filenamemsconfig.exe
size245760 (0x3c000)
md5094a6402a4b9a03b45baa79bdaf85539
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
147307292
259307954
2603079524
2613079513
2573079527
10433
2643079520
255307951
258307951

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x2d1d2e52
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion14.30
SizeOfCode0x19000
SizeOfInitializedData0x23000
SizeOfUninitializedData0
AddressOfEntryPoint0x2c40
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion10.0
ImageVersion10.0
SubsystemVersion10.0
Reserved10
SizeOfImage0x3d000
SizeOfHeaders0x1000
CheckSum0x43457
Subsystem2
DllCharacteristics0xc160
SizeOfStackReserve0x80000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x18e630x19000R-X CODE
.rdata0x1a0000xadde0xb000R-- IDATA
.data0x250000x15400x1000RW- IDATA
.pdata0x270000x14e80x2000R-- IDATA
.rsrc0x290000x127780x13000R-- IDATA
.reloc0x3c0000x73c0x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x22dcc0x12c
RESOURCE0x290000x12778
EXCEPTION0x270000x14e8
SECURITY00
BASERELOC0x3c0000x73c
DEBUG0x1f6d80x54
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x1c6b00x140
Bound_IAT00
IAT0x1c7f00xda8
Delay_IAT00
CLR_Header00
typenamesizecp
MUI#12320
REGISTRY#30011790
ICON#116400
ICON#27440
ICON#34880
ICON#42960
ICON#537520
ICON#622160
ICON#717360
ICON#813840
ICON#9419380
ICON#1096400
ICON#1142640
ICON#1224400
ICON#1311280
GROUP_ICON#30001880
VERSION#19440
MANIFEST#113560
module_namehintordfunction_name
ADVAPI32.dll593RegCloseKey
ADVAPI32.dll655RegQueryValueExW
ADVAPI32.dll671RegSetValueExW
ADVAPI32.dll525OpenSCManagerW
ADVAPI32.dll256EnumServicesStatusW
ADVAPI32.dll527OpenServiceW
ADVAPI32.dll101CloseServiceHandle
ADVAPI32.dll93ChangeServiceConfigW
ADVAPI32.dll577QueryServiceConfigW
ADVAPI32.dll624RegEnumKeyExW
ADVAPI32.dll642RegOpenKeyExW
ADVAPI32.dll602RegCreateKeyExW
ADVAPI32.dll269EventSetInformation
ADVAPI32.dll268EventRegister
ADVAPI32.dll617RegDeleteValueW
ADVAPI32.dll523OpenProcessToken
ADVAPI32.dll410LookupPrivilegeValueW
ADVAPI32.dll31AdjustTokenPrivileges
ADVAPI32.dll381InitiateShutdownW
ADVAPI32.dll270EventUnregister
ADVAPI32.dll276EventWriteTransfer
KERNEL32.dll928IsDebuggerPresent
KERNEL32.dll1082OutputDebugStringW
KERNEL32.dllAcquireSRWLockExclusive
KERNEL32.dll1240ReleaseSRWLockExclusive
KERNEL32.dll1AcquireSRWLockShared
KERNEL32.dll1241ReleaseSRWLockShared
KERNEL32.dll1380SetLastError
KERNEL32.dll148CloseHandle
KERNEL32.dll1242ReleaseSemaphore
KERNEL32.dll1237ReleaseMutex
KERNEL32.dll1437SetThreadpoolTimer
KERNEL32.dll1555WaitForThreadpoolTimerCallbacks
KERNEL32.dll159CloseThreadpoolTimer
KERNEL32.dll1553WaitForSingleObjectEx
KERNEL32.dll329EnterCriticalSection
KERNEL32.dll903InitializeCriticalSectionEx
KERNEL32.dll291DeleteCriticalSection
KERNEL32.dll852GlobalAlloc
KERNEL32.dll863GlobalLock
KERNEL32.dll1552WaitForSingleObject
KERNEL32.dll1074OpenSemaphoreW
KERNEL32.dll432FindResourceW
KERNEL32.dll1002LoadResource
