filenameCloudStats.dll
size129536 (0x1fa00)
md537f56db1194dde0dc2814131e79c1ff3
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
152201151
158303193
1703031913
156303194
1473072915
10339
1713031924
155303191
154303191
157303191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4fc81ad5
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion10.0
SizeOfCode0x9e00
SizeOfInitializedData0x15800
SizeOfUninitializedData0
AddressOfEntryPoint0x8bc6
BaseOfCode0x1000
BaseOfData0xb000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x22000
SizeOfHeaders0x400
CheckSum0x28852
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x9dd70x9e00R-X CODE
.rdata0xb0000x4b0c0x4c00R-- IDATA
.data0x100000x9f00x400RW- IDATA
.rsrc0x110000xe6040xe800R-- IDATA
.reloc0x200000x1eb80x2000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xfac00x4c
IMPORT0xefa40xc8
RESOURCE0x110000xe604
EXCEPTION00
SECURITY00
BASERELOC0x200000x1674
DEBUG0xb5600x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0xcb400x40
Bound_IAT00
IAT0xb0000x4ec
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#101557201252
DIALOG#2015161252
DIALOG#2022781252
STRING#93341252
STRING#3858981252
VERSION#18521252
MANIFEST#26071252
idlangstring
1281033CloudStats Analysis
1291033Version %u.%u.%u.%u
1301033Default CloudStats Analysis
1311033CloudStats Analysis - %s
1401033Invalid Port Number
1411033Valid port numbers are between 1 and 65535.
617141033Values must be between %1 and %2.
module_namehintordfunction_name
VERSION.dll5GetFileVersionInfoSizeW
VERSION.dll6GetFileVersionInfoW
VERSION.dll14VerQueryValueW
mfc100u.dll6711
mfc100u.dll902
mfc100u.dll12951
mfc100u.dll4290
mfc100u.dll1450
mfc100u.dll1312
mfc100u.dll7357
mfc100u.dll7618
mfc100u.dll296
mfc100u.dll4805
mfc100u.dll9525
mfc100u.dll2062
mfc100u.dll2064
mfc100u.dll2068
mfc100u.dll6869
mfc100u.dll7176
mfc100u.dll1292
mfc100u.dll890
mfc100u.dll6140
mfc100u.dll8346
mfc100u.dll9328
mfc100u.dll5118
mfc100u.dll11845
mfc100u.dll11209
mfc100u.dll11240
mfc100u.dll9498
mfc100u.dll7391
mfc100u.dll4086
mfc100u.dll11236
mfc100u.dll11228
mfc100u.dll5261
mfc100u.dll3416
mfc100u.dll13568
mfc100u.dll13571
mfc100u.dll13569
mfc100u.dll13572
mfc100u.dll13567
mfc100u.dll13570
mfc100u.dll7179
mfc100u.dll11469
mfc100u.dll13267
mfc100u.dll10976
mfc100u.dll14162
mfc100u.dll1739
mfc100u.dll7126
mfc100u.dll11864
mfc100u.dll3625
mfc100u.dll3684
mfc100u.dll8530
mfc100u.dll13387
mfc100u.dll7108
mfc100u.dll13381
mfc100u.dll11477
mfc100u.dll11476
mfc100u.dll2164
mfc100u.dll4744
mfc100u.dll13854
mfc100u.dll11784
mfc100u.dll7548
mfc100u.dll7624
mfc100u.dll280
mfc100u.dll286
mfc100u.dll1229
mfc100u.dll6087
mfc100u.dll10043
mfc100u.dll11206
mfc100u.dll10064
mfc100u.dll8181
mfc100u.dll11123
mfc100u.dll10265
mfc100u.dll10352
mfc100u.dll9621
mfc100u.dll10199
mfc100u.dll10933
mfc100u.dll10936
mfc100u.dll10934
mfc100u.dll10935
mfc100u.dll1232
mfc100u.dll6088
mfc100u.dll8362
mfc100u.dll2664
mfc100u.dll8390
mfc100u.dll11207
mfc100u.dll2418
mfc100u.dll12610
mfc100u.dll5558
mfc100u.dll2825
mfc100u.dll3643
mfc100u.dll2251
mfc100u.dll13605
mfc100u.dll322
mfc100u.dll1298
mfc100u.dll3978
mfc100u.dll13305
mfc100u.dll3260
mfc100u.dll3255
mfc100u.dll3371
mfc100u.dll6842
mfc100u.dll2629
mfc100u.dll5229
mfc100u.dll285
mfc100u.dll5264
mfc100u.dll7524
mfc100u.dll4881
mfc100u.dll2135
mfc100u.dll1310
mfc100u.dll7914
mfc100u.dll4512
mfc100u.dll11494
mfc100u.dll4511
mfc100u.dll812
mfc100u.dll1645
mfc100u.dll820
mfc100u.dll6843
mfc100u.dll9551
mfc100u.dll1944
mfc100u.dll2620
mfc100u.dll4519
mfc100u.dll13127
mfc100u.dll2614
mfc100u.dll4150
mfc100u.dll1474
mfc100u.dll11838
mfc100u.dll8179
mfc100u.dll10058
mfc100u.dll10412
mfc100u.dll3627
mfc100u.dll2981
mfc100u.dll2980
mfc100u.dll2756
mfc100u.dll5556
mfc100u.dll12606
mfc100u.dll2887
mfc100u.dll2884
mfc100u.dll7385
mfc100u.dll2417
mfc100u.dll14146
mfc100u.dll14148
mfc100u.dll14147
mfc100u.dll14145
mfc100u.dll14149
mfc100u.dll14132
mfc100u.dll14059
mfc100u.dll14060
mfc100u.dll8277
mfc100u.dll11081
mfc100u.dll3402
mfc100u.dll10937
mfc100u.dll13380
mfc100u.dll8112
mfc100u.dll11163
mfc100u.dll6247
mfc100u.dll10045
mfc100u.dll8393
mfc100u.dll2853
mfc100u.dll12724
mfc100u.dll11246
mfc100u.dll11244
mfc100u.dll1501
mfc100u.dll1508
mfc100u.dll1514
mfc100u.dll1512
mfc100u.dll1519
mfc100u.dll4388
mfc100u.dll4425
mfc100u.dll4396
mfc100u.dll4408
mfc100u.dll4404
mfc100u.dll4400
mfc100u.dll4430
mfc100u.dll4421
mfc100u.dll4392
mfc100u.dll4434
mfc100u.dll4413
mfc100u.dll4379
mfc100u.dll4383
mfc100u.dll4416
mfc100u.dll3999
mfc100u.dll14067
mfc100u.dll3992
mfc100u.dll2665
mfc100u.dll13382
mfc100u.dll7109
mfc100u.dll13388
mfc100u.dll6156
mfc100u.dll10725
mfc100u.dll12557
mfc100u.dll5276
mfc100u.dll2339
mfc100u.dll11116
mfc100u.dll3491
mfc100u.dll2952
mfc100u.dll2951
mfc100u.dll2852
mfc100u.dll11159
mfc100u.dll4642
mfc100u.dll4923
mfc100u.dll5115
mfc100u.dll8483
mfc100u.dll4901
mfc100u.dll5143
mfc100u.dll4645
mfc100u.dll4794
mfc100u.dll1301
mfc100u.dll323
mfc100u.dll4623
mfc100u.dll6931
mfc100u.dll6932
mfc100u.dll6922
mfc100u.dll4792
mfc100u.dll7393
mfc100u.dll9333
mfc100u.dll8347
mfc100u.dll5828
mfc100u.dll381
mfc100u.dll948
mfc100u.dll1300
mfc100u.dll8118
mfc100u.dll908
mfc100u.dll2091
mfc100u.dll2055
mfc100u.dll2053
mfc100u.dll2080
mfc100u.dll1984
mfc100u.dll2045
mfc100u.dll3413
mfc100u.dll408
mfc100u.dll1953
mfc100u.dll2090
mfc100u.dll2088
mfc100u.dll1945
mfc100u.dll1873
mfc100u.dll1934
MSVCR100.dll453_amsg_exit
MSVCR100.dll689_initterm_e
MSVCR100.dll688_initterm
MSVCR100.dll537_encoded_null
MSVCR100.dll820_malloc_crt
MSVCR100.dll545_except_handler4_common
MSVCR100.dll258void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR100.dll969_onexit
MSVCR100.dll803_lock
MSVCR100.dll347__dllonexit
MSVCR100.dll314__CxxFrameHandler3
MSVCR100.dll1165_unlock
MSVCR100.dll1476malloc
MSVCR100.dll1240_wcsicmp
MSVCR100.dll1250_wcsnicmp
MSVCR100.dll996_recalloc
MSVCR100.dll1488memcpy_s
MSVCR100.dll984_purecall
MSVCR100.dll322__RTDynamicCast
MSVCR100.dll236void (__cdecl*__cdecl _set_se_translator(void (__cdecl*)(unsigned int, struct _EXCEPTION_POINTERS *)))(unsigned int, struct _EXCEPTION_POINTERS *)

?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z

MSVCR100.dll1387calloc
MSVCR100.dll1419free
MSVCR100.dll1490memmove_s
MSVCR100.dll289_CxxThrowException
MSVCR100.dll305__CppXcptFilter
MSVCR100.dll339__clean_type_info_names_internal
MSVCR100.dll238public: void __thiscall type_info::_type_info_dtor_internal_method(void)

?_type_info_dtor_internal_method@type_info@@QAEXXZ

MSVCR100.dll507_crt_debugger_hook
KERNEL32.dll1357lstrlenA
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll514GetLastError
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll1358lstrlenW
KERNEL32.dll581GetProcAddress
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll831LoadLibraryW
KERNEL32.dll354FreeLibrary
KERNEL32.dll1202Sleep
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll840LocalFree
KERNEL32.dll836LocalAlloc
KERNEL32.dll234EncodePointer
KERNEL32.dll202DecodePointer
KERNEL32.dll748InterlockedExchange
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll659GetTickCount
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1216TerminateProcess
KERNEL32.dll871MultiByteToWideChar
USER32.dll506LoadStringW
USER32.dll475IsWindow
USER32.dll418GetWindowTextLengthW
USER32.dll419GetWindowTextW
USER32.dll216EnableWindow
SHLWAPI.dll73PathFindFileNameW
SHLWAPI.dll71PathFindExtensionW
ole32.dll16CoCreateInstance
OLEAUT32.dll8
OLEAUT32.dll9
OLEAUT32.dll12
OLEAUT32.dll2
OLEAUT32.dll6
WS2_32.dll11
ordentry_vafunction_name
10x16c0PlugInMain
module_nameCloudStats.dll
flags0
timestamp2012-06-01 01:28:53
version0.0
ordinal_base1
nFunctions1
nNames1
Names(1)0xfaec
Functions(1)0xfae8
NameOrdinals(1)0xfaf0

StringTable 040904b0

CompanyNameWildPackets, Inc.
FileDescriptionCloudStats Analysis Module for Peek Plugin API v12.
FileVersion1.0.0.1
InternalNameCloudStats Analysis Module
LegalCopyrightCopyright ©2011 WildPackets, Inc.
OriginalFilenameCloudStats.DLL
ProductNameCloudStats
ProductVersion1.0.0.1

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0129536DLL06/01/2012 01:28:53#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK