msuwxxhj.exe - Regressive.exe

info
MZ
PE
resources
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	msuwxxhj.exe
size	103111040 (0x6255980)
md5	f73f11cb40e60f1030cf7dd1bb8277e3

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
9	8168	11
14	7299	1
4	8168	2
1	0	102
19	8034	8
0	0	42
11	8168	2
6	1720	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x513bae7e
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x13000
SizeOfInitializedData	0xb000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x12eb2
BaseOfCode	0x1000
BaseOfData	0x14000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x1f000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1200e	0x13000	R-X CODE
.rdata	0x14000	0xf40	0x1000	R-- IDATA
.data	0x15000	0x7c74	0x2000	RW- IDATA
.rsrc	0x1d000	0x1960	0x2000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1424c	0x8c
RESOURCE	0x1d000	0x1960
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x14000	0x204
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
GROUP_ICON	#4146	104
DIALOG	#186	244
DIALOG	#184	740
DIALOG	#189	152
DIALOG	#188	912
DIALOG	#190	173
DIALOG	#187	1039
DIALOG	#191	345
DIALOG	#185	1073
ICON	#3267	1029
ICON	#3271	1209
ICON	#3268	786
ICON	#3265	1027
ICON	#3266	818
ICON	#3269	1091
ICON	#3270	1142
VERSION	#1	856

module_name	hint	function_name
COMCTL32.dll	46	ImageList_GetIcon
KERNEL32.dll	43	CopyFileW
SHLWAPI.dll	201	StrTrimW
SHLWAPI.dll	28	PathFileExistsW
SHLWAPI.dll	64	PathIsUNCW
SHLWAPI.dll	18	PathCombineW
SHLWAPI.dll	82	PathRemoveBackslashW
SHLWAPI.dll	99	PathStripToRootA
SHLWAPI.dll	83	PathRemoveBlanksA
SHLWAPI.dll	199	StrToIntW
SHLWAPI.dll	119	SHGetValueA
SHLWAPI.dll	46	PathIsDirectoryW
SHLWAPI.dll	150	SHRegSetUSValueW
SHLWAPI.dll	27	PathFileExistsA
SHLWAPI.dll	97	PathStripPathA
SHLWAPI.dll	109	SHDeleteKeyW
SHLWAPI.dll	8	PathAddBackslashW
SHLWAPI.dll	140	SHRegGetBoolUSValueW
SHLWAPI.dll	112	SHDeleteValueA
SHLWAPI.dll	127	SHQueryValueExW
SHLWAPI.dll	81	PathRemoveBackslashA
SHLWAPI.dll	103	PathUnquoteSpacesA
SHLWAPI.dll	79	PathRemoveArgsA
SHLWAPI.dll	164	StrCmpIW
SHLWAPI.dll	142	SHRegGetUSValueW
SHLWAPI.dll	172	StrDupA
SHLWAPI.dll	31	PathFindFileNameA
SHLWAPI.dll	7	PathAddBackslashA
SHLWAPI.dll	29	PathFindExtensionA
SHLWAPI.dll	180	StrNCatA
SHLWAPI.dll	9	PathAddExtensionA
SHLWAPI.dll	87	PathRemoveFileSpecA
SHLWAPI.dll	88	PathRemoveFileSpecW
SHLWAPI.dll	86	PathRemoveExtensionW
SHLWAPI.dll	15	PathCanonicalizeA
SHLWAPI.dll	98	PathStripPathW
SHLWAPI.dll	10	PathAddExtensionW
ADVAPI32.dll	152	EqualSid
ADVAPI32.dll	50	CloseEventLog
ADVAPI32.dll	345	ReadEventLogW
ADVAPI32.dll	399	RegisterServiceCtrlHandlerW
ADVAPI32.dll	327	OpenServiceA
ADVAPI32.dll	28	BackupEventLogA
ADVAPI32.dll	474	UnlockServiceDatabase
ADVAPI32.dll	182	GetNumberOfEventLogRecords
ADVAPI32.dll	326	OpenSCManagerW
ADVAPI32.dll	121	DeregisterEventSource
ADVAPI32.dll	52	CloseServiceHandle
ADVAPI32.dll	225	InitiateSystemShutdownA
ADVAPI32.dll	325	OpenSCManagerA
ADVAPI32.dll	308	NotifyBootConfigStatus
ADVAPI32.dll	46	ChangeServiceConfigW
ADVAPI32.dll	336	QueryServiceConfigA
ADVAPI32.dll	389	RegSetValueA
ADVAPI32.dll	354	RegDeleteKeyA
ADVAPI32.dll	72	CreateProcessAsUserA
ADVAPI32.dll	282	LsaOpenPolicy
ADVAPI32.dll	328	OpenServiceW
ADVAPI32.dll	43	ChangeServiceConfig2A
ADVAPI32.dll	397	RegisterEventSourceW
ADVAPI32.dll	396	RegisterEventSourceA
ADVAPI32.dll	76	CreateServiceA
ADVAPI32.dll	392	RegSetValueW
ADVAPI32.dll	356	RegDeleteValueA
ADVAPI32.dll	150	EnumServicesStatusW
ADVAPI32.dll	430	SetServiceStatus
ADVAPI32.dll	120	DeleteService
ADVAPI32.dll	339	QueryServiceLockStatusW
ADVAPI32.dll	357	RegDeleteValueW
ADVAPI32.dll	234	LockServiceDatabase
ADVAPI32.dll	368	RegNotifyChangeKeyValue
ADVAPI32.dll	437	StartServiceW
ADVAPI32.dll	249	LsaAddAccountRights
ADVAPI32.dll	229	IsTextUnicode
USER32.dll	463	OemToCharBuffA
USER32.dll	290	GetMenuItemCount
USER32.dll	414	LoadIconA
USER32.dll	396	IsIconic
USER32.dll	409	LoadBitmapW
USER32.dll	502	RegisterClipboardFormatA
USER32.dll	2	AdjustWindowRectEx
USER32.dll	517	RemovePropA
USER32.dll	550	SetCursor
USER32.dll	294	GetMenuItemRect
USER32.dll	436	MapDialogRect
USER32.dll	53	CheckMenuRadioItem
USER32.dll	428	LoadStringW
USER32.dll	606	SetWindowTextA
USER32.dll	381	IsCharAlphaA
USER32.dll	536	SendMessageTimeoutW
USER32.dll	175	DrawTextA
USER32.dll	63	CloseWindowStation
USER32.dll	62	CloseWindow
USER32.dll	298	GetMessageA
USER32.dll	608	SetWindowWord
USER32.dll	430	LockWindowUpdate
USER32.dll	657	UpdateWindow
USER32.dll	177	DrawTextExW
USER32.dll	51	CheckDlgButton
USER32.dll	262	GetDoubleClickTime
USER32.dll	569	SetMenuItemBitmaps
USER32.dll	295	GetMenuState
USER32.dll	614	ShowCursor
USER32.dll	274	GetKeyState
USER32.dll	437	MapVirtualKeyA
USER32.dll	552	SetCursorPos
USER32.dll	378	InvalidateRect
USER32.dll	11	BeginDeferWindowPos
USER32.dll	397	IsMenu
USER32.dll	462	OemToCharA
USER32.dll	348	GetWindowRect
USER32.dll	169	DrawIcon
USER32.dll	281	GetLastActivePopup
USER32.dll	286	GetMenuCheckMarkDimensions
USER32.dll	408	LoadBitmapA
USER32.dll	247	GetClipboardViewer
USER32.dll	540	SetActiveWindow
USER32.dll	302	GetMessageW
USER32.dll	54	CheckRadioButton
USER32.dll	102	DdeCreateStringHandleW
USER32.dll	168	DrawFrameControl
VERSION.dll	3	GetFileVersionInfoW
VERSION.dll	13	VerQueryValueW

StringTable 040904b0

Comments
CompanyName	Wave Systems Corp.
FileDescription	Revalue
FileVersion	153, 126, 56, 44
InternalName	Rebuilt
LegalCopyright	Threefold 2018
LegalTrademarks
OriginalFilename	Regressive.exe
PrivateBuild
ProductName	Reappointment Tattle
ProductVersion	224, 113, 206, 155
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	0.137.68.194
ProductVersion	0.207.22.146
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	102400	EXE	03/09/2013 21:49:50	#
15c1	15	HTM		#
19000	103008640	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 103111040 bytes (99 MiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] invalid VS_VERSIONINFO child type "X\x00J\x000\x00"

msuwxxhj.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

msuwxxhj.exe
-