Manalyze report for 0c247307b03adb2246a0e70dbc607f95

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2024-Oct-11 14:00:42
Debug artifacts	C:\Users\Home\Documents\Visual Studio 2019\Projects\App 2.0\AppStarter\obj\Debug\AktienDoktor.pdb
Comments	AktienDoktor (Beta)
CompanyName
FileDescription	AktienDoktor (Beta)
FileVersion	`1.0.9050.28821`
InternalName	AktienDoktor.exe
LegalCopyright	Copyright © 2024 by Karan Sri. All rights reserved.
LegalTrademarks
OriginalFilename	AktienDoktor.exe
ProductName	AktienDoktor (Beta)
ProductVersion	`1.0.9050.28821`
Assembly Version	1.0.9050.28821

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C# v7.0 / Basic .NET` `.NET executable -> Microsoft`
Safe	VirusTotal score: 0/72 (Scanned on 2024-11-24 14:09:13)	`All the AVs think this file is safe.`

Hashes

MD5	`0c247307b03adb2246a0e70dbc607f95`
SHA1	`607cf46287cf4dea8f62be9bd6f81bc7ba0042c9`
SHA256	`680874eb4fef42f68fa82d1aa8b6ed95a3cfc4bea9d6551c4ca29ff54ff80813`
SHA3	`842bb98eb4058fbb7dc1761c6fe66143590880365bc928bf47ea8ee088419e8b`
SSDeep	`384:l+MLYexV/Cpq4AIkdaFS+7aSgkJ5CQxI/9BKGvFbbWc:l+McexV/+vAhYI`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2024-Oct-11 14:00:42
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`48.0`
SizeOfCode	`0x2000`
SizeOfInitializedData	`0x4000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x00003A36 (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x4000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x1000`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0xa000`
SizeOfHeaders	`0x1000`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`f5524c4475b46668bff540c2349ef3b6`
SHA1	`7c3a9fe52233a29e1682bdef38260a42db7552d2`
SHA256	`70eb9eb3cda2138e75d4bc22a59d70efef7e8b0d500d0f88e1615ca91ad713fb`
SHA3	`7e226b0102351948e9d0c77dda0c14ff3d8963adb676e4c95d56e6066fc297cd`
VirtualSize	`0x1a3c`
VirtualAddress	`0x2000`
SizeOfRawData	`0x2000`
PointerToRawData	`0x1000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`4.82081`

.rsrc

MD5	`a797e0d851b4b40acac94a1b0ead6a34`
SHA1	`9f87cba511f714c2afa0dab8db7269044ba497a3`
SHA256	`ce047c95cd70e65abfd9370fa9e57ec216cacf162c9e6a746c961b921ea6ad13`
SHA3	`dbe1646a4e4c4fbbdbeb56eb065a24f8cd389193d11a79d51fbbc1729a2896ab`
VirtualSize	`0x2cc8`
VirtualAddress	`0x4000`
SizeOfRawData	`0x3000`
PointerToRawData	`0x3000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`3.64605`

.reloc

MD5	`3419071549278f6ee4e3ebc33df04b85`
SHA1	`463c26eae5c2e46cedb43bd8d2524b3eb26590c0`
SHA256	`94d967be7b94f8cad760af1c54e9de502bafc71ed0e92a9efef60c98dd73124b`
SHA3	`60d6d99ded514021b32073694659c91d47619b68a2947c1e4cbcedfb5be36506`
VirtualSize	`0xc`
VirtualAddress	`0x8000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x6000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.0131269`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.49631`
MD5	`3d1c6a2d4ae3e192503bfe481dd8eea7`
SHA1	`82883854853681be53dea0c33432094cf05f8568`
SHA256	`59936977617c5a7bb4011ea3cbe2da2313e3e0215f3fddcd0a15e5f441faf416`
SHA3	`8ee71d37c03b08bb37bfcc887ab80ef1ea933c9b76b31fe851f012fe34dd1206`

32512

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.91924`
Detected Filetype	Icon file
MD5	`6da8e7d5ae1d5d15e0230a67a7c16c6d`
SHA1	`678db52cbe5d617c33c6269bfd4b6d8d1a17f956`
SHA256	`6eb54801f91b6d8effccbfaefe6b2d7705a274a75940e6226e24e0d4ec58c396`
SHA3	`994fc217c7b8bc8008ac262ff58044403206de6eceafd424d4640ecad395eb2f`

1 (#2)

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x3ea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.45519`
MD5	`4659867e9ab4c684648a1085e44dae4e`
SHA1	`0b0f89193d5b4099b4ec940a3b1eb2355e883f03`
SHA256	`2f006609702504de00cf3b2b2df474ed31ce8c2769cef3e6ed3f35340d484d34`
SHA3	`dea44585f6c2f3483f22507277bb802a29e1ecad10c6352f3903722c4b6a204c`

1 (#3)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.00112`
MD5	`b7db84991f23a680df8e95af8946f9c9`
SHA1	`cac699787884fb993ced8d7dc47b7c522c7bc734`
SHA256	`539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a`
SHA3	`4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.0.9050.28821
ProductVersion	1.0.9050.28821
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments	AktienDoktor (Beta)
CompanyName
FileDescription	AktienDoktor (Beta)
FileVersion (#2)	1.0.9050.28821
InternalName	AktienDoktor.exe
LegalCopyright	Copyright © 2024 by Karan Sri. All rights reserved.
LegalTrademarks
OriginalFilename	AktienDoktor.exe
ProductName	AktienDoktor (Beta)
ProductVersion (#2)	1.0.9050.28821
Assembly Version	1.0.9050.28821

Resource LangID	UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2024-Oct-11 14:00:42
Version	`0.0`
SizeofData	`284`
AddressOfRawData	`0x38c8`
PointerToRawData	`0x28c8`
Referenced File	C:\Users\Home\Documents\Visual Studio 2019\Projects\App 2.0\AppStarter\obj\Debug\AktienDoktor.pdb

TLS Callbacks

Load Configuration

RICH Header

0c247307b03adb2246a0e70dbc607f95

Summary

Plugin Output

Hashes

DOS Header

PE Header

Image Optional Header

.text

.rsrc

.reloc

Imports

Delayed Imports

1

32512

1 (#2)

1 (#3)

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

TLS Callbacks

Load Configuration

RICH Header

Errors