File details
File name: netman.dll
Name: Network Connections Manager
Description: Microsoft® Windows® Operating System
Version: 6.0.6000.16386 (vista_rtm.061101-2205)
Product version: 6.0.6000.16386
Size: 267.5 KB
Original file name: netman.dll.mui
Windows file protection:
Yes
Hosted service details
Name: c78655bc80301d76ed4fef1c1ea40a7d
Command: Netman
Startup files (all users) run once details
Name: NCInstallQueue
Command: rundll32 netman.dll,ProcessQueue
Image hashes
MD5: 90a4dae28b94497f83bea0f2a3b77092
SHA-1: 74bc621fafddcf57176ec8955f62e4a678fe2d72
SHA-256: 9100b9312e92871ad634e373ac1ee8288a36f9e92a1390af32b1c5b9419344a7
PE image details
CLR assembly: Yes
CLR NGENed: No
Subsystem: Windows GUI
Langauge*: Microsoft Visual C# / Basic .NET
File packed: No
Import Table
advapi32.dll

RegCloseKey
RegDeleteKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
AdjustTokenPrivileges
OpenProcessToken
RegEnumKeyExW
GetTokenInformation
EqualSid
RegDeleteValueW
OpenThreadToken
SetServiceStatus
RegisterServiceCtrlHandlerExW
CheckTokenMembership
ConvertStringSidToSidW
RegNotifyChangeKeyValue
DuplicateTokenEx
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegGetValueW
RegEnumValueW
UnlockServiceDatabase
LockServiceDatabase
DuplicateToken
FreeSid
AllocateAndInitializeSid
InitiateSystemShutdownExW
WmiNotificationRegistrationW
api-ms-win-core-console-l1-1-0.dll

GetConsoleMode
GetConsoleCP
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
api-ms-win-core-debug-l1-1-0.dll

api-ms-win-core-errorhandling-l1-1-0.dll

SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter
SetLastError
RaiseException
api-ms-win-core-file-l1-1-0.dll

FlushFileBuffers
SetFilePointer
WriteFile
CreateFileA
CreateFileW
GetFileType
api-ms-win-core-handle-l1-1-0.dll

CloseHandle
DuplicateHandle
api-ms-win-core-heap-l1-1-0.dll

HeapCreate
HeapSize
GetProcessHeap
HeapDestroy
HeapFree
HeapAlloc
HeapReAlloc
api-ms-win-core-interlocked-l1-1-0.dll

InterlockedExchange
InterlockedCompareExchange
InterlockedIncrement
InterlockedDecrement
api-ms-win-core-io-l1-1-0.dll

api-ms-win-core-libraryloader-l1-1-0.dll

LockResource
GetModuleFileNameA
GetModuleHandleA
GetModuleFileNameW
LoadLibraryExW
LoadResource
SizeofResource
LoadLibraryExA
FreeLibrary
GetModuleHandleW
GetProcAddress
DisableThreadLibraryCalls
api-ms-win-core-localization-l1-1-0.dll

GetSystemDefaultLCID
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
api-ms-win-core-misc-l1-1-0.dll

LocalAlloc
SetHandleCount
lstrlenW
lstrcmpiW
lstrcpynW
lstrlenA
Sleep
LocalFree
lstrcmpW
LCMapStringA
api-ms-win-core-processenvironment-l1-1-0.dll

FreeEnvironmentStringsA
ExpandEnvironmentStringsW
SetStdHandle
GetEnvironmentStringsW
GetCommandLineA
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsW
api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW
TerminateProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
OpenProcessToken
GetCurrentProcess
OpenThreadToken
TlsFree
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
api-ms-win-core-profile-l1-1-0.dll

api-ms-win-core-string-l1-1-0.dll

WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
CompareStringW
api-ms-win-core-synch-l1-1-0.dll

TryEnterCriticalSection
ResetEvent
DeleteCriticalSection
SetEvent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
OpenEventW
WaitForSingleObject
CreateEventW
api-ms-win-core-sysinfo-l1-1-0.dll

GetVersionExA
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
GetVersionExW
kernel32.dll

UnregisterWaitEx
DelayLoadFailureHook
FindResourceW
RegNotifyChangeKeyValue
RegEnumValueW
RegDeleteKeyExW
RegGetValueW
GetStartupInfoA
QueueUserWorkItem
GetPrivateProfileStringW
RegCloseKey
LoadLibraryW
RegQueryInfoKeyW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegDeleteValueW
LeaveCriticalSection
DisableThreadLibraryCalls
GetVersionExW
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapFree
HeapAlloc
HeapReAlloc
lstrcmpiW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
GetLastError
CloseHandle
GetCurrentProcess
WaitForSingleObject
HeapDestroy
lstrcpynW
FreeLibrary
lstrlenA
SizeofResource
LoadResource
LoadLibraryExW
CreateFileW
GetModuleFileNameW
GetModuleHandleW
GetCurrentThread
CreateEventW
OpenEventW
OutputDebugStringA
CreateThread
SetEvent
GetProcAddress
InterlockedCompareExchange
LoadLibraryA
Sleep
LocalFree
lstrcmpW
InterlockedExchange
DuplicateHandle
TryEnterCriticalSection
ResetEvent
HeapCreate
GetCommandLineA
GetVersionExA
RtlUnwind
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
EnterCriticalSection
GetEnvironmentStringsW
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
CompareStringW
LocalAlloc
GetSystemDefaultLCID
DeviceIoControl
LockResource
GetProcessHeap
CreateProcessW
ExpandEnvironmentStringsW
FreeEnvironmentStringsW
kernelbase.dll

GetStringTypeA
GetLocaleInfoA
nsi.dll

ntdll.dll

RtlRegisterWait
NtClose
RtlOpenCurrentUser
RtlUnwind
RtlDeregisterWaitEx
RtlNtStatusToDosError
NtOpenFile
RtlGetNtProductType
RtlInitUnicodeString
ole32.dll

StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemRealloc
CoImpersonateClient
CoRevertToSelf
CLSIDFromString
CoSetProxyBlanket
IIDFromString
CoInitializeEx
CoUninitialize
CoCreateInstance
rasapi32.dll

DwCloneEntry
RasSetAutodialAddressW
RasValidateEntryNameW
RasHangUpW
RasGetEntryPropertiesW
RasRenameEntryW
RasEnumConnectionsW
DwEnumEntryDetails
RasGetConnectStatusW
RasDeleteEntryW
user32.dll

MessageBoxW
LoadImageW
DestroyIcon
UnregisterDeviceNotification
CharNextW
PeekMessageW
DispatchMessageW
MsgWaitForMultipleObjects
RegisterDeviceNotificationW
winnsi.dll

NsiRpcRegisterChangeNotification
NsiRpcDeregisterChangeNotification
NsiDisconnectFromServer
NsiConnectToServer
Export Table
dllregisterserver
dllunregisterserver
hrgetpnpdevicestatus
hrlanconnectionnamefromguidorpath
hrpnpinstanceidfromguid
hrquerylanmediastate
netmandiagfromcommandargs
processqueue
servicemain
svchostpushserviceglobals