KERNEL32.dll1022LockResource
KERNEL32.dll1459SizeofResource
KERNEL32.dll457FreeResource
KERNEL32.dll876HeapAlloc
KERNEL32.dll281DebugBreak
KERNEL32.dll410FindFirstFileW
KERNEL32.dll399FindClose
KERNEL32.dll563GetCurrentProcessId
KERNEL32.dll233CreateMutexExW
KERNEL32.dll252CreateSemaphoreExW
KERNEL32.dll992LeaveCriticalSection
KERNEL32.dll263CreateThreadpoolTimer
KERNEL32.dll772GetSystemInfo
KERNEL32.dll705GetPhysicallyInstalledSystemMemory
KERNEL32.dll865GlobalMemoryStatusEx
KERNEL32.dll1271RtlCompareMemory
KERNEL32.dll999LoadLibraryW
KERNEL32.dll453FreeLibrary
KERNEL32.dll296DeleteFileW
KERNEL32.dll1005LocalAlloc
KERNEL32.dll1010LocalFree
KERNEL32.dll884HeapSetInformation
KERNEL32.dll1224RegisterApplicationRestart
KERNEL32.dll1070OpenProcess
KERNEL32.dll497GetCommandLineW
KERNEL32.dll170CompareStringW
KERNEL32.dll201CreateDirectoryW
KERNEL32.dll253CreateSemaphoreW
KERNEL32.dll1042MultiByteToWideChar
KERNEL32.dll1591WideCharToMultiByte
KERNEL32.dll1648lstrcmpiW
KERNEL32.dll573GetDateFormatW
KERNEL32.dll656GetModuleFileNameA
KERNEL32.dll660GetModuleHandleExW
KERNEL32.dll880HeapFree
KERNEL32.dll859GlobalFree
KERNEL32.dll637GetLastError
KERNEL32.dll1127QueryDosDeviceW
KERNEL32.dll812GetTickCount
KERNEL32.dll778GetSystemTimeAsFileTime
KERNEL32.dll1136QueryPerformanceCounter
KERNEL32.dll1476TerminateProcess
KERNEL32.dll1444SetUnhandledExceptionFilter
KERNEL32.dll1510UnhandledExceptionFilter
KERNEL32.dll753GetStartupInfoW
KERNEL32.dll1460Sleep
KERNEL32.dll911InterlockedPopEntrySList
KERNEL32.dll912InterlockedPushEntrySList
KERNEL32.dll442FlushInstructionCache
KERNEL32.dll284DecodePointer
KERNEL32.dll325EncodePointer
KERNEL32.dll997LoadLibraryExA
KERNEL32.dll1535VirtualAlloc
KERNEL32.dll562GetCurrentProcess
KERNEL32.dll1538VirtualFree
KERNEL32.dll724GetProcessHeap
KERNEL32.dll567GetCurrentThreadId
KERNEL32.dll449FormatMessageW
KERNEL32.dll661GetModuleHandleW
KERNEL32.dll998LoadLibraryExW
KERNEL32.dll717GetProcAddress
KERNEL32.dll380ExpandEnvironmentStringsW
KERNEL32.dll817GetTimeFormatW
KERNEL32.dll870GlobalUnlock
GDI32.dll743GetTextMetricsW
GDI32.dll884SelectObject
GDI32.dll735GetTextExtentPoint32W
USER32.dll307GetClientRect
USER32.dll457GetSystemMetrics
USER32.dll17BeginPaint
USER32.dll244EndPaint
USER32.dll812SetCursor
USER32.dll601LoadCursorW
USER32.dll345GetFocus
USER32.dll794SendMessageTimeoutW
USER32.dll239EnableWindow
USER32.dll242EndDialog
USER32.dll827SetFocus
USER32.dll903SetWindowTextW
USER32.dll616LoadStringW
USER32.dll651MessageBoxW
USER32.dll282GetActiveWindow
USER32.dll334GetDlgItem
USER32.dll337GetDlgItemTextW
USER32.dll795SendMessageW
USER32.dll564IsDlgButtonChecked
USER32.dll603LoadIconW
USER32.dll52CharNextW
USER32.dll276FindWindowW
USER32.dll829SetForegroundWindow
USER32.dll567IsIconic
USER32.dll369GetLastActivePopup
USER32.dll490GetWindowLongPtrW
USER32.dll918ShowWindow
USER32.dll66CheckDlgButton
USER32.dll362GetKeyState
USER32.dll822SetDlgItemInt
USER32.dll824SetDlgItemTextW
USER32.dll504GetWindowTextLengthW
USER32.dll505GetWindowTextW
USER32.dll586IsWindowEnabled
USER32.dll895SetWindowLongPtrW
USER32.dll323GetDC
USER32.dll767ReleaseDC
USER32.dll33CallWindowProcW
MFC42u.dll1584
MFC42u.dll6813
MFC42u.dll4836
MFC42u.dll2559
MFC42u.dll2515
MFC42u.dll6071
MFC42u.dll4191
MFC42u.dll1388
MFC42u.dll5615
MFC42u.dll2412
MFC42u.dll6887
MFC42u.dll337
MFC42u.dll852
MFC42u.dll2328
MFC42u.dll4557
MFC42u.dll5049
MFC42u.dll3761
MFC42u.dll4771
MFC42u.dll4988
MFC42u.dll4371
MFC42u.dll3164
MFC42u.dll4077
MFC42u.dll4083
MFC42u.dll4082
MFC42u.dll3046
MFC42u.dll3166
MFC42u.dll3052
MFC42u.dll3366
MFC42u.dll3231
MFC42u.dll4815
MFC42u.dll3362
MFC42u.dll3243
MFC42u.dll3049
MFC42u.dll5699
MFC42u.dll2140
MFC42u.dll2457
MFC42u.dll5683
MFC42u.dll1736
MFC42u.dll5484
MFC42u.dll3933
MFC42u.dll6814
MFC42u.dll2060
MFC42u.dll2670
MFC42u.dll4789
MFC42u.dll5229
MFC42u.dll4017
MFC42u.dll5702
MFC42u.dll4694
MFC42u.dll6812
MFC42u.dll5586
MFC42u.dll2399
MFC42u.dll5663
MFC42u.dll4752
MFC42u.dll1777
MFC42u.dll4365
MFC42u.dll6437
MFC42u.dll2517
MFC42u.dll5077
MFC42u.dll5406
MFC42u.dll5245
MFC42u.dll4721
MFC42u.dll5687
MFC42u.dll3174
MFC42u.dll6243
MFC42u.dll6886
MFC42u.dll1906
MFC42u.dll1126
MFC42u.dll2948
MFC42u.dll1287
MFC42u.dll549
MFC42u.dll999
MFC42u.dll628
MFC42u.dll1042
MFC42u.dll4582
MFC42u.dll626
MFC42u.dll1040
MFC42u.dll3177
MFC42u.dll4647
MFC42u.dll1463
MFC42u.dll4473
MFC42u.dll1781
MFC42u.dll5967
MFC42u.dll4826
MFC42u.dll2898
MFC42u.dll4860
MFC42u.dll620
MFC42u.dll4521
MFC42u.dll2783
MFC42u.dll624
MFC42u.dll2629
MFC42u.dll644
MFC42u.dll6418
MFC42u.dll6705
MFC42u.dll2785
MFC42u.dll5937
MFC42u.dll1122
MFC42u.dll2408
MFC42u.dll1358
MFC42u.dll4344
MFC42u.dll1284
MFC42u.dll1259
MFC42u.dll4046
MFC42u.dll3458
MFC42u.dll5227
MFC42u.dll5709
MFC42u.dll5246
MFC42u.dll4722
MFC42u.dll5352
MFC42u.dll5382
MFC42u.dll5114
MFC42u.dll5304
MFC42u.dll5583
MFC42u.dll5585
MFC42u.dll5584
MFC42u.dll1787
MFC42u.dll2923
MFC42u.dll1749
MFC42u.dll1264
MFC42u.dll2784
MFC42u.dll2846
MFC42u.dll2661
MFC42u.dll6326
MFC42u.dll3180
MFC42u.dll3183
MFC42u.dll4548
MFC42u.dll622
MFC42u.dll2845
MFC42u.dll1124
MFC42u.dll1908
MFC42u.dll559
MFC42u.dll1003
MFC42u.dll4583
MFC42u.dll5082
MFC42u.dll1441
MFC42u.dll3630
MFC42u.dll6199
MFC42u.dll4779
MFC42u.dll2059
MFC42u.dll4787
MFC42u.dll5710
MFC42u.dll1778
MFC42u.dll6440
MFC42u.dll2532
MFC42u.dll1698
MFC42u.dll4598
MFC42u.dll5039
MFC42u.dll659
MFC42u.dll1063
MFC42u.dll1430
MFC42u.dll318
MFC42u.dll834
MFC42u.dll5630
MFC42u.dll2801
MFC42u.dll4601
MFC42u.dll6641
MFC42u.dll6708
MFC42u.dll4436
MFC42u.dll4609
MFC42u.dll1365
MFC42u.dll2752
MFC42u.dll6021
MFC42u.dll1262
MFC42u.dll2906
MFC42u.dll6632
MFC42u.dll3916
MFC42u.dll4770
MFC42u.dll4983
MFC42u.dll6053
MFC42u.dll5711
MFC42u.dll5730
MFC42u.dll5065
MFC42u.dll4368
MFC42u.dll5724
MFC42u.dll5722
MFC42u.dll3468
msvcrt.dll11public: __cdecl exception::exception(char const * __ptr64 const & __ptr64, int) __ptr64

??0exception@@QEAA@AEBQEBDH@Z

msvcrt.dll10public: __cdecl exception::exception(char const * __ptr64 const & __ptr64) __ptr64

??0exception@@QEAA@AEBQEBD@Z

msvcrt.dll1152iswdigit
msvcrt.dll304_fmode
msvcrt.dll1187memset
msvcrt.dll668_onexit
msvcrt.dll132__dllonexit
msvcrt.dll1309wcsrchr
msvcrt.dll54public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64

?what@exception@@UEBAPEBDXZ

msvcrt.dll1182memcmp
msvcrt.dll1293wcscat_s
msvcrt.dll1298wcscpy_s
msvcrt.dll919_wcsicmp
msvcrt.dll99__CxxFrameHandler4
msvcrt.dll35void __cdecl operator delete[](void * __ptr64)

??_V@YAXPEAX@Z

msvcrt.dll1171malloc
msvcrt.dll1113free
msvcrt.dll80_CxxThrowException
msvcrt.dll98__CxxFrameHandler3
msvcrt.dll219_commode
msvcrt.dll1183memcpy
msvcrt.dll1185memmove
msvcrt.dll90_XcptFilter
msvcrt.dll183_amsg_exit
msvcrt.dll166__wgetmainargs
msvcrt.dll151__set_app_type
msvcrt.dll1087exit
msvcrt.dll279_exit
msvcrt.dll202_cexit
msvcrt.dll153__setusermatherr
msvcrt.dll393_initterm
msvcrt.dll94__C_specific_handler
msvcrt.dll1042_wtoi
msvcrt.dll846_unlock
msvcrt.dll498_lock
msvcrt.dll18public: virtual __cdecl type_info::~type_info(void) __ptr64

??1type_info@@UEAA@XZ

msvcrt.dll52void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll911_wcmdln
msvcrt.dll1074calloc
msvcrt.dll1046_wtol
msvcrt.dll486_itow_s
msvcrt.dll1186memmove_s
msvcrt.dll12public: __cdecl exception::exception(class exception const & __ptr64) __ptr64

??0exception@@QEAA@AEBV0@@Z

msvcrt.dll17public: virtual __cdecl exception::~exception(void) __ptr64

??1exception@@UEAA@XZ

msvcrt.dll13public: __cdecl exception::exception(void) __ptr64

??0exception@@QEAA@XZ

msvcrt.dll884_vsnprintf_s
msvcrt.dll1184memcpy_s
msvcrt.dll886_vsnwprintf
msvcrt.dll921_wcsicoll
msvcrt.dll682_purecall
msvcrt.dll1295wcscmp
ATL.DLL35
ATL.DLL44
ATL.DLL20
ATL.DLL21
ATL.DLL16
ATL.DLL23
ATL.DLL57
ATL.DLL18
ATL.DLL17
ATL.DLL43
SHELL32.dll432ShellExecuteW
SHELL32.dll308SHEvaluateSystemCommandTemplate
OLEAUT32.dll6
OLEAUT32.dll2
OLEAUT32.dll8
OLEAUT32.dll9
OLEAUT32.dll12
VERSION.dll8GetFileVersionInfoW
VERSION.dll16VerQueryValueW
VERSION.dll7GetFileVersionInfoSizeW
SHLWAPI.dll437
ntdll.dll1614RtlVirtualUnwind
ntdll.dll1310RtlNtStatusToDosError
ntdll.dll773RtlCaptureContext
ntdll.dll1784WinSqmAddToStream
ntdll.dll1800WinSqmIncrementDWORD
ntdll.dll1289RtlLookupFunctionEntry
ntdll.dll1161RtlInitUnicodeString
bcd.dll20BcdGetElementData
bcd.dll27BcdOpenObject
bcd.dllBcdCloseObject
bcd.dll32BcdSetElementData
bcd.dll5BcdCreateObject
bcd.dll9BcdDeleteObjectReferences
bcd.dll30BcdOpenSystemStore
bcd.dll8BcdDeleteObject
bcd.dll29BcdOpenStoreFromFile
bcd.dll1BcdCloseStore
bcd.dll15BcdEnumerateObjects
bcd.dll24BcdImportStoreWithFlags
bcd.dll7BcdDeleteElement
bcd.dll16BcdExportStore
bcd.dll31BcdQueryObject
api-ms-win-core-com-l1-1-0.dll75CreateStreamOnHGlobal
api-ms-win-core-com-l1-1-0.dll9CoCreateInstance
api-ms-win-core-com-l1-1-0.dll70CoUninitialize
api-ms-win-core-com-l1-1-0.dll40CoInitializeEx
api-ms-win-core-com-l1-1-0.dll67CoTaskMemFree

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionSystem Configuration Utility
FileVersion10.0.22621.608 (WinBuild.160101.0800)
InternalNamemsconfig.EXE
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamemsconfig.EXE
ProductNameMicrosoft® Windows® Operating System
ProductVersion10.0.22621.608

VS_FIXEDFILEINFO

FileVersion10.0.22621.608
ProductVersion10.0.22621.608
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
2b95041938PNG(256 x 256)#
35d2225310BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER