUERY.dll722void __stdcall BuildRegistryScopesKey(class XArray<unsigned short> &, unsigned short const *)

?BuildRegistryScopesKey@@YGXAAV?$XArray@G@@PBG@Z

QUERY.dll624public: __thiscall CAllocStorageVariant::CAllocStorageVariant(struct tagPROPVARIANT &, class PMemoryAllocator &)

??0CAllocStorageVariant@@QAE@AAUtagPROPVARIANT@@AAVPMemoryAllocator@@@Z

QUERY.dll893public: void __thiscall CDynStream::Flush(void)

?Flush@CDynStream@@QAEXXZ

QUERY.dll435public: void __thiscall CPhysStorage::MakeBackupCopy(class CPhysStorage &, class PSaveProgressTracker &)

?MakeBackupCopy@CPhysStorage@@QAEXAAV1@AAVPSaveProgressTracker@@@Z

QUERY.dll900public: int __thiscall CPropertyStore::ReadProperty(unsigned long, unsigned long, struct tagPROPVARIANT &)

?ReadProperty@CPropertyStore@@QAEHKKAAUtagPROPVARIANT@@@Z

QUERY.dll973public: void __thiscall CGenericCiProxy::SetPriority(unsigned long, unsigned long)

?SetPriority@CGenericCiProxy@@QAEXKK@Z

QUERY.dll562public: unsigned short __thiscall CQueryScanner::GetCommandChar(void)

?GetCommandChar@CQueryScanner@@QAEGXZ

QUERY.dll993public: __thiscall CDbColumns::~CDbColumns(void)

??1CDbColumns@@QAE@XZ

QUERY.dll1258public: unsigned short const * __thiscall CCatState::GetCD(void)

?GetCD@CCatState@@QAEPBGXZ

QUERY.dll720public: class CDbRestriction * __thiscall CQueryParser::ParseQueryPhrase(void)

?ParseQueryPhrase@CQueryParser@@QAEPAVCDbRestriction@@XZ

QUERY.dll1036public: int __thiscall CMachineAdmin::DisableCI(void)

?DisableCI@CMachineAdmin@@QAEHXZ

QUERY.dll1148public: __thiscall CPathParser::CPathParser(unsigned short const *, unsigned long)

??0CPathParser@@QAE@PBGK@Z

QUERY.dll218public: __thiscall CWordRestriction::~CWordRestriction(void)

??1CWordRestriction@@QAE@XZ

QUERY.dll576public: static int __stdcall CDriveInfo::ContainsDrive(unsigned short const *)

?ContainsDrive@CDriveInfo@@SGHPBG@Z

QUERY.dll961LocateCatalogs
KERNEL32.dll1044SetWaitableTimer
KERNEL32.dll109LoadLibraryA
KERNEL32.dll1038SetTimerQueueTimer
KERNEL32.dll35QueryActCtxW
KERNEL32.dll58LocalLock
KERNEL32.dll287ActivateActCtx
KERNEL32.dll22GlobalWire
KERNEL32.dll407WriteConsoleOutputCharacterA
KERNEL32.dll648GlobalAddAtomW
KERNEL32.dll813SetThreadContext
KERNEL32.dll364AddLocalAlternateComputerNameW
KERNEL32.dll1163GetTempPathA
KERNEL32.dll567LCMapStringA
KERNEL32.dll370GetModuleHandleA
KERNEL32.dll92CreateTapePartition
KERNEL32.dll1050SetStdHandle
KERNEL32.dll24IsValidLanguageGroup
KERNEL32.dll661ConvertFiberToThread
KERNEL32.dll712DeleteTimerQueueEx
KERNEL32.dll887GetConsoleCP
KERNEL32.dll800GetTapeStatus
KERNEL32.dll135IsProcessorFeaturePresent
KERNEL32.dll1029GetDevicePowerState
KERNEL32.dll443EnumResourceTypesW
KERNEL32.dll928VirtualAlloc
KERNEL32.dll431SetFileApisToOEM
KERNEL32.dll821lstrcmpW
KERNEL32.dll1018WaitCommEvent
KERNEL32.dll1126MoveFileExA
KERNEL32.dll128GlobalGetAtomNameA
KERNEL32.dll1229SetLastConsoleEventActive
KERNEL32.dll832IsValidLocale
KERNEL32.dll997GetVersionExA
KERNEL32.dll433GetModuleHandleW
KERNEL32.dll789GetNextVDMCommand
KERNEL32.dll442GetCommandLineA
KERNEL32.dll1048SetConsoleNumberOfCommandsW
KERNEL32.dll1188GetStartupInfoW
KERNEL32.dll535GetExitCodeProcess
KERNEL32.dll673GlobalGetAtomNameW
KERNEL32.dll287AddRefActCtx
KERNEL32.dll226VerifyConsoleIoHandle
KERNEL32.dll71ReleaseActCtx
KERNEL32.dll506UnregisterWaitEx
KERNEL32.dll168CreateMemoryResourceNotification
KERNEL32.dll398FoldStringW
KERNEL32.dll1255Beep
KERNEL32.dll529lstrcmpiA
KERNEL32.dll1203GlobalUnfix
KERNEL32.dll475SetConsoleWindowInfo
KERNEL32.dll690GetOverlappedResult
KERNEL32.dll1245GetSystemInfo
KERNEL32.dll294GetTimeFormatW
KERNEL32.dll1198InitAtomTable
KERNEL32.dll421DeactivateActCtx
KERNEL32.dll500GetConsoleHardwareState
KERNEL32.dll537GetConsoleProcessList
KERNEL32.dll885GetModuleFileNameA
KERNEL32.dll710CallNamedPipeA
KERNEL32.dll518RegisterConsoleVDM
KERNEL32.dll439GetVolumeNameForVolumeMountPointA
KERNEL32.dll593CreateDirectoryExA
KERNEL32.dll955GlobalAddAtomA
KERNEL32.dll459QueryPerformanceCounter
KERNEL32.dll159SetFilePointerEx
KERNEL32.dll88GetVolumePathNamesForVolumeNameA
KERNEL32.dll1273OpenMutexW
KERNEL32.dll6AddVectoredExceptionHandler
KERNEL32.dll1150OpenEventW
KERNEL32.dll608GetConsoleFontSize
KERNEL32.dll893EnumerateLocalComputerNamesW
KERNEL32.dll1186GetPrivateProfileSectionA
KERNEL32.dll1079SetConsoleActiveScreenBuffer
KERNEL32.dll1148GetDiskFreeSpaceA
KERNEL32.dll930GetCommState
KERNEL32.dll959IsDebuggerPresent
KERNEL32.dll363GetNamedPipeInfo
KERNEL32.dll981DnsHostnameToComputerNameW
KERNEL32.dll1162GlobalFindAtomW
KERNEL32.dll649CreateDirectoryA
KERNEL32.dll909SetTimeZoneInformation
KERNEL32.dll781CompareStringW
KERNEL32.dll918BackupWrite
KERNEL32.dll1277ConvertThreadToFiber
KERNEL32.dll1156CreateFileA
KERNEL32.dll545CreateMailslotW
KERNEL32.dll772SetProcessAffinityMask
WINSCARD.dll314SCardListInterfacesA
WINSCARD.dll1182SCardConnectA
WINSCARD.dll274SCardGetProviderIdA
WINSCARD.dll564SCardIntroduceReaderGroupW
WINSCARD.dll1117g_rgSCardRawPci
WINSCARD.dll888ClassInstall32
WINSCARD.dll887SCardLocateCardsA
WINSCARD.dll1040SCardForgetCardTypeA
WINSCARD.dll1199SCardLocateCardsByATRA
WINSCARD.dll627SCardForgetReaderGroupW
WINSCARD.dll1009SCardState
WINSCARD.dll1157SCardIntroduceReaderW
WINSCARD.dll39SCardForgetReaderGroupA
WINSCARD.dll685SCardStatusA
WINSCARD.dll552SCardListCardsA
WINSCARD.dll39SCardFreeMemory
WINSCARD.dll1140SCardForgetReaderW
WINSCARD.dll12SCardGetCardTypeProviderNameA
WINSCARD.dll353SCardConnectW
WINSCARD.dll1251SCardReleaseAllEvents
WINSCARD.dll528SCardListReadersA
WINSCARD.dll341SCardGetStatusChangeW
WINSCARD.dll676SCardAccessStartedEvent
WINSCARD.dll523SCardDisconnect
WINSCARD.dll523SCardRemoveReaderFromGroupW
WINSCARD.dll1190SCardGetProviderIdW
WINSCARD.dll390SCardListCardsW
WINSCARD.dll522SCardControl
WINSCARD.dll891SCardSetCardTypeProviderNameW
WINSCARD.dll985SCardListReaderGroupsW
WINSCARD.dll849SCardBeginTransaction
WINSCARD.dll537SCardIntroduceReaderA
WINSCARD.dll893g_rgSCardT0Pci
WINSCARD.dll361SCardReleaseContext
WINSCARD.dll746SCardGetStatusChangeA
WINSCARD.dll979SCardReleaseStartedEvent
WINSCARD.dll563SCardListReaderGroupsA
IPHLPAPI.dll1271FlushIpNetTable
IPHLPAPI.dll1231SetTcpEntry
IPHLPAPI.dll1233NotifyRouteChange
IPHLPAPI.dll746NhGetGuidFromInterfaceName
IPHLPAPI.dll774InternalDeleteIpNetEntry
IPHLPAPI.dll815IpReleaseAddress
IPHLPAPI.dll90GetUdpStatisticsEx
IPHLPAPI.dll534NhGetInterfaceNameFromGuid
IPHLPAPI.dll1024GetAdapterOrderMap
IPHLPAPI.dll770GetIpErrorString
IPHLPAPI.dll273_PfDeleteLog@0
IPHLPAPI.dll506GetIpAddrTable
IPHLPAPI.dll640_PfRemoveGlobalFilterFromInterface@8
IPHLPAPI.dll691SetIpForwardEntry
IPHLPAPI.dll135do_echo_req
IPHLPAPI.dll223GetUdpTable
IPHLPAPI.dll936NotifyAddrChange
IPHLPAPI.dll871DeleteIpForwardEntry
IPHLPAPI.dll774InternalGetTcpTable
IPHLPAPI.dll595Icmp6ParseReplies
IPHLPAPI.dll1262_PfRemoveFilterHandles@12
IPHLPAPI.dll512RestoreMediaSense
IPHLPAPI.dll949GetIfEntry
IPHLPAPI.dll514_PfBindInterfaceToIPAddress@12
IPHLPAPI.dll753do_echo_rep
IPHLPAPI.dll616DeleteProxyArpEntry
IPHLPAPI.dll1156NhGetInterfaceNameFromDeviceGuid
IPHLPAPI.dll914GetIpForwardTable
IPHLPAPI.dll871Icmp6SendEcho2
IPHLPAPI.dll829InternalGetUdpTable
IPHLPAPI.dll819GetIpStatistics
IPHLPAPI.dll734UnenableRouter
IPHLPAPI.dll640_PfMakeLog@4
IPHLPAPI.dll375DeleteIPAddress
IPHLPAPI.dll892IpRenewAddress
IPHLPAPI.dll130InternalSetTcpEntry
IPHLPAPI.dll740GetBestInterface

StringTable 040904b0

CompanyNamedhFyij
FileDescriptionxI5afG31sDv5
FileVersioncD5P6CJlHmx
InternalNameCmHp
OriginalFilenametW7HmXw
ProductNameIjesaRM7rkW
ProductVersion20.13.101.121

VS_FIXEDFILEINFO

FileVersion0.0.25865.46034
ProductVersion0.0.25865.46034
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0183296EXE06/13/2005 01:33:57#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK