filenameexplorer (Win7).exe
size2871808 (0x2bd200)
md53b69712041f3d63605529bd66dc00c48
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1323072974
149307292
1473072941
101078
1313072932
1383072978
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x4d687eef
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion9.0
SizeOfCode0xb7c00
SizeOfInitializedData0x205600
SizeOfUninitializedData0
AddressOfEntryPoint0x2b79c
BaseOfCode0x1000
ImageBase0x100000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.1
ImageVersion6.1
SubsystemVersion6.1
Reserved10
SizeOfImage0x2c0000
SizeOfHeaders0x600
CheckSum0x2c647c
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x80000
SizeOfStackCommit0xe000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xb7b890xb7c00R-X CODE
.rdata0xb90000x2eb980x2ec00R-- IDATA
.data0xe80000x40640x3c00RW- IDATA
.pdata0xed0000xce040xd000R-- IDATA
.rsrc0xfa0000x1c2e880x1c3000R-- IDATA
.reloc0x2bd0000x265c0x2800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0xddd280x190
RESOURCE0xfa0000x1c2e88
EXCEPTION0xed0000xce04
SECURITY00
BASERELOC0x2bd0000x265c
DEBUG0xb8b280x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT0x2d80x1b4
IAT0xb90000x1b28
Delay_IAT0xdd8a00x140
CLR_Header00
typenamesizecp
MUI#12400
BITMAP#6801350320
BITMAP#6802523120
BITMAP#6803787720
BITMAP#68041348720
BITMAP#6805350320
BITMAP#6806523120
BITMAP#6807787720
BITMAP#68081348720
BITMAP#6809350320
BITMAP#6810523120
BITMAP#6811787720
BITMAP#68121348720
BITMAP#7013164240
BITMAP#7014256400
BITMAP#7015369040
BITMAP#7016655760
ICON#1103440
ICON#226640
ICON#316400
ICON#47440
ICON#54880
ICON#62960
ICON#7194960
ICON#856720
ICON#937520
ICON#1022160
ICON#1117360
ICON#1213840
ICON#13345990
ICON#14676240
ICON#15169360
ICON#1696400
ICON#1742640
ICON#1824400
ICON#1911280
ICON#207440
ICON#214880
ICON#222960
ICON#2322160
ICON#2417360
ICON#2513840
ICON#2642640
ICON#2724400
ICON#2811280
ICON#2916400
ICON#3013840
ICON#3122160
ICON#3237520
ICON#332960
ICON#347440
ICON#3516400
ICON#367440
ICON#372960
ICON#3837520
ICON#3922160
ICON#4013840
ICON#4196400
ICON#4242640
ICON#4311280
ICON#447440
ICON#4516400
ICON#462960
ICON#4722160
ICON#4837520
ICON#4913840
ICON#507440
ICON#513040
ICON#522960
ICON#5396400
ICON#5437520
ICON#5542640
ICON#5622160
ICON#5711280
ICON#5813840
ICON#597440
ICON#603040
ICON#612960
ICON#627440
ICON#633040
ICON#642960
ICON#6596400
ICON#6637520
ICON#6742640
ICON#6822160
ICON#6911280
ICON#7013840
ICON#712960
ICON#722960
ICON#737440
ICON#742960
ICON#7522160
ICON#7613840
ICON#7737520
ICON#7816400
ICON#7916400
ICON#807440
ICON#812960
ICON#8237520
ICON#8322160
ICON#8413840
ICON#8596400
ICON#8642640
ICON#8711280
ICON#8816400
ICON#897440
ICON#902960
ICON#9137520
ICON#9222160
ICON#9313840
ICON#9496400
ICON#9542640
ICON#9611280
ICON#9796400
ICON#9842640
ICON#9924400
ICON#10011280
ICON#1012960
ICON#1027440
ICON#1032960
ICON#1042960
ICON#10513840
ICON#1064560
ICON#10716800
ICON#1084880
ICON#10917360
ICON#1107440
ICON#11122160
ICON#11212240
ICON#11329840
ICON#11416400
ICON#11537520
ICON#11626640
ICON#11756720
ICON#11811280
ICON#11920640
ICON#12024400
ICON#12142640
ICON#12267600
ICON#12396400
ICON#124169360
ICON#125570180
ICON#12612240
ICON#1277440
ICON#1284240
ICON#1292960
ICON#13029840
ICON#13122160
ICON#13215440
ICON#13313840
ICON#13467600
ICON#13542640
ICON#13617200
ICON#13711280
ICON#13826640
ICON#13916400
ICON#1407440
ICON#1414880
ICON#1422960
ICON#14356720
ICON#14437520
ICON#14522160
ICON#14617360
ICON#14713840
ICON#148682690
ICON#149169360
ICON#15096400
ICON#15142640
ICON#15224400
ICON#15311280
ICON#15416400
ICON#1557440
ICON#1564880
ICON#1572960
ICON#15837520
ICON#15922160
ICON#16017360
ICON#16113840
ICON#162490460
ICON#16396400
ICON#16442640
ICON#16524400
ICON#16611280
ICON#1677440
ICON#1684880
ICON#1694240
ICON#1702960
ICON#17122160
ICON#17217360
ICON#17315440
ICON#17413840
ICON#17542640
ICON#17624400
ICON#17717200
ICON#17811280
ICON#1797440
ICON#1802960
ICON#18122160
ICON#18213840
ICON#18342640
ICON#18411280
ICON#18516400
ICON#1867440
ICON#1872960
ICON#18837520
ICON#18922160
ICON#19013840
ICON#19196400
ICON#19242640
ICON#19311280
GROUP_ICONICO_MYCOMPUTER2720
GROUP_ICON#1011320
GROUP_ICON#102900
GROUP_ICON#1031320
GROUP_ICON#104900
GROUP_ICON#107900
GROUP_ICON#1081320
GROUP_ICON#1091320
GROUP_ICON#110480
GROUP_ICON#1111320
GROUP_ICON#205900
GROUP_ICON#250200
GROUP_ICON#251200
GROUP_ICON#2521320
GROUP_ICON#2531320
GROUP_ICON#254620
GROUP_ICON#256200
GROUP_ICON#257340
GROUP_ICON#2581740
GROUP_ICON#2593140
GROUP_ICON#2602300
GROUP_ICON#2611880
GROUP_ICON#2621740
VERSION#19120
MANIFEST#111730
module_namehintordfunction_name
ADVAPI32.dll572RegCreateKeyW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll598RegGetValueW
ADVAPI32.dll272EventWrite
ADVAPI32.dll268EventEnabled
ADVAPI32.dll349GetTraceLoggerHandle
ADVAPI32.dll348GetTraceEnableLevel
ADVAPI32.dll347GetTraceEnableFlags
ADVAPI32.dll650RegisterTraceGuidsW
ADVAPI32.dll770UnregisterTraceGuids
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll310GetLengthSid
ADVAPI32.dll346GetTokenInformation
ADVAPI32.dll503OpenProcessToken
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll270EventRegister
ADVAPI32.dll575RegDeleteKeyExW
ADVAPI32.dll271EventUnregister
ADVAPI32.dll758TraceMessage
ADVAPI32.dll612RegOpenKeyW
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll594RegEnumValueW
ADVAPI32.dll445LsaOpenPolicy
ADVAPI32.dll344GetSidSubAuthorityCount
ADVAPI32.dll413LsaClose
ADVAPI32.dll390IsValidSid
ADVAPI32.dll427LsaFreeMemory
ADVAPI32.dll715StartTraceW
ADVAPI32.dll246EnableTraceEx
ADVAPI32.dll717StopTraceW
ADVAPI32.dll177CryptAcquireContextW
ADVAPI32.dll179CryptCreateHash
ADVAPI32.dll200CryptHashData
ADVAPI32.dll196CryptGetHashParam
ADVAPI32.dll182CryptDestroyHash
ADVAPI32.dll203CryptReleaseContext
ADVAPI32.dll713StartServiceW
ADVAPI32.dll131CreateWellKnownSid
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll343GetSidSubAuthority
ADVAPI32.dll441LsaLookupSids
ADVAPI32.dll108ConvertSidToStringSidW
ADVAPI32.dll114ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll81CheckTokenMembership
ADVAPI32.dll552QueryServiceStatus
ADVAPI32.dll505OpenSCManagerW
ADVAPI32.dll507OpenServiceW
ADVAPI32.dll87CloseServiceHandle
ADVAPI32.dll116ConvertStringSidToSidW
ADVAPI32.dll508OpenThreadToken
KERNEL32.dll207DelayLoadFailureHook
KERNEL32.dll832LoadLibraryExA
KERNEL32.dll963ReadFile
KERNEL32.dll501GetFileSize
KERNEL32.dll143CreateFileW
KERNEL32.dll350FlushInstructionCache
KERNEL32.dll948RaiseException
KERNEL32.dll1151SetLastError
KERNEL32.dll903OpenThread
KERNEL32.dll639GetSystemTimeAsFileTime
KERNEL32.dll522GetLocaleInfoW
KERNEL32.dll463GetDateFormatW
KERNEL32.dll669GetTimeFormatW
KERNEL32.dll519GetLocalTime
KERNEL32.dll873MultiByteToWideChar
KERNEL32.dll459GetCurrentThreadId
KERNEL32.dll455GetCurrentProcessId
KERNEL32.dll540GetModuleHandleW
KERNEL32.dll887OpenEventW
KERNEL32.dll754InterlockedPopEntrySList
KERNEL32.dll308FindClose
KERNEL32.dll331FindNextFileW
KERNEL32.dll531GetLongPathNameW
KERNEL32.dll1167SetProcessShutdownParameters
KERNEL32.dll617GetStartupInfoW
KERNEL32.dll1021ReleaseMutex
KERNEL32.dll158CreateMutexW
KERNEL32.dll748InitializeCriticalSection
KERNEL32.dll210DeleteCriticalSection
KERNEL32.dll1269VirtualAlloc
KERNEL32.dll755InterlockedPushEntrySList
KERNEL32.dll1199SetUnhandledExceptionFilter
KERNEL32.dll934QueryPerformanceCounter
KERNEL32.dll1227TerminateProcess
KERNEL32.dll1247UnhandledExceptionFilter
KERNEL32.dll1059RtlVirtualUnwind
KERNEL32.dll1052RtlLookupFunctionEntry
KERNEL32.dll1272VirtualFree
KERNEL32.dll1045RtlCaptureContext
KERNEL32.dll1369lstrcmpiW
KERNEL32.dll99CompareStringOrdinal
KERNEL32.dll319FindFirstFileW
KERNEL32.dll1126SetErrorMode
KERNEL32.dll133CreateEventW
KERNEL32.dll630GetSystemDirectoryW
KERNEL32.dll684GetVersionExW
KERNEL32.dll360FreeLibrary
KERNEL32.dll586GetProcAddress
KERNEL32.dll834LoadLibraryW
KERNEL32.dll678GetUserDefaultUILanguage
KERNEL32.dll1289WaitForSingleObject
KERNEL32.dll1177SetTermsrvAppInstallMode
KERNEL32.dll495GetFileAttributesW
KERNEL32.dll1011RegisterApplicationRestart
KERNEL32.dll709GlobalGetAtomNameW
KERNEL32.dll291ExpandEnvironmentStringsW
KERNEL32.dll1228SystemTimeToFileTime
KERNEL32.dll637GetSystemTime
KERNEL32.dll872MulDiv
KERNEL32.dll666GetTickCount64
KERNEL32.dll660GetThreadPriority
KERNEL32.dll828LeaveCriticalSection
KERNEL32.dll242EnterCriticalSection
KERNEL32.dll1127SetEvent
KERNEL32.dll458GetCurrentThread
KERNEL32.dll1190SetThreadPriority
KERNEL32.dll665GetTickCount
KERNEL32.dll676GetUserDefaultLangID
KERNEL32.dll287ExitProcess
KERNEL32.dll727HeapDestroy
KERNEL32.dll1254UnmapViewOfFile
KERNEL32.dll857MapViewOfFile
KERNEL32.dll1067SearchPathW
KERNEL32.dll477GetDynamicTimeZoneInformation
KERNEL32.dll670GetTimeZoneInformation
KERNEL32.dll375GetBinaryTypeW
KERNEL32.dll938QueryPerformanceFrequency
KERNEL32.dll947QueueUserWorkItem
KERNEL32.dll833LoadLibraryExW
KERNEL32.dll605GetProductInfo
KERNEL32.dll1232TerminateThread
KERNEL32.dll148CreateIoCompletionPort
KERNEL32.dll612GetQueuedCompletionStatus
KERNEL32.dll831LoadLibraryA
KERNEL32.dll215DeleteFileW
KERNEL32.dll593GetProcessId
KERNEL32.dll537GetModuleHandleA
KERNEL32.dll695GetWindowsDirectoryW
KERNEL32.dll100CompareStringW
KERNEL32.dll1365lstrcmpA
KERNEL32.dll96CompareFileTime
KERNEL32.dll932QueryFullProcessImageNameW
KERNEL32.dll140CreateFileMappingW
KERNEL32.dll1042ResetEvent
KERNEL32.dll1313WideCharToMultiByte
KERNEL32.dll707GlobalFree
KERNEL32.dll236DuplicateHandle
KERNEL32.dll453GetCurrentDirectoryW
KERNEL32.dll1287WaitForMultipleObjects
KERNEL32.dll405GetComputerNameW
KERNEL32.dll711GlobalLock
KERNEL32.dll718GlobalUnlock
KERNEL32.dll700GlobalAlloc
KERNEL32.dll1377lstrlenA
KERNEL32.dll197DeactivateActCtx
KERNEL32.dll2ActivateActCtx
KERNEL32.dll1020ReleaseActCtx
KERNEL32.dll120CreateActCtxW
KERNEL32.dll854LockResource
KERNEL32.dll836LoadResource
KERNEL32.dll339FindResourceExW
KERNEL32.dll724HeapAlloc
KERNEL32.dll728HeapFree
KERNEL32.dll591GetProcessHeap
KERNEL32.dll454GetCurrentProcess
KERNEL32.dll397GetCommandLineW
KERNEL32.dll583GetPrivateProfileStringW
KERNEL32.dll536GetModuleFileNameW
KERNEL32.dll168CreateProcessW
KERNEL32.dll1378lstrlenW
KERNEL32.dll898OpenProcess
KERNEL32.dll843LocalFree
KERNEL32.dll839LocalAlloc
KERNEL32.dll935QueryInformationJobObject
KERNEL32.dll1217Sleep
KERNEL32.dll180CreateThread
KERNEL32.dll1161SetPriorityClass
KERNEL32.dll575GetPriorityClass
KERNEL32.dll1046ResumeThread
KERNEL32.dll22AssignProcessToJobObject
KERNEL32.dll1149SetInformationJobObject
KERNEL32.dll518GetLastError
KERNEL32.dll150CreateJobObjectW
KERNEL32.dll82CloseHandle
GDI32.dll564LPtoDP
GDI32.dll524GetRgnBox
GDI32.dll574OffsetViewportOrgEx
GDI32.dll525GetStockObject
GDI32.dll373GdiFlush
GDI32.dll34CombineRgn
GDI32.dll573OffsetRgn
GDI32.dll657SetLayout
GDI32.dll685SetWindowOrgEx
GDI32.dll691StretchBlt
GDI32.dll542GetTextExtentPoint32W
GDI32.dll75CreatePen
GDI32.dll599Polyline
GDI32.dll522GetRegionData
GDI32.dll536GetTextColor
GDI32.dll493GetLayout
GDI32.dll550GetTextMetricsW
GDI32.dll307ExtCreateRegion
GDI32.dll648SetDIBits
GDI32.dll629SelectClipRgn
GDI32.dll681SetViewportOrgEx
GDI32.dll553GetViewportOrgEx
GDI32.dll560IntersectClipRect
GDI32.dll449GetClipRgn
GDI32.dll79CreateRectRgn
GDI32.dll425GetBkColor
GDI32.dll582PatBlt
GDI32.dll41CreateBitmap
GDI32.dll639SetBkMode
GDI32.dll678SetTextColor
GDI32.dll638SetBkColor
GDI32.dll575OffsetWindowOrgEx
GDI32.dll47CreateCompatibleBitmap
GDI32.dll545GetTextExtentPointW
GDI32.dll448GetClipBox
GDI32.dll509GetObjectW
GDI32.dll331GdiAlphaBlend
GDI32.dll19BitBlt
GDI32.dll459GetDeviceCaps
GDI32.dll64CreateFontIndirectW
GDI32.dll80CreateRectRgnIndirect
GDI32.dll48CreateCompatibleDC
GDI32.dll53CreateDIBSection
GDI32.dll631SelectObject
GDI32.dll230DeleteObject
GDI32.dll227DeleteDC
GDI32.dll312ExtTextOutW
USER32.dll85CopyRect
USER32.dll692SetRect
USER32.dll110CreateWindowExW
USER32.dll172DialogBoxParamW
USER32.dll270GetClassInfoW
USER32.dll269GetClassInfoExW
USER32.dll342GetMenuItemInfoW
USER32.dll339GetMenuItemCount
USER32.dll156DefWindowProcW
USER32.dllActivateKeyboardLayout
USER32.dll290GetCursorPos
USER32.dll446InsertMenuW
USER32.dll346GetMenuStringW
USER32.dll680SetMenuItemInfoW
USER32.dll445InsertMenuItemW
USER32.dll461IsChild
USER32.dll478IsWinEventHookInstalled
USER32.dll471IsProcessDPIAware
USER32.dll472IsRectEmpty
USER32.dll777UnionRect
USER32.dll274GetClassLongW
USER32.dll650SetClassLongW
USER32.dll304GetGUIThreadInfo
USER32.dll296GetDlgCtrlID
USER32.dll355GetNextDlgGroupItem
USER32.dll356GetNextDlgTabItem
USER32.dll543MoveWindow
USER32.dll68ChildWindowFromPointEx
USER32.dll404GetWindowDC
USER32.dll60CharUpperW
USER32.dll782UnregisterClassW
USER32.dll253FrameRect
USER32.dll818WindowFromDC
USER32.dll637SendMessageCallbackW
USER32.dll790UpdateLayeredWindow
USER32.dll397GetUserObjectInformationW
USER32.dll362GetProcessWindowStation
USER32.dll388GetThreadDesktop
USER32.dll744ShowWindowAsync
USER32.dll16BringWindowToTop
USER32.dll273GetClassLongPtrW
USER32.dll309GetIconInfo
USER32.dll609RegisterShellHookWindow
USER32.dll159DeregisterShellHookWindow
USER32.dll252FlashWindowEx
USER32.dll704SetThreadDesktop
USER32.dll221EndTask
USER32.dll558OpenInputDesktop
USER32.dll74CloseDesktop
USER32.dll344GetMenuState
USER32.dll486IsZoomed
USER32.dll694SetScrollInfo
USER32.dll375GetScrollInfo
USER32.dll695SetScrollPos
USER32.dll448InternalGetWindowText
USER32.dll406GetWindowInfo
USER32.dll265GetCaretBlinkTime
USER32.dll670SetLayeredWindowAttributes
USER32.dll328GetLayeredWindowAttributes
USER32.dll393GetUpdateRect
USER32.dll727SetWindowsHookExW
USER32.dll776UnhookWindowsHookEx
USER32.dll28CallNextHookEx
USER32.dll664SetFocus
USER32.dll260GetAncestor
USER32.dll616ReleaseCapture
USER32.dll301GetDoubleClickTime
USER32.dll615RegisterWindowMessageW
USER32.dll723SetWindowTextW
USER32.dll717SetWindowPlacement
USER32.dll693SetRectEmpty
USER32.dll230EnumDisplayMonitors
USER32.dll441InflateRect
USER32.dll243EqualRect
USER32.dll793UpdateWindow
USER32.dll353GetMonitorInfoW
USER32.dll540MonitorFromPoint
USER32.dll541MonitorFromRect
USER32.dll52CharPrevW
USER32.dll351GetMessageW
USER32.dll772TranslateMessage
USER32.dll175DispatchMessageW
USER32.dll107CreatePopupMenu
USER32.dll337GetMenuDefaultItem
USER32.dll642SendNotifyMessageW
USER32.dll511LockSetForegroundWindow
USER32.dll42ChangeWindowMessageFilterEx
USER32.dll449IntersectRect
USER32.dll542MonitorFromWindow
USER32.dll484IsWindowVisible
USER32.dll303GetForegroundWindow
USER32.dll242EnumWindows
USER32.dll358GetParent
USER32.dll479IsWindow
USER32.dll770TranslateAcceleratorW
USER32.dll815WaitMessage
USER32.dll423GetWindowTextW
USER32.dll278GetClientRect
USER32.dll767TrackPopupMenuEx
USER32.dll643SetActiveWindow
USER32.dll319GetKeyState
USER32.dll426GhostWindowFromHungWindow
USER32.dll594RegisterClassW
USER32.dll495LoadCursorW
USER32.dll750SubtractRect
USER32.dll590RedrawWindow
USER32.dll13BeginDeferWindowPos
USER32.dll157DeferWindowPos
USER32.dll217EndDeferWindowPos
USER32.dll450InvalidateRect
USER32.dll553OffsetRect
USER32.dll639SendMessageTimeoutW
USER32.dll719SetWindowRgn
USER32.dll791UpdateLayeredWindowIndirect
USER32.dll418GetWindowRgnBox
USER32.dll499LoadImageW
USER32.dll415GetWindowPlacement
USER32.dll665SetForegroundWindow
USER32.dll327GetLastInputInfo
USER32.dll621RemovePropW
USER32.dll326GetLastActivePopup
USER32.dll754SwitchToThisWindow
USER32.dll529MessageBeep
USER32.dll256GetActiveWindow
USER32.dll302GetFocus
USER32.dll654SetCursor
USER32.dll784UnregisterHotKey
USER32.dll602RegisterHotKey
USER32.dll631SendDlgItemMessageW
USER32.dll218EndDialog
USER32.dll293GetDesktopWindow
USER32.dll263GetAsyncKeyState
USER32.dll67ChildWindowFromPoint
USER32.dll656SetCursorPos
USER32.dll349GetMessagePos
USER32.dll14BeginPaint
USER32.dll246FillRect
USER32.dll195DrawEdge
USER32.dll220EndPaint
USER32.dll383GetSystemMenu
USER32.dll214EnableMenuItem
USER32.dll245ExitWindowsEx
USER32.dll497LoadIconW
USER32.dll163DestroyIcon
USER32.dll469IsIconic
USER32.dll158DeleteMenu
USER32.dll63CheckMenuItem
USER32.dll539ModifyMenuW
USER32.dll820WindowFromPoint
USER32.dll71ClientToScreen
USER32.dll766TrackPopupMenu
USER32.dll468IsHungAppWindow
USER32.dll424GetWindowThreadProcessId
USER32.dll10AppendMenuW
USER32.dll33CascadeWindows
USER32.dll760TileWindows
USER32.dll514LockWorkStation
USER32.dll625ScreenToClient
USER32.dll596RegisterClipboardFormatW
USER32.dll547NotifyWinEvent
USER32.dll381GetSysColor
USER32.dll196DrawFocusRect
USER32.dll3AdjustWindowRectEx
USER32.dll83CopyIcon
USER32.dll544MsgWaitForMultipleObjects
USER32.dll709SetWinEventHook
USER32.dll593RegisterClassExW
USER32.dll297GetDlgItem
USER32.dll216EnableWindow
USER32.dll298GetDlgItemInt
USER32.dll660SetDlgItemInt
USER32.dll466IsDlgButtonChecked
USER32.dll480IsWindowEnabled
USER32.dll62CheckDlgButton
USER32.dll30CallWindowProcW
USER32.dll644SetCapture
USER32.dll208DrawTextW
USER32.dll2AdjustWindowRect
USER32.dll24CalculatePopupWindowPosition
USER32.dll348GetMessageExtraInfo
USER32.dll264GetCapture
USER32.dll666SetGestureConfig
USER32.dll200DrawIconEx
USER32.dll619RemoveMenu
USER32.dll676SetMenuDefaultItem
USER32.dll507LoadMenuW
USER32.dll380GetSubMenu
USER32.dll6AllowSetForegroundWindow
USER32.dll489LoadAcceleratorsW
USER32.dll765TrackMouseEvent
USER32.dll49CharNextW
USER32.dll400GetWindow
USER32.dll382GetSysColorBrush
USER32.dll365GetPropW
USER32.dll431HungWindowFromGhostWindow
USER32.dll710SetWindowCompositionAttribute
USER32.dll410GetWindowLongW
USER32.dll545MsgWaitForMultipleObjectsEx
USER32.dll223EnumChildWindows
USER32.dll640SendMessageW
USER32.dll580PtInRect
USER32.dll320GetKeyboardLayout
USER32.dll416GetWindowRect
USER32.dll164DestroyMenu
USER32.dll756SystemParametersInfoW
USER32.dll743ShowWindow
USER32.dll525MapWindowPoints
USER32.dll705SetTimer
USER32.dll691SetPropW
USER32.dll487KillTimer
USER32.dll718SetWindowPos
USER32.dll409GetWindowLongPtrW
USER32.dll571PostQuitMessage
USER32.dll715SetWindowLongPtrW
USER32.dll166DestroyWindow
USER32.dll745ShutdownBlockReasonCreate
USER32.dll510LoadStringW
USER32.dll570PostMessageW
USER32.dll567PeekMessageW
USER32.dll617ReleaseDC
USER32.dll291GetDC
USER32.dll250FindWindowW
USER32.dll384GetSystemMetrics
USER32.dll379GetShellWindow
USER32.dll276GetClassNameW
msvcrt.dll856_vsnwprintf
msvcrt.dll1082free
msvcrt.dll1282wcsstr
msvcrt.dll1117iswalpha
msvcrt.dll1263wcschr
msvcrt.dll1175realloc
msvcrt.dll889_wcsicmp
msvcrt.dll1050cosf
msvcrt.dll1011_wtoi
msvcrt.dll1151memcmp
msvcrt.dll1192sqrt
msvcrt.dll1044ceil
msvcrt.dll1040bsearch
msvcrt.dll143__wgetmainargs
msvcrt.dll83__C_specific_handler
msvcrt.dll82_XcptFilter
msvcrt.dll255_exit
msvcrt.dll179_cexit
msvcrt.dll1056exit
msvcrt.dll881_wcmdln
msvcrt.dll364_initterm
msvcrt.dll160_amsg_exit
msvcrt.dll130__setusermatherr
msvcrt.dll196_commode
msvcrt.dll48void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll639_onexit
msvcrt.dll469_lock
msvcrt.dll109__dllonexit
msvcrt.dll816_unlock
msvcrt.dll128__set_app_type
msvcrt.dll1154memmove
msvcrt.dll1152memcpy
msvcrt.dll1156memset
msvcrt.dll280_fmode
msvcrt.dll1140malloc
msvcrt.dll1186sin
ntdll.dll1411WinSqmSetString
ntdll.dll1406WinSqmSetDWORD
ntdll.dll1388WinSqmAddToStreamEx
ntdll.dll515NtSetSystemInformation
ntdll.dll1387WinSqmAddToStream
ntdll.dll1399WinSqmEventEnabled
ntdll.dll1404WinSqmIsOptedIn
ntdll.dll498NtSetInformationProcess
ntdll.dll402NtQueryInformationToken
ntdll.dll356NtOpenProcessToken
ntdll.dll214NtClose
ntdll.dll364NtOpenThreadToken
ntdll.dll894RtlGetProductInfo
ntdll.dll53EtwEventEnabled
ntdll.dll57EtwEventWrite
ntdll.dll399NtQueryInformationProcess
SHLWAPI.dll325StrStrIW
SHLWAPI.dll219
SHLWAPI.dll467
SHLWAPI.dll8AssocQueryStringW
SHLWAPI.dll127PathQuoteSpacesW
SHLWAPI.dll433
SHLWAPI.dll179SHDeleteKeyW
SHLWAPI.dll560
SHLWAPI.dll24
SHLWAPI.dll230SHRegGetUSValueW
SHLWAPI.dll548
SHLWAPI.dll630
SHLWAPI.dll212
SHLWAPI.dll184
SHLWAPI.dll164
SHLWAPI.dll175
SHLWAPI.dll559
SHLWAPI.dll97PathIsNetworkPathW
SHLWAPI.dll213
SHLWAPI.dll203SHOpenRegStream2W
SHLWAPI.dll631
SHLWAPI.dll225SHRegGetBoolUSValueW
SHLWAPI.dll172
SHLWAPI.dll255SHStrDupW
SHLWAPI.dll273StrChrIW
SHLWAPI.dll413
SHLWAPI.dll478
SHLWAPI.dll460
SHLWAPI.dll69PathFileExistsW
SHLWAPI.dll85PathGetDriveNumberW
SHLWAPI.dll204
SHLWAPI.dll165
SHLWAPI.dll197
SHLWAPI.dll157
SHLWAPI.dll292
SHLWAPI.dll139PathRemoveFileSpecW
SHLWAPI.dll91PathIsDirectoryW
SHLWAPI.dll199
SHLWAPI.dll176
SHLWAPI.dll232SHRegGetValueW
SHLWAPI.dll270
SHLWAPI.dll10ChrCmpIW
SHLWAPI.dll510
SHLWAPI.dll4AssocQueryKeyW
SHLWAPI.dll149PathStripPathW
SHLWAPI.dll509
SHLWAPI.dll103PathIsRootW
SHLWAPI.dll156
SHLWAPI.dll125PathParseIconLocationW
SHLWAPI.dll281StrCmpIW
SHLWAPI.dll437
SHLWAPI.dll291StrCmpW
SHLWAPI.dll99PathIsPrefixW
SHLWAPI.dll571
SHLWAPI.dll225
SHLWAPI.dll237
SHLWAPI.dll177
SHLWAPI.dll178
SHLWAPI.dll484
SHLWAPI.dll171SHCreateStreamOnFileW
SHLWAPI.dll209SHQueryInfoKeyW
SHLWAPI.dll290StrCmpNW
SHLWAPI.dll336StrTrimW
SHLWAPI.dll12
SHLWAPI.dll168
SHLWAPI.dll256
SHLWAPI.dll151PathStripToRootW
SHLWAPI.dll318StrRetToBufW
SHLWAPI.dll60PathCommonPrefixW
SHLWAPI.dll479
SHLWAPI.dll503
SHLWAPI.dll502
SHLWAPI.dll236
SHLWAPI.dll254SHStrDupA
SHLWAPI.dll154
SHLWAPI.dll137PathRemoveExtensionW
SHLWAPI.dll487
SHLWAPI.dll93PathIsFileSpecW
SHLWAPI.dll439
SHLWAPI.dll215
SHLWAPI.dllAssocCreate
SHLWAPI.dll632
SHLWAPI.dll476
SHLWAPI.dll217
SHLWAPI.dll320StrRetToStrW
SHLWAPI.dll334StrToIntW
SHLWAPI.dll276StrChrW
SHLWAPI.dll8
SHLWAPI.dll9
SHLWAPI.dll158
SHLWAPI.dll58PathCombineW
SHLWAPI.dll10
SHLWAPI.dll174SHCreateThreadRef
SHLWAPI.dll250SHSetThreadRef
SHLWAPI.dll174
SHLWAPI.dll194SHGetValueW
SHLWAPI.dll73PathFindFileNameW
SHLWAPI.dll131PathRemoveArgsW
SHLWAPI.dll135PathRemoveBlanksW
SHLWAPI.dll289StrCmpNIW
SHLWAPI.dll81PathGetArgsW
SHLWAPI.dll635
SHLWAPI.dll618
SHLWAPI.dll252SHSetValueW
SHLWAPI.dll183SHDeleteValueW
SHLWAPI.dll52PathAppendW
SHLWAPI.dll16
SHLWAPI.dll278
SHLWAPI.dll240
SHLWAPI.dll629
SHLWAPI.dll193
SHLWAPI.dll163
SHLWAPI.dll71PathFindExtensionW
SHLWAPI.dll279
SHLWAPI.dll388
SHELL32.dll814
SHELL32.dll885
SHELL32.dll165
SHELL32.dll135SHCreateDataObject
SHELL32.dll206SHGetLocalizedName
SHELL32.dll787
SHELL32.dll790
SHELL32.dll193
SHELL32.dll88
SHELL32.dll154
SHELL32.dll840
SHELL32.dll296Shell_GetCachedImageIndexW
SHELL32.dll74
SHELL32.dll818
SHELL32.dll902
SHELL32.dll895
SHELL32.dll6
SHELL32.dll241
SHELL32.dll226SHGetStockIconInfo
SHELL32.dll265
SHELL32.dll181
SHELL32.dll216SHGetPropertyStoreForWindow
SHELL32.dll894
SHELL32.dll162
SHELL32.dll152
SHELL32.dll95
SHELL32.dll850
SHELL32.dll23
SHELL32.dll223SHGetSpecialFolderLocation
SHELL32.dll147SHCreateItemWithParent
SHELL32.dll117SHBindToFolderIDListParent
SHELL32.dll118SHBindToFolderIDListParentEx
SHELL32.dll28
SHELL32.dll127SHChangeNotify
SHELL32.dll747
SHELL32.dll727
SHELL32.dll189SHGetFileInfoW
SHELL32.dll100
SHELL32.dll85
SHELL32.dll18
SHELL32.dll246SHParseDisplayName
SHELL32.dll155
SHELL32.dll190
SHELL32.dll190SHGetFolderLocation
SHELL32.dll176
SHELL32.dll225SHGetSpecialFolderPathW
SHELL32.dll119SHBindToObject
SHELL32.dll89
SHELL32.dll245
SHELL32.dll200
SHELL32.dll723
SHELL32.dll68
SHELL32.dll680
SHELL32.dll203SHGetKnownFolderIDList
SHELL32.dll289ShellExecuteExW
SHELL32.dll899
SHELL32.dll188
SHELL32.dll660
SHELL32.dll201
SHELL32.dll208SHGetNameFromIDList
SHELL32.dll892
SHELL32.dll154SHCreateShellItem
SHELL32.dll67
SHELL32.dll17
SHELL32.dll2
SHELL32.dll711
SHELL32.dll130SHChangeNotifyRegisterThread
SHELL32.dll19
SHELL32.dll16
SHELL32.dll25
SHELL32.dll21
SHELL32.dll137
SHELL32.dll733
SHELL32.dll753
SHELL32.dll644
SHELL32.dll645
SHELL32.dll4
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll731
SHELL32.dll244
SHELL32.dll172SHFileOperationW
SHELL32.dll194SHGetFolderPathEx
SHELL32.dll274SHUpdateRecycleBinIcon
SHELL32.dll60
SHELL32.dll896
SHELL32.dll64
SHELL32.dll61
SHELL32.dll120SHBindToParent
SHELL32.dll195SHGetFolderPathW
SHELL32.dll213SHGetPathFromIDListA
SHELL32.dll290ShellExecuteW
SHELL32.dll166SHEnableServiceObject
SHELL32.dll54
SHELL32.dll254
SHELL32.dll886
SHELL32.dll91
SHELL32.dll132
SHELL32.dll196SHGetIDListFromObject
SHELL32.dll143SHCreateItemFromIDList
SHELL32.dll893
SHELL32.dll112SHAddToRecentDocs
SHELL32.dll302Shell_NotifyIconW
SHELL32.dll301Shell_NotifyIconGetRect
SHELL32.dll42ExtractIconExW
SHELL32.dll168SHEvaluateSystemCommandTemplate
SHELL32.dll102
SHELL32.dll157SHCreateShellItemArrayFromIDLists
SHELL32.dll22
SHELL32.dll134
SHELL32.dll31DragQueryFileW
SHELL32.dll205SHGetKnownFolderPath
SHELL32.dll158SHCreateShellItemArrayFromShellItem
SHELL32.dll144SHCreateItemFromParsingName
SHELL32.dll849
ole32.dll67CoInitializeEx
ole32.dll12CLSIDFromString
ole32.dll54CoGetMalloc
ole32.dll53CoGetInterfaceAndReleaseStream
ole32.dll397RevokeDragDrop
ole32.dll395RegisterDragDrop
ole32.dll112CoUninitialize
ole32.dll66CoInitialize
ole32.dll77CoMarshalInterThreadInterfaceInStream
ole32.dll33CoFreeUnusedLibraries
ole32.dll90CoRegisterMessageFilter
ole32.dll437StringFromGUID2
ole32.dll381OleUninitialize
ole32.dll358OleInitialize
ole32.dll99CoRevokeClassObject
ole32.dll87CoRegisterClassObject
ole32.dll20CoCreateInstance
ole32.dll108CoTaskMemFree
ole32.dll138CreateStreamOnHGlobal
ole32.dll396ReleaseStgMedium
ole32.dll388PropVariantClear
ole32.dll125CreateBindCtx
ole32.dll107CoTaskMemAlloc
ole32.dll18CoCreateFreeThreadedMarshaler
OLEAUT32.dll8
OLEAUT32.dll9
OLEAUT32.dll150
OLEAUT32.dll4
OLEAUT32.dll2
OLEAUT32.dll6
EXPLORERFRAME.dll110
EXPLORERFRAME.dll111
UxTheme.dll30GetThemeBackgroundExtent
UxTheme.dll31GetThemeBackgroundRegion
UxTheme.dll34GetThemeColor
UxTheme.dll66IsThemePartDefined
UxTheme.dll46GetThemeRect
UxTheme.dll13DrawThemeIcon
UxTheme.dll23GetBufferedPaintBits
UxTheme.dll3BufferedPaintClear
UxTheme.dll61IsAppThemed
UxTheme.dll62IsCompositionActive
UxTheme.dll67OpenThemeData
UxTheme.dll9CloseThemeData
UxTheme.dll70SetWindowTheme
UxTheme.dll42GetThemeMetric
UxTheme.dll10DrawThemeBackground
UxTheme.dll56GetThemeTextExtent
UxTheme.dll16DrawThemeText
UxTheme.dll33GetThemeBool
UxTheme.dll14DrawThemeParentBackground
UxTheme.dll59GetWindowTheme
UxTheme.dll29GetThemeBackgroundContentRect
UxTheme.dll43GetThemePartSize
UxTheme.dll1BeginBufferedPaint
UxTheme.dll17DrawThemeTextEx
UxTheme.dll21EndBufferedPaint
UxTheme.dll41GetThemeMargins
UxTheme.dll4BufferedPaintInit
UxTheme.dll8BufferedPaintUnInit
UxTheme.dll63IsThemeActive
UxTheme.dll86
POWRPROF.dllCallNtPowerInformation
POWRPROF.dll32PowerDeterminePlatformRole
POWRPROF.dll12GetPwrCapabilities
dwmapi.dll105
dwmapi.dll113
dwmapi.dll3DwmEnableBlurBehindWindow
dwmapi.dll23DwmSetWindowAttribute
dwmapi.dll15DwmIsCompositionEnabled
dwmapi.dll17DwmQueryThumbnailSourceSize
dwmapi.dll124
dwmapi.dll25DwmUpdateThumbnailProperties
dwmapi.dll24DwmUnregisterThumbnail
dwmapi.dll114
dwmapi.dll127
slc.dll23SLGetWindowsInformationDWORD
gdiplus.dll536GdipSetInterpolationMode
gdiplus.dll184GdipDrawImageRectI
gdiplus.dll54GdipCloneImage
gdiplus.dll300GdipGetImageWidth
gdiplus.dll290GdipGetImageHeight
gdiplus.dll77GdipCreateBitmapFromHBITMAP
gdiplus.dll629GdiplusStartup
gdiplus.dll628GdiplusShutdown
gdiplus.dll237GdipFree
gdiplus.dll33GdipAlloc
gdiplus.dll152GdipDisposeImage
gdiplus.dll91GdipCreateFromHDC
gdiplus.dll144GdipDeleteGraphics
gdiplus.dll514GdipSetCompositingMode
Secur32.dll30GetUserNameExW
RPCRT4.dll150NdrClientCall3
RPCRT4.dll43I_RpcExceptionFilter
RPCRT4.dll506RpcStringFreeW
RPCRT4.dll357RpcBindingFree
RPCRT4.dll374RpcBindingSetAuthInfoExW
RPCRT4.dll502RpcStringBindingComposeW
RPCRT4.dll359RpcBindingFromStringBindingW
PROPSYS.dll45PSCreateMemoryPropertyStore
PROPSYS.dll205VariantToStringAlloc
PROPSYS.dll208VariantToStringWithDefault
PROPSYS.dll147PropVariantToString
PROPSYS.dll181VariantToBooleanWithDefault
PROPSYS.dll142PropVariantToInt64
PROPSYS.dll197VariantToInt32WithDefault
PROPSYS.dll121PropVariantToBoolean
PROPSYS.dll160PropVariantToUInt64
PROPSYS.dll156PropVariantToUInt32
PROPSYS.dll148PropVariantToStringAlloc

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionWindows Explorer
FileVersion6.1.7601.21669 (win7sp1_ldr.110225-1503)
InternalNameexplorer
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameEXPLORER.EXE
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.1.7601.21669

VS_FIXEDFILEINFO

FileVersion6.1.7601.21669
ProductVersion6.1.7601.21669
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
10707834599PNG(256 x 256)#
167da057018PNG(256 x 256)#
180f3068269PNG(256 x 256)#
19d11049046PNG(256 x 256)#
1a90a61130842BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x2d8