filename7zFM2.vmp.exe
size5089792 (0x4daa00)
md5a5d821475bad0f2e27cc41bf044a7bf1
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x118

Rich Header

lib idversiontimes used
1472997
1180473
10804711
480472
9521905
1181683
9621901
10301
93217919
119782145
1097821
170402194
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x5c6ecb00
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x12e
Magic0x10b
LinkerVersion6.0
SizeOfCode0x5c200
SizeOfInitializedData0x26c00
SizeOfUninitializedData0
AddressOfEntryPoint0x4aeae4
BaseOfCode0x1000
BaseOfData0x5e000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x4e0000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x5c1c20x5c200R-X CODE
.rdata0x5e0000x13b7e0x13c00R-- IDATA
.data0x720000x9240x200RW- IDATA
.sxdata0x7300040x200RW- IDATA
.vmp00x740000x25c3e00x25c400R-X CODE IDATA
.vmp10x2d10000x202c700x202e00R-X CODE IDATA
.reloc0x4d40000x6e4c0x7000R-- IDATA
.rsrc0x4db0000x405b0x4200R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x4a80080x140
RESOURCE0x4db0000x405b
EXCEPTION00
SECURITY00
BASERELOC0x4d40000x6e4c
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x3e90000x68c
Delay_IAT0x3e50ec0x40
CLR_Header00
typenamesizecp
ICON#17440
ICON#22960
ICON#337520
ICON#491280
GROUP_ICON#1480
GROUP_ICON#100200
VERSION#17040
MANIFEST#112870
module_namehintordfunction_name
COMCTL32.dllImageList_ReplaceIcon
COMCTL32.dllInitCommonControlsEx
COMCTL32.dllCreateToolbarEx
COMCTL32.dllCreateStatusWindowW
COMCTL32.dll17
COMCTL32.dllImageList_GetImageCount
COMCTL32.dllImageList_AddMasked
COMCTL32.dllImageList_Create
COMCTL32.dllImageList_Destroy
COMCTL32.dllPropertySheetW
comdlg32.dllCommDlgExtendedError
comdlg32.dllGetOpenFileNameW
GDI32.dllDeleteObject
OLEAUT32.dll9
OLEAUT32.dll2
OLEAUT32.dll4
OLEAUT32.dll149
OLEAUT32.dll6
OLEAUT32.dll10
OLEAUT32.dll7
ole32.dllCoTaskMemFree
ole32.dllOleUninitialize
ole32.dllOleInitialize
ole32.dllCoUninitialize
ole32.dllRevokeDragDrop
ole32.dllDoDragDrop
ole32.dllCoCreateInstance
ole32.dllCoInitialize
ole32.dllReleaseStgMedium
ole32.dllRegisterDragDrop
ole32.dllCoTaskMemAlloc
USER32.dllChildWindowFromPointEx
USER32.dllWindowFromPoint
USER32.dllRegisterClipboardFormatW
USER32.dllUpdateWindow
USER32.dllSetTimer
USER32.dllMapVirtualKeyW
USER32.dllEnableMenuItem
USER32.dllRemoveMenu
USER32.dllCheckMenuRadioItem
USER32.dllCheckMenuItem
USER32.dllAppendMenuW
USER32.dllGetMenu
USER32.dllLoadMenuW
USER32.dllIsWindowEnabled
USER32.dllDrawMenuBar
USER32.dllGetSubMenu
USER32.dllGetParent
USER32.dllIsDlgButtonChecked
USER32.dllCheckDlgButton
USER32.dllCheckRadioButton
USER32.dllIsZoomed
USER32.dllGetClientRect
USER32.dllReleaseCapture
USER32.dllSetCapture
USER32.dllGetCapture
USER32.dllLoadIconW
USER32.dllGetWindowPlacement
USER32.dllSetWindowPlacement
USER32.dllLoadAcceleratorsW
USER32.dllGetMessageW
USER32.dllTranslateAcceleratorW
USER32.dllTranslateMessage
USER32.dllDispatchMessageW
USER32.dllPostQuitMessage
USER32.dllSetDlgItemTextW
USER32.dllGetFocus
USER32.dllGetKeyState
USER32.dllInvalidateRect
USER32.dllPostMessageW
USER32.dllSetWindowTextW
USER32.dllEndDialog
USER32.dllEnableWindow
USER32.dllDestroyWindow
USER32.dllSetFocus
USER32.dllCreatePopupMenu
USER32.dllDestroyMenu
USER32.dllLoadBitmapW
USER32.dllMessageBoxW
USER32.dllDefWindowProcW
USER32.dllGetClassInfoW
USER32.dllLoadCursorW
USER32.dllRegisterClassW
USER32.dllCallWindowProcW
USER32.dllCreateWindowExW
USER32.dllDialogBoxParamW
USER32.dllSetWindowLongW
USER32.dllGetWindowLongW
USER32.dllShowWindow
USER32.dllMoveWindow
USER32.dllScreenToClient
USER32.dllGetDlgItem
USER32.dllGetWindowRect
USER32.dllMapDialogRect
USER32.dllSystemParametersInfoW
USER32.dllGetDialogBaseUnits
USER32.dllGetWindowTextLengthW
USER32.dllGetWindowTextW
USER32.dllSendMessageW
USER32.dllLoadStringW
USER32.dllInsertMenuItemW
USER32.dllSetMenuItemInfoW
USER32.dllGetMenuItemInfoW
USER32.dllSetClipboardData
USER32.dllEmptyClipboard
USER32.dllCloseClipboard
USER32.dllOpenClipboard
USER32.dllCharUpperW
USER32.dllGetCursorPos
USER32.dllTrackPopupMenuEx
USER32.dllGetMenuItemCount
USER32.dllClientToScreen
USER32.dllSetCursor
USER32.dllKillTimer
USER32.dllDestroyIcon
USER32.dllSetMenu
ADVAPI32.dllGetFileSecurityW
ADVAPI32.dllRegOpenKeyExA
ADVAPI32.dllRegQueryValueExA
ADVAPI32.dllLsaAddAccountRights
ADVAPI32.dllLsaClose
ADVAPI32.dllGetUserNameW
ADVAPI32.dllLsaOpenPolicy
ADVAPI32.dllLookupAccountNameW
ADVAPI32.dllAdjustTokenPrivileges
ADVAPI32.dllLookupPrivilegeValueW
ADVAPI32.dllOpenProcessToken
ADVAPI32.dllSetFileSecurityW
ADVAPI32.dllRegQueryValueExW
ADVAPI32.dllRegSetValueExW
ADVAPI32.dllRegEnumKeyExW
ADVAPI32.dllRegDeleteKeyW
ADVAPI32.dllRegCloseKey
ADVAPI32.dllRegOpenKeyExW
ADVAPI32.dllRegCreateKeyExW
SHELL32.dllSHChangeNotify
SHELL32.dllExtractIconExW
SHELL32.dllShellExecuteW
SHELL32.dllSHGetSpecialFolderLocation
SHELL32.dllSHFileOperationW
SHELL32.dllShellExecuteExW
SHELL32.dllSHGetFileInfoW
SHELL32.dllSHBrowseForFolderW
SHELL32.dllSHGetPathFromIDListW
SHELL32.dllDragQueryFileW
SHELL32.dllDragFinish
SHELL32.dllSHGetMalloc
SHELL32.dllSHGetDesktopFolder
MSVCRT.dllmemset
MSVCRT.dll_XcptFilter
MSVCRT.dll_exit
MSVCRT.dll_onexit
MSVCRT.dll__dllonexit
MSVCRT.dllvoid __cdecl terminate(void)

?terminate@@YAXXZ

MSVCRT.dll_controlfp
MSVCRT.dll__set_app_type
MSVCRT.dll__p__fmode
MSVCRT.dllpublic: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCRT.dll__p__commode
MSVCRT.dll_adjust_fdiv
MSVCRT.dll__setusermatherr
MSVCRT.dll_initterm
MSVCRT.dll__getmainargs
MSVCRT.dll_acmdln
MSVCRT.dll__CxxFrameHandler
MSVCRT.dllmemcpy
MSVCRT.dllmemmove
MSVCRT.dll_CxxThrowException
MSVCRT.dllstrcmp
MSVCRT.dllwcsstr
MSVCRT.dllwcscmp
MSVCRT.dllmalloc
MSVCRT.dllfree
MSVCRT.dllsrand
MSVCRT.dllrand
MSVCRT.dll_except_handler3
MSVCRT.dllwcslen
MSVCRT.dllstrlen
MSVCRT.dll_purecall
MSVCRT.dllmemcmp
MSVCRT.dllwcscat
MSVCRT.dll_beginthreadex
MSVCRT.dllexit
KERNEL32.dllGetSystemDefaultLangID
KERNEL32.dllGetUserDefaultLangID
KERNEL32.dllCopyFileW
KERNEL32.dllFindNextChangeNotification
KERNEL32.dllGetCompressedFileSizeW
KERNEL32.dllGetCommandLineW
KERNEL32.dllGetVersionExW
KERNEL32.dllInterlockedDecrement
KERNEL32.dllInterlockedIncrement
KERNEL32.dllAreFileApisANSI
KERNEL32.dllEnterCriticalSection
KERNEL32.dllLeaveCriticalSection
KERNEL32.dllDeleteCriticalSection
KERNEL32.dllCreateEventW
KERNEL32.dllCreateFileMappingW
KERNEL32.dllMapViewOfFile
KERNEL32.dllUnmapViewOfFile
KERNEL32.dllWaitForSingleObject
KERNEL32.dllWaitForMultipleObjects
KERNEL32.dllGetStdHandle
KERNEL32.dllGetSystemTimeAsFileTime
KERNEL32.dllFileTimeToDosDateTime
KERNEL32.dllGlobalMemoryStatus
KERNEL32.dlllstrlenW
KERNEL32.dllFileTimeToLocalFileTime
KERNEL32.dllFileTimeToSystemTime
KERNEL32.dllCompareFileTime
KERNEL32.dllCreateProcessW
KERNEL32.dllGetCurrentProcess
KERNEL32.dllGlobalFree
KERNEL32.dllGlobalAlloc
KERNEL32.dllGetFileInformationByHandle
KERNEL32.dllSetEndOfFile
KERNEL32.dllProcess32NextW
KERNEL32.dllReadFile
KERNEL32.dllDeviceIoControl
KERNEL32.dllSetFilePointer
KERNEL32.dllGetFileSize
KERNEL32.dllGetLogicalDriveStringsW
KERNEL32.dllFindFirstChangeNotificationW
KERNEL32.dllFindCloseChangeNotification
KERNEL32.dllGetFileAttributesW
KERNEL32.dllGetModuleHandleA
KERNEL32.dllFindNextFileW
KERNEL32.dllFindFirstFileW
KERNEL32.dllFindClose
KERNEL32.dllGlobalSize
KERNEL32.dllGetCurrentProcessId
KERNEL32.dllGetTempPathW
KERNEL32.dllGetCurrentDirectoryW
KERNEL32.dllSetLastError
KERNEL32.dllDeleteFileW
KERNEL32.dllCreateDirectoryW
KERNEL32.dllMoveFileW
KERNEL32.dllRemoveDirectoryW
KERNEL32.dllSetFileAttributesW
KERNEL32.dllCreateFileW
KERNEL32.dllSetFileTime
KERNEL32.dllCloseHandle
KERNEL32.dllGetWindowsDirectoryW
KERNEL32.dllFormatMessageW
KERNEL32.dllLocalFree
KERNEL32.dllGetModuleFileNameW
KERNEL32.dllLoadLibraryW
KERNEL32.dllLoadLibraryExW
KERNEL32.dllFreeLibrary
KERNEL32.dllGlobalLock
KERNEL32.dllGlobalUnlock
KERNEL32.dllHeapAlloc
KERNEL32.dllGetProcessHeap
KERNEL32.dllHeapFree
KERNEL32.dllGetModuleHandleW
KERNEL32.dllGetProcAddress
KERNEL32.dllGetDiskFreeSpaceW
KERNEL32.dllGetDriveTypeW
KERNEL32.dllGetVolumeInformationW
KERNEL32.dllWideCharToMultiByte
KERNEL32.dllMultiByteToWideChar
KERNEL32.dllGetLastError
KERNEL32.dllGetTickCount
KERNEL32.dllProcess32FirstW
KERNEL32.dllCreateToolhelp32Snapshot
KERNEL32.dllSleep
KERNEL32.dllSetPriorityClass
KERNEL32.dllExpandEnvironmentStringsW
KERNEL32.dllVirtualAlloc
KERNEL32.dllVirtualFree
KERNEL32.dllSetEvent
KERNEL32.dllInitializeCriticalSection
KERNEL32.dllLoadLibraryA
KERNEL32.dllLocalAlloc
KERNEL32.dllGetCurrentThreadId
KERNEL32.dllOpenProcess
KERNEL32.dllInterlockedExchange
KERNEL32.dllRaiseException
KERNEL32.dllGetStartupInfoA
KERNEL32.dllWriteFile
WTSAPI32.dllWTSSendMessageW
KERNEL32.dllVirtualQuery
KERNEL32.dllGetSystemTimeAsFileTime
KERNEL32.dllGetModuleHandleA
KERNEL32.dllCreateEventA
KERNEL32.dllGetModuleFileNameW
KERNEL32.dllLoadLibraryA
KERNEL32.dllTerminateProcess
KERNEL32.dllGetCurrentProcess
KERNEL32.dllCreateToolhelp32Snapshot
KERNEL32.dllThread32First
KERNEL32.dllGetCurrentProcessId
KERNEL32.dllGetCurrentThreadId
KERNEL32.dllOpenThread
KERNEL32.dllThread32Next
KERNEL32.dllCloseHandle
KERNEL32.dllSuspendThread
KERNEL32.dllResumeThread
KERNEL32.dllWriteProcessMemory
KERNEL32.dllGetSystemInfo
KERNEL32.dllVirtualAlloc
KERNEL32.dllVirtualProtect
KERNEL32.dllVirtualFree
KERNEL32.dllGetProcessAffinityMask
KERNEL32.dllSetProcessAffinityMask
KERNEL32.dllGetCurrentThread
KERNEL32.dllSetThreadAffinityMask
KERNEL32.dllSleep
KERNEL32.dllFreeLibrary
KERNEL32.dllGetTickCount
KERNEL32.dllGlobalFree
KERNEL32.dllGetProcAddress
KERNEL32.dllLocalAlloc
KERNEL32.dllLocalFree
KERNEL32.dllExitProcess
KERNEL32.dllEnterCriticalSection
KERNEL32.dllLeaveCriticalSection
KERNEL32.dllInitializeCriticalSection
KERNEL32.dllDeleteCriticalSection
KERNEL32.dllGetModuleHandleW
KERNEL32.dllLoadResource
KERNEL32.dllMultiByteToWideChar
KERNEL32.dllFindResourceExW
KERNEL32.dllFindResourceExA
KERNEL32.dllWideCharToMultiByte
KERNEL32.dllGetThreadLocale
KERNEL32.dllGetUserDefaultLCID
KERNEL32.dllGetSystemDefaultLCID
KERNEL32.dllEnumResourceNamesA
KERNEL32.dllEnumResourceNamesW
KERNEL32.dllEnumResourceLanguagesA
KERNEL32.dllEnumResourceLanguagesW
KERNEL32.dllEnumResourceTypesA
KERNEL32.dllEnumResourceTypesW
KERNEL32.dllCreateFileW
KERNEL32.dllLoadLibraryW
KERNEL32.dllGetLastError
KERNEL32.dllFlushFileBuffers
KERNEL32.dllCreateFileA
KERNEL32.dllWriteConsoleW
KERNEL32.dllGetConsoleOutputCP
KERNEL32.dllWriteConsoleA
KERNEL32.dllGetCommandLineA
KERNEL32.dllRaiseException
KERNEL32.dllRtlUnwind
KERNEL32.dllHeapFree
KERNEL32.dllGetCPInfo
KERNEL32.dllInterlockedIncrement
KERNEL32.dllInterlockedDecrement
KERNEL32.dllGetACP
KERNEL32.dllGetOEMCP
KERNEL32.dllIsValidCodePage
KERNEL32.dllTlsGetValue
KERNEL32.dllTlsAlloc
KERNEL32.dllTlsSetValue
KERNEL32.dllTlsFree
KERNEL32.dllSetLastError
KERNEL32.dllUnhandledExceptionFilter
KERNEL32.dllSetUnhandledExceptionFilter
KERNEL32.dllIsDebuggerPresent
KERNEL32.dllHeapAlloc
KERNEL32.dllLCMapStringA
KERNEL32.dllLCMapStringW
KERNEL32.dllSetHandleCount
KERNEL32.dllGetStdHandle
KERNEL32.dllGetFileType
KERNEL32.dllGetStartupInfoA
KERNEL32.dllGetModuleFileNameA
KERNEL32.dllFreeEnvironmentStringsA
KERNEL32.dllGetEnvironmentStrings
KERNEL32.dllFreeEnvironmentStringsW
KERNEL32.dllGetEnvironmentStringsW
KERNEL32.dllHeapCreate
KERNEL32.dllHeapDestroy
KERNEL32.dllQueryPerformanceCounter
KERNEL32.dllHeapReAlloc
KERNEL32.dllGetStringTypeA
KERNEL32.dllGetStringTypeW
KERNEL32.dllGetLocaleInfoA
KERNEL32.dllHeapSize
KERNEL32.dllWriteFile
KERNEL32.dllSetFilePointer
KERNEL32.dllGetConsoleCP
KERNEL32.dllGetConsoleMode
KERNEL32.dllInitializeCriticalSectionAndSpinCount
KERNEL32.dllSetStdHandle
USER32.dllGetUserObjectInformationW
USER32.dllCharUpperBuffW
USER32.dllMessageBoxW
USER32.dllGetProcessWindowStation
KERNEL32.dllLocalAlloc
KERNEL32.dllLocalFree
KERNEL32.dllGetModuleFileNameW
KERNEL32.dllGetProcessAffinityMask
KERNEL32.dllSetProcessAffinityMask
KERNEL32.dllSetThreadAffinityMask
KERNEL32.dllSleep
KERNEL32.dllExitProcess
KERNEL32.dllFreeLibrary
KERNEL32.dllLoadLibraryA
KERNEL32.dllGetModuleHandleA
KERNEL32.dllGetProcAddress
USER32.dllGetProcessWindowStation
USER32.dllGetUserObjectInformationW

StringTable 040904b0

CompanyNameIgor Pavlov
FileDescription7-Zip File Manager
FileVersion19.00
InternalName7zFM
LegalCopyrightCopyright (c) 1999-2018 Igor Pavlov
OriginalFilename7zFM.exe
ProductName7-Zip
ProductVersion19.00

VS_FIXEDFILEINFO

FileVersion19.0.0.0
ProductVersion19.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d05084208BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK