×
This file seems to be a .NET executable .
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Architecture
IMAGE_FILE_MACHINE_I386
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date
2022-Jun-23 21:13:04
FileDescription
FileVersion
0.0.0.0
InternalName
output.exe
LegalCopyright
OriginalFilename
output.exe
ProductVersion
0.0.0.0
Assembly Version
0.0.0.0
Info
Matching compiler(s):
Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft
Suspicious
Strings found in the binary may indicate undesirable behavior:
May have dropper capabilities:
Contains domain names:
cdn.discordapp.com
discord.com
discordapp.com
github.com
https://cdn.discordapp.com
https://cdn.discordapp.com/avatars/
https://discord.com
https://discordapp.com
https://ip4.seeip.org
ip4.seeip.org
seeip.org
Suspicious
No VirusTotal score.
This file has never been scanned on VirusTotal.
MD5
147eb73e7ac87cbfda63f0ac98a98e2b
SHA1
06e745e296790e2b6631d66e046cf7e198ee3f6d
SHA256
62f54956cc62d60353ed80919ee784b3a9afa7d437ecd45363298c68b8e7b77f
SHA3
3831d185fb6fc46f072287f0cb5071ba2b5a3c53a38e46c67a8d3b0cc7c81c5f
SSDeep
192:JmD8kan6LTkKA+Hz0DSKvyzvMPZIMUDEQZ:JmD8HoV5om8yzvMPkZ
Imports Hash
f34d5f2d4577ed6d9ceec516c1f5a744
e_magic
MZ
e_cblp
0x90
e_cp
0x3
e_crlc
0
e_cparhdr
0x4
e_minalloc
0
e_maxalloc
0xffff
e_ss
0
e_sp
0xb8
e_csum
0
e_ip
0
e_cs
0
e_ovno
0
e_oemid
0
e_oeminfo
0
e_lfanew
0x80
Signature
PE
Machine
IMAGE_FILE_MACHINE_I386
NumberofSections
3
TimeDateStamp
2022-Jun-23 21:13:04
PointerToSymbolTable
0
NumberOfSymbols
0
SizeOfOptionalHeader
0xe0
Characteristics
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
Magic
PE32
LinkerVersion
11.0
SizeOfCode
0x2200
SizeOfInitializedData
0x800
SizeOfUninitializedData
0
AddressOfEntryPoint
0x0000405E (Section: .text)
BaseOfCode
0x2000
BaseOfData
0x6000
ImageBase
0x400000
SectionAlignment
0x2000
FileAlignment
0x200
OperatingSystemVersion
4.0
ImageVersion
0.0
SubsystemVersion
4.0
Win32VersionValue
0
SizeOfImage
0xa000
SizeOfHeaders
0x200
Checksum
0
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve
0x100000
SizeofStackCommit
0x1000
SizeofHeapReserve
0x100000
SizeofHeapCommit
0x1000
LoaderFlags
0
NumberOfRvaAndSizes
16
MD5
5762b6a7c578e8fa7994d08988032e9d
SHA1
db4b9115c719f4cd42ed32ebeb578b92cc1abd2a
SHA256
d0be14f5f09e76655918c593774dcde2582ae0c6c0b53627ab25da6f7c35ad12
SHA3
3b542c3bcacf5d8c7b12234f75de041db4f1bae13dc33692076195d6fab39eb0
VirtualSize
0x2064
VirtualAddress
0x2000
SizeOfRawData
0x2200
PointerToRawData
0x200
PointerToRelocations
0
PointerToLineNumbers
0
NumberOfLineNumbers
0
NumberOfRelocations
0
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy
5.1315
MD5
de8ae319d24b6e88a434e115f797920c
SHA1
d39887370cb1b871c64d6886fa621a21e4f8a2dd
SHA256
f0d7550b666c982f049a78a7814e639188dd7eaffbabb4df95ad99019dbc8b05
SHA3
adb14a7accf6ebcbd174858f235330a5e0037a94b1eea35ad68b1c968abcf07e
VirtualSize
0x4d8
VirtualAddress
0x6000
SizeOfRawData
0x600
PointerToRawData
0x2400
PointerToRelocations
0
PointerToLineNumbers
0
NumberOfLineNumbers
0
NumberOfRelocations
0
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy
3.69731
MD5
576f8683441067a677f1f3bae16b9876
SHA1
c97f08a0a1a12121b2a20c687da76e114d4287f6
SHA256
02444b542d9f05bf98b098625bd338e2f0df92dcd3c003c74dcb17108e750862
SHA3
d5dae7a79a2bdbe4794dea13a0477237a139b12cd25d186be411074a14fc199b
VirtualSize
0xc
VirtualAddress
0x8000
SizeOfRawData
0x200
PointerToRawData
0x2a00
PointerToRelocations
0
PointerToLineNumbers
0
NumberOfLineNumbers
0
NumberOfRelocations
0
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy
0.0815394
Type
RT_VERSION
Language
UNKNOWN
Codepage
UNKNOWN
Size
0x244
TimeDateStamp
1980-Jan-01 00:00:00
Entropy
3.1508
MD5
6b682dd477a0e8aa41cd019fe373a6fb
SHA1
fadf887d60543a306fd4da1f98e7122fa03abb1d
SHA256
91149411f2e8ecc07939d4db43a544db6b6e348ffd5665ef167aa9aaa2314033
SHA3
d6cc7150bd2a6b87940f903d025e66ef720b81eb81b2cbdcbaa1487492688ba7
Type
RT_MANIFEST
Language
UNKNOWN
Codepage
UNKNOWN
Size
0x1ea
TimeDateStamp
1980-Jan-01 00:00:00
Entropy
5.00112
MD5
a19a2658ba69030c6ac9d11fd7d7e3c1
SHA1
879dcf690e5bf1941b27cf13c8bcf72f8356c650
SHA256
c0085eb467d2fc9c9f395047e057183b3cd1503a4087d0db565161c13527a76f
SHA3
93cbaf236d2d3870c1052716416ddf1c34f21532e56dd70144e9a01efcd0ce34
Signature
0xfeef04bd
StructVersion
0x10000
FileVersion
0.0.0.0
ProductVersion
0.0.0.0
FileFlags
(EMPTY)
FileOs
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType
VFT_APP
Language
UNKNOWN
FileDescription
FileVersion (#2)
0.0.0.0
InternalName
output.exe
LegalCopyright
OriginalFilename
output.exe
ProductVersion (#2)
0.0.0.0
Assembly Version
0.0.0.0