filenameArchivesCDAPI2.dll
size254976 (0x3e400)
md51040f8ebfed1148962f964703b897bf3
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
1493072920
109507272
1235072721
10185
13130729148
1323072972
146307291
148210221
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x543c23c5
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x2b800
SizeOfInitializedData0x12800
SizeOfUninitializedData0
AddressOfEntryPoint0x187b8
BaseOfCode0x1000
BaseOfData0x2e000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x44000
SizeOfHeaders0x400
CheckSum0x4b823
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x2b53a0x2b600R-X CODE
.orpc0x2d0000x1a20x200R-X CODE
.rdata0x2e0000xa87b0xaa00R-- IDATA
.data0x390000x43dc0x2600RW- IDATA
.rsrc0x3e0000x1d080x1e00R-- IDATA
.reloc0x400000x39140x3a00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x387d00xab
IMPORT0x377d80xdc
RESOURCE0x3e0000x1d08
EXCEPTION00
SECURITY00
BASERELOC0x400000x29ac
DEBUG0x2e3400x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x32bb00x40
Bound_IAT00
IAT0x2e0000x2e4
Delay_IAT00
CLR_Header00
typenamesizecp
REGISTRY#1016541252
TYPELIB#150001252
STRING#7581252
VERSION#19561252
MANIFEST#23461252
idlangstring
1001033ArchivesCDAPI
module_namehintordfunction_name
sccca.dll6CAReadNext
sccca.dll4CAOpenContent
sccca.dllCACloseContent
sccca.dll5CAReadFirst
sccta.dll2TAReadFirst
sccta.dll1TAOpenText
sccta.dll3TAReadNext
sccta.dllTACloseText
sccda.dll33DAGetObjectInfo
sccda.dll46DAGetTreeCount
sccda.dll47DAGetTreeRecord
sccda.dll60DAOpenTreeRecord
sccda.dll12DADeInit
sccda.dll73DASetOption
sccda.dll54DAOpenDocument
sccda.dll6DACloseDocument
sccda.dll22DAGetFileId
sccda.dll48DAInit
sccda.dll68DASaveTreeRecord
sccda.dll65DASaveInputObject
sccda.dll9DACloseTreeRecord
KERNEL32.dll1154WriteConsoleA
KERNEL32.dll753LoadLibraryA
KERNEL32.dll693InitializeCriticalSectionAndSpinCount
KERNEL32.dll733IsValidLocale
KERNEL32.dll248EnumSystemLocalesA
KERNEL32.dll621GetUserDefaultLCID
KERNEL32.dll573GetStringTypeA
KERNEL32.dll488GetLocaleInfoA
KERNEL32.dll591GetSystemTimeAsFileTime
KERNEL32.dll426GetCurrentProcessId
KERNEL32.dll614GetTickCount
KERNEL32.dll1206lstrlenW
KERNEL32.dll858RaiseException
KERNEL32.dll217EnterCriticalSection
KERNEL32.dll751LeaveCriticalSection
KERNEL32.dll692InitializeCriticalSection
KERNEL32.dll190DeleteCriticalSection
KERNEL32.dll486GetLastError
KERNEL32.dll704InterlockedIncrement
KERNEL32.dll700InterlockedDecrement
KERNEL32.dll1197lstrcmpiW
KERNEL32.dll429GetCurrentThreadId
KERNEL32.dll487GetLocalTime
KERNEL32.dll501GetModuleFileNameW
KERNEL32.dll462GetFileAttributesW
KERNEL32.dll409GetConsoleOutputCP
KERNEL32.dll794MultiByteToWideChar
KERNEL32.dll1056SizeofResource
KERNEL32.dll758LoadResource
KERNEL32.dll313FindResourceW
KERNEL32.dll755LoadLibraryExW
KERNEL32.dll505GetModuleHandleW
KERNEL32.dll652GlobalFree
KERNEL32.dll663GlobalUnlock
KERNEL32.dll656GlobalLock
KERNEL32.dll645GlobalAlloc
KERNEL32.dll67CloseHandle
KERNEL32.dll1165WriteFile
KERNEL32.dll127CreateFileW
KERNEL32.dll1067SystemTimeToTzSpecificLocalTime
KERNEL32.dll619GetTimeZoneInformation
KERNEL32.dll544GetProcAddress
KERNEL32.dll1033SetThreadLocale
KERNEL32.dll607GetThreadLocale
KERNEL32.dll872ReadFile
KERNEL32.dll995SetFileTime
KERNEL32.dll763LocalFileTimeToFileTime
KERNEL32.dll1066SystemTimeToFileTime
KERNEL32.dll852QueryPerformanceCounter
KERNEL32.dll449GetEnvironmentStringsW
KERNEL32.dll1164WriteConsoleW
KERNEL32.dll1020SetStdHandle
KERNEL32.dll490GetLocaleInfoW
KERNEL32.dll120CreateFileA
KERNEL32.dll973SetEndOfFile
KERNEL32.dll547GetProcessHeap
KERNEL32.dll332FreeLibrary
KERNEL32.dll331FreeEnvironmentStringsW
KERNEL32.dll447GetEnvironmentStrings
KERNEL32.dll330FreeEnvironmentStringsA
KERNEL32.dll991SetFilePointer
KERNEL32.dll569GetStartupInfoA
KERNEL32.dll471GetFileType
KERNEL32.dll1076TlsGetValue
KERNEL32.dll576GetStringTypeW
KERNEL32.dll347GetCPInfo
KERNEL32.dll739LCMapStringW
KERNEL32.dll737LCMapStringA
KERNEL32.dll367GetCommandLineA
KERNEL32.dll721IsDebuggerPresent
KERNEL32.dll1045SetUnhandledExceptionFilter
KERNEL32.dll1086UnhandledExceptionFilter
KERNEL32.dll425GetCurrentProcess
KERNEL32.dll1069TerminateProcess
KERNEL32.dll673HeapFree
KERNEL32.dll669HeapAlloc
KERNEL32.dll914RtlUnwind
KERNEL32.dll1057Sleep
KERNEL32.dll701InterlockedExchange
KERNEL32.dll698InterlockedCompareExchange
KERNEL32.dll1146WideCharToMultiByte
KERNEL32.dll1000SetHandleCount
KERNEL32.dll731IsValidCodePage
KERNEL32.dll531GetOEMCP
KERNEL32.dll338GetACP
KERNEL32.dll678HeapSize
KERNEL32.dll321FlushFileBuffers
KERNEL32.dll405GetConsoleMode
KERNEL32.dll387GetConsoleCP
KERNEL32.dll500GetModuleFileNameA
KERNEL32.dll571GetStdHandle
KERNEL32.dll260ExitProcess
KERNEL32.dll672HeapDestroy
KERNEL32.dll671HeapCreate
KERNEL32.dll676HeapReAlloc
KERNEL32.dll1108VirtualAlloc
KERNEL32.dll1111VirtualFree
KERNEL32.dll502GetModuleHandleA
KERNEL32.dll1004SetLastError
KERNEL32.dll1075TlsFree
KERNEL32.dll1077TlsSetValue
KERNEL32.dll1074TlsAlloc
USER32.dll47CharNextW
ADVAPI32.dll603RegOpenKeyExW
ADVAPI32.dll616RegQueryValueExW
ADVAPI32.dll585RegEnumKeyExW
ADVAPI32.dll610RegQueryInfoKeyW
ADVAPI32.dll632RegSetValueExW
ADVAPI32.dll563RegCreateKeyExW
ADVAPI32.dll554RegCloseKey
ADVAPI32.dll578RegDeleteValueW
ADVAPI32.dll574RegDeleteKeyW
ole32.dll16CoCreateInstance
ole32.dll104CoTaskMemRealloc
ole32.dll102CoTaskMemAlloc
ole32.dll103CoTaskMemFree
ole32.dll315StringFromGUID2
OLEAUT32.dll283
OLEAUT32.dll284
OLEAUT32.dll285
OLEAUT32.dll286
OLEAUT32.dll163
OLEAUT32.dll186
OLEAUT32.dll2
OLEAUT32.dll13
OLEAUT32.dll4
OLEAUT32.dll161
OLEAUT32.dll162
OLEAUT32.dll277
OLEAUT32.dll94
OLEAUT32.dll6
OLEAUT32.dll7
OLEAUT32.dll184
OLEAUT32.dll185
SHLWAPI.dll71PathFindExtensionW
RPCRT4.dll193NdrDllUnregisterProxy
RPCRT4.dll192NdrDllRegisterProxy
RPCRT4.dll138NdrCStdStubBuffer_Release
RPCRT4.dll190NdrDllCanUnloadNow
RPCRT4.dll191NdrDllGetClassObject
RPCRT4.dll248NdrOleAllocate
RPCRT4.dll249NdrOleFree
RPCRT4.dll16IUnknown_QueryInterface_Proxy
RPCRT4.dll15IUnknown_AddRef_Proxy
RPCRT4.dll17IUnknown_Release_Proxy
RPCRT4.dll8CStdStubBuffer_QueryInterface
RPCRT4.dllCStdStubBuffer_AddRef
RPCRT4.dll1CStdStubBuffer_Connect
RPCRT4.dll5CStdStubBuffer_Disconnect
RPCRT4.dll6CStdStubBuffer_Invoke
RPCRT4.dll7CStdStubBuffer_IsIIDSupported
RPCRT4.dll2CStdStubBuffer_CountRefs
RPCRT4.dll3CStdStubBuffer_DebugServerQueryInterface
RPCRT4.dll4CStdStubBuffer_DebugServerRelease
ordentry_vafunction_name
10x13280DllCanUnloadNow
20x13d30DllGetClassObject
30x13d70DllRegisterServer
40x13dd0DllUnregisterServer
module_nameArchivesCDAPI2.DLL
flags0
timestamp2014-10-13 19:11:01
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x38808
Functions(4)0x387f8
NameOrdinals(4)0x38818

StringTable 040904b0

Comments
CompanyNameIHS Inc.
FileDescriptionArchivesCDAPI2 Module
FileVersion7, 0, 0, 4
InternalNameArchivesCDAPI
LegalCopyrightCopyright © 1995-2014 IHS Inc.
LegalTrademarks
OLESelfRegister
OriginalFilenameArchivesCDAPI2.DLL
PrivateBuild
ProductNameArchivesCDAPI2 Module
ProductVersion7, 0, 0, 4
SpecialBuild

VS_FIXEDFILEINFO

FileVersion7.0.0.4
ProductVersion7.0.0.4
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0254976DLL10/13/2014 19:11:01#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK