filenamevlc.exe
size108032 (0x1a600)
md5b0fd3872f6958aa93d6a7103ac01852c
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x4e1edf37
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion2.56
SizeOfCode0x6400
SizeOfInitializedData0x1a000
SizeOfUninitializedData0xc00
AddressOfEntryPoint0x1110
BaseOfCode0x1000
BaseOfData0x8000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x20000
SizeOfHeaders0x400
CheckSum0x1eb7e
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x63480x6400R-X CODE IDATA
.data0x80000x280x200RW- IDATA
.rdata0x90000xbe00xc00R-- IDATA
.bss0xa0000xa200RW- UDATA
.idata0xb0000x8ac0xa00RW- IDATA
.rsrc0xc0000x122880x12400RW- IDATA
.gnu_deb0x1f0000x100x200R-- DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0xb0000x8ac
RESOURCE0xc0000x12288
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#122160
ICON#213840
ICON#3544300
ICON#496400
ICON#542640
ICON#611280
GROUP_ICONVLC_ICON900
VERSION#17280
module_namehintordfunction_name
libvlc.dlllibvlc_add_intf
libvlc.dll157libvlc_new
libvlc.dll158libvlc_playlist_play
libvlc.dll160libvlc_release
libvlc.dll230libvlc_wait
KERNEL32.dll107DeleteCriticalSection
KERNEL32.dll126EnterCriticalSection
KERNEL32.dll156ExitProcess
KERNEL32.dll214FreeLibrary
KERNEL32.dll237GetCommandLineA
KERNEL32.dll238GetCommandLineW
KERNEL32.dll325GetLastError
KERNEL32.dll336GetModuleFileNameW
KERNEL32.dll337GetModuleHandleA
KERNEL32.dll364GetProcAddress
KERNEL32.dll386GetStartupInfoA
KERNEL32.dll401GetSystemTime
KERNEL32.dll434GetVersionExW
KERNEL32.dll484HeapSetInformation
KERNEL32.dll492InitializeCriticalSection
KERNEL32.dll497InterlockedExchange
KERNEL32.dll512IsDBCSLeadByteEx
KERNEL32.dll513IsDebuggerPresent
KERNEL32.dll523LeaveCriticalSection
KERNEL32.dll527LoadLibraryW
KERNEL32.dll534LocalFree
KERNEL32.dll560MultiByteToWideChar
KERNEL32.dll739SetUnhandledExceptionFilter
KERNEL32.dll751Sleep
KERNEL32.dll798VirtualProtect
KERNEL32.dll801VirtualQuery
KERNEL32.dll814WideCharToMultiByte
msvcrt.dll55__getmainargs
msvcrt.dll61__lc_codepage
msvcrt.dll65__mb_cur_max
msvcrt.dll77__p__environ
msvcrt.dll79__p__fmode
msvcrt.dll99__set_app_type
msvcrt.dll147_cexit
msvcrt.dll182_errno
msvcrt.dll266_iob
msvcrt.dll383_onexit
msvcrt.dll426_setmode
msvcrt.dll531_wfopen
msvcrt.dll549_wremove
msvcrt.dll583abort
msvcrt.dll590atexit
msvcrt.dll604exit
msvcrt.dll607fclose
msvcrt.dll610fflush
msvcrt.dll620fputc
msvcrt.dll625free
msvcrt.dll632fwprintf
msvcrt.dll633fwrite
msvcrt.dll637getenv
msvcrt.dll671localeconv
msvcrt.dll676malloc
msvcrt.dll682memcpy
msvcrt.dll706signal
msvcrt.dll721strlen
msvcrt.dll734swprintf
msvcrt.dll748vfprintf
msvcrt.dll756wcscmp
msvcrt.dll761wcslen
SHELL32.DLL2CommandLineToArgvW
SHELL32.DLL91SHGetFolderPathW
USER32.dll439MessageBoxW
WININET.DLL58FtpPutFileW
WININET.DLL116InternetCloseHandle
WININET.DLL123InternetConnectW
WININET.DLL160InternetOpenW

StringTable 040904E4

CompanyNamethe VideoLAN Team
ProductNameVLC media player
ProductVersion1,1,11,0
InternalName
OriginalFilenamevlc.exe
FileVersion1.1.11
FileDescriptionVLC media player
LegalCopyright(c) 1996-2011 the VideoLAN Team

VS_FIXEDFILEINFO

FileVersion1.1.11.0
ProductVersion1.1.11.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0108032EXE07/14/2011 12:21:11#
15c115HTM#
8ffc54430PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER