filenamejscript.dll
size855552 (0xd0e00)
md58c1efe99d4c9462ef2e10e7140b44d4a
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
187307162
10206
1853071613
1883071619
184307161
1983071672
183307161
186307161

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x5123596c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion10.10
SizeOfCode0xb1400
SizeOfInitializedData0x1f600
SizeOfUninitializedData0
AddressOfEntryPoint0x10a0
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.2
ImageVersion6.2
SubsystemVersion6.1
Reserved10
SizeOfImage0xd4000
SizeOfHeaders0x400
CheckSum0xdc978
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xb12240xb1400R-X CODE
.data0xb30000x65c00x6600RW- IDATA
.pdata0xba0000xcda40xce00R-- IDATA
.idata0xc70000x171e0x1800R-- IDATA
.rsrc0xc90000x7e700x8000R-- IDATA
.reloc0xd10000x28b80x2a00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x32de80xa4
IMPORT0xc76200x8c
RESOURCE0xc90000x7e70
EXCEPTION0xba0000xcda4
SECURITY00
BASERELOC0xd10000x28b8
DEBUG0xa644c0x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x9fa200x70
Bound_IAT00
IAT0xc70000x620
Delay_IAT0xa62c80x40
CLR_Header00
typenamesizecp
MUI#12160
TYPELIB#1201080
STRING#13640
STRING#21340
STRING#3860
STRING#43660
STRING#52960
STRING#62100
STRING#211060
STRING#272000
STRING#285120
STRING#295740
STRING#323020
STRING#632020
STRING#645940
STRING#657580
STRING#2572060
STRING#3133480
STRING#3149200
STRING#31510840
STRING#376660
STRING#626320
STRING#627320
STRING#628320
STRING#629320
STRING#630320
STRING#631320
STRING#646320
STRING#652320
STRING#6531220
STRING#654320
STRING#657320
STRING#9383140
STRING#9394100
STRING#9404720
STRING#20511680
STRING#2676320
VERSION#18280
idlangstring
51033Invalid procedure call or argument
61033Overflow
71033Out of memory
91033Subscript out of range
101033This array is fixed or temporarily locked
111033Division by zero
131033Type mismatch
141033Out of string space
171033Can't perform requested operation
281033Out of stack space
351033Sub or Function not defined
481033Error in loading DLL
511033Internal error
521033Bad file name or number
531033File not found
541033Bad file mode
551033File already open
571033Device I/O error
581033File already exists
611033Disk full
621033Input past end of file
671033Too many files
681033Device unavailable
701033Permission denied
711033Disk not ready
741033Can't rename with different drive
751033Path/File access error
761033Path not found
911033Object variable or With block variable not set
921033For loop not initialized
941033Invalid use of Null
3221033Can't create necessary temporary file
4241033Object required
4291033Automation server can't create object
4301033Class doesn't support Automation
4321033File name or class name not found during Automation operation
4381033Object doesn't support this property or method
4401033Automation error
4451033Object doesn't support this action
4461033Object doesn't support named arguments
4471033Object doesn't support current locale setting
4481033Named argument not found
4491033Argument not optional
4501033Wrong number of arguments or invalid property assignment
4511033Object not a collection
4531033Specified DLL function not found
4581033Variable uses an Automation type not supported in JScript
4621033The remote server machine does not exist or is unavailable
5011033Cannot assign to variable
5021033Object not safe for scripting
5031033Object not safe for initializing
5041033Object not safe for creating
5071033An exception occurred
10011033Out of memory
10021033Syntax error
10031033Expected ':'
10041033Expected ';'
10051033Expected '('
10061033Expected ')'
10071033Expected ']'
10081033Expected '{'
10091033Expected '}'
10101033Expected identifier
10111033Expected '='
10121033Expected '/'
10131033Invalid number
10141033Invalid character
10151033Unterminated string constant
10161033Unterminated comment
10181033'return' statement outside of function
10191033Can't have 'break' outside of loop
10201033Can't have 'continue' outside of loop
10231033Expected hexadecimal digit
10241033Expected 'while'
10251033Label redefined
10261033Label not found
10271033'default' can only appear once in a 'switch' statement
10281033Expected identifier, string or number
10291033Expected '@end'
10301033Conditional compilation is turned off
10311033Expected constant
10321033Expected '@'
10331033Expected 'catch'
10341033Expected 'var'
10351033throw must be followed by an expression on the same source line
10361033'with' not available in the ECMA 327 Compact Profile
40961033Microsoft JScript compilation error
40971033Microsoft JScript runtime error
40981033Unknown runtime error
50001033Cannot assign to 'this'
50011033Number expected
50021033Function expected
50031033Cannot assign to a function result
50041033Cannot index object
50051033String expected
50061033Date object expected
50071033Object expected
50081033Illegal assignment
50091033Undefined identifier
50101033Boolean expected
50111033Can't execute code from a freed script
50121033Object member expected
50131033VBArray expected
50141033JScript object expected
50151033Enumerator object expected
50161033Regular Expression object expected
50171033Syntax error in regular expression
50181033Unexpected quantifier
50191033Expected ']' in regular expression
50201033Expected ')' in regular expression
50211033Invalid range in character set
50221033Exception thrown and not caught
50231033Function does not have a valid prototype object
50241033The URI to be encoded contains an invalid character
50251033The URI to be decoded is not a valid encoding
50261033The number of fractional digits is out of range
50271033The precision is out of range
50281033Array or arguments object expected
50291033Array length must be a finite positive integer
50301033Array length must be assigned a finite positive number
50311033Array object expected
50321033'eval' is not available in the ECMA 327 Compact Profile
50331033Function constructor is not available in the ECMA 327 Compact Profile
50341033Circular reference in value argument not supported
50351033Invalid replacer argument
60001033Infinity
60011033-Infinity
104381033Object doesn't support property or method '|'
150011033'|' is not a number
150021033'|' is not a function
150041033'|' is not an indexable object
150051033'|' is not a string
150061033'|' is not a date object
150071033'|' is null or not an object
150081033Cannot assign to '|'
150091033'|' is undefined
150101033'|' is not a boolean
150121033Cannot delete '|'
150131033'|' is not a VBArray
150141033'|' is not a JScript object
150151033'|' is not an enumerator object
150161033'|' is not a regular expression object
150281033| is not an Array or arguments object
150311033| is not an Array object
150361033'|' attribute on the property descriptor cannot be set to 'true' on this object
150371033'|' attribute on the property descriptor cannot be set to 'false' on this object
328121033The specified date is not available in the current locale's calendar
module_namehintordfunction_name
msvcrt.dll160_amsg_exit
msvcrt.dll82_XcptFilter
msvcrt.dll439_isnan
msvcrt.dll1190sin
msvcrt.dll1034asin
msvcrt.dll1061exp
msvcrt.dll1036atan
msvcrt.dll1030acos
msvcrt.dll1075fmod
msvcrt.dll1234tan
msvcrt.dll302_ftime
msvcrt.dll1139log
msvcrt.dll1165pow
msvcrt.dll1053cos
msvcrt.dll1196sqrt
msvcrt.dll1037atan2
msvcrt.dll1266wcscat_s
msvcrt.dll1044bsearch
msvcrt.dll395_ismbblead
msvcrt.dll879_wasctime
msvcrt.dll805_tzset
msvcrt.dll1112isdigit
msvcrt.dll1138localtime
msvcrt.dll859_vsnwprintf
msvcrt.dll1110isalpha
msvcrt.dll896_wcslwr
msvcrt.dll1232swscanf_s
msvcrt.dll1132iswxdigit
msvcrt.dll1286wcsstr
msvcrt.dll1245towlower
msvcrt.dll1230swprintf_s
msvcrt.dll367_initterm
msvcrt.dll1272wcscspn
msvcrt.dll713_snwprintf_s
msvcrt.dll666_resetstkoflw
msvcrt.dll193_clearfp
msvcrt.dll739_statusfp
msvcrt.dll1271wcscpy_s
msvcrt.dll730_splitpath_s
msvcrt.dll1202strcat_s
msvcrt.dll1220strrchr
msvcrt.dll1207strcpy_s
msvcrt.dll484_ltow
msvcrt.dll812_ultow
msvcrt.dll1143longjmp
msvcrt.dll1227strtoul
msvcrt.dll598_mbsrchr
msvcrt.dll83__C_specific_handler
msvcrt.dll472_lock
msvcrt.dll819_unlock
msvcrt.dll109__dllonexit
msvcrt.dll1121iswalpha
msvcrt.dll198_controlfp
msvcrt.dll534_mbsicmp
msvcrt.dll892_wcsicmp
msvcrt.dll656_purecall
msvcrt.dll1195sprintf_s
msvcrt.dll902_wcsnicmp
msvcrt.dll19void * __ptr64 __cdecl operator new(unsigned __int64)

??2@YAPEAX_K@Z

msvcrt.dll887_wcsdup
msvcrt.dll1179realloc
msvcrt.dll1277wcsncmp
msvcrt.dll21void __cdecl operator delete(void * __ptr64)

??3@YAXPEAX@Z

msvcrt.dll36void __cdecl operator delete[](void * __ptr64)

??_V@YAXPEAX@Z

msvcrt.dll34void * __ptr64 __cdecl operator new[](unsigned __int64)

??_U@YAPEAX_K@Z

msvcrt.dll1158memmove
msvcrt.dll1279wcsncpy_s
msvcrt.dll1267wcschr
msvcrt.dll1144malloc
msvcrt.dll642_onexit
msvcrt.dll1042atoi
msvcrt.dll1086free
msvcrt.dll467_local_unwind
msvcrt.dll694_setjmp
msvcrt.dll1048ceil
msvcrt.dll1073floor
msvcrt.dll1155memcmp
msvcrt.dll1156memcpy
msvcrt.dll1160memset
OLEAUT32.dll15
OLEAUT32.dll200
OLEAUT32.dll35
OLEAUT32.dll183
OLEAUT32.dll40
OLEAUT32.dll160
OLEAUT32.dll25
OLEAUT32.dll27
OLEAUT32.dll147
OLEAUT32.dll149
OLEAUT32.dll8
OLEAUT32.dll150
OLEAUT32.dll10
OLEAUT32.dll11
OLEAUT32.dll7
OLEAUT32.dll162
OLEAUT32.dll6
OLEAUT32.dll180
OLEAUT32.dll4
OLEAUT32.dll9
OLEAUT32.dll2
OLEAUT32.dll16
ADVAPI32.dll648RegOpenKeyExA
ADVAPI32.dll608RegCreateKeyExA
ADVAPI32.dll614RegDeleteKeyExA
ADVAPI32.dll600RegCloseKey
ADVAPI32.dll291EventWrite
ADVAPI32.dll661RegQueryValueExA
ADVAPI32.dll677RegSetValueExA
ADVAPI32.dll662RegQueryValueExW
ADVAPI32.dll649RegOpenKeyExW
KERNEL32.dll965LoadLibraryExW
KERNEL32.dll425FindResourceExW
KERNEL32.dll752GetSystemDefaultUILanguage
KERNEL32.dll1443UnmapViewOfFile
KERNEL32.dll990MapViewOfFile
KERNEL32.dll1230SearchPathW
KERNEL32.dll812GetVersionExW
KERNEL32.dll214CreateFileW
KERNEL32.dll763GetSystemTimeAsFileTime
KERNEL32.dll1406TerminateProcess
KERNEL32.dll553GetCurrentProcess
KERNEL32.dll1375SetUnhandledExceptionFilter
KERNEL32.dll1440UnhandledExceptionFilter
KERNEL32.dll1225RtlVirtualUnwind
KERNEL32.dll1218RtlLookupFunctionEntry
KERNEL32.dll1211RtlCaptureContext
KERNEL32.dll1390Sleep
KERNEL32.dll948LCMapStringW
KERNEL32.dll810GetVersion
KERNEL32.dll164CompareStringA
KERNEL32.dll675GetNumberFormatW
KERNEL32.dll1317SetLastError
KERNEL32.dll946LCMapStringA
KERNEL32.dll167CompareStringW
KERNEL32.dll796GetTimeFormatW
KERNEL32.dll628GetLocaleInfoW
KERNEL32.dll561GetDateFormatA
KERNEL32.dll673GetNumberFormatA
KERNEL32.dll793GetTimeFormatA
KERNEL32.dll564GetDateFormatW
KERNEL32.dll1006MulDiv
KERNEL32.dll761GetSystemTime
KERNEL32.dll211CreateFileMappingW
KERNEL32.dll554GetCurrentProcessId
KERNEL32.dll791GetTickCount
KERNEL32.dll1087QueryPerformanceCounter
KERNEL32.dll585GetEnvironmentVariableW
KERNEL32.dll624GetLastError
KERNEL32.dll1007MultiByteToWideChar
KERNEL32.dll494GetComputerNameA
KERNEL32.dll745GetStringTypeW
KERNEL32.dll1517WideCharToMultiByte
KERNEL32.dll742GetStringTypeA
KERNEL32.dll1425TlsFree
KERNEL32.dll1424TlsAlloc
KERNEL32.dll1427TlsSetValue
KERNEL32.dll446FreeLibrary
KERNEL32.dll811GetVersionExA
KERNEL32.dll964LoadLibraryExA
KERNEL32.dll987LockResource
KERNEL32.dll643GetModuleFileNameW
KERNEL32.dll1389SizeofResource
KERNEL32.dll969LoadResource
KERNEL32.dll449FreeResource
KERNEL32.dll423FindResourceA
KERNEL32.dll912IsValidCodePage
KERNEL32.dll452GetACP
KERNEL32.dll914IsValidLocale
KERNEL32.dll749GetSystemDefaultLCID
KERNEL32.dll803GetUserDefaultLCID
KERNEL32.dll626GetLocaleInfoA
KERNEL32.dll558GetCurrentThreadId
KERNEL32.dll287DeleteCriticalSection
KERNEL32.dll878InitializeCriticalSection
KERNEL32.dll1426TlsGetValue
KERNEL32.dll644GetModuleHandleA
KERNEL32.dll642GetModuleFileNameA
KERNEL32.dll806GetUserDefaultUILanguage
KERNEL32.dll142CloseHandle
KERNEL32.dll700GetProcAddress
KERNEL32.dll972LocalAlloc
KERNEL32.dll976LocalFree
KERNEL32.dll324EnterCriticalSection
KERNEL32.dll284DelayLoadFailureHook
KERNEL32.dll798GetTimeZoneInformation
KERNEL32.dll960LeaveCriticalSection
SHLWAPI.dll144PathRemoveFileSpecW
VERSION.dll16VerQueryValueW
VERSION.dll6GetFileVersionInfoSizeExW
VERSION.dll3GetFileVersionInfoExW
ordentry_vafunction_name
10x10d80DllCanUnloadNow
20x16c70DllGetClassObject
30x563d0DllRegisterServer
40x56490DllUnregisterServer
module_nameJSCRIPT.dll
flags0
timestamp2013-02-19 10:52:28
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x32e20
Functions(4)0x32e10
NameOrdinals(4)0x32e30

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft ® JScript
FileVersion5.8.9200.16537
InternalNamejscript.dll
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamejscript.dll
ProductNameMicrosoft ® JScript
ProductVersion5.8.9200.16537

VS_FIXEDFILEINFO

FileVersion5.8.9200.16537
ProductVersion5.8.9200.16537
StrucVersion0x10000
FileFlagsMask3
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d0849968BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK