filenamecitlabs.tech.purdue.edu-TCP-443-install.exe
size3565751 (0x3668b7)
md5e2b607baff941a2e74a11954c2d4a9e2
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x60
blocks_in_file1
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x60

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 52 65  |........!..L.!Re|
00000010: 71 75 69 72 65 20 57 69  6e 64 6f 77 73 0d 0a 24  |quire Windows..$|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x50e0de9b
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0x18e00
SizeOfInitializedData0x5c00
SizeOfUninitializedData0
AddressOfEntryPoint0x1942f
BaseOfCode0x1000
BaseOfData0x1a000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x25000
SizeOfHeaders0x200
CheckSum0x22d33
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x18dde0x18e00R-X CODE
.rdata0x1a0000x3bca0x3c00R-- IDATA
.data0x1e0000x4dec0xa00RW- IDATA
.rsrc0x230000x15000x1600R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x1c9740xc8
RESOURCE0x230000x1500
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x1a0000x36c
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#116401252
ICON#27441252
ICON#34881252
ICON#42961252
GROUP_ICON#101621252
VERSION#18561252
MANIFEST#18381252
module_namehintordfunction_name
COMCTL32.dll17
SHELL32.dll225SHGetSpecialFolderPathW
SHELL32.dll290ShellExecuteW
SHELL32.dll207SHGetMalloc
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll123SHBrowseForFolderW
SHELL32.dll189SHGetFileInfoW
SHELL32.dll289ShellExecuteExW
GDI32.dll48CreateCompatibleDC
GDI32.dll64CreateFontIndirectW
GDI32.dll230DeleteObject
GDI32.dll227DeleteDC
GDI32.dll452GetCurrentObject
GDI32.dll691StretchBlt
GDI32.dll459GetDeviceCaps
GDI32.dll47CreateCompatibleBitmap
GDI32.dll631SelectObject
GDI32.dll674SetStretchBltMode
GDI32.dll509GetObjectW
ADVAPI32.dll288FreeSid
ADVAPI32.dll32AllocateAndInitializeSid
ADVAPI32.dll81CheckTokenMembership
USER32.dll406GetWindowLongW
USER32.dll331GetMenu
USER32.dll710SetWindowPos
USER32.dll402GetWindowDC
USER32.dll613ReleaseDC
USER32.dll295GetDlgItem
USER32.dll356GetParent
USER32.dll412GetWindowRect
USER32.dll273GetClassNameA
USER32.dll110CreateWindowExW
USER32.dll699SetTimer
USER32.dll349GetMessageW
USER32.dll175DispatchMessageW
USER32.dll483KillTimer
USER32.dll166DestroyWindow
USER32.dll636SendMessageW
USER32.dll218EndDialog
USER32.dll819wsprintfW
USER32.dll419GetWindowTextW
USER32.dll418GetWindowTextLengthW
USER32.dll379GetSysColor
USER32.dll818wsprintfA
USER32.dll715SetWindowTextW
USER32.dll526MessageBoxA
USER32.dll621ScreenToClient
USER32.dll276GetClientRect
USER32.dll708SetWindowLongW
USER32.dll768UnhookWindowsHookEx
USER32.dll658SetFocus
USER32.dll382GetSystemMetrics
USER32.dll748SystemParametersInfoW
USER32.dll735ShowWindow
USER32.dll208DrawTextW
USER32.dll289GetDC
USER32.dll71ClientToScreen
USER32.dll398GetWindow
USER32.dll170DialogBoxIndirectParamW
USER32.dll200DrawIconEx
USER32.dll30CallWindowProcW
USER32.dll156DefWindowProcW
USER32.dll28CallNextHookEx
USER32.dll576PtInRect
USER32.dll719SetWindowsHookExW
USER32.dll495LoadImageW
USER32.dll493LoadIconW
USER32.dll525MessageBeep
USER32.dll216EnableWindow
USER32.dll475IsWindow
USER32.dll214EnableMenuItem
USER32.dll381GetSystemMenu
USER32.dll109CreateWindowExA
USER32.dll821wvsprintfW
USER32.dll60CharUpperW
USER32.dll317GetKeyState
USER32.dll84CopyImage
ole32.dll134CreateStreamOnHGlobal
ole32.dll16CoCreateInstance
ole32.dll62CoInitialize
OLEAUT32.dll9
OLEAUT32.dll6
OLEAUT32.dll418
OLEAUT32.dll2
KERNEL32.dll496GetFileSize
KERNEL32.dll1126SetFilePointer
KERNEL32.dll960ReadFile
KERNEL32.dll1271WaitForMultipleObjects
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll1130SetFileTime
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll350FormatMessageW
KERNEL32.dll1352lstrcpyW
KERNEL32.dll840LocalFree
KERNEL32.dll759IsBadReadPtr
KERNEL32.dll624GetSystemDirectoryW
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll1210SuspendThread
KERNEL32.dll1217TerminateThread
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll1039ResetEvent
KERNEL32.dll1113SetEvent
KERNEL32.dll133CreateEventW
KERNEL32.dll676GetVersionExW
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1156SetProcessWorkingSetSize
KERNEL32.dll1101SetCurrentDirectoryW
KERNEL32.dll467GetDriveTypeW
KERNEL32.dll143CreateFileW
KERNEL32.dll391GetCommandLineW
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll168CreateProcessW
KERNEL32.dll150CreateJobObjectW
KERNEL32.dll1043ResumeThread
KERNEL32.dll22AssignProcessToJobObject
KERNEL32.dll148CreateIoCompletionPort
KERNEL32.dll1137SetInformationJobObject
KERNEL32.dll606GetQueuedCompletionStatus
KERNEL32.dll479GetExitCodeProcess
KERNEL32.dll82CloseHandle
KERNEL32.dll1111SetEnvironmentVariableW
KERNEL32.dll645GetTempPathW
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll1358lstrlenW
KERNEL32.dll96CompareFileTime
KERNEL32.dll1175SetThreadLocale
KERNEL32.dll313FindFirstFileW
KERNEL32.dll214DeleteFileW
KERNEL32.dll325FindNextFileW
KERNEL32.dll302FindClose
KERNEL32.dll1027RemoveDirectoryW
KERNEL32.dll285ExpandEnvironmentStringsW
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll704GlobalMemoryStatusEx
KERNEL32.dll1346lstrcmpW
KERNEL32.dll476GetEnvironmentVariableW
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll1357lstrlenA
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll670GetUserDefaultUILanguage
KERNEL32.dll622GetSystemDefaultUILanguage
KERNEL32.dll619GetSystemDefaultLCID
KERNEL32.dll1348lstrcmpiA
KERNEL32.dll691GlobalAlloc
KERNEL32.dll698GlobalFree
KERNEL32.dll870MulDiv
KERNEL32.dll332FindResourceExA
KERNEL32.dll1201SizeofResource
KERNEL32.dll833LoadResource
KERNEL32.dll852LockResource
KERNEL32.dll828LoadLibraryA
KERNEL32.dll581GetProcAddress
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll281ExitProcess
KERNEL32.dll1343lstrcatW
KERNEL32.dll462GetDiskFreeSpaceExW
KERNEL32.dll1121SetFileAttributesW
KERNEL32.dll1139SetLastError
KERNEL32.dll1202Sleep
KERNEL32.dll480GetExitCodeThread
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll181CreateThread
KERNEL32.dll514GetLastError
KERNEL32.dll1213SystemTimeToFileTime
KERNEL32.dll515GetLocalTime
KERNEL32.dll490GetFileAttributesW
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll1317WriteFile
KERNEL32.dll612GetStdHandle
KERNEL32.dll1260VirtualFree
KERNEL32.dll610GetStartupInfoA
MSVCRT.dll16void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCRT.dll15void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCRT.dll662memcmp
MSVCRT.dll606free
MSVCRT.dll663memcpy
MSVCRT.dll558_wtol
MSVCRT.dll183_controlfp
MSVCRT.dll202_except_handler3
MSVCRT.dll129__set_app_type
MSVCRT.dll111__p__fmode
MSVCRT.dll106__p__commode
MSVCRT.dll157_adjust_fdiv
MSVCRT.dll131__setusermatherr
MSVCRT.dll271_initterm
MSVCRT.dll88__getmainargs
MSVCRT.dll143_acmdln
MSVCRT.dll585exit
MSVCRT.dll72_XcptFilter
MSVCRT.dll211_exit
MSVCRT.dll14public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCRT.dll390_onexit
MSVCRT.dll85__dllonexit
MSVCRT.dll65_CxxThrowException
MSVCRT.dll166_beginthreadex
MSVCRT.dll66_EH_prolog
MSVCRT.dll37int (__cdecl*__cdecl _set_new_handler(int (__cdecl*)(unsigned int)))(unsigned int)

?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z

MSVCRT.dll665memset
MSVCRT.dll494_wcsnicmp
MSVCRT.dll704strncmp
MSVCRT.dll744wcsncmp
MSVCRT.dll657malloc
MSVCRT.dll664memmove
MSVCRT.dll402_purecall

StringTable 000004b0

CompanyNameOleg N. Scherbakov
FileDescription7z Setup SFX (x86)
FileVersion1.6.0.2712
InternalName7ZSfxMod
LegalCopyrightCopyright © 2005-2012 Oleg N. Scherbakov
OriginalFilename7ZSfxMod_x86.exe
PrivateBuildDecember 30, 2012
ProductName7-Zip SFX
ProductVersion1.6.0.2712

VS_FIXEDFILEINFO

FileVersion1.6.0.2712
ProductVersion1.6.0.2712
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags8
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0125952EXE12/31/2012 00:38:51#
15c115HTM#
1ec003439799BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 3565751 bytes (3483 KiB)


--
Type = 7z
Offset = 126023
Physical Size = 3439728
Headers Size = 298
Method = LZMA2:22 BCJ
Solid = +
Blocks = 2

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2017-08-21 15:07:44 D....            0            0  config
2017-08-21 15:07:44 ....A         1640         1688  config/firewall1-TCP-443-ca.crt
2017-08-21 15:07:44 ....A          265               config/firewall1-TCP-443-config.ovpn
2017-08-21 15:07:44 ....A          657               config/firewall1-TCP-443-tls.key
2017-08-21 15:07:44 ....A      3446040      3437742  openvpn-install.exe
2017-08-21 15:07:44 ....A       116134               openvpn-postinstall.exe
------------------- ----- ------------ ------------  ------------------------
2017-08-21 15:07:44            3564736      3439430  5 files, 1 folders
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK