filenameFINDX.DLL
size13824 (0x3600)
md5fec13a518d737acbb00104bca5b5e53e
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x3229f084
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion3.10
SizeOfCode0x1400
SizeOfInitializedData0x1e00
SizeOfUninitializedData0
AddressOfEntryPoint0x1112
BaseOfCode0x1000
BaseOfData0x3000
ImageBase0x403f0000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x8000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x12870x1400R-X CODE
.data0x30000xa0x200RW- IDATA
.idata0x40000x65c0x800RW- IDATA
.rsrc0x50000x11800x1200R-- IDATA
.reloc0x70000x1e60x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x21e00xa7
IMPORT0x40000x78
RESOURCE0x50000x1180
EXCEPTION00
SECURITY00
BASERELOC0x70000x148
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x41880xfc
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
ICON#22960
DIALOG#14140
DIALOG#21340
DIALOG#39660
STRING#12880
STRING#22080
GROUP_ICON#1340
VERSION#18120
idlangstring
11033Find Extensions
21033Do you really want to uninstall the Find Extensions?
31033Find On the Internet requires Internet Explorer 3.0 or later.
161033On the &Internet....lnk
171033In the &Knowledge Base....url
181033&Address....lnk
191033&Email Message....lnk
module_namehintordfunction_name
KERNEL32.dll669lstrcatA
KERNEL32.dll678lstrcpyA
KERNEL32.dll684lstrlenA
KERNEL32.dll376InterlockedExchange
KERNEL32.dll436MultiByteToWideChar
KERNEL32.dll173FreeLibrary
KERNEL32.dll274GetProcAddress
KERNEL32.dll397LoadLibraryA
KERNEL32.dll661_lclose
KERNEL32.dll664_lopen
KERNEL32.dll232GetFileSize
KERNEL32.dll403LocalAlloc
KERNEL32.dll518SearchPathA
KERNEL32.dll250GetModuleFileNameA
KERNEL32.dll551SetFileAttributesA
KERNEL32.dll52CreateDirectoryA
KERNEL32.dll633WinExec
KERNEL32.dll564SetPriorityClass
KERNEL32.dll208GetCurrentProcess
KERNEL32.dll407LocalFree
KERNEL32.dll377InterlockedIncrement
KERNEL32.dll375InterlockedDecrement
KERNEL32.dll665_lread
KERNEL32.dll91DisableThreadLibraryCalls
ADVAPI32.dll133RegDeleteKeyA
ADVAPI32.dll156RegQueryValueA
USER32.dll137DialogBoxParamA
USER32.dll421PostMessageA
USER32.dll480SetFocus
USER32.dll310GetWindowTextLengthA
USER32.dll515SetWindowLongA
USER32.dll452SendDlgItemMessageA
USER32.dll34CharPrevA
USER32.dll356KillTimer
USER32.dll509SetTimer
USER32.dll531ShowWindow
USER32.dll481SetForegroundWindow
USER32.dll233GetDlgItemTextA
USER32.dll231GetDlgItem
USER32.dll172EnableWindow
USER32.dll375LoadStringA
USER32.dll304GetWindowLongA
USER32.dll174EndDialog
USER32.dll520SetWindowTextA
USER32.dll454SendMessageA
USER32.dll401MoveWindow
USER32.dll325InsertMenuItemA
USER32.dll389MessageBoxA
SHELL32.dll46SHChangeNotify
SHELL32.dll102
SHELL32.dll61SHGetPathFromIDListA
SHELL32.dll85ShellExecuteA
SHELL32.dll63SHGetSpecialFolderLocation
SHELL32.dll55SHGetFileInfoA
SHELL32.dll53SHGetDesktopFolder
SHELL32.dll25
SHELL32.dll155
COMCTL32.dll350
ordentry_vafunction_name
10x21beConfigure
20x1107DllCanUnloadNow
30x10d0DllGetClassObject
40x1eacInstall
50x19c3InternetSearch
module_nameFINDX.DLL
flags0
timestamp1996-09-01 20:22:27
version0.0
ordinal_base1
nFunctions5
nNames5
Names(5)0x221c
Functions(5)0x2208
NameOrdinals(5)0x2230

StringTable 040904E4

CompanyNameMicrosoft Corporation
FileDescriptionFind Menu Extensions Powertoy
FileVersion1.1
InternalNameINETFIND
LegalCopyrightCopyright © Microsoft Corp. 1996
OriginalFilenameFINDX.DLL
ProductNameMicrosoft® Windows(TM) 95 PowerToys
ProductVersion96.02.06

VS_FIXEDFILEINFO

FileVersion1.1.0.0
ProductVersion96.2.6.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x10004
FileType2
FileSubtype0
offsetsizetypecomment
013824DLL09/01/1996 20:22:28#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK