filename | Sveriges Befolkning 1990.exe | |
---|---|---|
size | 19459 (0x4c03) | |
md5 | c3790270e61c68500d036339c80c163e | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | Win.Worm.Rbot-775 FOUND | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x180 |
DOS stub
00000000: 95 45 00 00 00 00 00 00 6e 06 00 00 00 00 00 00 |.E......n.......| 00000010: 56 6d 54 61 00 00 bf 79 00 34 00 00 1c 01 00 00 |VmTa...y.4......| 00000020: 58 7a e4 4c 2b 27 87 42 36 2d c2 76 37 88 45 52 |Xz.L+'.B6-.v7.ER| 00000030: f4 8c 75 04 b3 b9 dc 46 7d 98 9c df ae 59 fe 52 |..u....F}....Y.R| 00000040: cd 06 4b 22 5a 12 5d 36 37 e4 57 0c 40 0f d6 62 |..K"Z.]67.W.@..b| 00000050: 1e 0a 79 e7 5f f3 85 6a 02 f1 f6 ea 5e 67 bc c7 |..y._..j....^g..| 00000060: c0 cc f4 25 77 7a 10 9b f8 b4 a9 71 18 46 54 0b |...%wz.....q.FT.| 00000070: ae f0 56 e9 6e 45 d7 e5 96 85 f3 cb c6 ea 6a 42 |..V.nE........jB| 00000080: 4d c1 bd 4c 6e f7 48 0f 8f a9 8c fb 21 ec 1a 03 |M..Ln.H.....!...| 00000090: d2 28 cf 89 4f 3e 2e b1 84 b1 92 c1 5c 46 c6 24 |.(..O>......\F.$| 000000a0: 06 00 00 00 10 00 00 00 cc 15 00 00 17 00 00 00 |................| 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000c0: 00 00 00 00 40 00 00 00 50 00 00 00 10 00 00 00 |....@...P.......| 000000d0: e0 00 00 00 a0 00 00 00 80 01 00 00 06 00 00 00 |................| 000000e0: 8c 01 00 00 0a 00 00 00 98 01 00 00 02 00 00 00 |................| 000000f0: a8 01 00 00 08 00 00 00 b8 01 00 00 08 00 00 00 |................| 00000100: d4 01 00 00 04 00 00 00 f4 01 00 00 14 00 00 00 |................| 00000110: 10 02 00 00 68 00 00 00 78 02 00 00 28 00 00 00 |....h...x...(...| 00000120: 00 10 00 00 00 30 00 00 00 00 00 00 00 00 00 00 |.....0..........| 00000130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
PE Header
module_name | hint | ord | function_name |
---|---|---|---|
KERNEL32.dll | 502 | GetModuleFileNameW | |
KERNEL32.dll | 506 | GetModuleHandleW | |
KERNEL32.dll | 487 | GetLastError | |
KERNEL32.dll | 1067 | Sleep | |
KERNEL32.dll | 795 | MoveFileW | |
KERNEL32.dll | 595 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 196 | DeleteFileW | |
KERNEL32.dll | 1210 | lstrcpyW | |
KERNEL32.dll | 1216 | lstrlenW | |
KERNEL32.dll | 452 | GetEnvironmentVariableW | |
KERNEL32.dll | 1203 | lstrcmpA | |
KERNEL32.dll | 1215 | lstrlenA | |
KERNEL32.dll | 1099 | UnmapViewOfFile | |
KERNEL32.dll | 1118 | VirtualAlloc | |
KERNEL32.dll | 1121 | VirtualFree | |
KERNEL32.dll | 503 | GetModuleHandleA | |
KERNEL32.dll | 1124 | VirtualProtect | |
KERNEL32.dll | 1012 | SetLastError | |
KERNEL32.dll | 758 | LoadLibraryA | |
KERNEL32.dll | 759 | LoadLibraryExA | |
KERNEL32.dll | 1200 | lstrcatA | |
KERNEL32.dll | 1209 | lstrcpyA | |
KERNEL32.dll | 501 | GetModuleFileNameA | |
KERNEL32.dll | 546 | GetProcAddress | |
KERNEL32.dll | 678 | HeapFree | |
KERNEL32.dll | 333 | FreeLibrary | |
KERNEL32.dll | 674 | HeapAlloc | |
KERNEL32.dll | 550 | GetProcessHeap | |
KERNEL32.dll | 761 | LoadLibraryW | |
KERNEL32.dll | 760 | LoadLibraryExW | |
KERNEL32.dll | 1201 | lstrcatW | |
KERNEL32.dll | 878 | ReadFile | |
KERNEL32.dll | 999 | SetFilePointer | |
KERNEL32.dll | 261 | ExitProcess | |
KERNEL32.dll | 328 | FormatMessageA | |
KERNEL32.dll | 426 | GetCurrentProcess | |
KERNEL32.dll | 784 | MapViewOfFileEx | |
KERNEL32.dll | 68 | CloseHandle | |
KERNEL32.dll | 783 | MapViewOfFile | |
KERNEL32.dll | 125 | CreateFileMappingW | |
KERNEL32.dll | 985 | SetEnvironmentVariableW | |
KERNEL32.dll | 469 | GetFileSize | |
KERNEL32.dll | 128 | CreateFileW | |
KERNEL32.dll | 1156 | WideCharToMultiByte | |
KERNEL32.dll | 1213 | lstrcpynW | |
USER32.dll | 504 | MessageBoxA | |
USER32.dll | 776 | wsprintfW | |
ntdll.dll | 6 | LdrLoadDll | |
ntdll.dll | 39 | NtProtectVirtualMemory | |
ntdll.dll | 4 | LdrGetProcedureAddress |
StringTable 041D04E4
CompanyName | Riksarkivet SVAR |
FileDescription | Sveriges befolkning 1990 |
FileVersion | 1.0.1.0 |
InternalName | |
LegalCopyright | |
LegalTrademarks | |
OriginalFilename | |
ProductName | Sveriges befolkning 1990 |
ProductVersion | 1.0.0.0 |
Comments | |
ThinAppBuildDateTime | 20110809 124747 |
ThinAppLicense | Windows User |
ThinAppVersion | 4.6.1-361923 |
VS_FIXEDFILEINFO
FileVersion | 1.0.1.0 |
ProductVersion | 1.0.1.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Scanning the drive for archives: 1 file, 19459 bytes (20 KiB) Errors: 1
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK