Manalyze report for 1d8175e17fd44dc15eb4b8d80c8c4885f6499cbf88acbba3a3fca49f0ebfeaea

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2026-May-26 15:00:55
Debug artifacts	d:\Webhost\26-05-2026\WindowsBuilds\UEMS_CONFIGURATIONS\13525929\uems_config\Native_Src\native\folder_backup\file_system_watcher\obj\x86\Release\file_system_watcher.pdb
Comments
CompanyName
FileDescription	file_system_watcher
FileVersion	`1.0.0.0`
InternalName	file_system_watcher.exe
LegalCopyright	Copyright Â© 2018
LegalTrademarks
OriginalFilename	file_system_watcher.exe
ProductName	file_system_watcher
ProductVersion	`1.0.0.0`
Assembly Version	1.0.0.0

Plugin Output

Info	Matching compiler(s):	`.NET executable -> Microsoft`
Info	The PE is digitally signed.	`Signer: ZOHO Corporation Private Limited` `Issuer: GlobalSign GCC R45 CodeSigning CA 2020`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`e5858c694ffb01974447a0ef26cdecaa`
SHA1	`a93e65644f919ecb3dff880811239f45e2770ba8`
SHA256	`1d8175e17fd44dc15eb4b8d80c8c4885f6499cbf88acbba3a3fca49f0ebfeaea`
SHA3	`cef749342c4bb95e725e78d05169822d07683404f5af449e115d924f7b16f5a7`
SSDeep	`1536:Iz8r9KQjQ4tNxcfUlo2VzWYb1KsIVuyI01hA/:Iz8r9Q+Rztb19iuj01+/`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2026-May-26 15:00:55
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`48.0`
SizeOfCode	`0xf400`
SizeOfInitializedData	`0x800`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x000102E2 (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x12000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`4.0`
Win32VersionValue	`0`
SizeOfImage	`0x16000`
SizeOfHeaders	`0x200`
Checksum	`0x1ea01`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`17413ff40409cca2c8c78c16bea4c3c7`
SHA1	`75f6eaf293a6360d871652dd0516cca32d7a754a`
SHA256	`ff8bcc60089c2a592392a7f8238253bea90705a04dc598a2b9646453ce13ab2c`
SHA3	`bc30ae21860da6b99ba7056a1256106299cffb7585c5a6077e9a18842bb44ba7`
VirtualSize	`0xf260`
VirtualAddress	`0x2000`
SizeOfRawData	`0xf400`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`5.79553`

.rsrc

MD5	`031e6282866791ecb3ce6c42a8f6e47c`
SHA1	`1e1523f5f6ac33f0f9cf0e94585228ab69b51be1`
SHA256	`9a8da941fc4577dc93e20daa7932481d29523ddae5be62fbe944ce5aa2b1542b`
SHA3	`5a610762a9ed84ce1871961aa5136038c48789a3d26e76a63b7a3e899e263149`
VirtualSize	`0x5fc`
VirtualAddress	`0x12000`
SizeOfRawData	`0x600`
PointerToRawData	`0xf600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.19386`

.reloc

MD5	`e4297e9ace4d56a41053d934a20d31b4`
SHA1	`633ac91e7a2e005f002a6d1b67c39ddd2e407fe8`
SHA256	`336dabe8ecfd6f7f41d84ec47e8dea7b4a4c4605ecdda225cfdcb1d1aedc8889`
SHA3	`ae58a11674c4a4c2e7c528bc3996d680570371e1426ed75cae6984212fea7494`
VirtualSize	`0xc`
VirtualAddress	`0x14000`
SizeOfRawData	`0x200`
PointerToRawData	`0xfc00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.0815394`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x36c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.29167`
MD5	`06d6bad6b860560955db6da28ad2c18a`
SHA1	`169bb3c447167b00291650d5aeda1056e3084b1b`
SHA256	`df1d972e85df1b19fe1b391ddb4b9d3e5eeb71c0d91d0efbf6749189988f380b`
SHA3	`d3b65b3c9e84f3c1d5bc7579288465f7849247d68d5b8b2c0f871d9a293fa995`

1 (#2)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.00112`
MD5	`b7db84991f23a680df8e95af8946f9c9`
SHA1	`cac699787884fb993ced8d7dc47b7c522c7bc734`
SHA256	`539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a`
SHA3	`4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.0.0.0
ProductVersion	1.0.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments
CompanyName
FileDescription	file_system_watcher
FileVersion (#2)	1.0.0.0
InternalName	file_system_watcher.exe
LegalCopyright	Copyright Â© 2018
LegalTrademarks
OriginalFilename	file_system_watcher.exe
ProductName	file_system_watcher
ProductVersion (#2)	1.0.0.0
Assembly Version	1.0.0.0

Resource LangID	UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2026-May-26 15:00:55
Version	`0.0`
SizeofData	`284`
AddressOfRawData	`0x10174`
PointerToRawData	`0xe374`
Referenced File	d:\Webhost\26-05-2026\WindowsBuilds\UEMS_CONFIGURATIONS\13525929\uems_config\Native_Src\native\folder_backup\file_system_watcher\obj\x86\Release\file_system_watcher.pdb

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.