filenamevlc.exe
size197281 (0x302a1)
md5a0b6afbe349b465c4d33be80886fce12
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections0x12
TimeDateStamp0x4fa2c942
PointerToSymbolTable0x26600
NumberOfSymbols0x724
SizeOfOptionalHeader0xf0
Characteristics0x27
Magic0x20b
LinkerVersion2.22
SizeOfCode0x9600
SizeOfInitializedData0x1ee00
SizeOfUninitializedData0x1800
AddressOfEntryPoint0x14b0
BaseOfCode0x1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x34000
SizeOfHeaders0x600
CheckSum0x3d3f6
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x95980x9600R-X CODE IDATA
.data0xb0000x1000x200RW- IDATA
.rdata0xc0000x10300x1200R-- IDATA
.pdata0xe0000x5ac0x600R-- IDATA
.xdata0xf0000x5bc0x600R-- IDATA
.bss0x100000x16300RW- UDATA
.idata0x120000xf480x1000RW- IDATA
.CRT0x130000x680x200RW- IDATA
.tls0x140000x480x200RW- IDATA
.rsrc0x150000x123600x12400RW- IDATA
/40x280000x900x200R-- IDATA DISCARDABLE
/190x290000x3e6b0x4000R-- IDATA DISCARDABLE
/310x2d0000x6310x800R-- IDATA DISCARDABLE
/450x2e0000x5dc0x600R-- IDATA DISCARDABLE
/570x2f0000x3100x400R-- IDATA DISCARDABLE
/700x300000x2690x400R-- IDATA DISCARDABLE
/810x310000x15cc0x1600R-- IDATA DISCARDABLE
/920x330000x2c00x400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x120000xf48
RESOURCE0x150000x12360
EXCEPTION0xe0000x5ac
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x140000x28
LOAD_CONFIG00
Bound_IAT00
IAT0x123f00x350
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x4140410x4140440x41028c0x41304000
typenamesizecp
ICON#122160
ICON#213840
ICON#3544300
ICON#496400
ICON#542640
ICON#611280
GROUP_ICONVLC_ICON900
VERSION#19440
module_namehintordfunction_name
libvlc.dlllibvlc_add_intf
libvlc.dll166libvlc_new
libvlc.dll167libvlc_playlist_play
libvlc.dll169libvlc_release
libvlc.dll174libvlc_set_user_agent
libvlc.dll245libvlc_wait
KERNEL32.dll85CloseHandle
KERNEL32.dll215DeleteCriticalSection
KERNEL32.dll247EnterCriticalSection
KERNEL32.dll365FreeLibrary
KERNEL32.dll403GetCommandLineW
KERNEL32.dll460GetCurrentProcess
KERNEL32.dll461GetCurrentProcessId
KERNEL32.dll465GetCurrentThreadId
KERNEL32.dll527GetLastError
KERNEL32.dll546GetModuleFileNameW
KERNEL32.dll547GetModuleHandleA
KERNEL32.dll597GetProcAddress
KERNEL32.dll626GetStartupInfoA
KERNEL32.dll647GetSystemTime
KERNEL32.dll649GetSystemTimeAsFileTime
KERNEL32.dll675GetTickCount
KERNEL32.dll693GetVersionExW
KERNEL32.dll743HeapSetInformation
KERNEL32.dll759InitializeCriticalSection
KERNEL32.dll782IsDBCSLeadByteEx
KERNEL32.dll783IsDebuggerPresent
KERNEL32.dll841LeaveCriticalSection
KERNEL32.dll847LoadLibraryW
KERNEL32.dll856LocalFree
KERNEL32.dll887MultiByteToWideChar
KERNEL32.dll915OpenProcess
KERNEL32.dll952QueryPerformanceCounter
KERNEL32.dll1022RtlAddFunctionTable
KERNEL32.dll1023RtlCaptureContext
KERNEL32.dll1030RtlLookupFunctionEntry
KERNEL32.dll1037RtlVirtualUnwind
KERNEL32.dll1180SetUnhandledExceptionFilter
KERNEL32.dll1193Sleep
KERNEL32.dll1207TerminateProcess
KERNEL32.dll1214TlsGetValue
KERNEL32.dll1227UnhandledExceptionFilter
KERNEL32.dll1257VirtualProtect
KERNEL32.dll1259VirtualQuery
KERNEL32.dll1291WideCharToMultiByte
msvcrt.dll55__C_specific_handler
msvcrt.dll78__dllonexit
msvcrt.dll81__getmainargs
msvcrt.dll82__initenv
msvcrt.dll83__iob_func
msvcrt.dll90__lconv_init
msvcrt.dll91__mb_cur_max
msvcrt.dll96__set_app_type
msvcrt.dll98__setusermatherr
msvcrt.dll114_acmdln
msvcrt.dll121_amsg_exit
msvcrt.dll139_cexit
msvcrt.dll198_errno
msvcrt.dll219_fileno
msvcrt.dll231_fmode
msvcrt.dll297_initterm
msvcrt.dll400_lock
msvcrt.dll566_onexit
msvcrt.dll616_setmode
msvcrt.dll734_unlock
msvcrt.dll858_wfopen
msvcrt.dll888_wremove
msvcrt.dll934abort
msvcrt.dll944atoi
msvcrt.dll948calloc
msvcrt.dll958exit
msvcrt.dll960fclose
msvcrt.dll963fflush
msvcrt.dll973fprintf
msvcrt.dll975fputc
msvcrt.dll977fputwc
msvcrt.dll980free
msvcrt.dll991fwrite
msvcrt.dll996getenv
msvcrt.dll1031localeconv
msvcrt.dll1036malloc
msvcrt.dll1044memcpy
msvcrt.dll1072setlocale
msvcrt.dll1074signal
msvcrt.dll1085strchr
msvcrt.dll1091strerror
msvcrt.dll1094strlen
msvcrt.dll1097strncmp
msvcrt.dll1129vfprintf
msvcrt.dll1145wcscmp
msvcrt.dll1151wcslen
PSAPI.DLL4EnumProcessModules
SHELL32.dll7CommandLineToArgvW
SHELL32.dll178SHGetFolderPathW
USER32.dll492MessageBoxW
WININET.dll54FtpPutFileW
WININET.dll105InternetCloseHandle
WININET.dll112InternetConnectW
WININET.dll149InternetOpenW

StringTable 040904E4

CompanyNameVideoLAN
ProductNameVLC media player
ProductVersion2,0,1,0
InternalNamevlc
OriginalFilenamevlc.exe
FileVersion2.0.1
FileDescriptionVLC media player 2.0.1
LegalCopyrightCopyright © 1996-2012 VideoLAN and VLC Authors
LegalTrademarksVLC media player, VideoLAN and x264 are registered trademarks from VideoLAN

VS_FIXEDFILEINFO

FileVersion2.0.1.0
ProductVersion2.0.1.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0197281EXE05/03/2012 18:06:58#
15c115HTM#
dffc54430PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x1028c