filenameAdobePIP.dll
size9728 (0x2600)
md58834dadb55a6c9a16558e72680bea80e
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
221208062
223208061
224208063
203655015
1010
229406292
220406291
219210051
15101
222406291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x572be63b
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion12.0
SizeOfCode0x400
SizeOfInitializedData0x2400
SizeOfUninitializedData0
AddressOfEntryPoint0x1170
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x8000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x2fc0x400R-X CODE
.rdata0x20000x4d60x600R-- IDATA
.data0x30000x6410x200RW- IDATA
.pdata0x40000x540x200R-- IDATA
.rsrc0x50000x10080x1200R-- IDATA
.reloc0x70000x100x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x21d00x159
IMPORT0x232c0x50
RESOURCE0x50000x1008
EXCEPTION0x40000x54
SECURITY00
BASERELOC0x70000x10
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x21000x70
Bound_IAT00
IAT0x20000x60
Delay_IAT00
CLR_Header00
typenamesizecp
STRING#1680
STRING#11400
STRING#11500
STRING#11680
STRING#11460
STRING#11440
STRING#11700
STRING#11440
STRING#11760
STRING#1880
STRING#11580
STRING#11620
STRING#11740
STRING#1680
STRING#11700
STRING#11700
VERSION#17800
MANIFEST#23810
idlangstring
11028資訊
21028Adobe 产品改进计划被禁用.
11029Informace
21029Program vylepšení produktu Adobe je zakázána.
11030Oplysninger
21030Adobes produktforbedringsprogram er deaktiveret.
11031Informationen
21031Adobe-Programm zur Produktverbesserung ist deaktiviert.
11033Information
21033Adobe Product Improvement Program is disabled.
11035Tietoja
21035Adobe-tuotteiden parannusohjelma ei ole käytössä.
11036Information
21036Programme d'amélioration des produits Adobe est désactivé.
11038Információ
21038Adobe termékfejlesztési program le van tiltva.
11040Informazioni
21040Programma di miglioramento dei prodotti Adobe è disattivato.
11041情報
21041Adobe 製品向上プログラムが無効になっています.
11045Informacja
21045Program udoskonalania produktów Adobe jest wyłączone.
11049Информация
21049Программа усовершенствования продуктов Adobe отключена.
11058Відомості
21058Програма покращення програмного забезпечення Adobe відключена.
12052資訊
22052Adobe 产品改进计划被禁用.
12058Información
22058Programa de mejora de productos de Adobe está desactivado.
13082Información
23082Programa de mejora de productos de Adobe está desactivado.
module_namehintordfunction_name
KERNEL32.dll279DisableThreadLibraryCalls
KERNEL32.dll874IsDebuggerPresent
KERNEL32.dll880IsProcessorFeaturePresent
USER32.dll593MessageBoxW
USER32.dll564LoadStringW
MSVCR120.dll413__crt_debugger_hook
MSVCR120.dll411__crtTerminateProcess
MSVCR120.dll412__crtUnhandledException
MSVCR120.dll382__crtCapturePreviousContext
ordentry_vafunction_name
10x1000APIPHBInitialize
20x1000APIPInitializeW
30x1000APIPSonarInitialize
40x1030AdobePIPDisplayOptInOutDialog
50x1020AdobePIPEnableCrashDetection
60x1000AdobePIPGetLogHandle
70x1000AdobePIPInitializeW
80x1000AdobePIPSetProductDisplayNameW
90x1010AdobePIPTerminate
module_nameadobepip.dll
flags0
timestamp2016-05-06 00:32:59
version0.0
ordinal_base1
nFunctions9
nNames9
Names(9)0x221c
Functions(9)0x21f8
NameOrdinals(9)0x2240

StringTable 041904b0

CompanyNamepainter
FileDescriptionAdobe Product Improvement Program stub
FileVersion7.3.1.70
InternalNameAdobePIP
LegalCopyrightpainter
OriginalFilenameAdobePIP.dll
ProductNameAdobe Product Improvement Program stub
ProductVersion7.3.1.70

VS_FIXEDFILEINFO

FileVersion7.3.1.70
ProductVersion7.3.1.70
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d04144BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK