filenamecmmon32.exe
size39936 (0x9c00)
md50131552eb5c43a74163a62bdca7aa715
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
1540351
10230
93403513
95403515
9440351
96403515
9040351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x48025777
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x11f
Magic0x10b
LinkerVersion7.10
SizeOfCode0x7a00
SizeOfInitializedData0x1e00
SizeOfUninitializedData0
AddressOfEntryPoint0x6294
BaseOfCode0x1000
BaseOfData0x9000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0xc000
SizeOfHeaders0x400
CheckSum0xb014
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.x >> *SigBy Ahmed18

Sections

namevavsizeraw sizeflags
.text0x10000x79160x7a00R-X CODE
.data0x90000x1900x200RW- IDATA
.rsrc0xa0000x1a480x1c00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x74b00x8c
RESOURCE0xa0000x1a48
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x13900x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x1df80x40
Bound_IAT0x2580x90
IAT0x10000x388
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
MENU#120700
DIALOG#1048160
DIALOG#1057740
DIALOG#1232300
STRING#691720
STRING#6925760
STRING#69311920
STRING#6944980
STRING#701620
GROUP_ICON#101200
VERSION#19160
idlangstring
110541033%s bps
110551033%02u:%02u:%02u
110561033%s
110571033%s (%s cps)
110601033%u seconds until disconnect.
110611033Stay Online
110621033Disconnect Now
110631033OK
110641033Disconnect
110651033Connected for %u seconds.
110661033Connected for %u second.
110671033Connected for %u seconds.
110681033Connected for %u minute.
110691033Connected for %u minute, %u second.
110701033Connected for %u minute, %u seconds.
110711033Connected for %u minutes.
110721033Connected for %u minutes, %u second.
110731033Connected for %u minutes, %u seconds.
110741033Connected for %u hour.
110751033Connected for %u hour, %u second.
110761033Connected for %u hour, %u seconds.
110771033Connected for %u hour, %u minute.
110781033Connected for %u hour, %u minute, %u second.
110791033Connected for %u hour, %u minute, %u seconds.
110801033Connected for %u hour, %u minutes.
110811033Connected for %u hour, %u minutes, %u second.
110821033Connected for %u hour, %u minutes, %u seconds.
110831033Connected for %u hours.
110841033Connected for %u hours, %u second.
110851033Connected for %u hours, %u seconds.
110861033Connected for %u hours, %u minute.
110871033Connected for %u hours, %u minute, %u second.
110881033Connected for %u hours, %u minute, %u seconds.
110891033Connected for %u hours, %u minutes.
110901033Connected for %u hours, %u minutes, %u second.
110911033Connected for %u hours, %u minutes, %u seconds.
110941033Connection to %s was terminated. Do you want to reconnect?
112081033Dial-up Adapter
module_namehintordfunction_name
msvcrt.dll214_controlfp
msvcrt.dll237_except_handler3
msvcrt.dll152__set_app_type
msvcrt.dll133__p__fmode
msvcrt.dll128__p__commode
msvcrt.dll182_adjust_fdiv
msvcrt.dll154__setusermatherr
msvcrt.dll315_initterm
msvcrt.dll109__getmainargs
msvcrt.dll168_acmdln
msvcrt.dll656exit
msvcrt.dll200_cexit
msvcrt.dll78_XcptFilter
msvcrt.dll246_exit
msvcrt.dll197_c_exit
ADVAPI32.dll458RegCloseKey
ADVAPI32.dll426OpenProcessToken
ADVAPI32.dll292GetUserNameW
ADVAPI32.dll463RegCreateKeyExW
ADVAPI32.dll466RegDeleteKeyW
ADVAPI32.dll468RegDeleteValueW
ADVAPI32.dll473RegEnumKeyExW
ADVAPI32.dll485RegOpenKeyExW
ADVAPI32.dll495RegQueryValueExW
ADVAPI32.dll508RegSetValueExW
ADVAPI32.dll525RevertToSelf
ADVAPI32.dll97CreateProcessAsUserW
ADVAPI32.dll302ImpersonateLoggedOnUser
KERNEL32.dll917WritePrivateProfileStringW
KERNEL32.dll240FreeLibrary
KERNEL32.dll408GetProcAddress
KERNEL32.dll468GetTickCount
KERNEL32.dll49CloseHandle
KERNEL32.dll338GetExitCodeProcess
KERNEL32.dll804SetProcessWorkingSetSize
KERNEL32.dll943lstrcmpiW
KERNEL32.dll631OpenProcess
KERNEL32.dll523HeapFree
KERNEL32.dll412GetProcessHeap
KERNEL32.dll583LoadLibraryW
KERNEL32.dll952lstrlenW
KERNEL32.dll763SetCurrentDirectoryW
KERNEL32.dll834Sleep
KERNEL32.dll108CreateThread
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll136DeviceIoControl
KERNEL32.dll581LoadLibraryExA
KERNEL32.dll772SetEvent
KERNEL32.dll602MapViewOfFile
KERNEL32.dll182ExitProcess
KERNEL32.dll374GetModuleHandleA
KERNEL32.dll951lstrlenA
KERNEL32.dll894WaitForSingleObject
KERNEL32.dll599LockResource
KERNEL32.dll585LoadResource
KERNEL32.dll590LocalFree
KERNEL32.dll586LocalAlloc
KERNEL32.dll360GetLastError
KERNEL32.dll75CreateEventA
KERNEL32.dll622OpenEventA
KERNEL32.dll390GetNumberFormatA
KERNEL32.dll363GetLocaleInfoA
KERNEL32.dll660QueryPerformanceCounter
KERNEL32.dll448GetSystemTimeAsFileTime
KERNEL32.dll842TerminateProcess
KERNEL32.dll315GetCurrentProcess
KERNEL32.dll859UnhandledExceptionFilter
KERNEL32.dll822SetUnhandledExceptionFilter
KERNEL32.dll430GetStartupInfoA
KERNEL32.dll316GetCurrentProcessId
KERNEL32.dll862UnmapViewOfFile
KERNEL32.dll716SearchPathW
KERNEL32.dll626OpenFileMappingW
KERNEL32.dll623OpenEventW
KERNEL32.dll949lstrcpynW
KERNEL32.dll426GetProfileStringW
KERNEL32.dll940lstrcmpW
KERNEL32.dll937lstrcatW
KERNEL32.dll582LoadLibraryExW
KERNEL32.dll479GetVersionExW
KERNEL32.dll470GetTimeFormatW
KERNEL32.dll460GetTempPathW
KERNEL32.dll458GetTempFileNameW
KERNEL32.dll442GetSystemDirectoryW
KERNEL32.dll435GetStringTypeExW
KERNEL32.dll405GetPrivateProfileStringW
KERNEL32.dll399GetPrivateProfileIntW
KERNEL32.dll377GetModuleHandleW
KERNEL32.dll373GetModuleFileNameW
KERNEL32.dll345GetFileAttributesW
KERNEL32.dll946lstrcpyW
KERNEL32.dll320GetDateFormatW
KERNEL32.dll225FindResourceExW
KERNEL32.dll186ExpandEnvironmentStringsW
KERNEL32.dll130DeleteFileW
KERNEL32.dll102CreateProcessW
KERNEL32.dll93CreateMutexW
KERNEL32.dll81CreateFileMappingW
KERNEL32.dll82CreateFileW
KERNEL32.dll76CreateEventW
KERNEL32.dll74CreateDirectoryW
KERNEL32.dll478GetVersionExA
GDI32.dll143DeleteObject
USER32.dll219EnumThreadWindows
USER32.dll379GetWindowThreadProcessId
USER32.dll151DestroyMenu
USER32.dll306GetMenuItemCount
USER32.dll345GetSubMenu
USER32.dll728wsprintfA
USER32.dll442LoadCursorW
USER32.dll444LoadIconW
USER32.dll446LoadImageW
USER32.dll454LoadMenuW
USER32.dll418IsDialogMessageW
USER32.dll457LoadStringW
USER32.dll510PeekMessageW
USER32.dll512PostMessageW
USER32.dll515PostThreadMessageW
USER32.dll536RegisterClassExW
USER32.dll552RegisterWindowMessageW
USER32.dll567SendDlgItemMessageW
USER32.dll576SendMessageW
USER32.dll596SetDlgItemTextW
USER32.dll641SetWindowLongW
USER32.dll647SetWindowTextW
USER32.dll692UnregisterClassW
USER32.dll723WinHelpW
USER32.dll729wsprintfW
USER32.dll731wvsprintfW
USER32.dll571SendMessageA
USER32.dll325GetParent
USER32.dll595SetDlgItemTextA
USER32.dll566SendDlgItemMessageA
USER32.dll273GetDlgItem
USER32.dll551RegisterWindowMessageA
USER32.dll511PostMessageA
USER32.dll483MessageBoxW
USER32.dll328GetProcessWindowStation
USER32.dll353GetThreadDesktop
USER32.dll359GetUserObjectInformationW
USER32.dll561ScreenToClient
USER32.dll61ChildWindowFromPointEx
USER32.dll272GetDlgCtrlID
USER32.dll490MsgWaitForMultipleObjects
USER32.dll682TranslateMessage
USER32.dll427IsWindow
USER32.dll431IsWindowVisible
USER32.dll372GetWindowRect
USER32.dll665SystemParametersInfoA
USER32.dll643SetWindowPos
USER32.dll267GetCursorPos
USER32.dll153DestroyWindow
USER32.dll607SetMenuDefaultItem
USER32.dll676TrackPopupMenu
USER32.dll658ShowWindow
USER32.dll196EnableWindow
USER32.dll296GetLastActivePopup
USER32.dll599SetForegroundWindow
USER32.dll198EndDialog
USER32.dll400InsertMenuW
USER32.dll377GetWindowTextLengthW
USER32.dll378GetWindowTextW
USER32.dll367GetWindowLongW
USER32.dll318GetMessageW
USER32.dll276GetDlgItemTextW
USER32.dll251GetClassLongW
USER32.dll229FindWindowExW
USER32.dll162DispatchMessageW
USER32.dll159DialogBoxParamW
USER32.dll143DefWindowProcW
USER32.dll97CreateWindowExW
USER32.dll86CreateDialogParamW
USER32.dll55CharUpperW
USER32.dll44CharNextW
USER32.dll47CharPrevW
USER32.dll41CharLowerW
USER32.dll513PostQuitMessage
USER32.dll28CallWindowProcW
cmutil.dll92CmAtolA
cmutil.dll103CmIsDigitA
cmutil.dll146ReleaseBold
cmutil.dll100CmFmtMsgA
cmutil.dll145MakeBold
cmutil.dll149UpdateFont
cmutil.dll140GetOSBuildNumber
cmutil.dll139CmWinHelp
cmutil.dll115CmLoadStringW
cmutil.dll122CmStrCatAllocW
cmutil.dll4public: __thiscall CmLogFile::CmLogFile(void)

??0CmLogFile@@QAE@XZ

cmutil.dll1public: __thiscall CIniW::CIniW(struct HINSTANCE__ *, unsigned short const *, unsigned short const *, unsigned short const *, unsigned short const *)

??0CIniW@@QAE@PAUHINSTANCE__@@PBG111@Z

cmutil.dll44public: unsigned short const * __thiscall CIniW::GetPrimaryRegPath(void)const

?GetPrimaryRegPath@CIniW@@QBEPBGXZ

cmutil.dll124CmStrCpyAllocW
cmutil.dll74public: void __thiscall CIniW::SetPrimaryRegPath(unsigned short const *)

?SetPrimaryRegPath@CIniW@@QAEXPBG@Z

cmutil.dll51public: long __thiscall CmLogFile::Init(struct HINSTANCE__ *, int, unsigned short const *)

?Init@CmLogFile@@QAEJPAUHINSTANCE__@@HPBG@Z

cmutil.dll70public: long __thiscall CmLogFile::SetParams(int, unsigned long, unsigned short const *)

?SetParams@CmLogFile@@QAEJHKPBG@Z

cmutil.dll83public: long __thiscall CmLogFile::Start(int)

?Start@CmLogFile@@QAEJH@Z

cmutil.dll84public: long __thiscall CmLogFile::Stop(void)

?Stop@CmLogFile@@QAEJXZ

cmutil.dll57public: void __cdecl CmLogFile::Log(enum _CMLOG_ITEM, ...)

?Log@CmLogFile@@QAAXW4_CMLOG_ITEM@@ZZ

cmutil.dll101CmFmtMsgW
cmutil.dll32public: unsigned long __thiscall CIniW::GPPI(unsigned short const *, unsigned short const *, unsigned long)const

?GPPI@CIniW@@QBEKPBG0K@Z

cmutil.dll27public: long __thiscall CmLogFile::DeInit(void)

?DeInit@CmLogFile@@QAEJXZ

cmutil.dll6public: __thiscall CIniW::~CIniW(void)

??1CIniW@@QAE@XZ

cmutil.dll7public: __thiscall CmLogFile::~CmLogFile(void)

??1CmLogFile@@QAE@XZ

cmutil.dll108CmLoadIconW
cmutil.dll113CmLoadSmallIconW
cmutil.dll119CmParsePathW
cmutil.dll144IsLogonAsSystem
cmutil.dll30public: int __thiscall CIniW::GPPB(unsigned short const *, unsigned short const *, int)const

?GPPB@CIniW@@QBEHPBG0H@Z

cmutil.dll24public: void __thiscall CIniW::Clear(void)

?Clear@CIniW@@QAEXXZ

cmutil.dll66public: void __thiscall CIniW::SetHInst(struct HINSTANCE__ *)

?SetHInst@CIniW@@QAEXPAUHINSTANCE__@@@Z

cmutil.dll64public: void __thiscall CIniW::SetFile(unsigned short const *)

?SetFile@CIniW@@QAEXPBG@Z

cmutil.dll34public: unsigned short * __thiscall CIniW::GPPS(unsigned short const *, unsigned short const *, unsigned short const *)const

?GPPS@CIniW@@QBEPAGPBG00@Z

cmutil.dll37public: unsigned short const * __thiscall CIniW::GetFile(void)const

?GetFile@CIniW@@QBEPBGXZ

cmutil.dll95CmBuildFullPathFromRelativeW
cmutil.dll72public: void __thiscall CIniW::SetPrimaryFile(unsigned short const *)

?SetPrimaryFile@CIniW@@QAEXPBG@Z

cmutil.dll147SzToWz
cmutil.dll141GetOSMajorVersion
cmutil.dll116CmMalloc
cmutil.dll102CmFree
cmutil.dll142GetOSVersion

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft Connection Manager Monitor
FileVersion7.02.2600.5512 (xpsp.080413-0852)
InternalNameCMMON32
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameCMMON32.exe
ProductNameMicrosoft(R) Connection Manager
ProductVersion7.02.2600.5512

VS_FIXEDFILEINFO

FileVersion7.2.2600.5512
ProductVersion7.2.2600.5512
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
039936EXE04/13/2008 18:56:55#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x258