filenamehmmapi.dll
size53760 (0xd200)
md53f0d683a863b1c364aa543e21797f9ee
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1473072926
259257112
2602571111
1062
2572571117
256257111
265257111
255257111
258257111

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x888bb2cb
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion14.12
SizeOfCode0x2c00
SizeOfInitializedData0xa600
SizeOfUninitializedData0
AddressOfEntryPoint0x2fd0
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion10.0
ImageVersion10.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x11000
SizeOfHeaders0x400
CheckSum0xe9f4
Subsystem2
DllCharacteristics0x4160
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x2ae00x2c00R-X CODE
.rdata0x40000x1dbe0x1e00R-- IDATA
.data0x60000x5f00x200RW- IDATA
.pdata0x70000x1e00x200R-- IDATA
.rsrc0x80000x7c680x7e00R-- IDATA
.reloc0x100000x1c0x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x4c600x6e0
IMPORT0x53400x1b8
RESOURCE0x80000x7c68
EXCEPTION0x70000x1e0
SECURITY00
BASERELOC0x100000x1c
DEBUG0x47800x54
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x40100x100
Bound_IAT00
IAT0x41100x278
Delay_IAT00
CLR_Header00
typenamesizecp
MUI#12160
ICON#116400
ICON#27440
ICON#34880
ICON#42960
ICON#537520
ICON#622160
ICON#717360
ICON#813840
ICON#996400
ICON#1042640
ICON#1124400
ICON#1211280
GROUP_ICON#11740
VERSION#18800
module_namehintordfunction_name
msvcrt.dll87__C_specific_handler
msvcrt.dll381_initterm
msvcrt.dll1158malloc
msvcrt.dll1100free
msvcrt.dll174_amsg_exit
msvcrt.dll85_XcptFilter
msvcrt.dll867_vsnprintf
msvcrt.dll1174memset
api-ms-win-core-libraryloader-l1-1-0.dll1DisableThreadLibraryCalls
api-ms-win-core-libraryloader-l1-1-0.dll23LoadStringA
api-ms-win-core-libraryloader-l1-1-0.dll13GetModuleFileNameA
api-ms-win-core-registry-l1-1-0.dll2RegCreateKeyExA
api-ms-win-core-registry-l1-1-0.dllRegCloseKey
api-ms-win-core-registry-l1-1-0.dll32RegQueryValueExA
api-ms-win-core-registry-l1-1-0.dll11RegEnumKeyExA
api-ms-win-core-registry-l1-1-0.dll39RegSetValueExA
api-ms-win-core-registry-l1-1-0.dll27RegOpenKeyExA
api-ms-win-core-heap-l1-1-0.dll6HeapFree
api-ms-win-core-heap-l1-1-0.dllGetProcessHeap
api-ms-win-core-heap-l1-1-0.dll2HeapAlloc
api-ms-win-core-processenvironment-l1-1-0.dllExpandEnvironmentStringsA
api-ms-win-core-errorhandling-l1-1-0.dll3GetLastError
api-ms-win-core-errorhandling-l1-1-0.dll10SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-0.dll11UnhandledExceptionFilter
api-ms-win-core-file-l1-1-0.dll39GetFileTime
api-ms-win-core-file-l1-1-0.dll37GetFileSize
api-ms-win-core-file-l1-1-0.dll67SetFileAttributesA
api-ms-win-core-file-l1-1-0.dll4CreateFileA
api-ms-win-core-sysinfo-l1-1-0.dll15GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-1-0.dll19GetTickCount
api-ms-win-core-sysinfo-l1-1-0.dll22GetVersionExA
api-ms-win-core-handle-l1-1-0.dllCloseHandle
api-ms-win-core-localization-l1-2-0.dll6FormatMessageA
api-ms-win-core-synch-l1-2-0.dll43Sleep
api-ms-win-core-rtlsupport-l1-1-0.dll2RtlCaptureContext
api-ms-win-core-rtlsupport-l1-1-0.dll15RtlVirtualUnwind
api-ms-win-core-rtlsupport-l1-1-0.dll9RtlLookupFunctionEntry
api-ms-win-core-processthreads-l1-1-0.dll11GetCurrentProcess
api-ms-win-core-processthreads-l1-1-0.dll16GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-0.dll12GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-0.dll56TerminateProcess
api-ms-win-core-profile-l1-1-0.dllQueryPerformanceCounter
ADVAPI32.dll616RegDeleteKeyA
KERNEL32.dll719GetShortPathNameA
KERNEL32.dll1606lstrlenA
KERNEL32.dll1594lstrcmpA
KERNEL32.dll760GetTempPathA
KERNEL32.dll151CompareStringA
KERNEL32.dll972LocalFree
KERNEL32.dll994MoveFileA
SHELL32.dll434ShellExecuteA
SHLWAPI.dll281StrChrA
SHLWAPI.dll136PathRemoveBackslashA
SHLWAPI.dll102PathIsPrefixA
SHLWAPI.dll198SHGetValueA
urlmon.dll45CreateUriFromMultiByteString
USER32.dll656MessageBoxA
WININET.dll88GetUrlCacheConfigInfoA
ordentry_vafunction_name
160x16a0MAPIFreeBuffer
170x2d30DllRegisterServer
180x2d50DllUnregisterServer
2080x16a0MAPISendDocuments
2090x1670MAPILogon
2100x1690MAPILogoff
2110x16b0MAPISendMail
2120x16a0MAPISaveMail
2130x16a0MAPIReadMail
2140x16a0MAPIFindNext
2150x16a0MAPIDeleteMail
2170x16a0MAPIAddress
2180x16a0MAPIDetails
2190x16a0MAPIResolveName
2200x16a0BMAPISendMail
2210x16a0BMAPISaveMail
2220x16a0BMAPIReadMail
2230x16a0BMAPIGetReadMail
2240x16a0BMAPIFindNext
2250x16a0BMAPIAddress
2260x16a0BMAPIGetAddress
2270x16a0BMAPIDetails
2280x16a0BMAPIResolveName
3000x1e70MailToProtocolHandler
3010x1f70OpenInboxHandler
3020x2c60AddService
3030x2ce0RemoveService
module_nameHMMAPI.dll
flags0
timestamp2042-08-05 13:04:11
version0.0
ordinal_base16
nFunctions288
nNames27
Names(27)0x5108
Functions(288)0x4c88
NameOrdinals(27)0x5174

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft HTTP Mail Simple MAPI
FileVersion11.00.17134.1 (WinBuild.160101.0800)
InternalNameHMMAPI
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameHMMAPI.DLL
ProductNameInternet Explorer
ProductVersion11.00.17134.1

VS_FIXEDFILEINFO

FileVersion11.0.17134.1
ProductVersion11.0.17134.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d048176BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK