filenamej.dll
size2266624 (0x229600)
md51a4f0c0f4fd87f820326953e22ff0e51
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1255072713
109403103
123403109
10144
12522071
1105072749
10950727295
122507271
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x4d42c5b8
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion8.0
SizeOfCode0x1dfa00
SizeOfInitializedData0x49800
SizeOfUninitializedData0
AddressOfEntryPoint0x1cd6c0
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x233000
SizeOfHeaders0x400
CheckSum0x22a2d2
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x1df8da0x1dfa00R-X CODE
.rdata0x1e10000x287540x28800R-- IDATA
.data0x20a0000xfae80xa200RW- IDATA
.pdata0x21a0000x1317c0x13200R-- IDATA
.rsrc0x22e0000x16180x1800R-- IDATA
.reloc0x2300000x23ba0x2400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x2095400x214
IMPORT0x2087ec0x64
RESOURCE0x22e0000x1618
EXCEPTION0x21a0000x1317c
SECURITY00
BASERELOC0x2300000xd58
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x1e10000x430
Delay_IAT00
CLR_Header00
typenamesizecp
TYPELIB#146121252
VERSION#17081252
MANIFEST#2861252
module_namehintordfunction_name
KERNEL32.dll89CreateFileW
KERNEL32.dll384GetModuleFileNameW
KERNEL32.dll534HeapDestroy
KERNEL32.dll530HeapAlloc
KERNEL32.dll532HeapCreate
KERNEL32.dll373GetLocalTime
KERNEL32.dll859SizeofResource
KERNEL32.dll609LockResource
KERNEL32.dll595LoadResource
KERNEL32.dll230FindResourceA
KERNEL32.dll383GetModuleFileNameA
KERNEL32.dll536HeapFree
KERNEL32.dll418GetProcAddress
KERNEL32.dll590LoadLibraryA
KERNEL32.dll87CreateFileMappingA
KERNEL32.dll251FreeLibrary
KERNEL32.dll246FormatMessageA
KERNEL32.dll559IsBadReadPtr
KERNEL32.dll562IsBadWritePtr
KERNEL32.dll200FileTimeToSystemTime
KERNEL32.dll199FileTimeToLocalFileTime
KERNEL32.dll209FindClose
KERNEL32.dll224FindNextFileW
KERNEL32.dll216FindFirstFileW
KERNEL32.dll356GetFileAttributesW
KERNEL32.dll801SetFileAttributesW
KERNEL32.dll326GetCurrentProcessId
KERNEL32.dll672QueryPerformanceFrequency
KERNEL32.dll671QueryPerformanceCounter
KERNEL32.dll860Sleep
KERNEL32.dll612MapViewOfFile
KERNEL32.dll887UnmapViewOfFile
KERNEL32.dll54CloseHandle
KERNEL32.dll371GetLastError
KERNEL32.dll134DeleteFileA
KERNEL32.dll86CreateFileA
KERNEL32.dll794SetEnvironmentVariableA
KERNEL32.dll61CompareStringW
KERNEL32.dll60CompareStringA
KERNEL32.dll540HeapReAlloc
KERNEL32.dll937WriteConsoleW
KERNEL32.dll312GetConsoleOutputCP
KERNEL32.dll927WriteConsoleA
KERNEL32.dll542HeapSize
KERNEL32.dll374GetLocaleInfoA
KERNEL32.dll733RtlUnwindEx
KERNEL32.dll385GetModuleHandleA
KERNEL32.dll188ExitProcess
KERNEL32.dll460GetSystemTimeAsFileTime
KERNEL32.dll364GetFullPathNameA
KERNEL32.dll802SetFilePointer
KERNEL32.dll155EnterCriticalSection
KERNEL32.dll589LeaveCriticalSection
KERNEL32.dll81CreateDirectoryW
KERNEL32.dll705RemoveDirectoryW
KERNEL32.dll135DeleteFileW
KERNEL32.dll365GetFullPathNameW
KERNEL32.dll795SetEnvironmentVariableW
KERNEL32.dll324GetCurrentDirectoryW
KERNEL32.dll786SetCurrentDirectoryW
KERNEL32.dll607LockFile
