kostenplan-4289.6554.4036.1254994591206182620213311794592845590921398033190648119383107514517493327318719564326791185295836719566837.doc.exe - Plato.exe

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	kostenplan-4289.6554.4036.1254994591206182620213311794592845590921398033190648119383107514517493327318719564326791185295836719566837.doc.exe
size	48640 (0xbe00)
md5	e67f65412e16219cc78fae80c66cd524

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd0

Rich Header

lib id	version	times used
95	3349	1
11	8966	1
123	40426	1
93	2067	1
61	9466	1
28	9178	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x47faa80f
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10e
Magic	0x10b
LinkerVersion	5.0
SizeOfCode	0x5000
SizeOfInitializedData	0x9c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x4fac
BaseOfCode	0x1000
BaseOfData	0
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x11000
SizeOfHeaders	0x400
CheckSum	0xcaba
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text`	0x1000	0x4e16	0x5000	R-X CODE
.xdata�	0x6000	0x3326	0x2400	RW- IDATA
.rdata�	0xa000	0x1bc8	0x1c00	RW- IDATA
.rsrcN	0xc000	0x3000	0x2800	R-- IDATA
.bss�	0xf000	0x1a8d	0x200	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xa394	0xf0
RESOURCE	0xc000	0x276c
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xa000	0x390
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	4264
DIALOG	#436	172
MESSAGETABLE	#45652	1184
MESSAGETABLE	#22719	795
MESSAGETABLE	#43808	265
MESSAGETABLE	#52020	929
MESSAGETABLE	#2368	347
MESSAGETABLE	#34206	436
GROUP_ICON	#1	20
VERSION	#1	1056

module_name	hint	ord	function_name
PSAPI.DLL			GetMappedFileNameA
PSAPI.DLL			EnumDeviceDrivers
PSAPI.DLL			GetDeviceDriverBaseNameW
PSAPI.DLL			GetModuleBaseNameW
PSAPI.DLL			GetModuleFileNameExW
PSAPI.DLL			GetProcessMemoryInfo
PSAPI.DLL			EnumProcessModules
PSAPI.DLL			EmptyWorkingSet
PSAPI.DLL			InitializeProcessForWsWatch
PSAPI.DLL			EnumProcesses
PSAPI.DLL			GetModuleBaseNameA
PSAPI.DLL			GetModuleInformation
PSAPI.DLL			GetMappedFileNameW
USER32.DLL			GetKeyNameTextW
USER32.DLL			CopyIcon
USER32.DLL			CharToOemBuffW
USER32.DLL			LoadIconA
USER32.DLL			GetPropW
USER32.DLL			SetDebugErrorLevel
USER32.DLL			SendMessageA
USER32.DLL			PackDDElParam
USER32.DLL			SetWindowsHookA
USER32.DLL			DdeSetQualityOfService
USER32.DLL			IsCharAlphaW
USER32.DLL			DialogBoxParamA
USER32.DLL			CreateMDIWindowA
USER32.DLL			GetIconInfo
USER32.DLL			GetWindowLongW
USER32.DLL			ScrollDC
USER32.DLL			EndDialog
USER32.DLL			WINNLSGetIMEHotkey
USER32.DLL			CharUpperBuffW
USER32.DLL			DdeNameService
USER32.DLL			CharNextA
USER32.DLL			GrayStringW
USER32.DLL			DdeSetUserHandle
USER32.DLL			GetFocus
USER32.DLL			ShowScrollBar
USER32.DLL			ShowWindow
USER32.DLL			CheckRadioButton
OLE32.DLL			HPALETTE_UserFree
OLE32.DLL			StringFromGUID2
OLE32.DLL			HBITMAP_UserUnmarshal
OLE32.DLL			CoFileTimeToDosDateTime
OLE32.DLL			StgGetIFillLockBytesOnILockBytes
OLE32.DLL			OleLoadFromStream
OLE32.DLL			CoGetPSClsid
OLE32.DLL			CoRegisterChannelHook
OLE32.DLL			CoAllowSetForegroundWindow
OLE32.DLL			OleQueryCreateFromData
OLE32.DLL			OleMetafilePictFromIconAndLabel
OLE32.DLL			UtConvertDvtd32toDvtd16
OLE32.DLL			OleQueryLinkFromData
OLE32.DLL			OleTranslateAccelerator
OLE32.DLL			ReleaseStgMedium
OLE32.DLL			MonikerRelativePathTo
OLE32.DLL			OleCreateLinkToFile
OLE32.DLL			GetHookInterface
OLE32.DLL			CLIPFORMAT_UserFree
OLE32.DLL			DcomChannelSetHResult
OLE32.DLL			STGMEDIUM_UserMarshal
OLE32.DLL			CoDosDateTimeToFileTime
OLE32.DLL			GetDocumentBitStg
OLE32.DLL			CoRegisterSurrogateEx
OLE32.DLL			CoImpersonateClient
OLE32.DLL			StgIsStorageFile
OLE32.DLL			PropSysAllocString
OLE32.DLL			HBRUSH_UserFree
OLE32.DLL			OleRegGetUserType
OLE32.DLL			CoReleaseMarshalData
OLE32.DLL			WdtpInterfacePointer_UserSize
OLE32.DLL			UtConvertDvtd16toDvtd32
KERNEL32.DLL			InitializeCriticalSection
KERNEL32.DLL			ExitProcess
KERNEL32.DLL			GetAtomNameA
KERNEL32.DLL			EnumUILanguagesA
KERNEL32.DLL			GetModuleHandleA
KERNEL32.DLL			GetProcAddress
RESUTILS.DLL			ResUtilStartResourceService
RESUTILS.DLL			ResUtilSetResourceServiceStartParameters
RESUTILS.DLL			ResUtilGetPrivateProperties
RESUTILS.DLL			ResUtilSetPropertyParameterBlock
RESUTILS.DLL			ResUtilFindDwordProperty
RESUTILS.DLL			ResUtilAddUnknownProperties
RESUTILS.DLL			ResUtilGetResourceDependencyByName
RESUTILS.DLL			ResUtilSetPrivatePropertyList
RESUTILS.DLL			ResUtilStopResourceService
RESUTILS.DLL			ResUtilEnumPrivateProperties
RESUTILS.DLL			ResUtilEnumResources
RESUTILS.DLL			ResUtilVerifyService
RESUTILS.DLL			ResUtilPropertyListFromParameterBlock
RESUTILS.DLL			ResUtilEnumProperties
RESUTILS.DLL			ResUtilGetPropertySize
RESUTILS.DLL			ResUtilGetSzProperty
RESUTILS.DLL			ResUtilFindExpandedSzProperty
RESUTILS.DLL			ResUtilSetSzValue
RESUTILS.DLL			ResUtilSetResourceServiceEnvironment
URLMON.DLL			GetComponentIDFromCLSSPEC
URLMON.DLL			CoInternetCreateSecurityManager
URLMON.DLL			GetClassURL
URLMON.DLL			IsLoggingEnabledA
URLMON.DLL			URLOpenStreamW
URLMON.DLL			CoInternetGetProtocolFlags
URLMON.DLL			RegisterMediaTypeClass
URLMON.DLL			FindMimeFromData
URLMON.DLL			HlinkGoBack
URLMON.DLL			UrlMkSetSessionOption
URLMON.DLL			IsValidURL
URLMON.DLL			IsAsyncMoniker
URLMON.DLL			UrlMkGetSessionOption
URLMON.DLL			BindAsyncMoniker
URLMON.DLL			GetSoftwareUpdateInfo
URLMON.DLL			CoInternetParseUrl
URLMON.DLL			FindMediaTypeClass
URLMON.DLL			URLOpenBlockingStreamA
URLMON.DLL			CoInternetGetSession
URLMON.DLL			RegisterBindStatusCallback
TAPI32.DLL			MMCGetAvailableProviders
TAPI32.DLL			lineAddProviderW
TAPI32.DLL			tapiGetLocationInfoA
TAPI32.DLL			lineSetTollListA
TAPI32.DLL			lineGetProviderListA
TAPI32.DLL			lineCompleteCall
TAPI32.DLL			lineConfigDialogA
TAPI32.DLL			lineInitialize
TAPI32.DLL			lineGetRequestW
TAPI32.DLL			lineHandoffW
TAPI32.DLL			lineGatherDigitsA
TAPI32.DLL			lineGetAddressStatusA
TAPI32.DLL			phoneOpen
TAPI32.DLL			phoneSetButtonInfoA
TAPI32.DLL			lineGetQueueListA
TAPI32.DLL			lineConfigDialogEditW
TAPI32.DLL			lineSetAgentActivity
TAPI32.DLL			internalPerformance
TAPI32.DLL			lineSetTerminal
TAPI32.DLL			lineGetAgentGroupListW
TAPI32.DLL			lineCreateAgentA
TAPI32.DLL			phoneGetButtonInfoW
TAPI32.DLL			lineOpenA
TAPI32.DLL			phoneGetVolume
TAPI32.DLL			phoneClose
TAPI32.DLL			phoneGetDevCapsA
TAPI32.DLL			lineAnswer
TAPI32.DLL			lineSetAgentSessionState
TAPI32.DLL			lineSetAgentMeasurementPeriod
TAPI32.DLL			lineSetAppPriorityW
TAPI32.DLL			phoneSetHookSwitch
TAPI32.DLL			MMCSetPhoneInfo
TAPI32.DLL			lineSetupTransferA
TAPI32.DLL			lineInitializeExW
TAPI32.DLL			lineRemoveFromConference
TAPI32.DLL			lineSetQueueMeasurementPeriod
TAPI32.DLL			lineAgentSpecific
TAPI32.DLL			phoneInitializeExA
TAPI32.DLL			lineSetCallQualityOfService
TAPI32.DLL			lineGenerateDigitsA
TAPI32.DLL			phoneGetMessage
TAPI32.DLL			phoneGetIconW
TAPI32.DLL			lineGetAgentCapsW
TAPI32.DLL			tapiRequestDrop
TAPI32.DLL			MMCRemoveProvider
CRYPT32.DLL			CertCreateCertificateChainEngine
CRYPT32.DLL			CryptMsgControl
CRYPT32.DLL			CryptVerifyCertificateSignatureEx
CRYPT32.DLL			CertDeleteCTLFromStore
CRYPT32.DLL			CertDuplicateStore
CRYPT32.DLL			CertRDNValueToStrW
CRYPT32.DLL			CertAlgIdToOID
CRYPT32.DLL			CertRegisterPhysicalStore
CRYPT32.DLL			CertAddEncodedCTLToStore
CRYPT32.DLL			CertFreeCertificateChainEngine
CRYPT32.DLL			CryptFormatObject
CRYPT32.DLL			CryptMsgVerifyCountersignatureEncoded
CRYPT32.DLL			CertAddEncodedCertificateToStore
CRYPT32.DLL			CertEnumSystemStore
CRYPT32.DLL			CertUnregisterPhysicalStore
CRYPT32.DLL			CryptMsgUpdate
CRYPT32.DLL			CertGetEnhancedKeyUsage
CRYPT32.DLL			CertEnumCRLsInStore
CRYPT32.DLL			CryptVerifyDetachedMessageSignature
CRYPT32.DLL			CryptCreateAsyncHandle
CRYPT32.DLL			CryptDecodeObject
COMCTL32.DLL			ImageList_Draw
COMCTL32.DLL			CreateStatusWindowW
COMCTL32.DLL			ImageList_SetIconSize
COMCTL32.DLL			ImageList_SetDragCursorImage
COMCTL32.DLL			ImageList_LoadImageW
COMCTL32.DLL			FlatSB_GetScrollInfo
COMCTL32.DLL			ImageList_Remove
COMCTL32.DLL			ImageList_Duplicate
COMCTL32.DLL			ImageList_GetDragImage
COMCTL32.DLL			ImageList_DragEnter
COMCTL32.DLL			DestroyPropertySheetPage
COMCTL32.DLL			PropertySheetA
COMCTL32.DLL			InitCommonControlsEx
COMCTL32.DLL			FlatSB_GetScrollPos
COMCTL32.DLL			_TrackMouseEvent
COMCTL32.DLL			ImageList_AddIcon
COMCTL32.DLL			ImageList_GetImageInfo
COMCTL32.DLL			ImageList_DragMove
COMCTL32.DLL			FlatSB_ShowScrollBar
COMCTL32.DLL			InitMUILanguage
COMCTL32.DLL			ImageList_SetBkColor
COMCTL32.DLL			ImageList_DrawEx
COMCTL32.DLL			InitCommonControls
COMCTL32.DLL			ImageList_SetFilter
COMCTL32.DLL			ImageList_Copy
COMCTL32.DLL			FlatSB_SetScrollRange
COMCTL32.DLL			ImageList_Read
SHLWAPI.DLL			AssocQueryKeyA
SHELL32.DLL			SHFileOperationW
SHELL32.DLL			ShellExecuteExA
SHELL32.DLL			SHAddToRecentDocs
SHELL32.DLL			DoEnvironmentSubstA
SHELL32.DLL			FindExecutableA
SHELL32.DLL			SHQueryRecycleBinA

StringTable 040904B0

CompanyName	Digidesign, A Division of Avid Technology, Inc.
FileDescription	Bavujy
FileVersion	3, 8, 3
InternalName	Drown Wispy Petty Leaf Froze Leper
LegalCopyright	Jenny 1999 2010
OriginalFilename	Plato.exe
ProductName	Asthma Bigot
ProductVersion	3 8 3631

VS_FIXEDFILEINFO

FileVersion	3.8.0.0
ProductVersion	3.8.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	48640	EXE	04/07/2008 23:02:39	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

kostenplan-4289.6554.4036.1254994591206182620213311794592845590921398033190648119383107514517493327318719564326791185295836719566837.doc.exe-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

kostenplan-4289.6554.4036.1254994591206182620213311794592845590921398033190648119383107514517493327318719564326791185295836719566837.doc.exe
-