filenameWindowsAzureEmulator-x64.exe 4730632 66048.dll
size66048 (0x10200)
md55ea7455a71a9b481d0d9402c4e4e19d7
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1492102216
1312102298
1235072715
10150
1322102246
146210221
148210221
145210221

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4a3b9c8f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0xd600
SizeOfInitializedData0x5400
SizeOfUninitializedData0
AddressOfEntryPoint0x3954
BaseOfCode0x1000
BaseOfData0xf000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x16000
SizeOfHeaders0x400
CheckSum0x1f196
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000xd4a10xd600R-X CODE
.data0xf0000x3bc00x1000RW- IDATA
.rsrc0x130000x5100x600R-- IDATA
.reloc0x140000x11f40x1200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xe4400x61
IMPORT0xda1c0xa0
RESOURCE0x130000x510
EXCEPTION00
SECURITY00
BASERELOC0x140000xa00
DEBUG0x12300x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x26b00x40
Bound_IAT00
IAT0x10000x1f8
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#111960
module_namehintordfunction_name
KERNEL32.dll410GetConsoleOutputCP
KERNEL32.dll1164WriteConsoleA
KERNEL32.dll1030SetStdHandle
KERNEL32.dll406GetConsoleMode
KERNEL32.dll388GetConsoleCP
KERNEL32.dll999SetFilePointer
KERNEL32.dll550GetProcessHeap
KERNEL32.dll649GlobalAddAtomW
KERNEL32.dll652GlobalDeleteAtom
KERNEL32.dll1216lstrlenW
KERNEL32.dll654GlobalFindAtomW
KERNEL32.dll1174WriteConsoleW
KERNEL32.dll487GetLastError
KERNEL32.dll742LCMapStringA
KERNEL32.dll579GetStringTypeW
KERNEL32.dll799MultiByteToWideChar
KERNEL32.dll576GetStringTypeA
KERNEL32.dll489GetLocaleInfoA
KERNEL32.dll922RtlUnwind
KERNEL32.dll698InitializeCriticalSectionAndSpinCount
KERNEL32.dll758LoadLibraryA
KERNEL32.dll1175WriteFile
KERNEL32.dll681HeapReAlloc
KERNEL32.dll1118VirtualAlloc
KERNEL32.dll121CreateFileA
KERNEL32.dll68CloseHandle
KERNEL32.dll761LoadLibraryW
KERNEL32.dll333FreeLibrary
KERNEL32.dll798MulDiv
KERNEL32.dll661GlobalLock
KERNEL32.dll683HeapSize
KERNEL32.dll668GlobalUnlock
KERNEL32.dll674HeapAlloc
KERNEL32.dll736IsValidCodePage
KERNEL32.dll532GetOEMCP
KERNEL32.dll329FormatMessageW
KERNEL32.dll1215lstrlenA
KERNEL32.dll744LCMapStringW
KERNEL32.dll444GetDriveTypeW
KERNEL32.dll430GetCurrentThreadId
KERNEL32.dll368GetCommandLineA
KERNEL32.dll1079TerminateProcess
KERNEL32.dll426GetCurrentProcess
KERNEL32.dll1096UnhandledExceptionFilter
KERNEL32.dll1055SetUnhandledExceptionFilter
KERNEL32.dll726IsDebuggerPresent
KERNEL32.dll506GetModuleHandleW
KERNEL32.dll546GetProcAddress
KERNEL32.dll1086TlsGetValue
KERNEL32.dll1084TlsAlloc
KERNEL32.dll1087TlsSetValue
KERNEL32.dll1085TlsFree
KERNEL32.dll709InterlockedIncrement
KERNEL32.dll1012SetLastError
KERNEL32.dll705InterlockedDecrement
KERNEL32.dll678HeapFree
KERNEL32.dll1067Sleep
KERNEL32.dll261ExitProcess
KERNEL32.dll1008SetHandleCount
KERNEL32.dll574GetStdHandle
KERNEL32.dll472GetFileType
KERNEL32.dll572GetStartupInfoA
KERNEL32.dll191DeleteCriticalSection
KERNEL32.dll501GetModuleFileNameA
KERNEL32.dll331FreeEnvironmentStringsA
KERNEL32.dll448GetEnvironmentStrings
KERNEL32.dll332FreeEnvironmentStringsW
KERNEL32.dll1156WideCharToMultiByte
KERNEL32.dll450GetEnvironmentStringsW
KERNEL32.dll676HeapCreate
KERNEL32.dll677HeapDestroy
KERNEL32.dll1121VirtualFree
KERNEL32.dll857QueryPerformanceCounter
KERNEL32.dll618GetTickCount
KERNEL32.dll427GetCurrentProcessId
KERNEL32.dll595GetSystemTimeAsFileTime
KERNEL32.dll756LeaveCriticalSection
KERNEL32.dll218EnterCriticalSection
KERNEL32.dll348GetCPInfo
KERNEL32.dll339GetACP
KERNEL32.dll322FlushFileBuffers
USER32.dll334GetMessageW
USER32.dll611SendMessageW
USER32.dll293GetForegroundWindow
USER32.dll511MessageBoxW
USER32.dll104CreateWindowExW
USER32.dll544PostQuitMessage
USER32.dll213EndPaint
USER32.dll14BeginPaint
USER32.dll150DefWindowProcW
USER32.dll745UpdateWindow
USER32.dll696ShowWindow
USER32.dll565RegisterClassExW
USER32.dll466LoadCursorA
USER32.dll606SendMessageA
msi.dll73
msi.dll145
msi.dll74
msi.dll103
msi.dll17
msi.dll124
msi.dll49
msi.dll8
msi.dll118
msi.dll32
msi.dll159
msi.dll160
COMDLG32.dll20PrintDlgExW
GDI32.dll665StartPage
GDI32.dll221EndPage
GDI32.dll219EndDoc
GDI32.dll663StartDocW
GDI32.dll635SetMapMode
GDI32.dll437GetDeviceCaps
SHLWAPI.dll113PathIsUNCW
SHLWAPI.dll151PathStripToRootW
ADVAPI32.dll616RegQueryValueExW
ADVAPI32.dll554RegCloseKey
ADVAPI32.dll603RegOpenKeyExW
ordentry_vafunction_name
10x2878ValidatePath
20x3222PrintEula
module_nameprinteula.dll
flags0
timestamp2009-06-19 14:11:26
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0xe470
Functions(2)0xe468
NameOrdinals(2)0xe478

StringTable 000004E4

CompanyNameMicrosoft Corporation
FileDescriptionWiX PrintEula Custom Actions
FileVersion3.0.5419.0
InternalNameprinteula
LegalCopyrightCopyright (c) Microsoft Corporation.  All rights reserved.
LegalTrademarks1Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2Windows® is a registered trademark of Microsoft Corporation.
OriginalFilenameprinteula.dll
ProductNameWindows Installer XML
ProductVersion3.0.5419.0

VS_FIXEDFILEINFO

FileVersion3.0.5419.0
ProductVersion3.0.5419.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
066048DLL06/19/2009 14:11:27#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK