filenameSnappy.dll
size16896 (0x4200)
md50453799a50a6a28e3ae308b973091535
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
203509295
205509291
2065092911
207509294
1042
185307162
211610305
202610301
201610301
204610301

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x539ed0e2
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion11.0
SizeOfCode0x2400
SizeOfInitializedData0x1e00
SizeOfUninitializedData0
AddressOfEntryPoint0x2bc9
BaseOfCode0x1000
BaseOfData0x4000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x8000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x238b0x2400R-X CODE
.rdata0x40000xed10x1000R-- IDATA
.data0x50000x4bc0x200RW- IDATA
.rsrc0x60000x1e00x200R-- IDATA
.reloc0x70000x5e40x600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x4df00xe1
IMPORT0x49ac0x50
RESOURCE0x60000x1e0
EXCEPTION00
SECURITY00
BASERELOC0x70000x308
DEBUG0x40e00x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x44680x40
Bound_IAT00
IAT0x40000xb0
Delay_IAT00
CLR_Header00
typenamesizecp
MANIFEST#23810
module_namehintordfunction_name
MSVCR110.dll766_initterm
MSVCR110.dll767_initterm_e
MSVCR110.dll587_crt_debugger_hook
MSVCR110.dll426__crtUnhandledException
MSVCR110.dll909_malloc_crt
MSVCR110.dll624_except_handler4_common
MSVCR110.dll315void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR110.dll400__clean_type_info_names_internal
MSVCR110.dll1508free
MSVCR110.dll533_amsg_exit
MSVCR110.dll371__CppXcptFilter
MSVCR110.dll112public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCR110.dll1058_onexit
MSVCR110.dll555_calloc_crt
MSVCR110.dll428__dllonexit
MSVCR110.dll1254_unlock
MSVCR110.dll892_lock
MSVCR110.dll138void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

MSVCR110.dll136void * __cdecl operator new[](unsigned int)

??_U@YAPAXI@Z

MSVCR110.dll113void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR110.dll115void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR110.dll1073_purecall
MSVCR110.dll425__crtTerminateProcess
MSVCR110.dll1578memmove
MSVCR110.dll349_CxxThrowException
MSVCR110.dll376__CxxFrameHandler3
MSVCR110.dll1576memcpy
MSVCR110.dll1580memset
MSVCP110.dll730void __cdecl std::_Xlength_error(char const *)

?_Xlength_error@std@@YAXPBD@Z

MSVCP110.dll731void __cdecl std::_Xout_of_range(char const *)

?_Xout_of_range@std@@YAXPBD@Z

MSVCP110.dll727void __cdecl std::_Xbad_alloc(void)

?_Xbad_alloc@std@@YAXXZ

MSVCP110.dll702char const * __cdecl std::_Syserror_map(int)

?_Syserror_map@std@@YAPBDH@Z

MSVCP110.dll723char const * __cdecl std::_Winerror_map(int)

?_Winerror_map@std@@YAPBDH@Z

KERNEL32.dll552GetCurrentThreadId
KERNEL32.dll548GetCurrentProcessId
KERNEL32.dll1084QueryPerformanceCounter
KERNEL32.dll904IsProcessorFeaturePresent
KERNEL32.dll899IsDebuggerPresent
KERNEL32.dll279DecodePointer
KERNEL32.dll316EncodePointer
KERNEL32.dll756GetSystemTimeAsFileTime
ordentry_vafunction_name
10x1280snappy_compress
20x12f0snappy_uncompress
30x1380snappy_max_compressed_length
40x13a0snappy_uncompressed_length
50x13e0snappy_validate_compressed_buffer
module_nameSnappy.dll
flags0
timestamp2014-06-16 11:11:29
version0.0
ordinal_base1
nFunctions5
nNames5
Names(5)0x4e2c
Functions(5)0x4e18
NameOrdinals(5)0x4e40
offsetsizetypecomment
016896DLL06/16/2014 11:11:30#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK