msseedir.dll - WIAVIDEO.DLL - WIA Video

info
MZ
PE
resources
strings
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	msseedir.dll
size	145920 (0x23a00)
md5	c6759f4c3b35ce4fe9e9a4aa481ac352

type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	Win.Trojan.Agent-31 FOUND
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xc8

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000080: 00 00 00 00 00 00 00 00                           |........        |

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	4
TimeDateStamp	0x41536fd9
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	8.0
SizeOfCode	0x18e00
SizeOfInitializedData	0x12200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x4c28
BaseOfCode	0x1000
ImageBase	0x180000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	5.2
Reserved1	0
SizeOfImage	0x2e000
SizeOfHeaders	0x400
CheckSum	0x25ac8
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x18cc6	0x18e00	R-X CODE
.data	0x1a000	0x10278	0x8a00	RW- IDATA
xdata	0x2b000	0x228	0x400	RW- IDATA
.rsrc	0x2c000	0x19e0	0x1a00	R-- IDATA

Data Directory

type	va	size
EXPORT	0x19c80	0x46
IMPORT	0x19224	0x264
RESOURCE	0x2c000	0x19e0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0x1360	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x1000	0x358
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
REGISTRY	#102	767
TYPELIB	#1	4504
STRING	#7	98
VERSION	#1	892

id	lang	string
100	1033	WiaVideo
101	1033	WiaVideo Class
103	1033	Picture
104	1033	%03d

module_name	hint	function_name
kernel32.dll	1218	lstrcpyW
kernel32.dll	714	IsBadWritePtr
kernel32.dll	473	GetFileType
kernel32.dll	449	GetEnvironmentStrings
kernel32.dll	677	HeapDestroy
kernel32.dll	793	MultiByteToWideChar
kernel32.dll	333	FreeEnvironmentStringsW
kernel32.dll	925	RtlUnwind
kernel32.dll	1103	UnmapViewOfFile
kernel32.dll	618	GetTickCount
kernel32.dll	1160	WideCharToMultiByte
kernel32.dll	595	GetSystemTimeAsFileTime
kernel32.dll	428	GetCurrentProcessId
kernel32.dll	887	ReleaseMutex
kernel32.dll	992	SetEvent
kernel32.dll	818	OpenProcess
kernel32.dll	340	GetACP
kernel32.dll	145	CreateNamedPipeA
kernel32.dll	451	GetEnvironmentStringsW
kernel32.dll	572	GetStartupInfoA
kernel32.dll	1100	UnhandledExceptionFilter
kernel32.dll	116	CreateEventA
kernel32.dll	1059	SetUnhandledExceptionFilter
kernel32.dll	1130	VirtualQuery
kernel32.dll	503	GetModuleHandleA
kernel32.dll	1179	WriteFile
kernel32.dll	532	GetOEMCP
kernel32.dll	1128	VirtualProtect
kernel32.dll	172	CreateTimerQueueTimer
kernel32.dll	708	IsBadCodePtr
kernel32.dll	144	CreateMutexW
kernel32.dll	487	GetLastError
kernel32.dll	752	LoadLibraryA
kernel32.dll	489	GetLocaleInfoA
kernel32.dll	219	EnterCriticalSection
kernel32.dll	574	GetStdHandle
kernel32.dll	214	DuplicateHandle
kernel32.dll	164	CreateThread
kernel32.dll	1138	WaitForSingleObject
kernel32.dll	192	DeleteCriticalSection
kernel32.dll	589	GetSystemInfo
kernel32.dll	678	HeapFree
kernel32.dll	1209	lstrcatW
kernel32.dll	908	ResetEvent
kernel32.dll	697	InitializeCriticalSection
kernel32.dll	634	GetVersionExA
kernel32.dll	711	IsBadReadPtr
kernel32.dll	736	LCMapStringA
kernel32.dll	674	HeapAlloc
kernel32.dll	1071	Sleep
kernel32.dll	1136	WaitForMultipleObjects
kernel32.dll	87	ConnectNamedPipe
kernel32.dll	431	GetCurrentThreadId
kernel32.dll	1016	SetLastError
kernel32.dll	750	LeaveCriticalSection
kernel32.dll	332	FreeEnvironmentStringsA
kernel32.dll	851	QueryPerformanceCounter
kernel32.dll	207	DisconnectNamedPipe
kernel32.dll	1083	TerminateProcess
kernel32.dll	201	DeleteTimerQueueTimer
kernel32.dll	501	GetModuleFileNameA
kernel32.dll	349	GetCPInfo
kernel32.dll	738	LCMapStringW
USER32.dll	95	CreateIconFromResource
USER32.dll	191	DrawIcon
USER32.dll	784	wsprintfW
USER32.dll	727	TrackPopupMenu
ADVAPI32.dll	688	SetSecurityDescriptorDacl
ADVAPI32.dll	369	InitializeSecurityDescriptor
msvcrt.dll	1056	exit
msvcrt.dll	1284	wcstok
msvcrt.dll	1082	free
msvcrt.dll	1179	scanf
msvcrt.dll	1225	swprintf
msvcrt.dll	1108	isdigit
msvcrt.dll	1263	wcschr
msvcrt.dll	1154	memmove
msvcrt.dll	1140	malloc
msvcrt.dll	1273	wcsncmp
msvcrt.dll	1068	fgetws
msvcrt.dll	1261	wcscat
msvcrt.dll	1075	fprintf
msvcrt.dll	1175	realloc
msvcrt.dll	1270	wcslen
msvcrt.dll	1266	wcscpy
msvcrt.dll	1152	memcpy
msvcrt.dll	1043	calloc
msvcrt.dll	1294	wprintf
msvcrt.dll	1220	strtok
msvcrt.dll	1283	wcstod
msvcrt.dll	1163	printf
msvcrt.dll	1264	wcscmp
msvcrt.dll	481	_ltow
msvcrt.dll	1282	wcsstr
msvcrt.dll	1286	wcstol
msvcrt.dll	1242	towupper
msvcrt.dll	1156	memset
msvcrt.dll	755	_strnicmp
msvcrt.dll	1257	vwprintf
msvcrt.dll	1063	fflush
msvcrt.dll	903	_wcsnset
msvcrt.dll	1011	_wtoi
msvcrt.dll	745	_stricmp

ord	entry_va	function_name
1	0x1450	itxysnae

module_name	YCQUEB.dll
flags	0
timestamp	2004-09-24 00:52:41
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x19cac
Functions(1)	0x19ca8
NameOrdinals(1)	0x19cb0

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	WIA Video
FileVersion	5.2.3790.3959 (srv03_sp2_rtm.070216-1710)
InternalName	WIA Video
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	WIAVIDEO.DLL
ProductName	Microsoft® Windows® Operating System
ProductVersion	5.2.3790.3959

VS_FIXEDFILEINFO

FileVersion	5.2.3790.3959
ProductVersion	5.2.3790.3959
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	140336	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

msseedir.dll- -

MZ Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

msseedir.dll
-
-