filenameWindowsAzureEmulator-x64.exe 4574984 152064.dll
size152064 (0x25200)
md514c01c848d8452005734858a64b6784b
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
1492102216
13121022102
109507273
1235072717
10219
1322102268
146210221
148210221
145210221

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4a3b9bcb
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x21a00
SizeOfInitializedData0x6000
SizeOfUninitializedData0
AddressOfEntryPoint0xa857
BaseOfCode0x1000
BaseOfData0x23000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x2a000
SizeOfHeaders0x400
CheckSum0x34523
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x219140x21a00R-X CODE
.data0x230000x3bc00x1000RW- IDATA
.rsrc0x270000x4e80x600R-- IDATA
.reloc0x280000x1cd80x1e00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x225600x3b4
IMPORT0x217540xa0
RESOURCE0x270000x4e8
EXCEPTION00
SECURITY00
BASERELOC0x280000x13a4
DEBUG0x13000x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x34580x40
Bound_IAT00
IAT0x10000x2c4
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#111600
module_namehintordfunction_name
ADVAPI32.dll395LookupAccountSidW
ADVAPI32.dll683SetNamedSecurityInfoW
ADVAPI32.dll672SetEntriesInAclW
ADVAPI32.dll321GetSecurityDescriptorControl
ADVAPI32.dll316GetNamedSecurityInfoW
ADVAPI32.dll70BuildTrusteeWithSidW
ADVAPI32.dll322GetSecurityDescriptorDacl
ADVAPI32.dll110ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll102ConvertSecurityDescriptorToStringSecurityDescriptorW
ADVAPI32.dll501OpenServiceW
ADVAPI32.dll73ChangeServiceConfig2W
ADVAPI32.dll30AdjustTokenPrivileges
ADVAPI32.dll401LookupPrivilegeValueW
ADVAPI32.dll497OpenProcessToken
ADVAPI32.dll83CloseServiceHandle
ADVAPI32.dll499OpenSCManagerW
ADVAPI32.dll540QueryServiceConfig2W
ADVAPI32.dll393LookupAccountNameW
ADVAPI32.dll31AllocateAndInitializeSid
ADVAPI32.dll114CopySid
ADVAPI32.dll282FreeSid
ADVAPI32.dll603RegOpenKeyExW
ADVAPI32.dll616RegQueryValueExW
ADVAPI32.dll554RegCloseKey
KERNEL32.dll406GetConsoleMode
KERNEL32.dll388GetConsoleCP
KERNEL32.dll463GetFileAttributesW
KERNEL32.dll1003SetFileTime
KERNEL32.dll471GetFileTime
KERNEL32.dll994SetFileAttributesW
KERNEL32.dll1030SetStdHandle
KERNEL32.dll121CreateFileA
KERNEL32.dll173CreateToolhelp32Snapshot
KERNEL32.dll841Process32FirstW
KERNEL32.dll843Process32NextW
KERNEL32.dll824OpenProcess
KERNEL32.dll1132WaitForMultipleObjects
KERNEL32.dll550GetProcessHeap
KERNEL32.dll503GetModuleHandleA
KERNEL32.dll535GetPriorityClass
KERNEL32.dll152CreateProcessW
KERNEL32.dll1134WaitForSingleObject
KERNEL32.dll454GetExitCodeProcess
KERNEL32.dll146CreatePipe
KERNEL32.dll213DuplicateHandle
KERNEL32.dll649GlobalAddAtomW
KERNEL32.dll652GlobalDeleteAtom
KERNEL32.dll654GlobalFindAtomW
KERNEL32.dll282FindClose
KERNEL32.dll646GetWindowsDirectoryW
KERNEL32.dll293FindFirstFileW
KERNEL32.dll305FindNextFileW
KERNEL32.dll470GetFileSizeEx
KERNEL32.dll999SetFilePointer
KERNEL32.dll1164WriteConsoleA
KERNEL32.dll410GetConsoleOutputCP
KERNEL32.dll1216lstrlenW
KERNEL32.dll607GetTempPathW
KERNEL32.dll128CreateFileW
KERNEL32.dll1175WriteFile
KERNEL32.dll426GetCurrentProcess
KERNEL32.dll68CloseHandle
KERNEL32.dll329FormatMessageW
KERNEL32.dll1207lstrcmpiW
KERNEL32.dll1204lstrcmpW
KERNEL32.dll770LocalFree
KERNEL32.dll761LoadLibraryW
KERNEL32.dll546GetProcAddress
KERNEL32.dll333FreeLibrary
KERNEL32.dll635GetVersionExW
KERNEL32.dll487GetLastError
KERNEL32.dll1012SetLastError
KERNEL32.dll430GetCurrentThreadId
KERNEL32.dll368GetCommandLineA
KERNEL32.dll1079TerminateProcess
KERNEL32.dll1096UnhandledExceptionFilter
KERNEL32.dll1055SetUnhandledExceptionFilter
KERNEL32.dll726IsDebuggerPresent
KERNEL32.dll506GetModuleHandleW
KERNEL32.dll1086TlsGetValue
KERNEL32.dll1084TlsAlloc
KERNEL32.dll1087TlsSetValue
KERNEL32.dll1085TlsFree
KERNEL32.dll709InterlockedIncrement
KERNEL32.dll705InterlockedDecrement
KERNEL32.dll678HeapFree
KERNEL32.dll1067Sleep
KERNEL32.dll261ExitProcess
KERNEL32.dll1008SetHandleCount
KERNEL32.dll574GetStdHandle
KERNEL32.dll472GetFileType
KERNEL32.dll572GetStartupInfoA
KERNEL32.dll191DeleteCriticalSection
KERNEL32.dll501GetModuleFileNameA
KERNEL32.dll331FreeEnvironmentStringsA
KERNEL32.dll448GetEnvironmentStrings
KERNEL32.dll332FreeEnvironmentStringsW
KERNEL32.dll1156WideCharToMultiByte
KERNEL32.dll450GetEnvironmentStringsW
KERNEL32.dll676HeapCreate
KERNEL32.dll677HeapDestroy
KERNEL32.dll1121VirtualFree
KERNEL32.dll857QueryPerformanceCounter
KERNEL32.dll618GetTickCount
KERNEL32.dll427GetCurrentProcessId
KERNEL32.dll595GetSystemTimeAsFileTime
KERNEL32.dll348GetCPInfo
KERNEL32.dll339GetACP
KERNEL32.dll532GetOEMCP
KERNEL32.dll736IsValidCodePage
KERNEL32.dll756LeaveCriticalSection
KERNEL32.dll218EnterCriticalSection
KERNEL32.dll674HeapAlloc
KERNEL32.dll1118VirtualAlloc
KERNEL32.dll681HeapReAlloc
KERNEL32.dll758LoadLibraryA
KERNEL32.dll698InitializeCriticalSectionAndSpinCount
KERNEL32.dll922RtlUnwind
KERNEL32.dll742LCMapStringA
KERNEL32.dll799MultiByteToWideChar
KERNEL32.dll744LCMapStringW
KERNEL32.dll576GetStringTypeA
KERNEL32.dll579GetStringTypeW
KERNEL32.dll489GetLocaleInfoA
KERNEL32.dll683HeapSize
KERNEL32.dll196DeleteFileW
KERNEL32.dll322FlushFileBuffers
KERNEL32.dll878ReadFile
KERNEL32.dll1174WriteConsoleW
OLEAUT32.dll2
OLEAUT32.dll9
OLEAUT32.dll6
OLEAUT32.dll8
ole32.dll16CoCreateInstance
ole32.dll107CoUninitialize
ole32.dll61CoInitialize
ole32.dll6CLSIDFromProgID
USER32.dll543PostMessageW
USER32.dll367GetSystemMetrics
USER32.dll235EnumWindows
USER32.dll400GetWindowThreadProcessId
msi.dll145
msi.dll80
msi.dll74
msi.dll121
msi.dll103
msi.dll124
msi.dll49
msi.dll51
msi.dll171
msi.dll73
msi.dll64
msi.dll47
msi.dll8
msi.dll143
msi.dll116
msi.dll118
msi.dll120
msi.dll34
msi.dll166
msi.dll163
msi.dll162
msi.dll26
msi.dll32
msi.dll159
msi.dll17
msi.dll160
msi.dll125
SHELL32.dll192SHGetFolderPathW
SHELL32.dll280ShellExecuteW
ordentry_vafunction_name
10x4ebaCAQuietExec64
20x4e38CAQuietExec
30x3510CommitCAScriptCleanup
40x5046ExecSecureObjects
50x5674ExecSecureObjectsRollback
60x7128ExecServiceConfig
70x80daExecXmlConfig
80x88d6ExecXmlConfigRollback
90x941eExecXmlFile
100x9b70ExecXmlFileRollback
110x6ca4RollbackServiceConfig
120x5f42SchedSecureObjects
130x62beSchedSecureObjectsRollback
140x689cSchedServiceConfig
150x8f12SchedXmlConfig
160xa110SchedXmlFile
170x35beWixCheckRebootRequired
180x396eWixCloseApplications
190x37e0WixCloseApplicationsDeferred
200x3ddeWixCreateInternetShortcuts
210x3c24WixExitEarlyWithSuccess
220x7c8eWixFailWhenDeferred
230x4654WixQueryOsDirs
240x4a6cWixQueryOsDriverInfo
250x440aWixQueryOsInfo
260x4c34WixQueryOsWellKnownSID
270x3f5eWixRollbackInternetShortcuts
280x4072WixSchedInternetShortcuts
290x782eWixShellExec
300x7a94WixShellExecBinary
module_namewixca.dll
flags0
timestamp2009-06-19 14:08:11
version0.0
ordinal_base1
nFunctions30
nNames30
Names(30)0x22600
Functions(30)0x22588
NameOrdinals(30)0x22678

StringTable 000004E4

CompanyNameMicrosoft Corporation
FileDescriptionWiX Custom Actions
FileVersion3.0.5419.0
InternalNamewixca
LegalCopyrightCopyright (c) Microsoft Corporation.  All rights reserved.
LegalTrademarks1Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2Windows® is a registered trademark of Microsoft Corporation.
OriginalFilenamewixca.dll
ProductNameWindows Installer XML
ProductVersion3.0.5419.0

VS_FIXEDFILEINFO

FileVersion3.0.5419.0
ProductVersion3.0.5419.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0152064DLL06/19/2009 14:08:11#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK