filename45.exe
size276992 (0x43a00)
md5d0cf436045e308b5a1e5fa161bbcc6f0
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1584021921
1704021979
1473072923
10168
1714021923
154402191
157402191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x55a25779
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x432b
Magic0x10b
LinkerVersion10.0
SizeOfCode0xb400
SizeOfInitializedData0x38200
SizeOfUninitializedData0
AddressOfEntryPoint0x47b1
BaseOfCode0x1000
BaseOfData0xd000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x48000
SizeOfHeaders0x400
CheckSum0x4c21b
Subsystem2
DllCharacteristics0x640a
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000xb2ba0xb400R-X CODE
.rdata0xd0000x7c2a0x7e00R-- IDATA
.data0x150000x199e00x18c00RW- IDATA
.rsrc0x2f0000x161b80x16200R-- IDATA
.reloc0x460000x15e40x1600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x13da40xf0
RESOURCE0x2f0000x161b8
EXCEPTION00
SECURITY00
BASERELOC0x460000xc48
DEBUG0xd2d00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x121200x40
Bound_IAT00
IAT0xd0000x29c
Delay_IAT00
CLR_Header00
typenamesizecp
PNG#13919341252
PNG#1436071252
BITMAP#10015761252
BITMAP#3032021252
BITMAP#3044741252
ICON#1236731252
ICON#2216401252
ICON#396401252
ICON#442641252
ICON#511281252
ACCELERATORS#4002881252
GROUP_ICON#104761252
VERSION#17801252
HTMLOPTIONAL245091252
HTMLPICBUTTONPLACEHOLDER24381252
HTMLPREVIEW174911252
HTMLREPEATING601252
HTMLREPEATING249051252
HTMLSIGNATUREERROR5471252
HTMLSIGNATUREVALID5441252
MANIFEST#13461252
module_namehintordfunction_name
KERNEL32.dll719HeapFree
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll617GetStringTypeW
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll813LCMapStringW
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll659GetTickCount
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll499GetFileType
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll1135SetHandleCount
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll1317WriteFile
KERNEL32.dll281ExitProcess
KERNEL32.dll1216TerminateProcess
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll1139SetLastError
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll1222TlsFree
KERNEL32.dll202DecodePointer
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1221TlsAlloc
KERNEL32.dll234EncodePointer
KERNEL32.dll778IsValidCodePage
KERNEL32.dll567GetOEMCP
KERNEL32.dll360GetACP
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll370GetCPInfo
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll831LoadLibraryW
KERNEL32.dll1048RtlUnwind
KERNEL32.dll722HeapReAlloc
KERNEL32.dll724HeapSize
KERNEL32.dll905OutputDebugStringA
KERNEL32.dll1202Sleep
KERNEL32.dll840LocalFree
KERNEL32.dll828LoadLibraryA
KERNEL32.dll1351lstrcpyA
KERNEL32.dll863MoveFileExA
KERNEL32.dll514GetLastError
KERNEL32.dll836LocalAlloc
KERNEL32.dll717HeapCreate
KERNEL32.dll715HeapAlloc
KERNEL32.dll612GetStdHandle
KERNEL32.dll434GetConsoleScreenBufferInfo
KERNEL32.dll295FillConsoleOutputCharacterA
KERNEL32.dll437GetConsoleTitleA
KERNEL32.dll723HeapSetInformation
KERNEL32.dll390GetCommandLineA
KERNEL32.dll1095SetConsoleTitleA
KERNEL32.dll581GetProcAddress
KERNEL32.dll439GetConsoleWindow
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll448GetCurrentProcess
USER32.dll707SetWindowLongA
USER32.dll631SendMessageA
USER32.dll378GetSubMenu
USER32.dll106CreateMenu
USER32.dll475IsWindow
USER32.dll164DestroyMenu
USER32.dll492LoadIconA
USER32.dll488LoadCursorA
USER32.dll588RegisterClassExA
USER32.dll155DefWindowProcA
USER32.dll356GetParent
USER32.dll152DefMDIChildProcA
USER32.dll673SetMenuItemInfoA
USER32.dll339GetMenuItemInfoA
USER32.dll440InsertMenuItemA
USER32.dll630SendInput
USER32.dll337GetMenuItemCount
USER32.dll343GetMenuStringA
USER32.dll416GetWindowTextA
USER32.dll65CheckRadioButton
USER32.dll468IsRectEmpty
USER32.dll687SetRectEmpty
USER32.dll276GetClientRect
USER32.dll331GetMenu
USER32.dll640SetCapture
USER32.dll612ReleaseCapture
USER32.dll289GetDC
USER32.dll613ReleaseDC
USER32.dll292GetDialogBaseUnits
USER32.dll576PtInRect
USER32.dll109CreateWindowExA
USER32.dll516MapDialogRect
USER32.dll549OffsetRect
USER32.dll85CopyRect
USER32.dll710SetWindowPos
USER32.dll295GetDlgItem
USER32.dll412GetWindowRect
USER32.dll382GetSystemMetrics
USER32.dll405GetWindowLongA
USER32.dll95CreateDialogIndirectParamA
USER32.dll818wsprintfA
USER32.dll220EndPaint
USER32.dll379GetSysColor
USER32.dll735ShowWindow
USER32.dll110CreateWindowExW
USER32.dll636SendMessageW
USER32.dll819wsprintfW
USER32.dll715SetWindowTextW
USER32.dll214EnableMenuItem
USER32.dll494LoadImageA
USER32.dll163DestroyIcon
USER32.dll486LoadBitmapA
USER32.dll247FindWindowA
USER32.dll627SendDlgItemMessageW
USER32.dll14BeginPaint
GDI32.dll459GetDeviceCaps
GDI32.dll325FloodFill
GDI32.dll47CreateCompatibleBitmap
GDI32.dll685SetWindowOrgEx
GDI32.dll230DeleteObject
GDI32.dll227DeleteDC
GDI32.dll624SaveDC
GDI32.dll60CreateFontA
GDI32.dll696TextOutA
GDI32.dll617RestoreDC
GDI32.dll541GetTextExtentPoint32A
GDI32.dll75CreatePen
GDI32.dll678SetTextColor
GDI32.dll48CreateCompatibleDC
GDI32.dll631SelectObject
GDI32.dll507GetObjectA
GDI32.dll41CreateBitmap
GDI32.dll19BitBlt
COMDLG32.dll16PageSetupDlgA
COMDLG32.dll10GetFileTitleW
ADVAPI32.dll541QueryAllTracesA
ole32.dll129CreateItemMoniker
WINMM.dll62midiInGetID
CRYPT32.dll74CertGetNameStringA
SHLWAPI.dll72PathFindFileNameA
SHLWAPI.dll70PathFindExtensionA
SHLWAPI.dll308StrPBrkA
SHLWAPI.dll294StrDupA
SHLWAPI.dll365wnsprintfA
SHLWAPI.dll332StrToIntExA
SHLWAPI.dll271StrChrA
COMCTL32.dll14CreateToolbarEx
COMCTL32.dll111ImageList_ReplaceIcon
COMCTL32.dll123InitCommonControlsEx
RPCRT4.dll507UuidCreate

StringTable 040904b0

CompanyNameGlarysoft Ltd
FileDescriptionGlarysoft Dupefinder
FileVersion5.0.1.21
InternalNameDupefinder.exe
LegalCopyrightCopyright (c) 2003-2014 Glarysoft Ltd
OriginalFilenameDupefinder.exe
ProductNameGlary Utilities
ProductVersion5,0,0,1

VS_FIXEDFILEINFO

FileVersion5.0.0.1
ProductVersion5.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0276992EXE07/12/2015 12:03:05#
15c115HTM#
2c7801934PNG(16 x 263)#
2cf10607PNG(16 x 16)#
2da4023673PNG(256 x 256)#
3ca74509GIF(10 x 10)#
3cc742438PNG(150 x 27)#
3d5fc17490HTM#
41a5060GIF(10 x 10)#
41a8c905GIF(10 x 10)#
41e18547GIF(12 x 12)#
4203c544GIF(12 x 12)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] ignoring invalid PEdump::BITMAPINFOHEADER