parentFirefox Setup 1.5.exe
filenameFirefox Setup 1.5.unpacked.exe
size5232472 (0x4fd758)
md56bfb2faec21752c2d1eba71548edab83
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
1180473
1472998
10804711
480472
10141
9321799
11896652
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x3fd61ff9
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x11600
SizeOfInitializedData0x6c00
SizeOfUninitializedData0
AddressOfEntryPoint0x10acf
BaseOfCode0x1000
BaseOfData0x13000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x1b000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x115420x11600R-X CODE
.rdata0x130000x35b40x3600R-- IDATA
.data0x170000x9e40x600RW- IDATA
.rsrc0x180000x2e340x3000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x15cd00x78
RESOURCE0x180000x2e34
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17441252
ICON#22961252
ICON#313841252
ICON#422161252
ICON#537521252
ICON#616401252
DIALOG#5001841252
STRING#1841252
STRING#5521252
GROUP_ICON#159901252
VERSION#16441252
#255#141252
idlangstring
91033Cannot create folder '{0}'
691033Extracting
module_namehintordfunction_name
KERNEL32.DLLInitializeCriticalSection
KERNEL32.DLLDeleteCriticalSection
KERNEL32.DLLCloseHandle
KERNEL32.DLLWaitForMultipleObjects
KERNEL32.DLLSetEvent
KERNEL32.DLLCreateThread
KERNEL32.DLLWaitForSingleObject
KERNEL32.DLLResetEvent
KERNEL32.DLLMultiByteToWideChar
KERNEL32.DLLWideCharToMultiByte
KERNEL32.DLLGetLastError
KERNEL32.DLLCompareStringA
KERNEL32.DLLCompareStringW
KERNEL32.DLLAreFileApisANSI
KERNEL32.DLLGetModuleFileNameA
KERNEL32.DLLGetModuleFileNameW
KERNEL32.DLLLocalFree
KERNEL32.DLLFormatMessageA
KERNEL32.DLLFormatMessageW
KERNEL32.DLLGetWindowsDirectoryA
KERNEL32.DLLSetFileAttributesA
KERNEL32.DLLSetFileAttributesW
KERNEL32.DLLRemoveDirectoryA
KERNEL32.DLLRemoveDirectoryW
KERNEL32.DLLCreateDirectoryA
KERNEL32.DLLCreateDirectoryW
KERNEL32.DLLDeleteFileA
KERNEL32.DLLDeleteFileW
KERNEL32.DLLGetShortPathNameA
KERNEL32.DLLlstrlenA
KERNEL32.DLLGetFullPathNameA
KERNEL32.DLLGetFullPathNameW
KERNEL32.DLLGetCurrentDirectoryA
KERNEL32.DLLSetCurrentDirectoryA
KERNEL32.DLLGetTempPathA
KERNEL32.DLLGetTempFileNameA
KERNEL32.DLLFindClose
KERNEL32.DLLFindFirstFileA
KERNEL32.DLLFindFirstFileW
KERNEL32.DLLSetLastError
KERNEL32.DLLFindNextFileA
KERNEL32.DLLCreateFileA
KERNEL32.DLLCreateFileW
KERNEL32.DLLGetFileSize
KERNEL32.DLLSetFilePointer
KERNEL32.DLLReadFile
KERNEL32.DLLSetFileTime
KERNEL32.DLLWriteFile
KERNEL32.DLLSetEndOfFile
KERNEL32.DLLCreateEventA
KERNEL32.DLLLeaveCriticalSection
KERNEL32.DLLEnterCriticalSection
KERNEL32.DLLSleep
KERNEL32.DLLCreateProcessA
KERNEL32.DLLGetCommandLineW
KERNEL32.DLLGetStartupInfoA
KERNEL32.DLLGetModuleHandleA
COMCTL32.dll17
MSVCRT.dll_XcptFilter
MSVCRT.dll_controlfp
MSVCRT.dll__set_app_type
MSVCRT.dll__p__fmode
MSVCRT.dll__p__commode
MSVCRT.dll_adjust_fdiv
MSVCRT.dll__setusermatherr
MSVCRT.dll_initterm
MSVCRT.dll__getmainargs
MSVCRT.dll_acmdln
MSVCRT.dllexit
MSVCRT.dllvoid __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCRT.dll_exit
MSVCRT.dll_onexit
MSVCRT.dll__dllonexit
MSVCRT.dllvoid __cdecl terminate(void)

?terminate@@YAXXZ

MSVCRT.dll_except_handler3
MSVCRT.dllpublic: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCRT.dllmemcpy
MSVCRT.dllmemcmp
MSVCRT.dllmemmove
MSVCRT.dll_CxxThrowException
MSVCRT.dll__CxxFrameHandler
MSVCRT.dllvoid * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

OLEAUT32.dll2
OLEAUT32.dll9
USER32.dllDestroyWindow
USER32.dllPostMessageA
USER32.dllShowWindow
USER32.dllMessageBoxA
USER32.dllKillTimer
USER32.dllEndDialog
USER32.dllSendMessageA
USER32.dllGetDlgItem
USER32.dllSetTimer
USER32.dllMessageBoxW
USER32.dllSetWindowTextW
USER32.dllSetWindowTextA
USER32.dllLoadStringW
USER32.dllLoadStringA
USER32.dllCharPrevA
USER32.dllDialogBoxParamA
USER32.dllSetWindowLongA
USER32.dllGetWindowLongA

StringTable 040904b0

CompanyNameMozilla
FileDescriptionFirefox
FileVersion3, 12, 0, 0
InternalName7zS.sfx
LegalCopyrightMozilla
OriginalFilename7zS.sfx
ProductNameFirefox
ProductVersion3, 12, 0, 0

VS_FIXEDFILEINFO

FileVersion3.12.0.0
ProductVersion3.12.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
099840EXE12/09/2003 19:18:17#
15c115HTM#
186005132632BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 5232472 bytes (5110 KiB)


--
Type = 7z
WARNINGS:
There are data after the end of archive
Offset = 99924
Physical Size = 5129469
Tail Size = 3079
Headers Size = 417
Method = LZMA:24 BCJ2
Solid = +
Blocks = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2005-11-12 01:10:37 ....A      1698442      5129052  setuprsc.dll
2005-11-12 01:10:37 ....A       207492               setup.exe
2005-11-12 01:10:37 ....A        33393               config.ini
2005-11-18 02:59:29 ....A        18142               install.ini
2005-11-12 01:10:37 ....A         6416               license.txt
2005-11-12 01:10:37 ....A       857034               adt.xpi
2005-11-12 01:10:38 ....A     13742442               browser.xpi
2005-11-18 02:59:29 ....A       630456               de.xpi
2005-11-12 01:10:38 ....A       716558               talkback.xpi
2005-11-12 01:10:38 ....A      1341141               xpcom.xpi
2005-11-12 01:10:37 ....A        76294               UninstallFirefox.zip
------------------- ----- ------------ ------------  ------------------------
2005-11-18 02:59:29           19327810      5129052  11 files

Warnings: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK