filenamephp.exe
size26112 (0x6600)
md58b83070ab98ebcbd0a296d4285e5f8e2
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
123507272
150204133
149307291
132307292
147307295
10144
1313072923
148210221
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4f2ae50c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x2600
SizeOfInitializedData0x3c00
SizeOfUninitializedData0
AddressOfEntryPoint0x3002
BaseOfCode0x1000
BaseOfData0x4000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion5.3
SubsystemVersion5.0
Reserved10
SizeOfImage0xa000
SizeOfHeaders0x400
CheckSum0xd83c
Subsystem3
DllCharacteristics0x8140
SizeOfStackReserve0x800000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x25540x2600R-X CODE
.rdata0x40000x201c0x2200R-- IDATA
.data0x70000x43c0x200RW- IDATA
.rsrc0x80000xe180x1000R-- IDATA
.reloc0x90000x6100x800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x53640x50
RESOURCE0x80000xe18
EXCEPTION00
SECURITY00
BASERELOC0x90000x51c
DEBUG0x42700x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x52580x40
Bound_IAT00
IAT0x40000x24c
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#12961252
ICON#213841252
GROUP_ICON0341252
VERSION#19361252
MANIFEST#15981252
module_namehintordfunction_name
php5ts.dll508get_zend_version
php5ts.dll1040php_print_info
php5ts.dll868php_end_ob_buffers
php5ts.dll1063php_request_startup
php5ts.dll394compiler_globals_id
php5ts.dll3153zend_load_extension
php5ts.dll903php_getopt
php5ts.dll1328sapi_startup
php5ts.dll1439ts_resource_ex
php5ts.dll1452tsrm_startup
php5ts.dll819php_body_write
php5ts.dll1303sapi_deactivate
php5ts.dll3113zend_ini_deactivate
php5ts.dll3126zend_is_auto_global
php5ts.dll408core_globals_id
php5ts.dll878php_execute_script
php5ts.dll964php_lint_script
php5ts.dll3216zend_printf
php5ts.dll773open_file_for_scanning
php5ts.dll3300zend_strip
php5ts.dll892php_get_highlight_struct
php5ts.dll3107zend_highlight
php5ts.dll3011zend_eval_string_ex
php5ts.dll199_php_stream_get_line
php5ts.dll131_estrndup
php5ts.dll1244reflection_extension_ptr
php5ts.dll1242reflection_class_ptr
php5ts.dll1247reflection_method_ptr
php5ts.dll1246reflection_function_ptr
php5ts.dll160_object_init_ex
php5ts.dll2949zend_call_method
php5ts.dll265_zval_ptr_dtor
php5ts.dll3015zend_exception_get_default
php5ts.dll3226zend_read_property
php5ts.dll1251reflection_ptr
php5ts.dll3295zend_str_tolower_dup
php5ts.dll3080zend_hash_find
php5ts.dll435display_ini_entries
php5ts.dll927php_info_print_module
php5ts.dll941php_ini_opened_path
php5ts.dll943php_ini_scanned_path
php5ts.dll942php_ini_scanned_files
php5ts.dll1061php_request_shutdown
php5ts.dll975php_module_shutdown
php5ts.dll1327sapi_shutdown
php5ts.dll1451tsrm_shutdown
php5ts.dll1486virtual_fopen
php5ts.dll128_emalloc
php5ts.dll211_php_stream_open_wrapper_ex
php5ts.dll3232zend_register_constant
php5ts.dll491gc_remove_zval_from_buffer
php5ts.dll127_efree
php5ts.dll198_php_stream_free
php5ts.dll3301zend_strndup
php5ts.dll241_zend_hash_add_or_update
php5ts.dll978php_module_startup
php5ts.dll1315sapi_globals_id
php5ts.dll920php_import_environment_variables
php5ts.dll1319sapi_module
php5ts.dll1055php_register_variable
php5ts.dll907php_handle_aborted_connection
php5ts.dll3023zend_extensions
php5ts.dll3141zend_llist_copy
php5ts.dll3152zend_llist_sort
php5ts.dll3136zend_llist_apply
php5ts.dll3144zend_llist_destroy
php5ts.dll243_zend_hash_init
php5ts.dll709module_registry
php5ts.dll3076zend_hash_copy
php5ts.dll3225zend_qsort
php5ts.dll3104zend_hash_sort
php5ts.dll3071zend_hash_apply
php5ts.dll3078zend_hash_destroy
php5ts.dll1042php_printf
php5ts.dll977php_module_shutdown_wrapper
php5ts.dll3008zend_error
php5ts.dll476executor_globals_id
php5ts.dll3371zif_dl
MSVCR90.dll870_setmode
MSVCR90.dll922_stricmp
MSVCR90.dll331_crt_debugger_hook
MSVCR90.dll319_controlfp_s
MSVCR90.dll523_invoke_watson
MSVCR90.dll371_except_handler4_common
MSVCR90.dll352_decode_pointer
MSVCR90.dll796_onexit
MSVCR90.dll630_lock
MSVCR90.dll150__dllonexit
MSVCR90.dll998_unlock
MSVCR90.dll67void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR90.dll224__set_app_type
MSVCR90.dll362_encode_pointer
MSVCR90.dll207__p__fmode
MSVCR90.dll203__p__commode
MSVCR90.dll267_adjust_fdiv
MSVCR90.dll227__setusermatherr
MSVCR90.dll316_configthreadlocale
MSVCR90.dll517_initterm_e
MSVCR90.dll516_initterm
MSVCR90.dll160__initenv
MSVCR90.dll102_XcptFilter
MSVCR90.dll380_exit
MSVCR90.dll300_cexit
MSVCR90.dll159__getmainargs
MSVCR90.dll277_amsg_exit
MSVCR90.dll1318memcpy
MSVCR90.dll867_setjmp3
MSVCR90.dll1322memset
MSVCR90.dll407_fmode
MSVCR90.dll394_fileno
MSVCR90.dll1307malloc
MSVCR90.dll1358strchr
MSVCR90.dll1275isalnum
MSVCR90.dll1338realloc
MSVCR90.dll1326printf
MSVCR90.dll1231fclose
MSVCR90.dll1377strstr
MSVCR90.dll1268getenv
MSVCR90.dll1228exit
MSVCR90.dll1235fgetc
MSVCR90.dll1260ftell
MSVCR90.dll1258fseek
MSVCR90.dll1341rewind
MSVCR90.dll1375strrchr
MSVCR90.dll1252free
MSVCR90.dll1244fprintf
MSVCR90.dll1234fflush
MSVCR90.dll368_errno
MSVCR90.dll161__iob_func
MSVCR90.dll1263fwrite
MSVCR90.dll918_strdup
KERNEL32.dll427GetCurrentProcessId
KERNEL32.dll1067Sleep
KERNEL32.dll726IsDebuggerPresent
KERNEL32.dll1096UnhandledExceptionFilter
KERNEL32.dll426GetCurrentProcess
KERNEL32.dll1079TerminateProcess
KERNEL32.dll595GetSystemTimeAsFileTime
KERNEL32.dll706InterlockedExchange
KERNEL32.dll430GetCurrentThreadId
KERNEL32.dll618GetTickCount
KERNEL32.dll857QueryPerformanceCounter
KERNEL32.dll1055SetUnhandledExceptionFilter
KERNEL32.dll703InterlockedCompareExchange

StringTable 040904b0

CommentsThanks to Edin Kadribasic, Marcus Boerger, Johannes Schlueter
CompanyNameThe PHP Group
FileDescriptionCLI
FileVersion5.3.10
InternalNameCLI SAPI
LegalCopyrightCopyright © 1997-2010 The PHP Group
LegalTrademarksPHP
OriginalFilenamephp.exe
ProductNamePHP
ProductVersion5.3.10
URLhttp://www.php.net

VS_FIXEDFILEINFO

FileVersion5.3.10.0
ProductVersion5.3.10.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
026112EXE02/02/2012 19:33:32#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK