filenamefreshclam.exe
size258560 (0x3f200)
md5fa3b8a903b07cd51b1997f184699d7ab
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1522011510
158402192
171402197
147210222
156402196
147307295
10174
1704021931
154402191
15101
157402191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x51cb088a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion10.0
SizeOfCode0x15200
SizeOfInitializedData0x2a600
SizeOfUninitializedData0
AddressOfEntryPoint0x1134d
BaseOfCode0x1000
BaseOfData0x1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x54000
SizeOfHeaders0x400
CheckSum0
Subsystem3
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.textbss0x10000x100000RWX CODE UDATA
.text0x110000x151250x15200R-X CODE
.rdata0x270000x73090x7400R-- IDATA
.data0x2f0000xae00x200RW- IDATA
.idata0x300000x13c30x1400RW- IDATA
.rsrc0x320000x1f3590x1f400R-- IDATA
.reloc0x520000x1c730x1e00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x300000x8c
RESOURCE0x320000x1f359
EXCEPTION00
SECURITY00
BASERELOC0x520000x1768
DEBUG0x277200x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x304d00x444
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
ICON#22960
ICON#322160
ICON#413840
ICON#5676240
ICON#6169360
ICON#796400
ICON#842640
ICON#911280
GROUP_ICON#13371320
VERSION#110320
MANIFEST#14060
module_namehintordfunction_name
DNSAPI.dll87DnsQuery_A
DNSAPI.dll38DnsFree
KERNEL32.dll112CopyFileA
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll945RaiseException
KERNEL32.dll1357lstrlenA
KERNEL32.dll581GetProcAddress
KERNEL32.dll831LoadLibraryW
KERNEL32.dll234EncodePointer
KERNEL32.dll748InterlockedExchange
KERNEL32.dll1202Sleep
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll659GetTickCount
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll202DecodePointer
KERNEL32.dll354FreeLibrary
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll1265VirtualQuery
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll586GetProcessHeap
KERNEL32.dll715HeapAlloc
KERNEL32.dll719HeapFree
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1216TerminateProcess
KERNEL32.dll723HeapSetInformation
KERNEL32.dll768IsDebuggerPresent
libconfig_d.dll46config_setting_set_int64
libconfig_d.dll49config_setting_set_string
libconfig_d.dll39config_setting_set_bool
libconfig_d.dll16config_setting_add
libconfig_d.dll45config_setting_set_int
libconfig_d.dll11config_read_file
libconfig_d.dll8config_lookup_int64
libconfig_d.dllconfig_destroy
libconfig_d.dll2config_init
libconfig_d.dll12config_read_string
libconfig_d.dll25config_setting_get_int64_elem
libconfig_d.dll3config_lookup
libconfig_d.dll31config_setting_length
libconfig_d.dll19config_setting_get_elem
libconfig_d.dll36config_setting_lookup_string
libconfig_d.dll32config_setting_lookup_bool
libconfig_d.dll34config_setting_lookup_int
libconfig_d.dll7config_lookup_int
libconfig_d.dll27config_setting_get_member
libconfig_d.dll28config_setting_get_string
libconfig_d.dll9config_lookup_string
curllib.dll6curl_easy_perform
curllib.dll10curl_easy_setopt
curllib.dll4curl_easy_init
curllib.dll20curl_global_cleanup
curllib.dll21curl_global_init
curllib.dllcurl_easy_cleanup
libclamav.dll44206
libclamav.dll44207
libclamav.dll44208
libclamav.dll20
libclamav.dll19
libclamav.dll1003
libclamav.dll44284
libclamav.dll44283
libclamav.dll3
libclamav.dll2
libclamav.dll44285
libclamav.dll44309
libclamav.dll44303
libclamav.dll44298
libclamav.dll44336
libclamav.dll44297
libclamav.dll1001
libclamav.dll1000
libclamav.dll44276
libclamav.dll56
libclamav.dll58
libclamav.dll51
libclamav.dll46
libclamav.dll44339
libclamav.dll44286
libclamav.dll44210
libclamav.dll59
libclamav.dll44340
libclamav.dll44203
libclamav.dll44212
libclamav.dll44316
libclamav.dll44317
libclamav.dll44337
libclamav.dll44329
libclamav.dll44209
libclamav.dll44294
libclamav.dll44315
MSVCR100D.dll1016_mkdir
MSVCR100D.dll1142_strdup
MSVCR100D.dll1214_umask
MSVCR100D.dll1051_read
MSVCR100D.dll1391_write
MSVCR100D.dll536_close
MSVCR100D.dll1027_open
MSVCR100D.dll1222_unlink
MSVCR100D.dll1026_onexit
MSVCR100D.dll858_lock
MSVCR100D.dll381__dllonexit
MSVCR100D.dll1224_unlock
MSVCR100D.dll751_invoke_watson
MSVCR100D.dll542_controlfp_s
MSVCR100D.dll260void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR100D.dll596_except_handler4_common
MSVCR100D.dll1409_wsplitpath_s
MSVCR100D.dll1653wcscpy_s
MSVCR100D.dll1375_wmakepath_s
MSVCR100D.dll557_crt_debugger_hook
MSVCR100D.dll746_initterm_e
MSVCR100D.dll745_initterm
MSVCR100D.dll294_CrtDbgReportW
MSVCR100D.dll311_CrtSetCheckCount
MSVCR100D.dll390__initenv
MSVCR100D.dll521_cexit
MSVCR100D.dll335_XcptFilter
MSVCR100D.dll605_exit
MSVCR100D.dll389__getmainargs
MSVCR100D.dll498_amsg_exit
MSVCR100D.dll452__set_app_type
MSVCR100D.dll633_fmode
MSVCR100D.dll538_commode
MSVCR100D.dll455__setusermatherr
MSVCR100D.dll539_configthreadlocale
MSVCR100D.dll1260_vsnprintf
MSVCR100D.dll289_CRT_RTC_INITW
MSVCR100D.dll1516isspace
MSVCR100D.dll1607strnlen
MSVCR100D.dll1552memcpy
MSVCR100D.dll1541malloc
MSVCR100D.dll1556memset
MSVCR100D.dll1616strtoul
MSVCR100D.dll1484free
MSVCR100D.dll1592strchr
MSVCR100D.dll1452calloc
MSVCR100D.dll1558perror
MSVCR100D.dll1574rename
MSVCR100D.dll1463fclose
MSVCR100D.dll1476fprintf
MSVCR100D.dll391__iob_func
MSVCR100D.dll1474fopen
MSVCR100D.dll1584sprintf
MSVCR100D.dll1601strlen
MSVCR100D.dll593_errno
MSVCR100D.dll1593strcmp
MSVCR100D.dll1094_setmode
MSVCR100D.dll620_fileno
MSVCR100D.dll1560printf
MSVCR100D.dll1460exit
MSVCR100D.dll1508isalpha
MSVCR100D.dll1611strstr
MSVCR100D.dll1482fread
MSVCR100D.dll1590strcat
MSVCR100D.dll1595strcpy
MSVCR100D.dll1588sscanf
MSVCR100D.dll1604strncmp
MSVCR100D.dll1500getenv
MSVCR100D.dll564_ctime64
MSVCR100D.dll1469fgets
MSVCR100D.dll1479fputs
MSVCR100D.dll1605strncpy
MSVCR100D.dll1466fflush
MSVCR100D.dll1196_time64
MSVCR100D.dll1600strftime
MSVCR100D.dll856_localtime64
MSVCR100D.dll661_fstat64i32
MSVCR100D.dll1157_strnicmp

StringTable 040904B0

CompanyNameSourceFire, Inc.
FileDescriptionClamAV - freshclam
FileVersiondevel-clamav-0.97-408-ge11f7cc
InternalNamefreshclam
OriginalFilenamefreshclam.exe
ProductNameClamAV
ProductVersionClamAV 0.98 (devel-clamav-0.97-408-ge11f7cc)
LegalCopyright(C) 2009 Sourcefire, Inc.
LegalTrademarksLicense: GNU GPL, Version 2
Commentsdevel-clamav-0.97-408-ge11f7cc

VS_FIXEDFILEINFO

FileVersion0.98.0.0
ProductVersion0.98.0.0
StrucVersion0x10000
FileFlagsMask3
FileFlags2
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0258560EXE06/26/2013 15:28:10#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK