filenameHesoolver v2.6.9.exe
size196608 (0x30000)
md5d49454b94fd66742d85aa9dc809576d0
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x56070c03
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x30f
Magic0x10b
LinkerVersion2.56
SizeOfCode0x23c00
SizeOfInitializedData0x2fc00
SizeOfUninitializedData0x1ef600
AddressOfEntryPoint0x12a0
BaseOfCode0x1000
BaseOfData0x25000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x223000
SizeOfHeaders0x400
CheckSum0x355fc
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MingWin32

Sections

namevavsizeraw sizeflags
.text0x10000x23b780x23c00R-X CODE IDATA
.data0x250000x11e00x1200RW- IDATA
.rdata0x270000x59d80x5a00R-- IDATA
.bss0x2d0000x1ef5200RW- UDATA
.idata0x21d0000x14100x1600RW- IDATA
.rsrc0x21f0000x3c200x3e00RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x21d0000x1410
RESOURCE0x21f0000x3c20
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAPIMAGE18080
BITMAPIMAGE28080
ICON#122160
ICON#296400
GROUP_ICONICON1200
GROUP_ICONICON2200
VERSION#16440
MANIFEST#16620
module_namehintordfunction_name
SHELL32.DLL19ExtractIconA
SHELL32.DLL101SHGetPathFromIDListW
SHELL32.DLL104SHGetSpecialFolderLocation
COMCTL32.DLL59ImageList_Create
COMCTL32.DLL60ImageList_Destroy
COMCTL32.DLL84ImageList_ReplaceIcon
GDI32.dll46CreateFontA
GDI32.dll73DeleteObject
GDI32.dll102ExtTextOutA
GDI32.dll199GetStockObject
GDI32.dll229LineTo
GDI32.dll232MoveToEx
GDI32.dll279SelectObject
GDI32.dll285SetBkColor
GDI32.dll286SetBkMode
GDI32.dll320SetTextColor
PSAPI.DLL12GetModuleFileNameExA
PSAPI.DLL15GetProcessMemoryInfo
KERNEL32.dll1AddAtomA
KERNEL32.dll38CloseHandle
KERNEL32.dll48ContinueDebugEvent
KERNEL32.dll63CreateDirectoryW
KERNEL32.dll69CreateFileMappingA
KERNEL32.dll87CreateRemoteThread
KERNEL32.dll88CreateSemaphoreA
KERNEL32.dll91CreateThread
KERNEL32.dll94CreateToolhelp32Snapshot
KERNEL32.dll99DebugActiveProcess
KERNEL32.dll100DebugActiveProcessStop
KERNEL32.dll103DebugSetProcessKillOnExit
KERNEL32.dll156ExitProcess
KERNEL32.dll176FindAtomA
KERNEL32.dll221GetAtomNameA
KERNEL32.dll237GetCommandLineA
KERNEL32.dll284GetCurrentProcessId
KERNEL32.dll286GetCurrentThreadId
KERNEL32.dll311GetFileAttributesW
KERNEL32.dll325GetLastError
KERNEL32.dll337GetModuleHandleA
KERNEL32.dll364GetProcAddress
KERNEL32.dll386GetStartupInfoA
KERNEL32.dll393GetSystemDefaultLCID
KERNEL32.dll416GetThreadContext
KERNEL32.dll496InterlockedDecrement
KERNEL32.dll500InterlockedIncrement
KERNEL32.dll524LoadLibraryA
KERNEL32.dll546MapViewOfFile
KERNEL32.dll571OpenProcess
KERNEL32.dll575OpenThread
KERNEL32.dll585Process32First
KERNEL32.dll587Process32Next
KERNEL32.dll620ReadProcessMemory
KERNEL32.dll630ReleaseSemaphore
KERNEL32.dll713SetLastError
KERNEL32.dll731SetThreadContext
KERNEL32.dll735SetThreadPriority
KERNEL32.dll739SetUnhandledExceptionFilter
KERNEL32.dll751Sleep
KERNEL32.dll759TerminateProcess
KERNEL32.dll760TerminateThread
KERNEL32.dll763TlsAlloc
KERNEL32.dll764TlsFree
KERNEL32.dll765TlsGetValue
KERNEL32.dll766TlsSetValue
KERNEL32.dll790VirtualAlloc
KERNEL32.dll791VirtualAllocEx
KERNEL32.dll794VirtualFree
KERNEL32.dll795VirtualFreeEx
KERNEL32.dll802VirtualQueryEx
KERNEL32.dll807WaitForDebugEvent
KERNEL32.dll810WaitForSingleObject
KERNEL32.dll837WriteProcessMemory
msvcrt.dll38_getpid
msvcrt.dll43_itoa
msvcrt.dll39__getmainargs
msvcrt.dll60__p__environ
msvcrt.dll62__p__fmode
msvcrt.dll80__set_app_type
msvcrt.dll121_cexit
msvcrt.dll233_iob
msvcrt.dll350_onexit
msvcrt.dll388_setmode
msvcrt.dll482_wfopen
msvcrt.dll533abort
msvcrt.dll540atexit
msvcrt.dll542atoi
msvcrt.dll545calloc
msvcrt.dll557fclose
msvcrt.dll560fflush
msvcrt.dll569fprintf
msvcrt.dll574fread
msvcrt.dll575free
msvcrt.dll587getenv
msvcrt.dll626malloc
msvcrt.dll630memchr
msvcrt.dll632memcpy
msvcrt.dll633memmove
msvcrt.dll634memset
msvcrt.dll639printf
msvcrt.dll656signal
msvcrt.dll662sscanf
msvcrt.dll663strcat
msvcrt.dll665strcmp
msvcrt.dll667strcpy
msvcrt.dll671strlen
msvcrt.dll711wcslen
USER32.dll4AnimateWindow
USER32.dll6AppendMenuA
USER32.dll11BeginPaint
USER32.dll24CallWindowProcA
USER32.dll88CreatePopupMenu
USER32.dll89CreateWindowExA
USER32.dll133DefWindowProcA
USER32.dll141DestroyIcon
USER32.dll143DestroyWindow
USER32.dll148DispatchMessageA
USER32.dll179EnableWindow
USER32.dll183EndPaint
USER32.dll204EnumWindows
USER32.dll210FindWindowExA
USER32.dll232GetClassNameA
USER32.dll235GetClientRect
USER32.dll246GetCursorPos
USER32.dll247GetDC
USER32.dll249GetDesktopWindow
USER32.dll286GetMenuItemInfoA
USER32.dll292GetMessageA
USER32.dll323GetSysColorBrush
USER32.dll325GetSystemMetrics
USER32.dll336GetWindow
USER32.dll340GetWindowLongA
USER32.dll346GetWindowRect
USER32.dll352GetWindowThreadProcessId
USER32.dll363InsertMenuItemA
USER32.dll368InvalidateRect
USER32.dll391IsWindow
USER32.dll397KillTimer
USER32.dll400LoadBitmapA
USER32.dll402LoadCursorA
USER32.dll406LoadIconA
USER32.dll431MessageBoxA
USER32.dll442MoveWindow
USER32.dll461PeekMessageA
USER32.dll465PostQuitMessage
USER32.dll476RegisterClassA
USER32.dll489ReleaseDC
USER32.dll503SendMessageA
USER32.dll528SetFocus
USER32.dll529SetForegroundWindow
USER32.dll532SetLayeredWindowAttributes
USER32.dll537SetMenuItemBitmaps
USER32.dll538SetMenuItemInfoA
USER32.dll550SetScrollPos
USER32.dll551SetScrollRange
USER32.dll558SetTimer
USER32.dll564SetWindowLongA
USER32.dll567SetWindowPos
USER32.dll569SetWindowTextA
USER32.dll573SetWindowsHookExA
USER32.dll580ShowWindow
USER32.dll598TrackPopupMenuEx
USER32.dll603TranslateMessage
USER32.dll617ValidateRect
USER32.dll631wsprintfA

StringTable 041904E4

CompanyName
FileVersion
FileDescriptionHesoolver
InternalName
LegalCopyrightHacker2864
LegalTrademarks
OriginalFilenameHesoolver
ProductNameHesoolver
ProductVersion

VS_FIXEDFILEINFO

FileVersion0.0.0.0
ProductVersion0.0.0.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS0
FileType1
FileSubtype0
offsetsizetypecomment
0196608EXE09/26/2015 21:20:03#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK