filenameNCScnet4.dll
size60928 (0xee00)
md5d1373e21e6ecfe320b91134e9b4e3f47
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
149307293
132307292
147307294
1235072711
10127
1313072918
146307291
148210221
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4d515b0b
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x9600
SizeOfInitializedData0x10000
SizeOfUninitializedData0
AddressOfEntryPoint0xa068
BaseOfCode0x1000
BaseOfData0xb000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x1d000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x95c40x9600R-X CODE
.rdata0xb0000x41280x4200R-- IDATA
.data0x100000xaca40x200RW- IDATA
.rsrc0x1b0000x4d80x600R-- IDATA
.reloc0x1c0000x9c80xa00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xeeb00x278
IMPORT0xe31c0xa0
RESOURCE0x1b0000x4d8
EXCEPTION00
SECURITY00
BASERELOC0x1c0000x92c
DEBUG0xb2300x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0xe1b00x40
Bound_IAT00
IAT0xb0000x218
Delay_IAT00
CLR_Header00
typenamesizecp
DIALOG#1011900
VERSION#18840
module_namehintordfunction_name
CRYPT32.dll37CertDuplicateCertificateContext
CRYPT32.dll74CertGetNameStringW
CRYPT32.dll63CertFreeCertificateContext
CRYPT32.dll88CertOpenSystemStoreW
CRYPT32.dll44CertEnumCertificatesInStore
CRYPT32.dll18CertCloseStore
WSOCK32.dll52
WSOCK32.dll8
WSOCK32.dll57
KERNEL32.dll1146WideCharToMultiByte
KERNEL32.dll500GetModuleFileNameA
KERNEL32.dll332FreeLibrary
KERNEL32.dll505GetModuleHandleW
KERNEL32.dll486GetLastError
KERNEL32.dll501GetModuleFileNameW
KERNEL32.dll544GetProcAddress
KERNEL32.dll756LoadLibraryW
KERNEL32.dll715IsBadWritePtr
KERNEL32.dll794MultiByteToWideChar
KERNEL32.dll101CopyFileW
KERNEL32.dll113CreateDirectoryW
KERNEL32.dll582GetSystemDirectoryW
KERNEL32.dll765LocalFree
KERNEL32.dll328FormatMessageW
KERNEL32.dll591GetSystemTimeAsFileTime
KERNEL32.dll426GetCurrentProcessId
KERNEL32.dll429GetCurrentThreadId
KERNEL32.dll614GetTickCount
KERNEL32.dll852QueryPerformanceCounter
KERNEL32.dll698InterlockedCompareExchange
KERNEL32.dll1057Sleep
KERNEL32.dll701InterlockedExchange
KERNEL32.dll721IsDebuggerPresent
KERNEL32.dll1069TerminateProcess
KERNEL32.dll425GetCurrentProcess
KERNEL32.dll1086UnhandledExceptionFilter
KERNEL32.dll1045SetUnhandledExceptionFilter
KERNEL32.dll195DeleteFileW
USER32.dll284GetDesktopWindow
USER32.dll511MessageBoxW
USER32.dll249GetActiveWindow
USER32.dll166DialogBoxParamW
USER32.dll287GetDlgItem
USER32.dll611SendMessageW
USER32.dll211EndDialog
USER32.dll633SetFocus
ADVAPI32.dll616RegQueryValueExW
ADVAPI32.dll603RegOpenKeyExW
ADVAPI32.dll351GetUserNameW
ADVAPI32.dll554RegCloseKey
NCSUtil4.dll765NCSPrefSetMachineKeyLock
NCSUtil4.dll758NCSPrefMachineUnLock
NCSUtil4.dll745NCSPrefGetBoolean
NCSUtil4.dll798NCSThreadTerminate
NCSUtil4.dll740NCSPrefCreateUserKeyLock
NCSUtil4.dll709NCSGetTempDirectory
NCSUtil4.dll751NCSPrefGetString
NCSUtil4.dll720NCSIsService
NCSUtil4.dll655NCSFileGetVersion
NCSUtil4.dll805NCSVersionCompare
NCSUtil4.dll769NCSPrefSetUserBoolean
NCSUtil4.dll756NCSPrefGetUserString
NCSUtil4.dll755NCSPrefGetUserInt
NCSUtil4.dll643NCSEncodeBase64Message
NCSUtil4.dll722NCSLog
NCSUtil4.dll732NCSMutexInit
NCSUtil4.dll647NCSEventCreate
NCSUtil4.dll796NCSThreadSpawn
NCSUtil4.dll652NCSEventWait
NCSUtil4.dll788NCSThreadIsRunning
NCSUtil4.dll784NCSSleep
NCSUtil4.dll651NCSEventSet
NCSUtil4.dll632NCSDbgGetExceptionInfoMsg
NCSUtil4.dll649NCSEventDestroy
NCSUtil4.dll731NCSMutexFini
NCSUtil4.dll785NCSStrDup
NCSUtil4.dll772NCSPrefSetUserKeyLock
NCSUtil4.dll753NCSPrefGetUserBoolean
NCSUtil4.dll775NCSPrefUserUnLock
NCSUtil4.dll743NCSPrefDeleteValueUser
NCSUtil4.dll776NCSRealloc
NCSUtil4.dll729NCSMutexBegin
NCSUtil4.dll730NCSMutexEnd
NCSUtil4.dll711NCSGetTimeStampMs
NCSUtil4.dll698NCSFree
NCSUtil4.dll727NCSMalloc
NCSUtil4.dll707NCSGetPlatform
NCSUtil4.dll786NCSStrDupT
NCSUtil4.dll725NCSLogSetServer
NCSUtil4.dll802NCSUtf8Encode
MSVCR90.dll956_swprintf
MSVCR90.dll796_onexit
MSVCR90.dll630_lock
MSVCR90.dll150__dllonexit
MSVCR90.dll998_unlock
MSVCR90.dll140__clean_type_info_names_internal
MSVCR90.dll106__CppXcptFilter
MSVCR90.dll267_adjust_fdiv
MSVCR90.dll277_amsg_exit
MSVCR90.dll517_initterm_e
MSVCR90.dll516_initterm
MSVCR90.dll352_decode_pointer
MSVCR90.dll363_encoded_null
MSVCR90.dll1252free
MSVCR90.dll647_malloc_crt
MSVCR90.dll362_encode_pointer
MSVCR90.dll1425wcsncmp
MSVCR90.dll1083_wcsnicmp
MSVCR90.dll1318memcpy
MSVCR90.dll1077_wcslwr
MSVCR90.dll1434wcsstr
MSVCR90.dll370_except_handler3
MSVCR90.dll1350sprintf
MSVCR90.dll1320memmove
MSVCR90.dll331_crt_debugger_hook
MSVCR90.dll1132_wfopen
MSVCR90.dll1232feof
MSVCR90.dll1193_wtoi
MSVCR90.dll1239fgetws
MSVCR90.dll1385swscanf
MSVCR90.dll1231fclose
MSVCR90.dll1322memset
MSVCR90.dll1426wcsncpy
MSVCR90.dll926_strlwr
MSVCR90.dll1377strstr
MSVCR90.dll1050_vswprintf_c_l
MSVCR90.dll371_except_handler4_common
ordentry_vafunction_name
10x2470DllMain
20x24e0NCSWinInetAddClient
30x2510NCSWinInetRemoveClient
40x8b20NCScnetCreate
50x8ae0NCScnetCreateEx
60x8350NCScnetCreateProxy
70x7fa0NCScnetDestroy
80x6f60NCScnetInit
90x1850NCScnetIsPollingConnection
100x8aa0NCScnetPostURL
110x82f0NCScnetPostURLExt
120x7890NCScnetPostURLExt2
130x6dc0NCScnetSendPacket
140x6ed0NCScnetSetIISDLLName
150x1130NCScnetSetProxy
160x6d60NCScnetSetRecvCB
170x6ea0NCScnetSetSendBlocking
180x6d90NCScnetSetSentCB
190x6f90NCScnetShutdown
200x6fd0NCScnetUseWinHttp
210x5ef0NCScnetVerifyURL
module_nameNCScnet4.dll
flags0
timestamp2011-02-08 15:02:35
version0.0
ordinal_base1
nFunctions21
nNames21
Names(21)0xef2c
Functions(21)0xeed8
NameOrdinals(21)0xef80

StringTable 040904b0

CompanyNameERDAS, Inc.
FileDescriptionNCScnet4
FileVersion4,2,1,128
InternalNameNCScnet4
LegalCopyrightCopyright ©1999-2010
OriginalFilenameNCScnet4.dll
PatentsCovered by one or more of U.S. Patents #6,442,298, #6,201,897 & #6,633,688
ProductNameERDAS NCScnet4
ProductVersion4,2,1,128

VS_FIXEDFILEINFO

FileVersion4.2.1.128
ProductVersion4.2.1.128
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
060928DLL02/08/2011 15:02:35#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK