ProcessMgr.exe - Process Manager

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	ProcessMgr.exe
size	97792 (0x17e00)
md5	fba2062fc28eb63673db24b07175b4b9

type	PE32 executable (Windows CE) ARM Thumb, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd0

Rich Header

lib id	version	times used
95	4091	4
93	4017	5
1	0	118
49	9775	8
56	2409	1
86	3077	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x1c2
NumberOfSections	5
TimeDateStamp	0x49ab547c
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.24
SizeOfCode	0x10600
SizeOfInitializedData	0x17000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x11294
BaseOfCode	0x1000
BaseOfData	0x12000
ImageBase	0x10000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x2c000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	9
DllCharacteristics	0
SizeOfStackReserve	0x10000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x105ec	0x10600	R-X CODE
.rdata	0x12000	0x39a	0x400	R-- IDATA
.data	0x13000	0x16135	0x6600	RW- IDATA
.pdata	0x2a000	0x460	0x600	R-- IDATA
.rsrc	0x2b000	0x3a8	0x400	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x12118	0x3c
RESOURCE	0x2b000	0x3a8
EXCEPTION	0x2a000	0x460
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x13000	0x1d4
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	840	0

module_name	hint	ord	function_name
COREDLL.dll		859
COREDLL.dll		870
COREDLL.dll		529
COREDLL.dll		876
COREDLL.dll		861
COREDLL.dll		516
COREDLL.dll		555
COREDLL.dll		75
COREDLL.dll		1047
COREDLL.dll		266
COREDLL.dll		286
COREDLL.dll		166
COREDLL.dll		553
COREDLL.dll		168
COREDLL.dll		496
COREDLL.dll		455
COREDLL.dll		461
COREDLL.dll		95
COREDLL.dll		919
COREDLL.dll		683
COREDLL.dll		875
COREDLL.dll		246
COREDLL.dll		1582
COREDLL.dll		865
COREDLL.dll		530
COREDLL.dll		528
COREDLL.dll		858
COREDLL.dll		893
COREDLL.dll		495
COREDLL.dll		264
COREDLL.dll		891
COREDLL.dll		866
COREDLL.dll		557
COREDLL.dll		535
COREDLL.dll		1095
COREDLL.dll		1068
COREDLL.dll		1066
COREDLL.dll		1094
COREDLL.dll		1065
COREDLL.dll		1405
COREDLL.dll		227
COREDLL.dll		76
COREDLL.dll		719
COREDLL.dll		993
COREDLL.dll		179
COREDLL.dll		864
COREDLL.dll		835
COREDLL.dll		1519
COREDLL.dll		1026
COREDLL.dll		493
COREDLL.dll		494
COREDLL.dll		497
COREDLL.dll		56
COREDLL.dll		821
COREDLL.dll		1204
COREDLL.dll		822
COREDLL.dll		1082
COREDLL.dll		492
COREDLL.dll		88
COREDLL.dll		323
COREDLL.dll		2008
COREDLL.dll		544
COREDLL.dll		509
COREDLL.dll		537
COREDLL.dll		263
COREDLL.dll		1182
COREDLL.dll		262
COREDLL.dll		464
COREDLL.dll		382
COREDLL.dll		87
COREDLL.dll		463
COREDLL.dll		381
COREDLL.dll		456
COREDLL.dll		1132
COREDLL.dll		73
COREDLL.dll		180
COREDLL.dll		167
COREDLL.dll		1018
COREDLL.dll		877
COREDLL.dll		1041
COREDLL.dll		1043
COREDLL.dll		2012
COREDLL.dll		2027
COREDLL.dll		2043
COREDLL.dll		1044
COREDLL.dll		545
COREDLL.dll		715
COREDLL.dll		1118
COREDLL.dll		1115
COREDLL.dll		25
COREDLL.dll		1113
COREDLL.dll		1146
COREDLL.dll		1417
COREDLL.dll		1108
COREDLL.dll		1130
COREDLL.dll		1072
COREDLL.dll		994
COREDLL.dll		66
COREDLL.dll		1586
COREDLL.dll		1585
COREDLL.dll		1529
COREDLL.dll		1530
COREDLL.dll		265
COREDLL.dll		164
COREDLL.dll		1083
COREDLL.dll		868
COREDLL.dll		35
COREDLL.dll		33
COREDLL.dll		34
COREDLL.dll		1645
COREDLL.dll		36
toolhelp.dll	9		Process32First
toolhelp.dll	10		Process32Next
toolhelp.dll			CloseToolhelp32Snapshot
toolhelp.dll	1		CreateToolhelp32Snapshot

StringTable 080404b0

Comments
CompanyName	MiTAC
FileDescription	Process Manager
FileVersion	1.0.34.0
InternalName	ProcessMgr
LegalCopyright	Copyright ? 2008
LegalTrademarks
OriginalFilename	ProcessMgr.exe
PrivateBuild
ProductName	MiTAC ProcessMgr
ProductVersion	1.0.34.0
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	1.0.34.0
ProductVersion	1.0.34.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	97792	EXE	03/02/2009 03:37:32	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

ProcessMgr.exe-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 080404b0

VS_FIXEDFILEINFO

ProcessMgr.exe
-