filenameSetup-OpenStego-0.5.2.exe
size218055 (0x353c7)
md5182f48e179c6e120a00cebd99546bc4f
typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd0

Rich Header

lib idversiontimes used
9521902
10155
93217917
48904410
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x49a05a1a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x5c00
SizeOfInitializedData0x1d400
SizeOfUninitializedData0x400
AddressOfEntryPoint0x323c
BaseOfCode0x1000
BaseOfData0x7000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x35000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Nullsoft install system v2.x

Sections

namevavsizeraw sizeflags
.text0x10000x5a560x5c00R-X CODE
.rdata0x70000x11900x1200R-- IDATA
.data0x90000x1af980x400RW- IDATA
.ndata0x240000x100000RW- UDATA
.rsrc0x340000xfd00x1000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x73a40xb4
RESOURCE0x340000xfd0
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x70000x28c
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
ICON#22960
DIALOG#1021800
DIALOG#1032880
DIALOG#1055140
DIALOG#1062480
DIALOG#1071600
DIALOG#1112380
GROUP_ICON#103340
MANIFEST#17290
module_namehintordfunction_name
KERNEL32.dll51CompareFileTime
KERNEL32.dll720SearchPathA
KERNEL32.dll429GetShortPathNameA
KERNEL32.dll353GetFullPathNameA
KERNEL32.dll612MoveFileA
KERNEL32.dll767SetCurrentDirectoryA
KERNEL32.dll342GetFileAttributesA
KERNEL32.dll361GetLastError
KERNEL32.dll69CreateDirectoryA
KERNEL32.dll782SetFileAttributesA
KERNEL32.dll841Sleep
KERNEL32.dll469GetTickCount
KERNEL32.dll77CreateFileA
KERNEL32.dll347GetFileSize
KERNEL32.dll373GetModuleFileNameA
KERNEL32.dll314GetCurrentProcess
KERNEL32.dll61CopyFileA
KERNEL32.dll175ExitProcess
KERNEL32.dll788SetFileTime
KERNEL32.dll459GetTempPathA
KERNEL32.dll264GetCommandLineA
KERNEL32.dll778SetErrorMode
KERNEL32.dll584LoadLibraryA
KERNEL32.dll956lstrcpynA
KERNEL32.dll325GetDiskFreeSpaceA
KERNEL32.dll512GlobalUnlock
KERNEL32.dll505GlobalLock
KERNEL32.dll105CreateThread
KERNEL32.dll96CreateProcessA
KERNEL32.dll698RemoveDirectoryA
KERNEL32.dll457GetTempFileNameA
KERNEL32.dll959lstrlenA
KERNEL32.dll944lstrcatA
KERNEL32.dll441GetSystemDirectoryA
KERNEL32.dll478GetVersion
KERNEL32.dll46CloseHandle
KERNEL32.dll950lstrcmpiA
KERNEL32.dll947lstrcmpA
KERNEL32.dll178ExpandEnvironmentStringsA
KERNEL32.dll501GlobalFree
KERNEL32.dll494GlobalAlloc
KERNEL32.dll901WaitForSingleObject
KERNEL32.dll338GetExitCodeProcess
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll585LoadLibraryExA
KERNEL32.dll408GetProcAddress
KERNEL32.dll239FreeLibrary
KERNEL32.dll619MultiByteToWideChar
KERNEL32.dll924WritePrivateProfileStringA
KERNEL32.dll404GetPrivateProfileStringA
KERNEL32.dll919WriteFile
KERNEL32.dll683ReadFile
KERNEL32.dll618MulDiv
KERNEL32.dll784SetFilePointer
KERNEL32.dll197FindClose
KERNEL32.dll211FindNextFileA
KERNEL32.dll201FindFirstFileA
KERNEL32.dll124DeleteFileA
KERNEL32.dll489GetWindowsDirectoryA
USER32.dll198EndDialog
USER32.dll560ScreenToClient
USER32.dll372GetWindowRect
USER32.dll194EnableMenuItem
USER32.dll348GetSystemMenu
USER32.dll582SetClassLongA
USER32.dll430IsWindowEnabled
USER32.dll642SetWindowPos
USER32.dll346GetSysColor
USER32.dll366GetWindowLongA
USER32.dll588SetCursor
USER32.dll441LoadCursorA
USER32.dll56CheckDlgButton
USER32.dll316GetMessagePos
USER32.dll439LoadBitmapA
USER32.dll27CallWindowProcA
USER32.dll433IsWindowVisible
USER32.dll66CloseClipboard
USER32.dll585SetClipboardData
USER32.dll193EmptyClipboard
USER32.dll533RegisterClassA
USER32.dll675TrackPopupMenu
USER32.dll8AppendMenuA
USER32.dll94CreatePopupMenu
USER32.dll349GetSystemMetrics
USER32.dll594SetDlgItemTextA
USER32.dll275GetDlgItemTextA
USER32.dll481MessageBoxIndirectA
USER32.dll45CharPrevA
USER32.dll161DispatchMessageA
USER32.dll511PeekMessageA
USER32.dll153DestroyWindow
USER32.dll85CreateDialogParamA
USER32.dll633SetTimer
USER32.dll645SetWindowTextA
USER32.dll515PostQuitMessage
USER32.dll598SetForegroundWindow
USER32.dll725wsprintfA
USER32.dll573SendMessageTimeoutA
USER32.dll228FindWindowExA
USER32.dll664SystemParametersInfoA
USER32.dll96CreateWindowExA
USER32.dll246GetClassInfoA
USER32.dll158DialogBoxParamA
USER32.dll42CharNextA
USER32.dll501OpenClipboard
USER32.dll225ExitWindowsEx
USER32.dll429IsWindow
USER32.dll273GetDlgItem
USER32.dll639SetWindowLongA
USER32.dll447LoadImageA
USER32.dll268GetDC
USER32.dll196EnableWindow
USER32.dll403InvalidateRect
USER32.dll570SendMessageA
USER32.dll142DefWindowProcA
USER32.dll13BeginPaint
USER32.dll255GetClientRect
USER32.dll226FillRect
USER32.dll188DrawTextA
USER32.dll200EndPaint
USER32.dll657ShowWindow
GDI32.dll533SetBkColor
GDI32.dll363GetDeviceCaps
GDI32.dll143DeleteObject
GDI32.dll41CreateBrushIndirect
GDI32.dll58CreateFontIndirectA
GDI32.dll534SetBkMode
GDI32.dll572SetTextColor
GDI32.dll526SelectObject
SHELL32.dll188SHGetPathFromIDListA
SHELL32.dll121SHBrowseForFolderA
SHELL32.dll172SHGetFileInfoA
SHELL32.dll263ShellExecuteA
SHELL32.dll154SHFileOperationA
SHELL32.dll195SHGetSpecialFolderLocation
ADVAPI32.dll492RegQueryValueExA
ADVAPI32.dll505RegSetValueExA
ADVAPI32.dll469RegEnumKeyA
ADVAPI32.dll473RegEnumValueA
ADVAPI32.dll482RegOpenKeyExA
ADVAPI32.dll464RegDeleteKeyA
ADVAPI32.dll466RegDeleteValueA
ADVAPI32.dll457RegCloseKey
ADVAPI32.dll461RegCreateKeyExA
COMCTL32.dll52ImageList_AddMasked
COMCTL32.dll56ImageList_Destroy
COMCTL32.dll17
COMCTL32.dll55ImageList_Create
ole32.dll100CoTaskMemFree
ole32.dll237OleInitialize
ole32.dll260OleUninitialize
ole32.dll16CoCreateInstance
VERSION.dll1GetFileVersionInfoSizeA
VERSION.dllGetFileVersionInfoA
VERSION.dll10VerQueryValueA
offsetsizetypecomment
034304EXE02/21/2009 19:46:34#
15c115HTM#
8600183751BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 218055 bytes (213 KiB)


--
Type = Nsis
Physical Size = 218055
Method = LZMA:23
Solid = +
Headers Size = 31759
Embedded Stub Size = 34304
SubType = NSIS-2

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....         4096       183747  $PLUGINSDIR/UserInfo.dll
2009-05-08 16:55:30 .....         4635               doc/api/allclasses-frame.html
2009-05-08 16:55:30 .....         4095               doc/api/allclasses-noframe.html
2009-05-08 16:55:32 .....        22905               doc/api/constant-values.html
2009-05-08 16:55:30 .....         4872               doc/api/deprecated-list.html
2009-05-08 16:55:32 .....         8391               doc/api/help-doc.html
2009-05-08 16:55:30 .....       124869               doc/api/index-all.html
2009-05-08 16:55:30 .....          901               doc/api/index.html
2009-05-08 16:55:32 .....         1697               doc/api/overview-frame.html
2009-05-08 16:55:32 .....         6146               doc/api/overview-summary.html
2009-05-08 16:55:32 .....        14020               doc/api/overview-tree.html
2009-05-08 16:55:32 .....          161               doc/api/package-list
2009-05-08 16:55:32 .....          857               doc/api/packages.html
2009-05-08 16:55:32 .....        15906               doc/api/serialized-form.html
2009-05-08 16:55:32 .....         1231               doc/api/stylesheet.css
2009-05-08 16:55:30 .....        21198               doc/api/net/sourceforge/openstego/DataHidingPlugin.html
2009-05-08 16:55:32 .....        44574               doc/api/net/sourceforge/openstego/OpenStego.html
2009-05-08 16:55:30 .....        23430               doc/api/net/sourceforge/openstego/OpenStegoConfig.html
2009-05-08 16:55:32 .....        13875               doc/api/net/sourceforge/openstego/OpenStegoCrypto.html
2009-05-08 16:55:32 .....        32723               doc/api/net/sourceforge/openstego/OpenStegoException.html
2009-05-08 16:55:30 .....        46779               doc/api/net/sourceforge/openstego/OpenStegoPlugin.html
2009-05-08 16:55:32 .....        20424               doc/api/net/sourceforge/openstego/WatermarkingPlugin.html
2009-05-08 16:55:30 .....         1887               doc/api/net/sourceforge/openstego/package-frame.html
2009-05-08 16:55:32 .....         7750               doc/api/net/sourceforge/openstego/package-summary.html
2009-05-08 16:55:32 .....         7478               doc/api/net/sourceforge/openstego/package-tree.html
2009-05-08 16:55:32 .....       113803               doc/api/net/sourceforge/openstego/ui/OpenStegoFrame.html
2009-05-08 16:55:30 .....        86999               doc/api/net/sourceforge/openstego/ui/OpenStegoUI.html
2009-05-08 16:55:32 .....        81913               doc/api/net/sourceforge/openstego/ui/PluginEmbedOptionsUI.html
2009-05-08 16:55:30 .....         1237               doc/api/net/sourceforge/openstego/ui/package-frame.html
2009-05-08 16:55:30 .....         6702               doc/api/net/sourceforge/openstego/ui/package-summary.html
2009-05-08 16:55:30 .....         9384               doc/api/net/sourceforge/openstego/ui/package-tree.html
2009-05-08 16:55:32 .....        19109               doc/api/net/sourceforge/openstego/util/CmdLineOption.html
2009-05-08 16:55:32 .....        18927               doc/api/net/sourceforge/openstego/util/CmdLineOptions.html
2009-05-08 16:55:32 .....        18613               doc/api/net/sourceforge/openstego/util/CmdLineParser.html
2009-05-08 16:55:32 .....        24952               doc/api/net/sourceforge/openstego/util/CommonUtil.html
2009-05-08 16:55:32 .....        26890               doc/api/net/sourceforge/openstego/util/ImageUtil.html
2009-05-08 16:55:30 .....        17242               doc/api/net/sourceforge/openstego/util/LabelUtil.html
2009-05-08 16:55:32 .....        11670               doc/api/net/sourceforge/openstego/util/PasswordInput.html
2009-05-08 16:55:32 .....        15064               doc/api/net/sourceforge/openstego/util/PluginManager.html
2009-05-08 16:55:32 .....        13458               doc/api/net/sourceforge/openstego/util/StringUtil.html
2009-05-08 16:55:32 .....         1945               doc/api/net/sourceforge/openstego/util/package-frame.html
2009-05-08 16:55:30 .....         8248               doc/api/net/sourceforge/openstego/util/package-summary.html
2009-05-08 16:55:32 .....         7656               doc/api/net/sourceforge/openstego/util/package-tree.html
2009-05-08 16:55:32 .....        29027               doc/api/net/sourceforge/openstego/util/dct/DCT.html
2009-05-08 16:55:30 .....         1001               doc/api/net/sourceforge/openstego/util/dct/package-frame.html
2009-05-08 16:55:32 .....         6182               doc/api/net/sourceforge/openstego/util/dct/package-summary.html
2009-05-08 16:55:32 .....         6161               doc/api/net/sourceforge/openstego/util/dct/package-tree.html
2009-05-08 16:55:32 .....        14976               doc/api/net/sourceforge/openstego/util/dwt/DWT.html
2009-05-08 16:55:32 .....        49929               doc/api/net/sourceforge/openstego/util/dwt/DWTUtil.html
2009-05-08 16:55:32 .....        24674               doc/api/net/sourceforge/openstego/util/dwt/Filter.html
2009-05-08 16:55:32 .....        25807               doc/api/net/sourceforge/openstego/util/dwt/FilterGH.html
2009-05-08 16:55:30 .....        11466               doc/api/net/sourceforge/openstego/util/dwt/FilterXMLReader.html
2009-05-08 16:55:32 .....        14900               doc/api/net/sourceforge/openstego/util/dwt/Image.html
2009-05-08 16:55:30 .....        25655               doc/api/net/sourceforge/openstego/util/dwt/ImageTree.html
2009-05-08 16:55:30 .....         1701               doc/api/net/sourceforge/openstego/util/dwt/package-frame.html
2009-05-08 16:55:32 .....         7629               doc/api/net/sourceforge/openstego/util/dwt/package-summary.html
2009-05-08 16:55:30 .....         7219               doc/api/net/sourceforge/openstego/util/dwt/package-tree.html
2009-05-08 16:55:30 .....           57               doc/api/resources/inherit.gif
2009-05-08 16:55:30 .....       135554               lib/openstego.jar
2009-05-08 16:55:30 .....           44               openstego.bat
2009-05-08 16:55:32 .....         4286               openstego.ico
2009-05-08 16:55:30 .....         6064               README
2009-05-08 16:55:30 .....        17987               LICENSE
                    .....                            Uninstall.exe
------------------- ----- ------------ ------------  ------------------------
2009-05-08 16:55:32            1309031       183747  64 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK