filenameMapsCSP.dll
size118784 (0x1d000)
md54c063e17889cf2ca026a94f7a7b50977
typePE32+ executable (DLL) (console) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
1473072954
260289009
259289004
2612890023
101199
257289009
256289001
2642890025
253289001
255289001
258289001

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x9f5019b0
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion14.26
SizeOfCode0xb000
SizeOfInitializedData0x11000
SizeOfUninitializedData0
AddressOfEntryPoint0xa290
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion10.0
ImageVersion10.0
SubsystemVersion10.0
Reserved10
SizeOfImage0x1d000
SizeOfHeaders0x1000
CheckSum0x26d79
Subsystem3
DllCharacteristics0x4160
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

UPolyX v0.1 (Delikon)

Sections

namevavsizeraw sizeflags
.text0x10000xabfc0xb000R-X CODE
.rdata0xc0000xcb320xd000R-- IDATA
.data0x190000xc200x1000RW- IDATA
.pdata0x1a0000xb340x1000R-- IDATA
.rsrc0x1b0000x3d80x1000R-- IDATA
.reloc0x1c0000x4880x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x177c00x6c
IMPORT0x1782c0x26c
RESOURCE0x1b0000x3d8
EXCEPTION0x1a0000xb34
SECURITY00
BASERELOC0x1c0000x488
DEBUG0x15d940x70
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0xdb800x130
Bound_IAT00
IAT0xdcb00x440
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#18840
module_namehintordfunction_name
msvcp_win.dll654void __cdecl std::_Xlength_error(char const * __ptr64)

?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-crt-runtime-l1-1-0.dll54_initterm
api-ms-win-crt-runtime-l1-1-0.dll55_initterm_e
api-ms-win-crt-private-l1-1-0.dll160_o__configure_narrow_argv
api-ms-win-crt-private-l1-1-0.dll167_o__crt_atexit
api-ms-win-crt-private-l1-1-0.dll192_o__errno
api-ms-win-crt-private-l1-1-0.dll194_o__execute_onexit_table
api-ms-win-crt-private-l1-1-0.dll316_o__initialize_narrow_environment
api-ms-win-crt-private-l1-1-0.dll317_o__initialize_onexit_table
api-ms-win-crt-private-l1-1-0.dll319_o__invalid_parameter_noinfo
api-ms-win-crt-private-l1-1-0.dll320_o__invalid_parameter_noinfo_noreturn
api-ms-win-crt-private-l1-1-0.dll593_o__register_onexit_function
api-ms-win-crt-private-l1-1-0.dll601_o__seh_filter_dll
api-ms-win-crt-private-l1-1-0.dll1123memmove
api-ms-win-crt-private-l1-1-0.dll717_o__wcsicmp
api-ms-win-crt-private-l1-1-0.dll908_o_free
api-ms-win-crt-private-l1-1-0.dll983_o_malloc
api-ms-win-crt-private-l1-1-0.dll994_o_memcpy_s
api-ms-win-crt-private-l1-1-0.dll1084_o_toupper
api-ms-win-crt-private-l1-1-0.dll12__C_specific_handler
api-ms-win-crt-private-l1-1-0.dll18__CxxFrameHandler3
api-ms-win-crt-private-l1-1-0.dll1_CxxThrowException
api-ms-win-crt-private-l1-1-0.dll147_o__cexit
api-ms-win-crt-private-l1-1-0.dll145_o__callnewh
api-ms-win-crt-private-l1-1-0.dll115_o___stdio_common_vswscanf
api-ms-win-crt-private-l1-1-0.dll112_o___stdio_common_vswprintf
api-ms-win-crt-private-l1-1-0.dll106_o___stdio_common_vsnprintf_s
api-ms-win-crt-private-l1-1-0.dll96_o___std_type_info_destroy_list
api-ms-win-crt-private-l1-1-0.dll95_o___std_exception_destroy
api-ms-win-crt-private-l1-1-0.dll94_o___std_exception_copy
api-ms-win-crt-private-l1-1-0.dll42__std_terminate
api-ms-win-crt-private-l1-1-0.dll19__CxxFrameHandler4
api-ms-win-crt-private-l1-1-0.dll1122memcpy
api-ms-win-crt-string-l1-1-0.dll131memset
api-ms-win-core-libraryloader-l1-2-0.dll16GetModuleFileNameA
api-ms-win-core-libraryloader-l1-2-0.dll1DisableThreadLibraryCalls
api-ms-win-core-libraryloader-l1-2-0.dll21GetModuleHandleW
api-ms-win-core-libraryloader-l1-2-0.dll22GetProcAddress
api-ms-win-core-libraryloader-l1-2-0.dll20GetModuleHandleExW
api-ms-win-core-heap-l1-1-0.dll2HeapAlloc
api-ms-win-core-heap-l1-1-0.dllGetProcessHeap
api-ms-win-core-heap-l1-1-0.dll6HeapFree
api-ms-win-core-processthreads-l1-1-0.dll17GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-0.dll13GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-0.dll12GetCurrentProcess
api-ms-win-core-processthreads-l1-1-0.dll80TerminateProcess
api-ms-win-core-localization-l1-2-0.dll9FormatMessageW
api-ms-win-core-debug-l1-1-0.dll7OutputDebugStringW
api-ms-win-core-debug-l1-1-0.dll4DebugBreak
api-ms-win-core-debug-l1-1-0.dll5IsDebuggerPresent
api-ms-win-core-winrt-error-l1-1-0.dll9RoOriginateError
api-ms-win-core-util-l1-1-0.dll4EncodePointer
api-ms-win-core-util-l1-1-0.dll1DecodePointer
api-ms-win-core-synch-l1-1-0.dll37ReleaseSRWLockShared
api-ms-win-core-synch-l1-1-0.dll1AcquireSRWLockShared
api-ms-win-core-synch-l1-1-0.dll33OpenSemaphoreW
api-ms-win-core-synch-l1-1-0.dll36ReleaseSRWLockExclusive
api-ms-win-core-synch-l1-1-0.dll9CreateMutexExW
api-ms-win-core-synch-l1-1-0.dll35ReleaseMutex
api-ms-win-core-synch-l1-1-0.dll38ReleaseSemaphore
api-ms-win-core-synch-l1-1-0.dll11CreateSemaphoreExW
api-ms-win-core-synch-l1-1-0.dll55WaitForSingleObjectEx
api-ms-win-core-synch-l1-1-0.dllAcquireSRWLockExclusive
api-ms-win-core-synch-l1-1-0.dll54WaitForSingleObject
api-ms-win-core-synch-l1-2-0.dll19InitOnceBeginInitialize
api-ms-win-core-synch-l1-2-0.dll20InitOnceComplete
api-ms-win-core-synch-l1-2-0.dll21InitOnceExecuteOnce
api-ms-win-core-synch-l1-2-0.dll45Sleep
api-ms-win-core-com-l1-1-0.dll67CoTaskMemFree
api-ms-win-core-com-l1-1-0.dll8CoCreateGuid
api-ms-win-core-com-l1-1-0.dll66CoTaskMemAlloc
OLEAUT32.dll2
OLEAUT32.dll8
OLEAUT32.dll6
api-ms-win-core-string-l1-1-0.dll1CompareStringOrdinal
api-ms-win-core-handle-l1-1-0.dllCloseHandle
api-ms-win-core-errorhandling-l1-1-0.dll17UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-0.dll15SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-0.dll5GetLastError
api-ms-win-core-errorhandling-l1-1-0.dll13SetLastError
api-ms-win-eventing-provider-l1-1-0.dll3EventRegister
api-ms-win-eventing-provider-l1-1-0.dll2EventProviderEnabled
api-ms-win-eventing-provider-l1-1-0.dll9EventWriteTransfer
api-ms-win-eventing-provider-l1-1-0.dll4EventSetInformation
api-ms-win-eventing-provider-l1-1-0.dll5EventUnregister
api-ms-win-core-rtlsupport-l1-1-0.dll10RtlLookupFunctionEntry
api-ms-win-core-rtlsupport-l1-1-0.dll16RtlVirtualUnwind
api-ms-win-core-rtlsupport-l1-1-0.dll2RtlCaptureContext
api-ms-win-core-processthreads-l1-1-1.dll47IsProcessorFeaturePresent
api-ms-win-core-profile-l1-1-0.dllQueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0.dll26GetTickCount
api-ms-win-core-sysinfo-l1-1-0.dll22GetSystemTimeAsFileTime
api-ms-win-core-interlocked-l1-1-0.dllInitializeSListHead
ZTrace_Maps.dll10ZTraceReportOrigination
ZTrace_Maps.dllZTraceClose
ZTrace_Maps.dll12ZTraceReportOriginationNoThis
ZTrace_Maps.dll13ZTraceReportPropagation
ZTrace_Maps.dll6ZTraceInit
ZTrace_Maps.dll15ZTraceReportPropagationNoThis
MosStorage.dll2MosQueryPackages
MosHostClient.dll38OdmlClose
MosHostClient.dll35OdmlAddMapPackages
MosHostClient.dll49OdmlOpen
api-ms-win-core-registry-l1-1-0.dll20RegGetValueW
api-ms-win-core-heap-l2-1-0.dll2LocalAlloc
api-ms-win-stateseparation-helpers-l1-1-0.dll1GetPersistedRegistryLocationW
ordentry_vafunction_name
10x34a0DllCanUnloadNow
20x3500DllGetClassObject
module_nameMapsCSP.dll
flags0
timestamp2054-09-12 11:53:20
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x177f0
Functions(2)0x177e8
NameOrdinals(2)0x177f8

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionMapsCSP
FileVersion10.0.20190.1000 (WinBuild.160101.0800)
InternalNameMapsCSP
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameMapsCSP.dll
ProductNameMicrosoft® Windows® Operating System
ProductVersion10.0.20190.1000

VS_FIXEDFILEINFO

FileVersion10.0.20190.1000
ProductVersion10.0.20190.1000
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d0113200BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK