Audition_Set-Up.unp.exe - Adobe Installer

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	Audition_Set-Up.unp.exe
size	5206016 (0x4f7000)
md5	24b048b531c842b02c77ff151e595194

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x140

Rich Header

lib id	version	times used
241	40116	21
243	40116	195
242	40116	32
261	23013	4
199	41118	1
259	23907	25
260	23907	39
261	23907	136
206	65501	9
203	65501	3
260	23506	1
261	23506	8
208	65501	2
1	0	515
261	23918	24
265	23918	204
255	23918	1
151	0	1
258	23918	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x5d7bd628
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	14.0
SizeOfCode	0x203600
SizeOfInitializedData	0x2fb200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x19a782
BaseOfCode	0x1000
BaseOfData	0x205000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x503000
SizeOfHeaders	0x400
CheckSum	0x4fc60b
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x2034c6	0x203600	R-X CODE
.rdata	0x205000	0x77d0a	0x77e00	R-- IDATA
.data	0x27d000	0x10034	0x8600	RW- IDATA
.gfids	0x28e000	0xbf0	0xc00	R-- IDATA
.tls	0x28f000	9	0x200	RW- IDATA
.rsrc	0x290000	0x256a21	0x256c00	R-- IDATA
.reloc	0x4e7000	0x1b7d0	0x1b800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x27b900	0x28
RESOURCE	0x290000	0x256a21
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x4e7000	0x1b7d0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x254b40	0x18
LOAD_CONFIG	0x211188	0x40
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0x279f98	0x220
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x1307800	0x9307800	0x8cce7800	0x98987000	0	0x300000

show previews

type	name	size
CSS	#111	718997
CSS	#122	28000
DICTIONARY	#151	45372
DICTIONARY	#152	51918
DICTIONARY	#153	50216
DICTIONARY	#154	35628
DICTIONARY	#155	50068
DICTIONARY	#156	46894
DICTIONARY	#157	35180
DICTIONARY	#158	48216
DICTIONARY	#159	30490
DICTIONARY	#160	30764
DICTIONARY	#161	48034
DICTIONARY	#162	45414
DICTIONARY	#163	46976
DICTIONARY	#164	47940
DICTIONARY	#165	47086
DICTIONARY	#166	46368
DICTIONARY	#167	46568
DICTIONARY	#168	46308
DICTIONARY	#169	46608
DICTIONARY	#170	50068
DICTIONARY	#171	50240
GIF	#143	19226
GIF	#144	58914
JS	#112	86600
JS	#113	93637
JS	#114	167986
JS	#115	108456
JS	#118	14724
JS	#119	3706
JS	#123	7105
JS	#124	19236
JS	#125	16712
JS	#126	4262
PNG	#102	16009
PNG	#103	2449
PNG	#104	4453
PNG	#131	550
PNG	#132	1068
PNG	#133	295
PNG	#134	531
PNG	#135	466
PNG	#136	1021
PNG	#137	167
PNG	#138	252
PNG	#139	317
PNG	#140	554
PNG	#141	224
PNG	#142	391
PNG	#145	2332
PNG	#146	5114
PNG	#147	356
PNG	#148	585
PNG	#203	1609
PNG	#204	3291
PNG	#210	234
PNG	#211	343
PNG	#212	570
PNG	#213	1093
PNG	#214	345
PNG	#215	637
XML	#105	314
ICON	#1	3564
ICON	#2	67624
ICON	#3	9640
ICON	#4	4264
ICON	#5	2440
ICON	#6	1128
GROUP_ICON	#101	90
VERSION	#1	772
HTML	#121	17241
MANIFEST	#1	1821

module_name	hint	ord	function_name
KERNEL32.DLL			HeapFree
KERNEL32.DLL			HeapAlloc
KERNEL32.DLL			GetProcessHeap
KERNEL32.DLL			MultiByteToWideChar
KERNEL32.DLL			WideCharToMultiByte
KERNEL32.DLL			GetCurrentProcess
KERNEL32.DLL			GetTempPathW
KERNEL32.DLL			CreateFileW
KERNEL32.DLL			GetVersionExW
KERNEL32.DLL			GetComputerNameExW
KERNEL32.DLL			FileTimeToSystemTime
KERNEL32.DLL			CloseHandle
KERNEL32.DLL			RaiseException
KERNEL32.DLL			LoadLibraryW
KERNEL32.DLL			GetProcAddress
KERNEL32.DLL			LocalFree
KERNEL32.DLL			CreateProcessW
KERNEL32.DLL			GetModuleHandleW
KERNEL32.DLL			FreeLibrary
KERNEL32.DLL			FindFirstFileW
KERNEL32.DLL			FindNextFileW
KERNEL32.DLL			TerminateProcess
KERNEL32.DLL			RemoveDirectoryW
KERNEL32.DLL			GetModuleFileNameW
KERNEL32.DLL			FindClose
KERNEL32.DLL			WaitForSingleObject
KERNEL32.DLL			OpenProcess
KERNEL32.DLL			SetFileAttributesW
KERNEL32.DLL			CreateToolhelp32Snapshot
KERNEL32.DLL			Sleep
KERNEL32.DLL			GetLastError
KERNEL32.DLL			Process32NextW
KERNEL32.DLL			DeleteFileW
KERNEL32.DLL			Process32FirstW
KERNEL32.DLL			CopyFileW
KERNEL32.DLL			GetExitCodeProcess
KERNEL32.DLL			InitializeCriticalSectionEx
KERNEL32.DLL			DecodePointer
KERNEL32.DLL			DeleteCriticalSection
KERNEL32.DLL			GetCurrentProcessId
KERNEL32.DLL			WriteProcessMemory
KERNEL32.DLL			ResumeThread
KERNEL32.DLL			DuplicateHandle
KERNEL32.DLL			VirtualProtectEx
KERNEL32.DLL			GetThreadContext
KERNEL32.DLL			ExitProcess
KERNEL32.DLL			FlushInstructionCache
KERNEL32.DLL			SetThreadContext
KERNEL32.DLL			SizeofResource
KERNEL32.DLL			SetLastError
KERNEL32.DLL			EnterCriticalSection
KERNEL32.DLL			LeaveCriticalSection
KERNEL32.DLL			GetCurrentThreadId
KERNEL32.DLL			LockResource
KERNEL32.DLL			GlobalAlloc
KERNEL32.DLL			LoadResource
KERNEL32.DLL			FindResourceW
KERNEL32.DLL			GlobalLock
KERNEL32.DLL			GlobalUnlock
KERNEL32.DLL			lstrcmpW
KERNEL32.DLL			MulDiv
KERNEL32.DLL			GetDriveTypeW
KERNEL32.DLL			SetDllDirectoryW
KERNEL32.DLL			GetSystemTime
KERNEL32.DLL			GetStdHandle
KERNEL32.DLL			WriteFile
KERNEL32.DLL			GetSystemDirectoryW
KERNEL32.DLL			FreeConsole
KERNEL32.DLL			CreateMutexW
KERNEL32.DLL			ReleaseMutex
KERNEL32.DLL			CreateThread
KERNEL32.DLL			GetFileAttributesW
KERNEL32.DLL			SetEndOfFile
KERNEL32.DLL			SetFilePointerEx
KERNEL32.DLL			InitializeCriticalSection
KERNEL32.DLL			GetFileSizeEx
KERNEL32.DLL			ReadFile
KERNEL32.DLL			TerminateThread
KERNEL32.DLL			GlobalFree
KERNEL32.DLL			GetSystemTimeAsFileTime
KERNEL32.DLL			LocalAlloc
KERNEL32.DLL			CreateEventW
KERNEL32.DLL			VerSetConditionMask
KERNEL32.DLL			VerifyVersionInfoW
KERNEL32.DLL			GetFullPathNameW
KERNEL32.DLL			MoveFileExW
KERNEL32.DLL			GetFileSize
KERNEL32.DLL			FlushFileBuffers
KERNEL32.DLL			FormatMessageW
KERNEL32.DLL			HeapSize
KERNEL32.DLL			SetEvent
KERNEL32.DLL			HeapReAlloc
KERNEL32.DLL			HeapDestroy
KERNEL32.DLL			SetFilePointer
KERNEL32.DLL			GetUserDefaultLangID
KERNEL32.DLL			GetUserDefaultUILanguage
KERNEL32.DLL			ProcessIdToSessionId
KERNEL32.DLL			FindResourceExW
KERNEL32.DLL			ResetEvent
KERNEL32.DLL			lstrcpyW
KERNEL32.DLL			GetThreadTimes
KERNEL32.DLL			lstrcmpiW
KERNEL32.DLL			WaitForMultipleObjects
KERNEL32.DLL			SetNamedPipeHandleState
KERNEL32.DLL			CreateNamedPipeW
KERNEL32.DLL			ConnectNamedPipe
KERNEL32.DLL			GetPhysicallyInstalledSystemMemory
KERNEL32.DLL			GetLogicalDriveStringsW
KERNEL32.DLL			GetDiskFreeSpaceExW
KERNEL32.DLL			ReleaseSemaphore
KERNEL32.DLL			OpenSemaphoreW
KERNEL32.DLL			CreateSemaphoreW
KERNEL32.DLL			CreateDirectoryW
KERNEL32.DLL			lstrlenW
KERNEL32.DLL			SetFileTime
KERNEL32.DLL			LocalFileTimeToFileTime
KERNEL32.DLL			DosDateTimeToFileTime
KERNEL32.DLL			GetFileTime
KERNEL32.DLL			GetUserDefaultLCID
KERNEL32.DLL			LoadLibraryA
KERNEL32.DLL			LCMapStringW
KERNEL32.DLL			GetLocalTime
KERNEL32.DLL			GetTimeFormatW
KERNEL32.DLL			SystemTimeToFileTime
KERNEL32.DLL			GetDateFormatW
KERNEL32.DLL			OpenMutexW
KERNEL32.DLL			GetTimeZoneInformation
KERNEL32.DLL			GetFileAttributesExW
KERNEL32.DLL			CreateSymbolicLinkW
KERNEL32.DLL			AreFileApisANSI
KERNEL32.DLL			HeapCreate
KERNEL32.DLL			GetDiskFreeSpaceW
KERNEL32.DLL			OutputDebugStringA
KERNEL32.DLL			LockFile
KERNEL32.DLL			GetFullPathNameA
KERNEL32.DLL			UnlockFileEx
KERNEL32.DLL			UnmapViewOfFile
KERNEL32.DLL			HeapValidate
KERNEL32.DLL			GetTempPathA
KERNEL32.DLL			GetDiskFreeSpaceA
KERNEL32.DLL			GetFileAttributesA
KERNEL32.DLL			OutputDebugStringW
KERNEL32.DLL			CreateFileA
KERNEL32.DLL			DeleteFileA
KERNEL32.DLL			GetSystemInfo
KERNEL32.DLL			HeapCompact
KERNEL32.DLL			UnlockFile
KERNEL32.DLL			CreateFileMappingA
KERNEL32.DLL			LockFileEx
KERNEL32.DLL			FormatMessageA
KERNEL32.DLL			CreateFileMappingW
KERNEL32.DLL			MapViewOfFile
KERNEL32.DLL			QueryPerformanceCounter
KERNEL32.DLL			GetTickCount
KERNEL32.DLL			TryEnterCriticalSection
KERNEL32.DLL			QueryPerformanceFrequency
KERNEL32.DLL			GetCurrentThread
KERNEL32.DLL			VirtualProtect
KERNEL32.DLL			VirtualQuery
KERNEL32.DLL			LoadLibraryExA
KERNEL32.DLL			EncodePointer
KERNEL32.DLL			GetStringTypeW
KERNEL32.DLL			WaitForSingleObjectEx
KERNEL32.DLL			InitializeCriticalSectionAndSpinCount
KERNEL32.DLL			TlsAlloc
KERNEL32.DLL			TlsGetValue
KERNEL32.DLL			TlsSetValue
KERNEL32.DLL			TlsFree
KERNEL32.DLL			GetCPInfo
KERNEL32.DLL			CompareStringW
KERNEL32.DLL			GetLocaleInfoW
KERNEL32.DLL			UnhandledExceptionFilter
KERNEL32.DLL			SetUnhandledExceptionFilter
KERNEL32.DLL			IsProcessorFeaturePresent
KERNEL32.DLL			InitializeSListHead
KERNEL32.DLL			IsDebuggerPresent
KERNEL32.DLL			GetStartupInfoW
KERNEL32.DLL			InterlockedPopEntrySList
KERNEL32.DLL			InterlockedPushEntrySList
KERNEL32.DLL			VirtualAlloc
KERNEL32.DLL			VirtualFree
KERNEL32.DLL			CreateTimerQueue
KERNEL32.DLL			SignalObjectAndWait
KERNEL32.DLL			SwitchToThread
KERNEL32.DLL			SetThreadPriority
KERNEL32.DLL			GetThreadPriority
KERNEL32.DLL			GetLogicalProcessorInformation
KERNEL32.DLL			CreateTimerQueueTimer
KERNEL32.DLL			ChangeTimerQueueTimer
KERNEL32.DLL			DeleteTimerQueueTimer
KERNEL32.DLL			GetNumaHighestNodeNumber
KERNEL32.DLL			GetProcessAffinityMask
KERNEL32.DLL			SetThreadAffinityMask
KERNEL32.DLL			RegisterWaitForSingleObject
KERNEL32.DLL			UnregisterWait
KERNEL32.DLL			FreeLibraryAndExitThread
KERNEL32.DLL			GetModuleHandleA
KERNEL32.DLL			LoadLibraryExW
KERNEL32.DLL			InterlockedFlushSList
KERNEL32.DLL			QueryDepthSList
KERNEL32.DLL			UnregisterWaitEx
KERNEL32.DLL			RtlUnwind
KERNEL32.DLL			SetStdHandle
KERNEL32.DLL			GetFileType
KERNEL32.DLL			GetModuleHandleExW
KERNEL32.DLL			GetACP
KERNEL32.DLL			IsValidLocale
KERNEL32.DLL			EnumSystemLocalesW
KERNEL32.DLL			GetConsoleCP
KERNEL32.DLL			GetConsoleMode
KERNEL32.DLL			WriteConsoleW
KERNEL32.DLL			CreateProcessA
KERNEL32.DLL			ReadConsoleW
KERNEL32.DLL			FindFirstFileExW
KERNEL32.DLL			IsValidCodePage
KERNEL32.DLL			GetOEMCP
KERNEL32.DLL			GetCommandLineA
KERNEL32.DLL			GetCommandLineW
KERNEL32.DLL			GetEnvironmentStringsW
KERNEL32.DLL			FreeEnvironmentStringsW
KERNEL32.DLL			SetEnvironmentVariableA

StringTable 040904b0

CompanyName	Adobe Inc.
FileDescription	Adobe Installer
FileVersion	5.0.0.345
InternalName	Adobe Installer
LegalCopyright	© 2015-2019 Adobe. All rights reserved.
OriginalFilename	Adobe Installer
ProductName	Adobe Installer
ProductVersion	5.0.0.345

VS_FIXEDFILEINFO

FileVersion	5.0.0.345
ProductVersion	5.0.0.345
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
4231bc	2412	GIF	(64 x 64)	#
427cd8	19263	GIF	(128 x 128)	#
44c568	584087	HTM		#
4b5bc0	16009	PNG	(44 x 42)	#
4b9a4c	2449	PNG	(88 x 84)	#
4ba3e0	4453	PNG	(176 x 168)	#
4bb548	550	PNG	(29 x 22)	#
4bb770	1068	PNG	(58 x 44)	#
4bbb9c	295	PNG	(12 x 12)	#
4bbcc4	531	PNG	(24 x 24)	#
4bbed8	466	PNG	(16 x 16)	#
4bc0ac	1021	PNG	(32 x 32)	#
4bc4ac	167	PNG	(12 x 12)	#
4bc554	252	PNG	(24 x 24)	#
4bc650	317	PNG	(12 x 12)	#
4bc790	554	PNG	(24 x 24)	#
4bc9bc	224	PNG	(12 x 12)	#
4bca9c	391	PNG	(24 x 24)	#
4bcc24	2332	PNG	(64 x 64)	#
4bd540	5114	PNG	(128 x 128)	#
4be93c	356	PNG	(12 x 12)	#
4beaa0	585	PNG	(24 x 24)	#
4becec	1609	PNG	(48 x 48)	#
4bf338	3291	PNG	(96 x 96)	#
4c0014	234	PNG	(16 x 16)	#
4c0100	343	PNG	(32 x 32)	#
4c0258	570	PNG	(16 x 16)	#
4c0494	1093	PNG	(32 x 32)	#
4c08dc	345	PNG	(21 x 21)	#
4c0a38	637	PNG	(41 x 41)	#
4c0df4	3564	PNG	(256 x 256)	#
4daeff	114945	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x8c8e7800

Audition_Set-Up.unp.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904b0

VS_FIXEDFILEINFO

Audition_Set-Up.unp.exe
-