filenamenet.exe
size46592 (0xb600)
md5c3d20ac571e20afc880dfe85dd3e8c7a
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1473072954
207655011
205655013
10129
203655017
2066550122
2156550125
201655011
204655011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x54503d2c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion11.0
SizeOfCode0x8600
SizeOfInitializedData0xd200
SizeOfUninitializedData0
AddressOfEntryPoint0x4420
BaseOfCode0x1000
BaseOfData0xa000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.3
ImageVersion6.3
SubsystemVersion6.3
Reserved10
SizeOfImage0x1a000
SizeOfHeaders0x400
CheckSum0x146f8
Subsystem3
DllCharacteristics0xc140
SizeOfStackReserve0x80000
SizeOfStackCommit0x10000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x85d40x8600R-X CODE
.data0xa0000xa87c0x400RW- IDATA
.idata0x150000x11a20x1200R-- IDATA
.didat0x1700080x200RW- IDATA
.rsrc0x180000x6a00x800R-- IDATA
.reloc0x190000xa400xc00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x152480x244
RESOURCE0x180000x6a0
EXCEPTION00
SECURITY00
BASERELOC0x190000xa40
DEBUG0x10600x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x16880x5c
Bound_IAT00
IAT0x150000x244
Delay_IAT0x955c0x40
CLR_Header00
typenamesizecp
VERSION#18800
MANIFEST#16560
module_namehintordfunction_name
msvcrt.dll364_except_handler4_common
msvcrt.dll313_controlfp
msvcrt.dll55void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll490_initterm
msvcrt.dll230__setusermatherr
msvcrt.dll208__p__fmode
msvcrt.dll294_cexit
msvcrt.dll1293memmove
msvcrt.dll373_exit
msvcrt.dll228__set_app_type
msvcrt.dll1034_wcsdup
msvcrt.dll1415wcstok
msvcrt.dll163__getmainargs
msvcrt.dll275_amsg_exit
msvcrt.dll203__p__commode
msvcrt.dll1409wcsrchr
msvcrt.dll1404wcsncmp
msvcrt.dll1067_wcsupr
msvcrt.dll1261iswctype
msvcrt.dll1408wcspbrk
msvcrt.dll1403wcsncat_s
msvcrt.dll958_ultow
msvcrt.dll1399wcscspn
msvcrt.dll1190calloc
msvcrt.dll1412wcsspn
msvcrt.dll1307qsort
msvcrt.dll1406wcsncpy_s
msvcrt.dll1039_wcsicmp
msvcrt.dll1200exit
msvcrt.dll605_local_unwind4
msvcrt.dll1398wcscpy_s
msvcrt.dll1319setlocale
msvcrt.dll1393wcscat_s
msvcrt.dll844_setmode
msvcrt.dll496_iob
msvcrt.dll386_fileno
msvcrt.dll1049_wcsnicmp
msvcrt.dll113_XcptFilter
msvcrt.dll1325sprintf_s
msvcrt.dll1394wcschr
msvcrt.dll1008_vsnwprintf_s
msvcrt.dll1303putchar
msvcrt.dll859_snwprintf_s
msvcrt.dll1279malloc
msvcrt.dll1223free
msvcrt.dll1295memset
api-ms-win-core-processenvironment-l1-2-0.dll5GetCommandLineW
api-ms-win-core-processenvironment-l1-2-0.dll12GetStdHandle
api-ms-win-core-localization-l1-2-1.dll10GetCPInfo
api-ms-win-core-localization-l1-2-1.dll56SetThreadUILanguage
api-ms-win-core-localization-l1-2-1.dll8FormatMessageW
api-ms-win-core-processthreads-l1-1-2.dll16GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-2.dll11GetCurrentProcess
api-ms-win-core-processthreads-l1-1-2.dll2CreateProcessW
api-ms-win-core-processthreads-l1-1-2.dll18GetExitCodeProcess
api-ms-win-core-processthreads-l1-1-2.dll12GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-2.dll65TerminateProcess
api-ms-win-core-synch-l1-2-0.dll51WaitForSingleObject
api-ms-win-core-synch-l1-2-0.dll43Sleep
api-ms-win-core-sysinfo-l1-2-1.dll17GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-2-1.dll12GetSystemDirectoryW
api-ms-win-core-sysinfo-l1-2-1.dll21GetTickCount
api-ms-win-core-console-l1-1-0.dll9ReadConsoleW
api-ms-win-core-console-l1-1-0.dll13WriteConsoleW
api-ms-win-core-console-l1-1-0.dll11SetConsoleMode
api-ms-win-core-console-l1-1-0.dll2GetConsoleMode
api-ms-win-core-console-l1-1-0.dll3GetConsoleOutputCP
api-ms-win-core-errorhandling-l1-1-1.dll9SetLastError
api-ms-win-core-errorhandling-l1-1-1.dll10SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll3GetLastError
api-ms-win-core-errorhandling-l1-1-1.dll11UnhandledExceptionFilter
api-ms-win-core-heap-l1-2-0.dll10HeapSetInformation
api-ms-win-core-handle-l1-1-0.dllCloseHandle
MPR.dll23WNetCloseEnum
MPR.dll68WNetOpenEnumW
MPR.dll43WNetGetConnectionW
MPR.dll19WNetCancelConnection2W
MPR.dll13WNetAddConnection2W
MPR.dll35WNetEnumResourceW
MPR.dll48WNetGetLastErrorW
api-ms-win-core-file-l1-2-1.dll79WriteFile
api-ms-win-core-file-l1-2-1.dll42GetFileType
api-ms-win-core-file-l1-2-1.dll33GetDriveTypeW
wkscli.dll14NetWkstaGetInfo
wkscli.dll11NetUseEnum
wkscli.dll21NetWkstaUserGetInfo
wkscli.dll12NetUseGetInfo
api-ms-win-core-registry-l1-1-0.dll40RegSetValueExW
api-ms-win-core-registry-l1-1-0.dll28RegOpenKeyExW
api-ms-win-core-registry-l1-1-0.dllRegCloseKey
api-ms-win-core-registry-l1-1-0.dll3RegCreateKeyExW
api-ms-win-core-registry-l1-1-0.dll33RegQueryValueExW
samcli.dll27NetUserGetInfo
netutils.dll5NetapipBufferAllocate
netutils.dll21NetpwPathType
netutils.dll1NetApiBufferFree
netutils.dllNetApiBufferAllocate
netutils.dll2NetApiBufferReallocate
netutils.dll18NetpwNameValidate
srvcli.dll32NetServerGetInfo
srvcli.dll47NetShareEnum
IPHLPAPI.DLL69GetCurrentThreadCompartmentId
api-ms-win-core-libraryloader-l1-2-0.dll15GetModuleHandleA
api-ms-win-core-libraryloader-l1-2-0.dll10FreeLibrary
api-ms-win-core-libraryloader-l1-2-0.dll14GetModuleFileNameW
api-ms-win-core-profile-l1-1-0.dllQueryPerformanceCounter
api-ms-win-core-console-l2-1-0.dll9GetConsoleScreenBufferInfo
api-ms-win-core-console-l2-1-0.dll13PeekConsoleInputW
api-ms-win-core-string-l1-1-0.dll7WideCharToMultiByte
api-ms-win-core-kernel32-legacy-l1-1-1.dll45LoadLibraryW
api-ms-win-core-heap-obsolete-l1-1-0.dll8LocalAlloc
api-ms-win-core-heap-obsolete-l1-1-0.dll10LocalFree
browcli.dll10NetServerEnum
ntdll.dll671RtlAllocateHeap
api-ms-win-core-apiquery-l1-1-0.dllApiSetQueryApiSetPresence
api-ms-win-core-delayload-l1-1-1.dllDelayLoadFailureHook
api-ms-win-core-delayload-l1-1-1.dll1ResolveDelayLoadedAPI

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionNet Command
FileVersion6.3.9600.17415 (winblue_r4.141028-1500)
InternalNamenet.exe
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamenet.exe
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.3.9600.17415

VS_FIXEDFILEINFO

FileVersion6.3.9600.17415
ProductVersion6.3.9600.17415
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
046592EXE10/29/2014 01:04:44#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK