filenamemsxml2.dll
size701440 (0xab400)
md5cc2f861b1c25f7507df0ea46e4ee5096
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
2592102
9320674
28917813
9320353
10240
64921020
2989232
952067103
9220671
962067185
6991111
9020671

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x416f2947
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion7.1
SizeOfCode0x80600
SizeOfInitializedData0x2b000
SizeOfUninitializedData0
AddressOfEntryPoint0xc3bd
BaseOfCode0x1000
BaseOfData0x82000
ImageBase0x69b10000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0xaf000
SizeOfHeaders0x400
CheckSum0xacbac
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x805100x80600R-X CODE
.data0x820000x97a00x9200RW- IDATA
.rsrc0x8c0000x190700x19200R-- IDATA
.reloc0xa60000x85700x8600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xe0f80xdf
IMPORT0x808880x64
RESOURCE0x8c0000x19070
EXCEPTION00
SECURITY00
BASERELOC0xa60000x8570
DEBUG0x814d80x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x27c
Delay_IAT0x803e40xc0
CLR_Header00
typenamesizecp
REGINSTREGINST431980
TYPELIB#1410720
ICON#17440
ICON#22960
ICON#322160
ICON#413840
ICON#57440
ICON#62960
ICON#722160
ICON#813840
STRING#71680
GROUP_ICON#128620
GROUP_ICON#129620
VERSION#18640
HTMLDEFAULTSS.XSL68190
idlangstring
1021033XML Files (*.xml)|*.xml|XSL Files (*.xsl)|*.xsl|All Files (*.*)|*.*|
module_namehintordfunction_name
ole32.dll145GetHGlobalFromStream
ole32.dll307StringFromCLSID
ole32.dll99CoTaskMemAlloc
ole32.dll117CreateBindCtx
ole32.dll104CoUninitialize
ole32.dll58CoInitialize
ole32.dll130CreateStreamOnHGlobal
ole32.dll6CLSIDFromProgID
ole32.dll14CoCreateFreeThreadedMarshaler
ole32.dll100CoTaskMemFree
ole32.dll16CoCreateInstance
SHLWAPI.dll117
SHLWAPI.dll56
SHLWAPI.dll136
SHLWAPI.dll60
SHLWAPI.dll116
SHLWAPI.dll42PathFindExtensionW
SHLWAPI.dll272UrlCanonicalizeW
SHLWAPI.dll2
SHLWAPI.dll44PathFindFileNameW
SHLWAPI.dll15
SHLWAPI.dll311
SHLWAPI.dll310
SHLWAPI.dll125
SHLWAPI.dll128
SHLWAPI.dll211StrCatW
SHLWAPI.dll26
SHLWAPI.dll221StrCmpNIA
SHLWAPI.dll86PathIsURLW
SHLWAPI.dll294UrlUnescapeW
SHLWAPI.dll112PathSearchAndQualifyW
SHLWAPI.dll278UrlCreateFromPathW
SHLWAPI.dll38PathCreateFromUrlW
SHLWAPI.dll292UrlIsW
SHLWAPI.dll52
SHLWAPI.dll226StrCpyW
SHLWAPI.dll68
SHLWAPI.dll266StrToIntW
SHLWAPI.dll222StrCmpNIW
SHLWAPI.dll45
SHLWAPI.dll223StrCmpNW
SHLWAPI.dll43
SHLWAPI.dll38
SHLWAPI.dll51
SHLWAPI.dll83
SHLWAPI.dll224StrCmpW
SHLWAPI.dll115
KERNEL32.dll826SuspendThread
KERNEL32.dll579LocalAlloc
KERNEL32.dll874VirtualProtect
KERNEL32.dll560LCMapStringW
KERNEL32.dll559LCMapStringA
KERNEL32.dll429GetStringTypeW
KERNEL32.dll426GetStringTypeA
KERNEL32.dll358GetLocaleInfoA
KERNEL32.dll517HeapReAlloc
KERNEL32.dll389GetOEMCP
KERNEL32.dll240GetACP
KERNEL32.dll876VirtualQuery
KERNEL32.dll702RtlUnwind
KERNEL32.dll329GetEnvironmentStringsW
KERNEL32.dll233FreeEnvironmentStringsW
KERNEL32.dll327GetEnvironmentStrings
KERNEL32.dll232FreeEnvironmentStringsA
KERNEL32.dll423GetStartupInfoA
KERNEL32.dll425GetStdHandle
KERNEL32.dll777SetHandleCount
KERNEL32.dll170ExitProcess
KERNEL32.dll258GetCommandLineA
KERNEL32.dll100CreateThread
KERNEL32.dll807SetThreadPriority
KERNEL32.dll69CreateEventA
KERNEL32.dll483GlobalAlloc
KERNEL32.dll927lstrcatW
KERNEL32.dll494GlobalLock
KERNEL32.dll501GlobalUnlock
KERNEL32.dll430GetSystemDefaultLCID
KERNEL32.dll453GetThreadLocale
KERNEL32.dll759SetEndOfFile
KERNEL32.dll935lstrcpyA
KERNEL32.dll941lstrlenA
KERNEL32.dll402GetProcAddress
KERNEL32.dll573LoadLibraryA
KERNEL32.dll234FreeLibrary
KERNEL32.dll926lstrcatA
KERNEL32.dll608MultiByteToWideChar
KERNEL32.dll929lstrcmpA
KERNEL32.dll173ExpandEnvironmentStringsA
KERNEL32.dll367GetModuleFileNameA
KERNEL32.dll840TlsSetValue
KERNEL32.dll839TlsGetValue
KERNEL32.dll832TerminateProcess
KERNEL32.dll308GetCurrentProcess
KERNEL32.dll369GetModuleHandleA
KERNEL32.dll652QueryPerformanceCounter
KERNEL32.dll458GetTickCount
KERNEL32.dll312GetCurrentThreadId
KERNEL32.dll309GetCurrentProcessId
KERNEL32.dll439GetSystemTimeAsFileTime
KERNEL32.dll531InterlockedDecrement
KERNEL32.dll535InterlockedIncrement
KERNEL32.dll942lstrlenW
KERNEL32.dll513HeapFree
KERNEL32.dll519HeapSize
KERNEL32.dll507HeapAlloc
KERNEL32.dll871VirtualFree
KERNEL32.dll868VirtualAlloc
KERNEL32.dll404GetProcessHeap
KERNEL32.dll135DuplicateHandle
KERNEL32.dll311GetCurrentThread
KERNEL32.dll42CloseHandle
KERNEL32.dll468GetVersionExA
KERNEL32.dll837TlsAlloc
KERNEL32.dll838TlsFree
KERNEL32.dll451GetThreadContext
KERNEL32.dll532InterlockedExchange
KERNEL32.dll824Sleep
KERNEL32.dll884WaitForSingleObject
KERNEL32.dll697ResumeThread
KERNEL32.dll763SetEvent
KERNEL32.dll694ResetEvent
KERNEL32.dll138EnterCriticalSection
KERNEL32.dll572LeaveCriticalSection
KERNEL32.dll630OutputDebugStringA
KERNEL32.dll683ReleaseSemaphore
KERNEL32.dll117DeleteCriticalSection
KERNEL32.dll96CreateSemaphoreA
KERNEL32.dll526InitializeCriticalSection
KERNEL32.dll511HeapDestroy
KERNEL32.dll355GetLastError
KERNEL32.dll509HeapCreate
KERNEL32.dll435GetSystemInfo
KERNEL32.dll781SetLastError
KERNEL32.dll110DebugBreak
KERNEL32.dll656RaiseException
KERNEL32.dll888WideCharToMultiByte
KERNEL32.dll347GetFullPathNameA
KERNEL32.dll823SizeofResource
KERNEL32.dll592LockResource
KERNEL32.dll578LoadResource
KERNEL32.dll213FindResourceA
KERNEL32.dll574LoadLibraryExA
KERNEL32.dll229FormatMessageA
KERNEL32.dll183FileTimeToSystemTime
KERNEL32.dll829SystemTimeToFileTime
KERNEL32.dll246GetCPInfo
KERNEL32.dll901WriteFile
KERNEL32.dll344GetFileType
KERNEL32.dll768SetFilePointer
KERNEL32.dll73CreateFileA
KERNEL32.dll224FlushFileBuffers
KERNEL32.dll669ReadFile
VERSION.dllGetFileVersionInfoA
VERSION.dll10VerQueryValueA
VERSION.dll1GetFileVersionInfoSizeA
ordentry_vafunction_name
60x1c4ab
70x1c497
80x1c47d
90x1c4bf
100x1c4cf
110x1c483
120x1c44a
130xe1d7DllCanUnloadNow
140xc548DllGetClassObject
150xbb2bDllMain
160x1c0e4DllRegisterServer
170x1c28cDllUnregisterServer
module_nameMSXML2.dll
flags0
timestamp2004-10-15 01:35:00
version0.0
ordinal_base6
nFunctions12
nNames5
Names(5)0xe150
Functions(12)0xe120
NameOrdinals(5)0xe164

StringTable 000004B0

CompanyNameMicrosoft Corporation
FileDescriptionXML OM for Win32
FileVersion8.30.9531.0
InternalNameMSXML2.dll
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameMSXML2.dll
ProductNameMicrosoft(R) MSXML 2.0 SP 3
ProductVersion8.30.9531.0
OleSelfRegister

VS_FIXEDFILEINFO

FileVersion8.30.9531.0
ProductVersion8.30.9531.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags8
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
0701440DLL10/15/2004 01:35:03#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK