filenamesaeds_expl.dll
size68096 (0x10a00)
md585a4c6588c808ec05122396357bbed65
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
109403103
1234031012
126503271
125507272
1095072713
123507277
10213
1105072715
122507271
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x50fd33bd
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion8.0
SizeOfCode0x8a00
SizeOfInitializedData0x7c00
SizeOfUninitializedData0
AddressOfEntryPoint0x8c70
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x15000
SizeOfHeaders0x400
CheckSum0x1c896
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

namevavsizeraw sizeflags
.text0x10000x88a70x8a00R-X CODE
.rdata0xa0000x4c070x4e00R-- IDATA
.data0xf0000x12200x800RW- IDATA
.pdata0x110000x9540xa00R-- IDATA
.rsrc0x120000x161c0x1800R-- IDATA
.reloc0x140000x2da0x400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xeb600xa7
IMPORT0xdca00xc8
RESOURCE0x120000x161c
EXCEPTION0x110000x954
SECURITY00
BASERELOC0x140000x21c
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xa0000x668
Delay_IAT00
CLR_Header00
typenamesizecp
REGISTRY#1026501252
TYPELIB#116921252
BITMAP#2012321252
STRING#75801252
STRING#85281252
VERSION#18441252
MANIFEST#25981252
idlangstring
1001049saeds_expl
1011049Ошибка №0x%X ф-ии %s
1021049%s не поддерживает работу с файлами, находящимися на рабочем столе (Desktop)
1041049Запустить %s для обработки выбранных файлов
1051049Подписать
1061049Проверить подпись
1071049Проверить и удалить подпись
1081049Архивировать
1091049Разархивировать
1101049Информация об архиве
1111049Подписать выбранные файлы
1121049Проверить подписи выбранных файлов
1131049Проверить и удалить подписи выбранных файлов
1141049Зашифровать и упаковать выбранные файлы в архив
1151049Расшифровать и распаковать выбранные архивы
1161049Показать информацию о выбранном архиве
1171049Выгрузить ключ
1181049Принудительно выгрузить ключ
module_namehintordfunction_name
saedsgui.dll4SaedGuiUninit
saedsgui.dllSaedGuiArchInfo
saedsgui.dll3SaedGuiUnPack
saedsgui.dll1SaedGuiPack
saedsgui.dll5SaedGuiVerify
saedsgui.dll2SaedGuiSign
MFC80.DLL1944
MFC80.DLL774
MFC80.DLL265
MFC80.DLL2276
MFC80.DLL6050
MFC80.DLL5759
MFC80.DLL757
MFC80.DLL890
MFC80.DLL589
MFC80.DLL1139
MFC80.DLL2353
MFC80.DLL316
MFC80.DLL320
MFC80.DLL1184
MFC80.DLL1136
MFC80.DLL1218
MFC80.DLL1192
MFC80.DLL1194
MFC80.DLL1227
MFC80.DLL592
MFC80.DLL1226
MFC80.DLL1224
MFC80.DLL1108
MFC80.DLL1052
MFC80.DLL1100
MFC80.DLL321
MFC80.DLL777
MFC80.DLL1064
MFC80.DLL3868
MFC80.DLL266
MFC80.DLL6373
MFC80.DLL1208
MFC80.DLL1202
MFC80.DLL1204
MFC80.DLL769
MFC80.DLL4077
MFC80.DLL4053
MFC80.DLL6326
MFC80.DLL3839
MFC80.DLL6324
MFC80.DLL4367
MFC80.DLL2091
MFC80.DLL2046
MFC80.DLL1114
MFC80.DLL5626
MFC80.DLL3844
MFC80.DLL1025
MFC80.DLL5144
MFC80.DLL6266
MFC80.DLL5424
MFC80.DLL3870
MFC80.DLL1947
MFC80.DLL2965
MFC80.DLL5266
MFC80.DLL5268
MFC80.DLL3986
MFC80.DLL4609
MFC80.DLL5272
MFC80.DLL5255
MFC80.DLL5609
MFC80.DLL2571
MFC80.DLL2765
MFC80.DLL2869
MFC80.DLL4348
MFC80.DLL2748
MFC80.DLL2872
MFC80.DLL2574
MFC80.DLL2680
MFC80.DLL2567
MFC80.DLL3756
MFC80.DLL3757
MFC80.DLL3747
MFC80.DLL2678
MFC80.DLL3987
MFC80.DLL4522
MFC80.DLL4302
MFC80.DLL3371
MFC80.DLL577
MFC80.DLL3721
MFC80.DLL776
MFC80.DLL379
MFC80.DLL568
MSVCR80.dll123__clean_type_info_names_internal
MSVCR80.dll131__crt_debugger_hook
MSVCR80.dll56public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64

?_type_info_dtor_internal_method@type_info@@QEAAXXZ

MSVCR80.dll90__CppXcptFilter
MSVCR80.dll317_encoded_null
MSVCR80.dll472_initterm_e
MSVCR80.dll471_initterm
MSVCR80.dll599_malloc_crt
MSVCR80.dll306_decode_pointer
MSVCR80.dll749_onexit
MSVCR80.dll582_lock
MSVCR80.dll1276memcmp
MSVCR80.dll667_mbsnbcpy_s
MSVCR80.dll1266malloc
MSVCR80.dll1209free
MSVCR80.dll1278memcpy_s
MSVCR80.dll1327strcpy_s
MSVCR80.dll1394wcsncpy_s
MSVCR80.dll1322strcat_s
MSVCR80.dll1281memset
MSVCR80.dll89__C_specific_handler
MSVCR80.dll99__CxxFrameHandler3
MSVCR80.dll777_resetstkoflw
MSVCR80.dll763_purecall
MSVCR80.dll316_encode_pointer
MSVCR80.dll133__dllonexit
MSVCR80.dll942_unlock
MSVCR80.dll67void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR80.dll231_amsg_exit
MSVCR80.dll858_stat64i32
MSVCR80.dll1315sprintf_s
MSVCR80.dll775_recalloc
KERNEL32.dll980lstrcpynW
KERNEL32.dll979lstrcpynA
KERNEL32.dll246FormatMessageA
KERNEL32.dll600LocalFree
KERNEL32.dll385GetModuleHandleA
KERNEL32.dll591LoadLibraryExA
KERNEL32.dll230FindResourceA
KERNEL32.dll595LoadResource
KERNEL32.dll859SizeofResource
KERNEL32.dll251FreeLibrary
KERNEL32.dll563IsDBCSLeadByte
KERNEL32.dll383GetModuleFileNameA
KERNEL32.dll973lstrcmpiA
KERNEL32.dll982lstrlenA
KERNEL32.dll132DeleteCriticalSection
KERNEL32.dll549InitializeCriticalSection
KERNEL32.dll589LeaveCriticalSection
KERNEL32.dll155EnterCriticalSection
KERNEL32.dll675RaiseException
KERNEL32.dll983lstrlenW
KERNEL32.dll325GetCurrentProcess
KERNEL32.dll625MultiByteToWideChar
KERNEL32.dll884UnhandledExceptionFilter
KERNEL32.dll848SetUnhandledExceptionFilter
KERNEL32.dll565IsDebuggerPresent
KERNEL32.dll734RtlVirtualUnwind
KERNEL32.dll727RtlLookupFunctionEntry
KERNEL32.dll720RtlCaptureContext
KERNEL32.dll671QueryPerformanceCounter
KERNEL32.dll481GetTickCount
KERNEL32.dll329GetCurrentThreadId
KERNEL32.dll326GetCurrentProcessId
KERNEL32.dll460GetSystemTimeAsFileTime
KERNEL32.dll596LocalAlloc
KERNEL32.dll860Sleep
KERNEL32.dll256GetACP
KERNEL32.dll374GetLocaleInfoA
KERNEL32.dll476GetThreadLocale
KERNEL32.dll491GetVersionExA
KERNEL32.dll371GetLastError
KERNEL32.dll922WideCharToMultiByte
KERNEL32.dll868TerminateProcess
USER32.dll346GetShellWindow
USER32.dll327GetParent
USER32.dll94CreatePopupMenu
USER32.dll443LoadBitmapA
USER32.dll400InsertMenuA
USER32.dll614SetMenuItemBitmaps
USER32.dll462LoadStringA
USER32.dll482MessageBoxA
USER32.dll42CharNextA
USER32.dll698UnregisterClassA
ADVAPI32.dll497RegQueryInfoKeyA
ADVAPI32.dll516RegSetValueExA
ADVAPI32.dll492RegOpenKeyExA
ADVAPI32.dll465RegCreateKeyExA
ADVAPI32.dll459RegCloseKey
ADVAPI32.dll472RegDeleteValueA
ADVAPI32.dll468RegDeleteKeyA
ADVAPI32.dll478RegEnumKeyExA
SHELL32.dll33DragQueryFileA
ole32.dll328ReleaseStgMedium
ole32.dll369StringFromGUID2
ole32.dll20CoCreateInstance
ole32.dll105CoTaskMemFree
ole32.dll106CoTaskMemRealloc
ole32.dll104CoTaskMemAlloc
OLEAUT32.dll163
OLEAUT32.dll2
OLEAUT32.dll4
OLEAUT32.dll162
OLEAUT32.dll277
OLEAUT32.dll161
OLEAUT32.dll186
OLEAUT32.dll7
OLEAUT32.dll6
ordentry_vafunction_name
10x199cDllCanUnloadNow
20x58fcDllGetClassObject
30x753cDllRegisterServer
40x7550DllUnregisterServer
module_namesaeds_expl.DLL
flags0
timestamp2013-01-21 12:25:33
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0xeb98
Functions(4)0xeb88
NameOrdinals(4)0xeba8

StringTable 041904B0

CompanyNameЦентральный Банк Российской Федерации (Банк России)
FileDescriptionСАЭС Расширение Проводника
FileVersion3.6.267
InternalNamesaeds_expl
LegalCopyrightCopyright © Validata. 1999-2013
OriginalFilenamesaeds_expl.dll
ProductNameСКАД Сигнатура
ProductVersion3.6.267

VS_FIXEDFILEINFO

FileVersion3.6.267.5
ProductVersion3.6.267.5
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags8
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d062512BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK