filename_et_host_update_x64_1465291894.zip
size133651 (0x20a13)
md52877c641ecbe31ae85d4128451726b98
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections0xb
TimeDateStamp0x1bccd50
PointerToSymbolTable0x20a00
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2f
Magic0x20b
LinkerVersion2.25
SizeOfCode0x9e00
SizeOfInitializedData0x20400
SizeOfUninitializedData0x1800
AddressOfEntryPoint0x14d0
BaseOfCode0x1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x2a000
SizeOfHeaders0x400
CheckSum0x2237b
Subsystem2
DllCharacteristics0x540
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x9c980x9e00R-X CODE IDATA
.data0xb0000xf00x200RW- IDATA
.rdata0xc0000x19900x1a00R-- IDATA
.pdata0xe0000x5c40x600R-- IDATA
.xdata0xf0000x5c80x600R-- IDATA
.bss0x100000x17000RW- UDATA
.idata0x120000x10a40x1200RW- IDATA
.CRT0x140000x680x200RW- IDATA
.tls0x150000x680x200RW- IDATA
.rsrc0x160000x127000x12800RW- IDATA
/40x290000x100x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x120000x10a4
RESOURCE0x160000x12700
EXCEPTION0xe0000x5c4
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x150200x28
LOAD_CONFIG00
Bound_IAT00
IAT0x1244c0x398
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x4150000x4150600x41089c0x41404000
typenamesizecp
RT_MANIFEST#28250
ICON#122160
ICON#213840
ICON#3544300
ICON#496400
ICON#542640
ICON#611280
GROUP_ICONVLC_ICON900
VERSION#19320
module_namehintordfunction_name
libvlc.dlllibvlc_add_intf
libvlc.dll190libvlc_new
libvlc.dll191libvlc_playlist_play
libvlc.dll193libvlc_release
libvlc.dll195libvlc_set_app_id
libvlc.dll199libvlc_set_user_agent
libvlc.dll270libvlc_wait
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll622RegQueryValueExW
KERNEL32.dll85CloseHandle
KERNEL32.dll216DeleteCriticalSection
KERNEL32.dll248EnterCriticalSection
KERNEL32.dll366FreeLibrary
KERNEL32.dll404GetCommandLineW
KERNEL32.dll461GetCurrentProcess
KERNEL32.dll462GetCurrentProcessId
KERNEL32.dll466GetCurrentThreadId
KERNEL32.dll528GetLastError
KERNEL32.dll547GetModuleFileNameW
KERNEL32.dll551GetModuleHandleW
KERNEL32.dll598GetProcAddress
KERNEL32.dll627GetStartupInfoA
KERNEL32.dll648GetSystemTime
KERNEL32.dll650GetSystemTimeAsFileTime
KERNEL32.dll677GetTickCount
KERNEL32.dll695GetVersionExW
KERNEL32.dll745HeapSetInformation
KERNEL32.dll761InitializeCriticalSection
KERNEL32.dll776IsBadReadPtr
KERNEL32.dll784IsDBCSLeadByteEx
KERNEL32.dll785IsDebuggerPresent
KERNEL32.dll843LeaveCriticalSection
KERNEL32.dll849LoadLibraryW
KERNEL32.dll859LocalFree
KERNEL32.dll890MultiByteToWideChar
KERNEL32.dll918OpenProcess
KERNEL32.dll955QueryPerformanceCounter
KERNEL32.dll1025RtlAddFunctionTable
KERNEL32.dll1026RtlCaptureContext
KERNEL32.dll1033RtlLookupFunctionEntry
KERNEL32.dll1040RtlVirtualUnwind
KERNEL32.dll1106SetErrorMode
KERNEL32.dll1183SetUnhandledExceptionFilter
KERNEL32.dll1196Sleep
KERNEL32.dll1210TerminateProcess
KERNEL32.dll1217TlsGetValue
KERNEL32.dll1230UnhandledExceptionFilter
KERNEL32.dll1260VirtualProtect
KERNEL32.dll1262VirtualQuery
KERNEL32.dll1294WideCharToMultiByte
msvcrt.dll55__C_specific_handler
msvcrt.dll63___lc_codepage_func
msvcrt.dll78__dllonexit
msvcrt.dll81__getmainargs
msvcrt.dll82__initenv
msvcrt.dll83__iob_func
msvcrt.dll90__lconv_init
msvcrt.dll91__mb_cur_max
msvcrt.dll96__set_app_type
msvcrt.dll98__setusermatherr
msvcrt.dll113_acmdln
msvcrt.dll120_amsg_exit
msvcrt.dll138_cexit
msvcrt.dll186_errno
msvcrt.dll218_fmode
msvcrt.dll282_initterm
msvcrt.dll384_lock
msvcrt.dll549_onexit
msvcrt.dll598_setmode
msvcrt.dll611_snwprintf
msvcrt.dll708_unlock
msvcrt.dll825_wfopen
msvcrt.dll854_wremove
msvcrt.dll855_wrename
msvcrt.dll895abort
msvcrt.dll912calloc
msvcrt.dll925exit
msvcrt.dll929fclose
msvcrt.dll932fflush
msvcrt.dll944fprintf
msvcrt.dll946fputc
msvcrt.dll948fputwc
msvcrt.dll951free
msvcrt.dll962fwrite
msvcrt.dll967getenv
msvcrt.dll1002localeconv
msvcrt.dll1008malloc
msvcrt.dll1016memcpy
msvcrt.dll1046signal
msvcrt.dll1065strerror
msvcrt.dll1067strlen
msvcrt.dll1070strncmp
msvcrt.dll1102vfprintf
msvcrt.dll1112wcscat
msvcrt.dll1115wcscmp
msvcrt.dll1117wcscpy
msvcrt.dll1121wcslen
msvcrt.dll1124wcsncmp
msvcrt.dll1231_putenv
PSAPI.DLL4EnumProcessModules
SHELL32.dll10CommandLineToArgvW
SHELL32.dll211SHGetFolderPathW
USER32.dll496MessageBoxW
WININET.dll54FtpPutFileW
WININET.dll105InternetCloseHandle
WININET.dll112InternetConnectW
WININET.dll149InternetOpenW

StringTable 040904E4

CompanyNameVideoLAN
ProductNameVLC media player
ProductVersion2,2,2,0
InternalNamevlc
OriginalFilenamevlc.exe
FileVersion2.2.2
FileDescriptionVLC media player
LegalCopyrightCopyright © 1996-2016 VideoLAN and VLC Authors
LegalTrademarksVLC media player, VideoLAN and x264 are registered trademarks from VideoLAN

VS_FIXEDFILEINFO

FileVersion2.2.2.0
ProductVersion2.2.2.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
013359EXE12/04/1970 09:22:24#
15c115HTM#
f3a054430PNG(256 x 256)#
1c83e16853BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 133651 bytes (131 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x1089c