filenameGetShareInfo.dll
size57344 (0xe000)
md5b1504584244a9804abd6842621da9bbf
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1472992
1081684
9521908
10161
93217913
1181683
617201
481683

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x3f7a6668
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion6.0
SizeOfCode0x7000
SizeOfInitializedData0x6000
SizeOfUninitializedData0
AddressOfEntryPoint0x7903
BaseOfCode0x1000
BaseOfData0x8000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xe000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x69a60x7000R-X CODE
.rdata0x80000x18190x2000R-- IDATA
.data0xa0000x9800x1000RW- IDATA
.rsrc0xb0000x12600x2000R-- IDATA
.reloc0xd0000x9a60x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x97700xa9
IMPORT0x8a6c0xa0
RESOURCE0xb0000x1260
EXCEPTION00
SECURITY00
BASERELOC0xd0000x83c
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x80000x298
Delay_IAT00
CLR_Header00
typenamesizecp
REGISTRY#1028390
TYPELIB#123880
BITMAP#1012320
STRING#7560
VERSION#17640
idlangstring
1001033GetShareInfo
module_namehintordfunction_name
KERNEL32.dll494GlobalAlloc
KERNEL32.dll505GlobalLock
KERNEL32.dll512GlobalUnlock
KERNEL32.dll905WideCharToMultiByte
KERNEL32.dll960lstrlenW
KERNEL32.dll143EnterCriticalSection
KERNEL32.dll546InterlockedIncrement
KERNEL32.dll373GetModuleFileNameA
KERNEL32.dll314GetCurrentProcess
KERNEL32.dll959lstrlenA
KERNEL32.dll953lstrcpyA
KERNEL32.dll524HeapFree
KERNEL32.dll518HeapAlloc
KERNEL32.dll411GetProcessHeap
KERNEL32.dll619MultiByteToWideChar
KERNEL32.dll132DisableThreadLibraryCalls
KERNEL32.dll537InitializeCriticalSection
KERNEL32.dll122DeleteCriticalSection
KERNEL32.dll583LeaveCriticalSection
KERNEL32.dll542InterlockedDecrement
KERNEL32.dll429GetShortPathNameA
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll230FlushInstructionCache
KERNEL32.dll239FreeLibrary
KERNEL32.dll840SizeofResource
KERNEL32.dll589LoadResource
KERNEL32.dll218FindResourceA
KERNEL32.dll585LoadLibraryExA
KERNEL32.dll950lstrcmpiA
KERNEL32.dll956lstrcpynA
KERNEL32.dll557IsDBCSLeadByte
KERNEL32.dll522HeapDestroy
KERNEL32.dll408GetProcAddress
KERNEL32.dll584LoadLibraryA
KERNEL32.dll361GetLastError
KERNEL32.dll944lstrcatA
USER32.dll247GetClassInfoExA
USER32.dll441LoadCursorA
USER32.dll153DestroyWindow
USER32.dll278GetFocus
USER32.dll414IsChild
USER32.dll96CreateWindowExA
USER32.dll27CallWindowProcA
USER32.dll366GetWindowLongA
USER32.dll639SetWindowLongA
USER32.dll13BeginPaint
USER32.dll643SetWindowRgn
USER32.dll500OffsetRect
USER32.dll223EqualRect
USER32.dll402IntersectRect
USER32.dll553ReleaseDC
USER32.dll268GetDC
USER32.dll325GetParent
USER32.dll403InvalidateRect
USER32.dll200EndPaint
USER32.dll255GetClientRect
USER32.dll534RegisterClassExA
USER32.dll42CharNextA
USER32.dll523PtInRect
USER32.dll657ShowWindow
USER32.dll686UnionRect
USER32.dll725wsprintfA
USER32.dll289GetKeyState
USER32.dll142DefWindowProcA
USER32.dll642SetWindowPos
USER32.dll429IsWindow
USER32.dll597SetFocus
GDI32.dll459LPtoDP
GDI32.dll363GetDeviceCaps
GDI32.dll67CreateMetaFileA
GDI32.dll590TextOutA
GDI32.dll570SetTextAlign
GDI32.dll502Rectangle
GDI32.dll46CreateDCA
GDI32.dll555SetMapMode
GDI32.dll575SetViewportOrgEx
GDI32.dll140DeleteDC
GDI32.dll142DeleteMetaFile
GDI32.dll76CreateRectRgnIndirect
GDI32.dll519SaveDC
GDI32.dll579SetWindowOrgEx
GDI32.dll578SetWindowExtEx
GDI32.dll512RestoreDC
GDI32.dll30CloseMetaFile
ADVAPI32.dll264GetSecurityDescriptorDacl
ADVAPI32.dll473RegEnumValueA
ADVAPI32.dll487RegQueryInfoKeyA
ADVAPI32.dll505RegSetValueExA
ADVAPI32.dll470RegEnumKeyExA
ADVAPI32.dll482RegOpenKeyExA
ADVAPI32.dll457RegCloseKey
ADVAPI32.dll466RegDeleteValueA
ADVAPI32.dll461RegCreateKeyExA
ADVAPI32.dll464RegDeleteKeyA
ADVAPI32.dll305InitializeAcl
ADVAPI32.dll552SetNamedSecurityInfoA
ADVAPI32.dll325LookupAccountNameA
ADVAPI32.dll306InitializeSecurityDescriptor
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll229GetAclInformation
ADVAPI32.dll19AddAccessDeniedAce
ADVAPI32.dll228GetAce
ADVAPI32.dll216EqualSid
ADVAPI32.dll22AddAce
ADVAPI32.dll16AddAccessAllowedAce
ADVAPI32.dll559SetSecurityDescriptorDacl
ADVAPI32.dll29AllocateAndInitializeSid
ADVAPI32.dll255GetNamedSecurityInfoA
ADVAPI32.dll237GetExplicitEntriesFromAclA
ADVAPI32.dll318IsValidSid
ADVAPI32.dll246GetLengthSid
ADVAPI32.dll327LookupAccountSidA
ADVAPI32.dll426OpenProcessToken
ADVAPI32.dll333LookupPrivilegeValueA
ole32.dll101CoTaskMemRealloc
ole32.dll127CreateOleAdviseHolder
ole32.dll254OleSaveToStream
ole32.dll320WriteClassStm
ole32.dll242OleLoadFromStream
ole32.dll16CoCreateInstance
ole32.dll100CoTaskMemFree
ole32.dll99CoTaskMemAlloc
ole32.dll119CreateDataAdviseHolder
ole32.dll250OleRegGetMiscStatus
ole32.dll251OleRegGetUserType
ole32.dll249OleRegEnumVerbs
OLEAUT32.dll417
OLEAUT32.dll162
OLEAUT32.dll150
OLEAUT32.dll12
OLEAUT32.dll163
OLEAUT32.dll161
OLEAUT32.dll277
OLEAUT32.dll9
OLEAUT32.dll7
OLEAUT32.dll4
OLEAUT32.dll149
OLEAUT32.dll141
OLEAUT32.dll6
OLEAUT32.dll8
OLEAUT32.dll2
MSVCRT.dll665memset
MSVCRT.dll202_except_handler3
MSVCRT.dll15void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCRT.dll316_local_unwind2
MSVCRT.dll690sprintf
MSVCRT.dll679realloc
MSVCRT.dll670printf
MSVCRT.dll663memcpy
MSVCRT.dll16void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCRT.dll402_purecall
MSVCRT.dll606free
MSVCRT.dll657malloc
MSVCRT.dll662memcmp
MSVCRT.dll271_initterm
MSVCRT.dll157_adjust_fdiv
MSVCRT.dll693sscanf
MSVCRT.dll344_mbschr
MSVCRT.dll711strtok
ordentry_vafunction_name
10x23d4DllCanUnloadNow
20x23e0DllGetClassObject
30x23f9DllRegisterServer
40x2408DllUnregisterServer
module_nameGetShareInfo.DLL
flags0
timestamp2003-10-01 05:30:16
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x97a8
Functions(4)0x9798
NameOrdinals(4)0x97b8

StringTable 040904B0

CompanyName
FileDescriptionGetShareInfo Module
FileVersion1, 0, 0, 1
InternalNameGetShareInfo
LegalCopyrightCopyright 2003
OriginalFilenameGetShareInfo.DLL
ProductNameGetShareInfo Module
ProductVersion1, 0, 0, 1
OLESelfRegister

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
057344DLL10/01/2003 05:30:16#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK