filenameresource.dat_1363139_315392.dll
size315392 (0x4d000)
md5d636e5b90daa1596718081ede840d03f
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1265032715
1255072725
1105072746
10950727154
9340357
10147
1135072733
122507271
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5588373f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion8.0
SizeOfCode0x37000
SizeOfInitializedData0x15000
SizeOfUninitializedData0
AddressOfEntryPoint0x27c24
BaseOfCode0x1000
BaseOfData0x38000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x50000
SizeOfHeaders0x1000
CheckSum0x4e72f
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x36bcb0x37000R-X CODE
.rdata0x380000xe5300xf000R-- IDATA
.data0x470000x43200x2000RW- IDATA
.rsrc0x4c0000x4640x1000R-- IDATA
.reloc0x4d0000x26660x3000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x463b00x180
IMPORT0x456bc0x50
RESOURCE0x4c0000x464
EXCEPTION00
SECURITY00
BASERELOC0x4d0000x2174
DEBUG0x382800x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x44f380x40
Bound_IAT00
IAT0x380000x23c
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#18761252
MANIFEST#2861252
module_namehintordfunction_name
USER32.dll497OemToCharA
USER32.dll48CharToOemA
ADVAPI32.dll318IsValidAcl
ADVAPI32.dll246GetKernelObjectSecurity
ADVAPI32.dll265GetSecurityDescriptorDacl
ADVAPI32.dll264GetSecurityDescriptorControl
ADVAPI32.dll335LookupPrivilegeValueA
ADVAPI32.dll562SetKernelObjectSecurity
ADVAPI32.dll268GetSecurityDescriptorOwner
ADVAPI32.dll320IsValidSid
ADVAPI32.dll270GetSecurityDescriptorSacl
ADVAPI32.dll428OpenProcessToken
ADVAPI32.dll319IsValidSecurityDescriptor
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll266GetSecurityDescriptorGroup
KERNEL32.dll75CreateDirectoryA
KERNEL32.dll458GetSystemTimeAsFileTime
KERNEL32.dll131DeleteFileA
KERNEL32.dll547InitializeCriticalSection
KERNEL32.dll854Sleep
KERNEL32.dll593LeaveCriticalSection
KERNEL32.dll970lstrcpynW
KERNEL32.dll86CreateFileW
KERNEL32.dll973lstrlenW
KERNEL32.dll553InterlockedExchange
KERNEL32.dll369GetLastError
KERNEL32.dll152EnterCriticalSection
KERNEL32.dll964lstrcmpiW
KERNEL32.dll340GetDriveTypeW
KERNEL32.dll96CreateMutexA
KERNEL32.dll528HeapAlloc
KERNEL32.dll706ReleaseMutex
KERNEL32.dll322GetCurrentProcess
KERNEL32.dll52CloseHandle
KERNEL32.dll534HeapFree
KERNEL32.dll912WaitForSingleObject
KERNEL32.dll492GetVolumeInformationW
KERNEL32.dll419GetProcessHeap
KERNEL32.dll793SetFileAttributesA
KERNEL32.dll362GetFullPathNameW
KERNEL32.dll206FindClose
KERNEL32.dll361GetFullPathNameA
KERNEL32.dll371GetLocalTime
KERNEL32.dll143DosDateTimeToFileTime
KERNEL32.dll845SetVolumeLabelA
KERNEL32.dll220FindNextFileA
KERNEL32.dll83CreateFileA
KERNEL32.dll357GetFileTime
KERNEL32.dll795SetFilePointer
KERNEL32.dll372GetLocaleInfoA
KERNEL32.dll196FileTimeToLocalFileTime
KERNEL32.dll488GetVersion
KERNEL32.dll784SetEndOfFile
KERNEL32.dll859SystemTimeToFileTime
KERNEL32.dll794SetFileAttributesW
KERNEL32.dll602LocalFileTimeToFileTime
KERNEL32.dll799SetFileTime
KERNEL32.dll339GetDriveTypeA
KERNEL32.dll916WideCharToMultiByte
KERNEL32.dll491GetVolumeInformationA
KERNEL32.dll350GetFileAttributesA
KERNEL32.dll353GetFileAttributesW
KERNEL32.dll197FileTimeToSystemTime
KERNEL32.dll629MultiByteToWideChar
KERNEL32.dll210FindFirstFileA
KERNEL32.dll846SetVolumeLabelW
KERNEL32.dll511GlobalFree
KERNEL32.dll966lstrcpyA
KERNEL32.dll972lstrlenA
KERNEL32.dll504GlobalAlloc
KERNEL32.dll957lstrcatA
KERNEL32.dll538HeapReAlloc
KERNEL32.dll552InterlockedDecrement
KERNEL32.dll260GetCPInfo
KERNEL32.dll727RtlUnwind
KERNEL32.dll788SetEnvironmentVariableW
KERNEL32.dll622MoveFileA
KERNEL32.dll132DeleteFileW
KERNEL32.dll556InterlockedIncrement
KERNEL32.dll823SetStdHandle
KERNEL32.dll358GetFileType
KERNEL32.dll78CreateDirectoryW
KERNEL32.dll213FindFirstFileW
KERNEL32.dll540HeapSize
KERNEL32.dll326GetCurrentThreadId
KERNEL32.dll272GetCommandLineA
KERNEL32.dll489GetVersionExA
KERNEL32.dll862TerminateProcess
KERNEL32.dll878UnhandledExceptionFilter
KERNEL32.dll842SetUnhandledExceptionFilter
KERNEL32.dll569IsDebuggerPresent
KERNEL32.dll532HeapDestroy
KERNEL32.dll530HeapCreate
KERNEL32.dll899VirtualFree
KERNEL32.dll129DeleteCriticalSection
KERNEL32.dll897VirtualAlloc
KERNEL32.dll416GetProcAddress
KERNEL32.dll383GetModuleHandleA
KERNEL32.dll185ExitProcess
KERNEL32.dll932WriteFile
KERNEL32.dll441GetStdHandle
KERNEL32.dll381GetModuleFileNameA
KERNEL32.dll253GetACP
KERNEL32.dll403GetOEMCP
KERNEL32.dll575IsValidCodePage
KERNEL32.dll869TlsGetValue
KERNEL32.dll867TlsAlloc
KERNEL32.dll870TlsSetValue
KERNEL32.dll868TlsFree
KERNEL32.dll808SetLastError
KERNEL32.dll804SetHandleCount
KERNEL32.dll439GetStartupInfoA
KERNEL32.dll580LCMapStringA
KERNEL32.dll581LCMapStringW
KERNEL32.dll442GetStringTypeA
KERNEL32.dll445GetStringTypeW
KERNEL32.dll482GetTimeZoneInformation
KERNEL32.dll290GetConsoleCP
KERNEL32.dll307GetConsoleMode
KERNEL32.dll238FlushFileBuffers
KERNEL32.dll483GetUserDefaultLCID
KERNEL32.dll175EnumSystemLocalesA
KERNEL32.dll577IsValidLocale
KERNEL32.dll320GetCurrentDirectoryA
KERNEL32.dll246FreeEnvironmentStringsA
KERNEL32.dll341GetEnvironmentStrings
KERNEL32.dll247FreeEnvironmentStringsW
KERNEL32.dll343GetEnvironmentStringsW
KERNEL32.dll675QueryPerformanceCounter
KERNEL32.dll479GetTickCount
KERNEL32.dll323GetCurrentProcessId
KERNEL32.dll594LoadLibraryA
KERNEL32.dll58CompareStringA
KERNEL32.dll59CompareStringW
KERNEL32.dll787SetEnvironmentVariableA
KERNEL32.dll373GetLocaleInfoW
KERNEL32.dll921WriteConsoleA
KERNEL32.dll309GetConsoleOutputCP
KERNEL32.dll931WriteConsoleW
KERNEL32.dll693ReadFile
ordentry_vafunction_name
10x10a0UzpFeatures
20x1590UzpFreeMemBuffer
30x1510UzpMainI
40x1010UzpVersion2
50x1000UzpVersion
60x1daf0Wiz_Grep
70x1d340Wiz_Init
80x1d980Wiz_NoPrinting
90x1d3b0Wiz_SetOpts
100x1d6d0Wiz_SingleEntryUnzip
110x1d780Wiz_SingleEntryUnzpList
120x1d540Wiz_Unzip
130x1da60Wiz_UnzipToMemory
140x1dd30Wiz_Validate
module_nameUNZIP32.dll
flags0
timestamp2015-06-22 16:26:37
version0.0
ordinal_base1
nFunctions14
nNames14
Names(14)0x46410
Functions(14)0x463d8
NameOrdinals(14)0x46448

StringTable 040904B0

Comments
CompanyNameInfo-ZIP
FileDescriptionInfo-ZIP's UnZip DLL for Win32
FileVersion6.10
InternalNameUnZip32
LegalCopyrightInfo-ZIP 1996-2014
LegalTrademarks
OriginalFilenameUNZIP32.DLL
PrivateBuild
ProductNameInfo-ZIP's UnZip Windows DLL
ProductVersion6.10
SpecialBuild

VS_FIXEDFILEINFO

FileVersion6.1.0.0
ProductVersion6.1.0.0
StrucVersion0x10000
FileFlagsMask3
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0315392DLL06/22/2015 16:26:39#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK