filename7z.exe
size468992 (0x72800)
md5619f7135621b50fd1900ff24aade1524
typePE32+ executable (console) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
125403101
1234031011
10148
1104031075
1094031016
158402191
124403101
120403101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x5c6ecb00
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion8.0
SizeOfCode0x4de00
SizeOfInitializedData0x26c00
SizeOfUninitializedData0
AddressOfEntryPoint0x4e120
BaseOfCode0x1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x78000
SizeOfHeaders0x400
CheckSum0
Subsystem3
DllCharacteristics0x8160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x4dc0a0x4de00R-X CODE
.rdata0x4f0000x1c2ee0x1c400R-- IDATA
.data0x6c0000x2cb80x800RW- IDATA
.pdata0x6f0000x612c0x6200R-- IDATA
.rsrc0x760000x6e00x800R-- IDATA
.reloc0x770000xe060x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x6a60c0x78
RESOURCE0x760000x6e0
EXCEPTION0x6f0000x612c
SECURITY00
BASERELOC0x770000x710
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x4f0000x420
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#16840
MANIFEST#19100
module_namehintordfunction_name
OLEAUT32.dll7
OLEAUT32.dll9
OLEAUT32.dll10
OLEAUT32.dll2
OLEAUT32.dll149
OLEAUT32.dll6
OLEAUT32.dll4
USER32.dll55CharUpperW
ADVAPI32.dll428OpenProcessToken
ADVAPI32.dll241GetFileSecurityW
ADVAPI32.dll559SetFileSecurityW
ADVAPI32.dll493RegOpenKeyExW
ADVAPI32.dll504RegQueryValueExW
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll336LookupPrivilegeValueW
ADVAPI32.dll459RegCloseKey
msvcrt.dll175_exit
msvcrt.dll127_c_exit
msvcrt.dll54_XcptFilter
msvcrt.dll366_onexit
msvcrt.dll78__dllonexit
msvcrt.dll17public: virtual __cdecl type_info::~type_info(void) __ptr64

??1type_info@@UEAA@XZ

msvcrt.dll45void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll55__C_specific_handler
msvcrt.dll126_beginthreadex
msvcrt.dll246_isatty
msvcrt.dll670memcmp
msvcrt.dll376_purecall
msvcrt.dll716strlen
msvcrt.dll673memset
msvcrt.dll764wcsstr
msvcrt.dll130_cexit
msvcrt.dll752wcscmp
msvcrt.dll710strcmp
msvcrt.dll672memmove
msvcrt.dll595fflush
msvcrt.dll607fputc
msvcrt.dll608fputs
msvcrt.dll245_iob
msvcrt.dll596fgetc
msvcrt.dll592fclose
msvcrt.dll612free
msvcrt.dll48_CxxThrowException
msvcrt.dll665malloc
msvcrt.dll57__CxxFrameHandler
msvcrt.dll671memcpy
msvcrt.dll82__initenv
msvcrt.dll588exit
msvcrt.dll81__getmainargs
msvcrt.dll244_initterm
msvcrt.dll98__setusermatherr
msvcrt.dll142_commode
msvcrt.dll198_fmode
msvcrt.dll96__set_app_type
KERNEL32.dll918WaitForSingleObject
KERNEL32.dll83CreateEventW
KERNEL32.dll797SetEvent
KERNEL32.dll549InitializeCriticalSection
KERNEL32.dll492GetVersionExW
KERNEL32.dll905VirtualFree
KERNEL32.dll903VirtualAlloc
KERNEL32.dll310GetConsoleMode
KERNEL32.dll772SetConsoleMode
KERNEL32.dll799SetFileApisToOEM
KERNEL32.dll276GetCommandLineW
KERNEL32.dll314GetConsoleScreenBufferInfo
KERNEL32.dll757SetConsoleCtrlHandler
KERNEL32.dll568IsProcessorFeaturePresent
KERNEL32.dll428GetProcessTimes
KERNEL32.dll589LeaveCriticalSection
KERNEL32.dll155EnterCriticalSection
KERNEL32.dll132DeleteCriticalSection
KERNEL32.dll824SetProcessAffinityMask
KERNEL32.dll634OpenEventW
KERNEL32.dll887UnmapViewOfFile
KERNEL32.dll612MapViewOfFile
KERNEL32.dll637OpenFileMappingW
KERNEL32.dll443GetStdHandle
KERNEL32.dll460GetSystemTimeAsFileTime
KERNEL32.dll198FileTimeToDosDateTime
KERNEL32.dll519GlobalMemoryStatusEx
KERNEL32.dll455GetSystemInfo
KERNEL32.dll419GetProcessAffinityMask
KERNEL32.dll199FileTimeToLocalFileTime
KERNEL32.dll200FileTimeToSystemTime
KERNEL32.dll59CompareFileTime
KERNEL32.dll325GetCurrentProcess
KERNEL32.dll339GetDiskFreeSpaceW
KERNEL32.dll357GetFileInformationByHandle
KERNEL32.dll791SetEndOfFile
KERNEL32.dll938WriteFile
KERNEL32.dll689ReadFile
KERNEL32.dll802SetFilePointer
KERNEL32.dll358GetFileSize
KERNEL32.dll141DeviceIoControl
KERNEL32.dll377GetLogicalDriveStringsW
KERNEL32.dll371GetLastError
KERNEL32.dll625MultiByteToWideChar
KERNEL32.dll922WideCharToMultiByte
KERNEL32.dll251FreeLibrary
KERNEL32.dll592LoadLibraryExW
KERNEL32.dll593LoadLibraryW
KERNEL32.dll384GetModuleFileNameW
KERNEL32.dll600LocalFree
KERNEL32.dll247FormatMessageW
KERNEL32.dll54CloseHandle
KERNEL32.dll806SetFileTime
KERNEL32.dll89CreateFileW
KERNEL32.dll801SetFileAttributesW
KERNEL32.dll705RemoveDirectoryW
KERNEL32.dll621MoveFileW
KERNEL32.dll418GetProcAddress
KERNEL32.dll388GetModuleHandleW
KERNEL32.dll81CreateDirectoryW
KERNEL32.dll135DeleteFileW
KERNEL32.dll786SetCurrentDirectoryW
KERNEL32.dll324GetCurrentDirectoryW
KERNEL32.dll472GetTempPathW
KERNEL32.dll814SetLastError
KERNEL32.dll326GetCurrentProcessId
KERNEL32.dll481GetTickCount
KERNEL32.dll329GetCurrentThreadId
KERNEL32.dll209FindClose
KERNEL32.dll216FindFirstFileW
KERNEL32.dll224FindNextFileW
KERNEL32.dll385GetModuleHandleA
KERNEL32.dll356GetFileAttributesW

StringTable 040904b0

CompanyNameIgor Pavlov
FileDescription7-Zip Console
FileVersion19.00
InternalName7z
LegalCopyrightCopyright (c) 1999-2018 Igor Pavlov
OriginalFilename7z.exe
ProductName7-Zip
ProductVersion19.00

VS_FIXEDFILEINFO

FileVersion19.0.0.0
ProductVersion19.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d0463408BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK