Manalyze report for 2a473ccee926201c3adcb115e4c96debb71caa53bdf8ff911eacdcd7e0bfa726

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2084-Sep-10 03:48:11
Debug artifacts	Clipit.pdb
Comments
CompanyName
FileDescription	Clipit
FileVersion	`1.0.0.0`
InternalName	Clipit.exe
LegalCopyright	Copyright Â© 2026
LegalTrademarks
OriginalFilename	Clipit.exe
ProductName	Clipit
ProductVersion	`1.0.0.0`
Assembly Version	1.0.0.0

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C# v7.0 / Basic .NET` `.NET executable -> Microsoft`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`37c02e2d2446d1c2a02275226bf16e52`
SHA1	`e0d6477c81cdfb1e4036307e8c4036c054d8b6d8`
SHA256	`2a473ccee926201c3adcb115e4c96debb71caa53bdf8ff911eacdcd7e0bfa726`
SHA3	`6f118c58788bf823e7267a174ef48112cc3661ab8a6a55f7404177fb366e2344`
SSDeep	`96:K/jLSbVJQXYM4j+5AdjqcA2kkkQtHOBocUaAzNt:KvmbQzUBjNA2u6HOGXaC`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2084-Sep-10 03:48:11
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`48.0`
SizeOfCode	`0xe00`
SizeOfInitializedData	`0x800`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x00002D2E (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x4000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x8000`
SizeOfHeaders	`0x200`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`dd2c883bffa4536a1dc8c8ec66a24840`
SHA1	`12d8fca96a3ba50e730b5d16771246e2d97b2a54`
SHA256	`489e6d3d4ba781938408befc9c91496395d2e6868bba8e451c13aaea7c29b3d7`
SHA3	`a7be0da5e6361f4cee0a984ed975ca48719d0d75bb68fce428305c3ea868774b`
VirtualSize	`0xd34`
VirtualAddress	`0x2000`
SizeOfRawData	`0xe00`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`4.97847`

.rsrc

MD5	`d259698d00279c5cbdba8b65078f0f71`
SHA1	`08eb3be91122f4d3a6c0f6fcc086281fb33b1622`
SHA256	`03d16a985d1129a3021279abc7a0b4b6f21de80583869fa06404ca69820dc494`
SHA3	`a95a085e72fdaa09f1e093f4c4f9ba6845bd61981f46bef7b4173dca6417e86a`
VirtualSize	`0x596`
VirtualAddress	`0x4000`
SizeOfRawData	`0x600`
PointerToRawData	`0x1000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.02456`

.reloc

MD5	`227253fb6f9d6c4e13737cb80f912087`
SHA1	`43eb452d971083143ab6046f19bb75a76a8ad548`
SHA256	`1b58f478650186fbbbdc502151425829c590292c2f696c0c08a0331a123ba455`
SHA3	`485e523b7b9c6438501c0ad95c4bc8da4fe0d50ce3a698c6550ea6de24e605d5`
VirtualSize	`0xc`
VirtualAddress	`0x6000`
SizeOfRawData	`0x200`
PointerToRawData	`0x1600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.0815394`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x30c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.21939`
MD5	`d08165a81ce333f4e5f8ea654afebc7e`
SHA1	`07e8e91193c89dc627db29a101e906f4b2b06601`
SHA256	`2cf14d8f70f17c5fe4f3a58e55e5cfce2cc934a5dc37b0f2cebcb5e76176b825`
SHA3	`5a5480606bd069b0dfd97ee2797059c8e85dc1d3143159b7daffe8838f0729c3`

1 (#2)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.00112`
MD5	`b7db84991f23a680df8e95af8946f9c9`
SHA1	`cac699787884fb993ced8d7dc47b7c522c7bc734`
SHA256	`539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a`
SHA3	`4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.0.0.0
ProductVersion	1.0.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments
CompanyName
FileDescription	Clipit
FileVersion (#2)	1.0.0.0
InternalName	Clipit.exe
LegalCopyright	Copyright Â© 2026
LegalTrademarks
OriginalFilename	Clipit.exe
ProductName	Clipit
ProductVersion (#2)	1.0.0.0
Assembly Version	1.0.0.0

Resource LangID	UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2042-Jun-22 22:37:09
Version	`0.0`
SizeofData	`35`
AddressOfRawData	`0x2cb0`
PointerToRawData	`0xeb0`
Referenced File	Clipit.pdb

UNKNOWN

Characteristics	`0`
TimeDateStamp	1970-Jan-01 00:00:00
Version	`0.0`
SizeofData	`0`
AddressOfRawData	`0`
PointerToRawData	`0`

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.