Manalyze report for 376c0f9a8ad4c678e75cde002bfcba847e593e6f79747775689509b8b3e73e34

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2025-Apr-25 13:22:44
Debug artifacts	D:\TestReader55\_SRC\SRC\USE55PrintingStation\Source\Decoder\obj\Release\Decoder.pdb
Comments
CompanyName	IXORA
FileDescription	Decoder
FileVersion	`5.5.0.1503`
InternalName	Decoder.exe
LegalCopyright	Copyright Â© IXORA 2022
LegalTrademarks
OriginalFilename	Decoder.exe
ProductName	Decoder
ProductVersion	`5.5.0.1503`
Assembly Version	5.5.0.1503

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C# v7.0 / Basic .NET` `.NET executable -> Microsoft`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`8863ce592d47cf66cdf078d4ff7b8b09`
SHA1	`07ad321393c027f5a8ef2d316d800c2f11330ab7`
SHA256	`376c0f9a8ad4c678e75cde002bfcba847e593e6f79747775689509b8b3e73e34`
SHA3	`e2deccb41daca17032eda01815973704e47b13b8829121aca24a0deb61869c62`
SSDeep	`384:QXWjZJoLbJqyxDWqkR6VhrOjl/EuUBJoZ8TFE6Bo3lwjXwh2gaw7a2gwCPR4Sul:QXWjZJ8b9Dy4VAZRUB/igwCPR4Sul5`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2025-Apr-25 13:22:44
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`48.0`
SizeOfCode	`0x6a00`
SizeOfInitializedData	`0x800`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000880A (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0xa000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0xe000`
SizeOfHeaders	`0x200`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`53e587bb88ada75906ed3dcd2f396b38`
SHA1	`be5fd079eada180f262af94b122bcb78f11fea8c`
SHA256	`256d7f20c665ecfd71eea61f2ce2cae57cd165341f93a5d9f442da9b30cba4c7`
SHA3	`218238c5cc11ce86525f0188eb2a4f40c69c59941ca98a4359301371a53d2eaf`
VirtualSize	`0x6810`
VirtualAddress	`0x2000`
SizeOfRawData	`0x6a00`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`5.45761`

.rsrc

MD5	`bc5f7a8e4da3e61721da96d1a2fb0d9e`
SHA1	`f85e25ce0a1557007ca730aecc4229c6d29f80f9`
SHA256	`57f9ed36d1bfa75421c5a6985bfedee5815537fcb2482db1b8be6036ba7cedb2`
SHA3	`d9fe4816ab04c4c1d954a178aba4cf08e171a9c6723ef86eacee669764fc6fc9`
VirtualSize	`0x5c8`
VirtualAddress	`0xa000`
SizeOfRawData	`0x600`
PointerToRawData	`0x6c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.18955`

.reloc

MD5	`3912e3e0575da07f0f67458a4674faed`
SHA1	`5ff7dc5c02170138e9ab5b4b06a2bb6f2e64e185`
SHA256	`c81bfa5abc8c6cb8b4d4522c77c8f7eb613bac935c80e9bbe5f743fdd67950ca`
SHA3	`324b2729f93469fcc5da45c80cd3cdf059d0fbfa6769b0493b1051520ad379e8`
VirtualSize	`0xc`
VirtualAddress	`0xc000`
SizeOfRawData	`0x200`
PointerToRawData	`0x7200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.0776332`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x336`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.38852`
MD5	`219feeb61ca8f1f556409aaaa887150f`
SHA1	`9d09ce96b1f20575f21b02bc1eb4ff4b0884846b`
SHA256	`81df548e1783052cbb3a86d0ac45412ea663ece3cc089cb808080a32f73d356f`
SHA3	`cc87d1a6290c4d9eb347bdb0ccb329e96c5794a2fe537b80ec0c91b7c47f9949`

1 (#2)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.00112`
MD5	`b7db84991f23a680df8e95af8946f9c9`
SHA1	`cac699787884fb993ced8d7dc47b7c522c7bc734`
SHA256	`539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a`
SHA3	`4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	5.5.0.1503
ProductVersion	5.5.0.1503
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments
CompanyName	IXORA
FileDescription	Decoder
FileVersion (#2)	5.5.0.1503
InternalName	Decoder.exe
LegalCopyright	Copyright Â© IXORA 2022
LegalTrademarks
OriginalFilename	Decoder.exe
ProductName	Decoder
ProductVersion (#2)	5.5.0.1503
Assembly Version	5.5.0.1503

Resource LangID	UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2025-Apr-25 13:22:44
Version	`0.0`
SizeofData	`284`
AddressOfRawData	`0x869c`
PointerToRawData	`0x689c`
Referenced File	D:\TestReader55\_SRC\SRC\USE55PrintingStation\Source\Decoder\obj\Release\Decoder.pdb

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.