KERNEL32.dll885UnlockFile
KERNEL32.dll329GetCurrentThreadId
KERNEL32.dll239FlsSetValue
KERNEL32.dll275GetCommandLineA
KERNEL32.dll491GetVersionExA
KERNEL32.dll421GetProcessHeap
KERNEL32.dll868TerminateProcess
KERNEL32.dll325GetCurrentProcess
KERNEL32.dll884UnhandledExceptionFilter
KERNEL32.dll848SetUnhandledExceptionFilter
KERNEL32.dll565IsDebuggerPresent
KERNEL32.dll734RtlVirtualUnwind
KERNEL32.dll727RtlLookupFunctionEntry
KERNEL32.dll720RtlCaptureContext
KERNEL32.dll238FlsGetValue
KERNEL32.dll874TlsFree
KERNEL32.dll237FlsFree
KERNEL32.dll814SetLastError
KERNEL32.dll876TlsSetValue
KERNEL32.dll236FlsAlloc
KERNEL32.dll263GetCPInfo
KERNEL32.dll256GetACP
KERNEL32.dll405GetOEMCP
KERNEL32.dll571IsValidCodePage
KERNEL32.dll938WriteFile
KERNEL32.dll443GetStdHandle
KERNEL32.dll132DeleteCriticalSection
KERNEL32.dll549InitializeCriticalSection
KERNEL32.dll675RaiseException
KERNEL32.dll729RtlPcToFileHeader
KERNEL32.dll342GetDriveTypeA
KERNEL32.dll689ReadFile
KERNEL32.dll810SetHandleCount
KERNEL32.dll361GetFileType
KERNEL32.dll441GetStartupInfoA
KERNEL32.dll829SetStdHandle
KERNEL32.dll625MultiByteToWideChar
KERNEL32.dll922WideCharToMultiByte
KERNEL32.dll293GetConsoleCP
KERNEL32.dll310GetConsoleMode
KERNEL32.dll241FlushFileBuffers
KERNEL32.dll323GetCurrentDirectoryA
KERNEL32.dll249FreeEnvironmentStringsA
KERNEL32.dll344GetEnvironmentStrings
KERNEL32.dll250FreeEnvironmentStringsW
KERNEL32.dll346GetEnvironmentStringsW
KERNEL32.dll541HeapSetInformation
KERNEL32.dll481GetTickCount
KERNEL32.dll576LCMapStringA
KERNEL32.dll577LCMapStringW
KERNEL32.dll444GetStringTypeA
KERNEL32.dll447GetStringTypeW
KERNEL32.dll791SetEndOfFile
ADVAPI32.dll465RegCreateKeyExA
ADVAPI32.dll516RegSetValueExA
ADVAPI32.dll459RegCloseKey
ADVAPI32.dll468RegDeleteKeyA
ole32.dll12CLSIDFromString
ole32.dll369StringFromGUID2
OLEAUT32.dll29
OLEAUT32.dll162
OLEAUT32.dll5
OLEAUT32.dll7
OLEAUT32.dll149
OLEAUT32.dll4
OLEAUT32.dll15
OLEAUT32.dll16
OLEAUT32.dll23
OLEAUT32.dll24
ordentry_vafunction_name
60x79200JBreak
70x79200JClear
80x79050JDo
90x7a730JErrorText
100x786f0JErrorTextM
110x7ab20JFree
120x79610JGet
130x78300JGetM
140x7aa90JInit
150x79200JIsBusy
160x7a590JSet
170x78630JSetM
180x77e90JSM
190x77ec0JGetLocale
200x77ef0Jga
210x7a7c0JTranspose
220x7a7d0JErrorTextB
230x79700JGetB
240x7a660JSetB
250x7a860JDoR
260x77d70JGetA
270x77dd0JSetA
280x7cb90DllCanUnloadNow
290x7cd30DllGetClassObject
300x7cbb0DllRegisterServer
310x7cbf0DllUnregisterServer
module_nameJ.dll
flags0
timestamp2011-01-28 13:33:44
version0.0
ordinal_base6
nFunctions26
nNames26
Names(26)0x2095d0
Functions(26)0x209568
NameOrdinals(26)0x209638

StringTable 040904E4

CompanyNameJsoftware Inc.
FileDescriptionJ
FileVersion701
InternalNameJ
LegalCopyrightCopyright Jsoftware Inc. 2011
LegalTrademarksJ
OriginalFilenameJ
ProductNameJ
ProductVersion701
OLESelfRegister

VS_FIXEDFILEINFO

FileVersion701.0.0.0
ProductVersion701.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d02261040BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK