filenamenet.exe
size46080 (0xb400)
md5f5debeb5e36eea84df1cacf343bb65d6
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
1473072956
189307161
187307162
10131
185307167
1883071621
1923071625
183307161
186307161

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x50108a40
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion10.10
SizeOfCode0x6800
SizeOfInitializedData0xee00
SizeOfUninitializedData0
AddressOfEntryPoint0x702b
BaseOfCode0x1000
BaseOfData0x8000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.2
ImageVersion6.2
SubsystemVersion6.2
Reserved10
SizeOfImage0x19000
SizeOfHeaders0x400
CheckSum0x19ef5
Subsystem3
DllCharacteristics0x8140
SizeOfStackReserve0x80000
SizeOfStackCommit0x10000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0 2005

Sections

namevavsizeraw sizeflags
.text0x10000x672c0x6800R-X CODE
.data0x80000xc25c0x1e00RW- IDATA
.idata0x150000x12260x1400R-- IDATA
.rsrc0x170000x6a00x800R-- IDATA
.reloc0x180000xc2c0xe00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x150000x258
RESOURCE0x170000x6a0
EXCEPTION00
SECURITY00
BASERELOC0x180000x8fc
DEBUG0x10200x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x15e00x40
Bound_IAT00
IAT0x154a80x250
Delay_IAT0x76b40x40
CLR_Header00
typenamesizecp
VERSION#18760
MANIFEST#16560
module_namehintordfunction_name
msvcrt.dll346_except_handler4_common
msvcrt.dll295_controlfp
msvcrt.dll1264memmove
msvcrt.dll55void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll472_initterm
msvcrt.dll1005_wcsdup
msvcrt.dll1386wcstok
msvcrt.dll212__setusermatherr
msvcrt.dll190__p__fmode
msvcrt.dll276_cexit
msvcrt.dll355_exit
msvcrt.dll576_local_unwind4
msvcrt.dll368_fileno
msvcrt.dll145__getmainargs
msvcrt.dll257_amsg_exit
msvcrt.dll185__p__commode
msvcrt.dll106_XcptFilter
msvcrt.dll1380wcsrchr
msvcrt.dll1374wcsncat_s
msvcrt.dll1375wcsncmp
msvcrt.dll1370wcscspn
msvcrt.dll1161calloc
msvcrt.dll1383wcsspn
msvcrt.dll1020_wcsnicmp
msvcrt.dll1038_wcsupr
msvcrt.dll1232iswctype
msvcrt.dll1379wcspbrk
msvcrt.dll929_ultow
msvcrt.dll1278qsort
msvcrt.dll1377wcsncpy_s
msvcrt.dll1010_wcsicmp
msvcrt.dll1171exit
msvcrt.dll1369wcscpy_s
msvcrt.dll1290setlocale
msvcrt.dll1364wcscat_s
msvcrt.dll815_setmode
msvcrt.dll210__set_app_type
msvcrt.dll1365wcschr
msvcrt.dll1296sprintf_s
msvcrt.dll478_iob
msvcrt.dll979_vsnwprintf_s
msvcrt.dll1274putchar
msvcrt.dll830_snwprintf_s
msvcrt.dll1250malloc
msvcrt.dll1194free
msvcrt.dll1266memset
api-ms-win-core-processenvironment-l1-2-0.dll342GetCommandLineW
api-ms-win-core-processenvironment-l1-2-0.dll503GetStdHandle
api-ms-win-core-localization-l1-2-0.dll302FormatMessageW
api-ms-win-core-localization-l1-2-0.dll329GetCPInfo
api-ms-win-core-localization-l1-2-0.dll1160SetThreadUILanguage
api-ms-win-core-processthreads-l1-1-1.dll239CreateProcessW
api-ms-win-core-processthreads-l1-1-1.dll548GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-1.dll581GetExitCodeProcess
api-ms-win-core-processthreads-l1-1-1.dll552GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-1.dll547GetCurrentProcess
api-ms-win-core-processthreads-l1-1-1.dll1391TerminateProcess
api-ms-win-core-synch-l1-2-0.dll1178Sleep
api-ms-win-core-synch-l1-2-0.dll1331WaitForSingleObject
api-ms-win-core-sysinfo-l1-2-0.dll537GetTickCount
api-ms-win-core-sysinfo-l1-2-0.dll521GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-2-0.dll514GetSystemDirectoryW
api-ms-win-core-console-l1-1-0.dll1363WriteConsoleW
api-ms-win-core-console-l1-1-0.dll349GetConsoleMode
api-ms-win-core-console-l1-1-0.dll1094SetConsoleMode
api-ms-win-core-console-l1-1-0.dll937ReadConsoleW
api-ms-win-core-console-l1-1-0.dll350GetConsoleOutputCP
api-ms-win-core-errorhandling-l1-1-1.dll1171SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll1272UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll1127SetLastError
api-ms-win-core-errorhandling-l1-1-1.dll422GetLastError
api-ms-win-core-errorhandling-l1-1-1.dll2147483647
api-ms-win-core-heap-l1-2-0.dll586HeapSetInformation
api-ms-win-core-handle-l1-1-0.dll92CloseHandle
MPR.dll23WNetCloseEnum
MPR.dll68WNetOpenEnumW
MPR.dll43WNetGetConnectionW
MPR.dll35WNetEnumResourceW
MPR.dll19WNetCancelConnection2W
MPR.dll48WNetGetLastErrorW
MPR.dll13WNetAddConnection2W
api-ms-win-core-file-l1-2-0.dll1364WriteFile
api-ms-win-core-file-l1-2-0.dll405GetFileType
api-ms-win-core-file-l1-2-0.dll378GetDriveTypeW
wkscli.dll14NetWkstaGetInfo
wkscli.dll11NetUseEnum
wkscli.dll21NetWkstaUserGetInfo
wkscli.dll12NetUseGetInfo
api-ms-win-core-registry-l1-1-0.dll945RegCloseKey
api-ms-win-core-registry-l1-1-0.dll987RegOpenKeyExW
api-ms-win-core-registry-l1-1-0.dll992RegQueryValueExW
api-ms-win-core-registry-l1-1-0.dll950RegCreateKeyExW
api-ms-win-core-registry-l1-1-0.dll999RegSetValueExW
samcli.dll27NetUserGetInfo
netutils.dll5NetapipBufferAllocate
netutils.dll21NetpwPathType
netutils.dll1NetApiBufferFree
netutils.dllNetApiBufferAllocate
netutils.dll2NetApiBufferReallocate
netutils.dll18NetpwNameValidate
srvcli.dll26NetServerGetInfo
srvcli.dll41NetShareEnum
IPHLPAPI.DLL66GetCurrentThreadCompartmentId
api-ms-win-core-interlocked-l1-2-0.dll615InterlockedCompareExchange
api-ms-win-core-interlocked-l1-2-0.dll618InterlockedExchange
api-ms-win-core-libraryloader-l1-1-1.dll442GetModuleFileNameW
api-ms-win-core-libraryloader-l1-1-1.dll308FreeLibrary
api-ms-win-core-libraryloader-l1-1-1.dll443GetModuleHandleA
api-ms-win-core-profile-l1-1-0.dll913QueryPerformanceCounter
api-ms-win-core-profile-l1-1-0.dll2147483647
api-ms-win-core-console-l2-1-0.dll888PeekConsoleInputW
api-ms-win-core-console-l2-1-0.dll351GetConsoleScreenBufferInfo
api-ms-win-core-string-l1-1-0.dll1352WideCharToMultiByte
api-ms-win-core-kernel32-legacy-l1-1-0.dll963LoadLibraryW
api-ms-win-core-heap-obsolete-l1-1-0.dll969LocalAlloc
api-ms-win-core-heap-obsolete-l1-1-0.dll973LocalFree
browcli.dll10NetServerEnum
ntdll.dll658RtlAllocateHeap
api-ms-win-core-apiquery-l1-1-0.dll18ApiSetQueryApiSetPresence
api-ms-win-core-delayload-l1-1-1.dll283DelayLoadFailureHook
api-ms-win-core-delayload-l1-1-1.dll1201ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-1.dll2147483647

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionNet Command
FileVersion6.2.9200.16384 (win8_rtm.120725-1247)
InternalNamenet.exe
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamenet.exe
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.2.9200.16384

VS_FIXEDFILEINFO

FileVersion6.2.9200.16384
ProductVersion6.2.9200.16384
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
046080EXE07/26/2012 00:07:28#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK