filenamei2pd.exe
size5043712 (0x4cf600)
md519a06334a303ff0323b4b16e1fcf676d
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections9
TimeDateStamp0x58e64c5e
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x30f
Magic0x10b
LinkerVersion2.28
SizeOfCode0x327200
SizeOfInitializedData0x4cf200
SizeOfUninitializedData0x4600
AddressOfEntryPoint0x14c0
BaseOfCode0x1000
BaseOfData0x329000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x4da000
SizeOfHeaders0x400
CheckSum0x4dd50e
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x3271c80x327200R-X CODE IDATA
.data0x3290000xacc40xae00RW- IDATA
.rdata0x3340000x7b2d40x7b400R-- IDATA
.eh_fram0x3b00000xf83800xf8400R-- IDATA
.bss0x4a90000x44800RW- UDATA
.idata0x4ae0000x279c0x2800RW- IDATA
.CRT0x4b10000x380x200RW- IDATA
.tls0x4b20000x200x200RW- IDATA
.rsrc0x4b30000x26d300x26d30RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x4ae0000x279c
RESOURCE0x4b30000x26d30
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x4b20040x18
LOAD_CONFIG00
Bound_IAT00
IAT0x4ae6840x5bc
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x8b20000x8b201c0x8ac8f00x8b102000
typenamesizecp
ICON#1568700
ICON#2676240
ICON#3169360
ICON#496400
ICON#542640
ICON#611280
GROUP_ICON#101900
VERSION#17360
MANIFEST#111670
module_namehintordfunction_name
ADVAPI32.dll1087CloseServiceHandle
ADVAPI32.dll1092ControlService
ADVAPI32.dll1128CreateServiceA
ADVAPI32.dll1218DeleteService
ADVAPI32.dll1219DeregisterEventSource
ADVAPI32.dll1511OpenSCManagerA
ADVAPI32.dll1513OpenServiceA
ADVAPI32.dll1559QueryServiceStatus
ADVAPI32.dll1650RegisterEventSourceA
ADVAPI32.dll1653RegisterServiceCtrlHandlerA
ADVAPI32.dll1662ReportEventA
ADVAPI32.dll1712SetServiceStatus
ADVAPI32.dll1719StartServiceCtrlDispatcherA
GDI32.dll34CreateCompatibleBitmap
GDI32.dll47CreateFontA
GDI32.dll76DeleteObject
GDI32.dll168GetDIBits
GDI32.dll169GetDeviceCaps
GDI32.dll207GetObjectA
GDI32.dll306SelectObject
GDI32.dll349SetTextColor
IPHLPAPI.DLL63GetAdaptersAddresses
IPHLPAPI.DLL70GetBestRoute
IPHLPAPI.DLL85GetIpAddrTable
KERNEL32.dll15AddVectoredExceptionHandler
KERNEL32.dll22AreFileApisANSI
KERNEL32.dll84CloseHandle
KERNEL32.dll120CopyFileW
KERNEL32.dll129CreateDirectoryExW
KERNEL32.dll132CreateDirectoryW
KERNEL32.dll133CreateEventA
KERNEL32.dll136CreateEventW
KERNEL32.dll148CreateFileW
KERNEL32.dll153CreateIoCompletionPort
KERNEL32.dll163CreateMutexW
KERNEL32.dll176CreateSemaphoreA
KERNEL32.dll197CreateWaitableTimerA
KERNEL32.dll215DeleteCriticalSection
KERNEL32.dll220DeleteFileW
KERNEL32.dll227DeviceIoControl
KERNEL32.dll238DuplicateHandle
KERNEL32.dll243EnterCriticalSection
KERNEL32.dll286ExitProcess
KERNEL32.dll299FileTimeToSystemTime
KERNEL32.dll308FindClose
KERNEL32.dll312FindFirstFileA
KERNEL32.dll319FindFirstFileW
KERNEL32.dll329FindNextFileA
KERNEL32.dll331FindNextFileW
KERNEL32.dll355FormatMessageA
KERNEL32.dll360FreeLibrary
KERNEL32.dll455GetCurrentDirectoryW
KERNEL32.dll456GetCurrentProcess
KERNEL32.dll457GetCurrentProcessId
KERNEL32.dll460GetCurrentThread
KERNEL32.dll461GetCurrentThreadId
KERNEL32.dll470GetDiskFreeSpaceExW
KERNEL32.dll484GetEnvironmentVariableW
KERNEL32.dll492GetFileAttributesExW
KERNEL32.dll495GetFileAttributesW
KERNEL32.dll497GetFileInformationByHandle
KERNEL32.dll503GetFileTime
KERNEL32.dll504GetFileType
KERNEL32.dll512GetFullPathNameW
KERNEL32.dll516GetHandleInformation
KERNEL32.dll519GetLastError
KERNEL32.dll535GetModuleFileNameA
KERNEL32.dll536GetModuleFileNameW
KERNEL32.dll537GetModuleHandleA
KERNEL32.dll540GetModuleHandleW
KERNEL32.dll585GetProcAddress
KERNEL32.dll586GetProcessAffinityMask
KERNEL32.dll590GetProcessHeap
KERNEL32.dll598GetProcessTimes
KERNEL32.dll612GetQueuedCompletionStatus
KERNEL32.dll616GetStartupInfoA
KERNEL32.dll618GetStdHandle
KERNEL32.dll637GetSystemTime
KERNEL32.dll638GetSystemTimeAdjustment
KERNEL32.dll639GetSystemTimeAsFileTime
KERNEL32.dll653GetThreadContext
KERNEL32.dll661GetThreadPriority
KERNEL32.dll664GetThreadTimes
KERNEL32.dll667GetTickCount
KERNEL32.dll671GetTimeZoneInformation
KERNEL32.dll681GetVersion
KERNEL32.dll694GetWindowsDirectoryW
KERNEL32.dll711GlobalMemoryStatus
KERNEL32.dll724HeapAlloc
KERNEL32.dll730HeapFree
KERNEL32.dll751InitializeCriticalSection
KERNEL32.dll752InitializeCriticalSectionAndSpinCount
KERNEL32.dll779IsDBCSLeadByteEx
KERNEL32.dll780IsDebuggerPresent
KERNEL32.dll837LeaveCriticalSection
KERNEL32.dll840LoadLibraryA
KERNEL32.dll853LocalFree
KERNEL32.dll878MoveFileExW
KERNEL32.dll885MultiByteToWideChar
KERNEL32.dll919OutputDebugStringA
KERNEL32.dll924PostQueuedCompletionStatus
KERNEL32.dll950QueryPerformanceCounter
KERNEL32.dll951QueryPerformanceFrequency
KERNEL32.dll959QueueUserAPC
KERNEL32.dll961RaiseException
KERNEL32.dll994ReleaseMutex
KERNEL32.dll998ReleaseSemaphore
KERNEL32.dll1003RemoveDirectoryW
KERNEL32.dll1008RemoveVectoredExceptionHandler
KERNEL32.dll1015ResetEvent
KERNEL32.dll1018ResumeThread
KERNEL32.dll1043SetConsoleCP
KERNEL32.dll1066SetConsoleOutputCP
KERNEL32.dll1077SetCurrentDirectoryW
KERNEL32.dll1083SetEndOfFile
KERNEL32.dll1089SetEvent
KERNEL32.dll1096SetFileAttributesW
KERNEL32.dll1102SetFilePointerEx
KERNEL32.dll1105SetFileTime
KERNEL32.dll1114SetLastError
KERNEL32.dll1125SetProcessAffinityMask
KERNEL32.dll1135SetStdHandle
KERNEL32.dll1139SetSystemTime
KERNEL32.dll1145SetThreadContext
KERNEL32.dll1147SetThreadExecutionState
KERNEL32.dll1153SetThreadPriority
KERNEL32.dll1163SetUnhandledExceptionFilter
KERNEL32.dll1170SetWaitableTimer
KERNEL32.dll1176Sleep
KERNEL32.dll1179SleepEx
KERNEL32.dll1184SuspendThread
KERNEL32.dll1187SystemTimeToFileTime
KERNEL32.dll1190TerminateProcess
KERNEL32.dll1191TerminateThread
KERNEL32.dll1195TlsAlloc
KERNEL32.dll1196TlsFree
KERNEL32.dll1197TlsGetValue
KERNEL32.dll1198TlsSetValue
KERNEL32.dll1205TryEnterCriticalSection
KERNEL32.dll1210UnhandledExceptionFilter
KERNEL32.dll1228VerSetConditionMask
KERNEL32.dll1231VerifyVersionInfoA
KERNEL32.dll1243VirtualProtect
KERNEL32.dll1246VirtualQuery
KERNEL32.dll1253WaitForMultipleObjects
KERNEL32.dll1255WaitForSingleObject
KERNEL32.dll1279WideCharToMultiByte
KERNEL32.dll1299WriteFile
msvcrt.dll46__argc
msvcrt.dll47__argv
msvcrt.dll56__dllonexit
msvcrt.dll57__doserrno
msvcrt.dll59__getmainargs
msvcrt.dll60__initenv
msvcrt.dll69__lconv_init
msvcrt.dll70__mb_cur_max
msvcrt.dll101__pioinfo
msvcrt.dll105__set_app_type
msvcrt.dll108__setusermatherr
msvcrt.dll123_acmdln
msvcrt.dll145_amsg_exit
msvcrt.dll158_beginthreadex
msvcrt.dll162_cexit
msvcrt.dll219_endthreadex
msvcrt.dll220_environ
msvcrt.dll223_errno
msvcrt.dll238_exit
msvcrt.dll247_fdopen
msvcrt.dll253_filelengthi64
msvcrt.dll255_fileno
msvcrt.dll254_fileno
msvcrt.dll271_fmode
msvcrt.dll286_fstat64
msvcrt.dll309_getch
msvcrt.dll341_initterm
msvcrt.dll345_iob
msvcrt.dll449_lock
msvcrt.dll458_lseeki64
msvcrt.dll605_memicmp
msvcrt.dll612_onexit
msvcrt.dll649_read
msvcrt.dll675_setjmp3
msvcrt.dll678_setmode
msvcrt.dll681_snprintf
msvcrt.dll692_snwprintf
msvcrt.dll717_stat
msvcrt.dll726_strdup
msvcrt.dll727_strdup
msvcrt.dll733_stricmp
msvcrt.dll743_strnicmp
msvcrt.dll801_ultoa
msvcrt.dll813_unlock
msvcrt.dll844_vsnprintf
msvcrt.dll948_wfopen
msvcrt.dll981_write
msvcrt.dll980_write
msvcrt.dll1026abort
msvcrt.dll1066atoi
msvcrt.dll1070calloc
msvcrt.dll1080div
msvcrt.dll1081exit
msvcrt.dll1084fclose
msvcrt.dll1085feof
msvcrt.dll1086ferror
msvcrt.dll1087fflush
msvcrt.dll1089fgetpos
msvcrt.dll1090fgets
msvcrt.dll1095fopen
msvcrt.dll1097fprintf
msvcrt.dll1099fputc
msvcrt.dll1100fputs
msvcrt.dll1103fread
msvcrt.dll1104free
msvcrt.dll1112fseek
msvcrt.dll1113fsetpos
msvcrt.dll1108ftell
msvcrt.dll1114fwprintf
msvcrt.dll1116fwrite
msvcrt.dll1119getc
msvcrt.dll1121getenv
msvcrt.dll1124gmtime
msvcrt.dll1126getwc
msvcrt.dll1129isalnum
msvcrt.dll1135islower
msvcrt.dll1137ispunct
msvcrt.dll1138isspace
msvcrt.dll1139isupper
msvcrt.dll1145iswctype
msvcrt.dll1154isxdigit
msvcrt.dll1158localeconv
msvcrt.dll1142localtime
msvcrt.dll1162longjmp
msvcrt.dll1163malloc
msvcrt.dll1169memchr
msvcrt.dll1170memcmp
msvcrt.dll1171memcpy
msvcrt.dll1172memmove
msvcrt.dll1173memset
msvcrt.dll1177perror
msvcrt.dll1179printf
msvcrt.dll1181putc
msvcrt.dll1184putwc
msvcrt.dll1186qsort
msvcrt.dll1188raise
msvcrt.dll1189rand
msvcrt.dll1190realloc
msvcrt.dll1197setlocale
msvcrt.dll1198setvbuf
msvcrt.dll1199signal
msvcrt.dll1202sprintf
msvcrt.dll1204srand
msvcrt.dll1205sscanf
msvcrt.dll1207strcat
msvcrt.dll1209strchr
msvcrt.dll1210strcmp
msvcrt.dll1211strcoll
msvcrt.dll1212strcpy
msvcrt.dll1215strerror
msvcrt.dll1216strftime
msvcrt.dll1217strlen
msvcrt.dll1220strncmp
msvcrt.dll1221strncpy
msvcrt.dll1224strrchr
msvcrt.dll1225strspn
msvcrt.dll1226strstr
msvcrt.dll1230strtol
msvcrt.dll1231strtoul
msvcrt.dll1232strxfrm
msvcrt.dll1240time
msvcrt.dll1247tolower
msvcrt.dll1249towlower
msvcrt.dll1250towupper
msvcrt.dll1251ungetc
msvcrt.dll1252ungetwc
msvcrt.dll1253vfprintf
msvcrt.dll1270wcscoll
msvcrt.dll1271wcscpy
msvcrt.dll1274wcsftime
msvcrt.dll1275wcslen
msvcrt.dll1286wcsstr
msvcrt.dll1294wcsxfrm
SHELL32.dll195SHGetFolderPathA
SHELL32.dll303ShellExecuteA
SHELL32.dll317Shell_NotifyIconA
USER32.dll15BeginPaint
USER32.dll113CreatePopupMenu
USER32.dll115CreateWindowExA
USER32.dll163DefWindowProcA
USER32.dll174DestroyMenu
USER32.dll184DispatchMessageA
USER32.dll215DrawTextA
USER32.dll237EndPaint
USER32.dll266FindWindowA
USER32.dll297GetClientRect
USER32.dll311GetCursorPos
USER32.dll312GetDC
USER32.dll371GetMessageA
USER32.dll407GetProcessWindowStation
USER32.dll443GetUserObjectInformationA
USER32.dll444GetUserObjectInformationW
USER32.dll493InsertMenuA
USER32.dll500InvalidateRect
USER32.dll544KillTimer
USER32.dll549LoadCursorA
USER32.dll553LoadIconA
USER32.dll589MessageBoxA
USER32.dll596MessageBoxW
USER32.dll630PostMessageA
USER32.dll632PostQuitMessage
USER32.dll658RegisterClassExA
USER32.dll687ReleaseDC
USER32.dll705SendMessageA
USER32.dll736SetForegroundWindow
USER32.dll749SetMenuDefaultItem
USER32.dll782SetTimer
USER32.dll821ShowWindow
USER32.dll846TrackPopupMenu
USER32.dll852TranslateMessage
USER32.dll861UnregisterClassA
WS2_32.dll15WSAAddressToStringA
WS2_32.dll55WSAIoctl
WS2_32.dll69WSARecv
WS2_32.dll71WSARecvFrom
WS2_32.dll74WSASend
WS2_32.dll77WSASendTo
WS2_32.dll84WSASocketW
WS2_32.dll86WSAStringToAddressA
WS2_32.dll137freeaddrinfo
WS2_32.dll138getaddrinfo
WS2_32.dll142getnameinfo
WSOCK32.DLL1AcceptEx
WSOCK32.DLL4GetAcceptExSockaddrs
WSOCK32.DLL26WSACleanup
WSOCK32.DLL27WSAGetLastError
WSOCK32.DLL31WSASetLastError
WSOCK32.DLL32WSAStartup
WSOCK32.DLL35__WSAFDIsSet
WSOCK32.DLL36accept
WSOCK32.DLL37bind
WSOCK32.DLL38closesocket
WSOCK32.DLL39connect
WSOCK32.DLL45getpeername
WSOCK32.DLL50getsockname
WSOCK32.DLL51getsockopt
WSOCK32.DLL52htonl
WSOCK32.DLL53htons
WSOCK32.DLL54inet_addr
WSOCK32.DLL57ioctlsocket
WSOCK32.DLL58listen
WSOCK32.DLL59ntohl
WSOCK32.DLL60ntohs
WSOCK32.DLL62recv
WSOCK32.DLL67select
WSOCK32.DLL68send
WSOCK32.DLL69sendto
WSOCK32.DLL71setsockopt
WSOCK32.DLL72shutdown
WSOCK32.DLL73socket

StringTable 040904b0

CompanyNamePurple I2P
FileDescriptionC++ I2P daemon
FileVersion2.13.0
InternalNamePurple
LegalCopyrightCopyright (C) 2013-2015, The PurpleI2P Project
OriginalFilenamei2pd
ProductNamePurple I2P
ProductVersion0.9.29

VS_FIXEDFILEINFO

FileVersion2.13.0.0
ProductVersion0.9.29.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
4a8a2056870PNG(256 x 256)#
4b6846101818BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 5043712 bytes (4926 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x4ac8f0