AlphaFS.dll - AlphaFS

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	AlphaFS.dll
size	271344 (0x423f0)
md5	dc3a8164b1c8d2148a7c586e8cedd03b

type	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x4ecf65f4
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x41800
SizeOfInitializedData	0x600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x4364e
BaseOfCode	0x2000
BaseOfData	0x44000
ImageBase	0x400000
SectionAlignment	0x2000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x48000
SizeOfHeaders	0x200
CheckSum	0x44929
Subsystem	3
DllCharacteristics	0x8540
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C# / Basic .NET

Sections

name	va	vsize	raw size	flags
.text	0x2000	0x41654	0x41800	R-X CODE
.rsrc	0x44000	0x3c8	0x400	R-- IDATA
.reloc	0x46000	0xc	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x435f8	0x53
RESOURCE	0x44000	0x3c8
EXCEPTION	0	0
SECURITY	0x42000	0x3f0
BASERELOC	0x46000	0xc
DEBUG	0x43568	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x2000	8
Delay_IAT	0	0
CLR_Header	0x2008	0x48

show previews

type	name	size	cp
VERSION	#1	880	0

module_name	hint	ord	function_name
mscoree.dll			_CorDllMain

StringTable 000004b0

Comments	Alphaleonis Extended Win32 File System Support Library for .NET
FileDescription	AlphaFS
FileVersion	1.5.0.0
InternalName	AlphaFS.dll
LegalCopyright	Copyright © Peter Palotas, Normalex 2008-2011
OriginalFilename	AlphaFS.dll
ProductName	AlphaFS
ProductVersion	1.5.0.0
Assembly Version	1.5.0.0

VS_FIXEDFILEINFO

FileVersion	1.5.0.0
ProductVersion	1.5.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	2
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /CN=OoDrive dev root Authority

serial: 18254A7CFE933EAA4BEE331168C699EE

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:25:4a:7c:fe:93:3e:aa:4b:ee:33:11:68:c6:99:ee
        Signature Algorithm: sha1WithRSA
        Issuer: CN=OoDrive dev root Authority
        Validity
            Not Before: Jan 25 09:22:12 2012 GMT
            Not After : Dec 31 23:59:59 2039 GMT
        Subject: CN=OoDrive dev
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:bd:4e:e2:10:b5:d3:79:fa:b7:2b:bc:c0:7f:2e:
                    30:ce:d3:e4:d0:f0:bc:2c:9b:a8:51:72:54:89:b6:
                    2c:a4:9c:80:31:1d:66:2b:11:94:07:a2:0d:3b:2a:
                    8e:9b:2f:7a:b4:83:f9:e8:ca:0c:61:03:30:f1:64:
                    66:f7:8c:80:2c:51:d2:61:ba:0b:4f:57:93:4d:ba:
                    ce:5d:7d:78:30:5d:65:20:84:e3:8a:4e:e3:15:3e:
                    3e:77:1c:9d:ed:98:25:3f:c7:4a:e6:6a:f5:24:d9:
                    d2:df:71:87:50:b4:ec:32:e6:13:56:5e:3f:07:fc:
                    e8:6a:8c:8f:a8:08:89:e5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0M...RI.#..V..)g...<.'0%1#0!..U....OoDrive dev root Authority........j.E.......
    Signature Algorithm: sha1WithRSA
         40:aa:9d:4e:71:b6:99:90:3d:c8:64:84:a6:b0:43:ea:9d:bd:
         f0:c7:16:45:25:e4:44:00:d8:69:a7:fa:9d:16:a5:c7:4f:bb:
         2d:64:2b:24:a2:24:02:07:3b:53:f8:4d:2c:b1:8e:b1:f9:79:
         d0:ee:fa:53:80:ad:27:13:9a:f2:b2:e7:f2:21:cc:9f:ed:e9:
         73:8b:53:93:d5:36:08:31:84:c4:14:fd:bf:58:90:d0:6b:fc:
         bc:88:46:1d:23:2e:22:8d:a8:bf:46:76:e6:d6:79:d9:2d:4e:
         1b:db:da:94:10:44:db:1a:63:e1:41:67:e7:dc:9e:bf:32:4e:
         2f:e9

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

f7 36 19 98 93 bc 0f 76 2c 40 02 3f 7a 58 de 62 |.6.....v,@.?zX.b| 08 e7 92 11 |.... |

2
- 18:25:4A:7C:FE:93:3E:AA:4B:EE:33:11:68:C6:99:EE
- RSA-SHA1-2: nil
- CN: OoDrive dev root Authority
- 2012-01-25 09:22:12 UTC: 2039-12-31 23:59:59 UTC
- CN: OoDrive dev
- #5
  - rsaEncryption: nil
  - BD:4E:E2:10:B5:D3:79:FA:B7:2B:BC:C0:7F:2E:30:CE:
    D3:E4:D0:F0:BC:2C:9B:A8:51:72:54:89:B6:2C:A4:9C:
    80:31:1D:66:2B:11:94:07:A2:0D:3B:2A:8E:9B:2F:7A:
    B4:83:F9:E8:CA:0C:61:03:30:F1:64:66:F7:8C:80:2C:
    51:D2:61:BA:0B:4F:57:93:4D:BA:CE:5D:7D:78:30:5D:
    65:20:84:E3:8A:4E:E3:15:3E:3E:77:1C:9D:ED:98:25:
    3F:C7:4A:E6:6A:F5:24:D9:D2:DF:71:87:50:B4:EC:32:
    E6:13:56:5E:3F:07:FC:E8:6A:8C:8F:A8:08:89:E5:ED: 0x010001
- 2.5.29.1
  - f4 52 49 f3 23 9d 96 56 b7 e7 29 67 f1 af 94 3c |.RI.#..V..)g...<|
    - CN: OoDrive dev root Authority
    - d5 9c eb b5 0f b1 6a a0 45 ef 1d e6 c4 c0 fa 98 |......j.E.......|

RSA-SHA1-2:

40 aa 9d 4e 71 b6 99 90  3d c8 64 84 a6 b0 43 ea  |@..Nq...=.d...C.|
9d bd f0 c7 16 45 25 e4  44 00 d8 69 a7 fa 9d 16  |.....E%.D..i....|
a5 c7 4f bb 2d 64 2b 24  a2 24 02 07 3b 53 f8 4d  |..O.-d+$.$..;S.M|
2c b1 8e b1 f9 79 d0 ee  fa 53 80 ad 27 13 9a f2  |,....y...S..'...|
b2 e7 f2 21 cc 9f ed e9  73 8b 53 93 d5 36 08 31  |...!....s.S..6.1|
84 c4 14 fd bf 58 90 d0  6b fc bc 88 46 1d 23 2e  |.....X..k...F.#.|
22 8d a8 bf 46 76 e6 d6  79 d9 2d 4e 1b db da 94  |"...Fv..y.-N....|
10 44 db 1a 63 e1 41 67  e7 dc 9e bf 32 4e 2f e9  |.D..c.Ag....2N/.|

#0
- CN: OoDrive dev root Authority
- 18:25:4A:7C:FE:93:3E:AA:4B:EE:33:11:68:C6:99:EE
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4

messageDigest:

55 dc a3 43 3f b5 d3 d9  e5 c8 0b b5 42 c1 92 d3  |U..C?.......B...|
7a 79 f1 ab                                       |zy..            |

rsaEncryption:

b7 df d9 a9 bb a2 22 4f  e5 85 3e 88 01 15 32 98  |......"O..>...2.|
c6 1e 22 dc e1 eb 11 8f  a8 39 d0 4c ef 5a bb ae  |.."......9.L.Z..|
d1 f2 e0 32 6a 40 f4 b3  d2 37 2e 36 ba 46 75 91  |...2j@...7.6.Fu.|
cc a9 0d 5b c2 b5 f4 df  e9 be 4f 6f 4f d2 4d 28  |...[......OoO.M(|
eb b4 ea 8b 8e 6a da 90  79 a5 e1 e3 7f ff aa 3a  |.....j..y......:|
c0 ab 82 cb de b3 e3 cf  13 2e ec 25 95 e1 87 40  |...........%...@|
01 69 06 b0 cd 78 1e 57  d1 d3 b5 9b 68 c2 b1 51  |.i...x.W....h..Q|
fc 7e 58 7d a3 0b 0e f8  87 47 7d 05 07 88 ba 14  |.~X}.....G}.....|