Manalyze report for 401a67a6805829491c0d9a64922f8f2d03b357a68f46e5cecbd24d586a6b399c

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2024-Dec-16 22:28:17
Detected languages	English - United States
Debug artifacts	C:\__w\1\s\DMRCDecoder\DMRCDecoder\bin\x64\Release\DMRCDecoder.pdb

Plugin Output

Info	The PE contains common functions which appear in legitimate applications.	`[!] The program may be hiding some of its imports: LoadLibraryExW GetProcAddress` `Can create temporary files: CreateFileW GetTempPathW`
Info	The PE is digitally signed.	`Signer: Microsoft Azure Code Sign` `Issuer: AME CS CA 01`
Safe	VirusTotal score: 0/69 (Scanned on 2026-07-08 15:47:37)	`All the AVs think this file is safe.`

Hashes

MD5	`255c8331aa5134f6ae7876ef1696b848` 🔍
SHA1	`6fbdf693b56c2ea182daedc69339bcc098a5c50b` 🔍
SHA256	`401a67a6805829491c0d9a64922f8f2d03b357a68f46e5cecbd24d586a6b399c` 🔍
SHA3	`79086b8fa3297f78db884b4cc3a0c136d1e1f2448ef5c16f6a85625d876b2a21` 🔍
SSDeep	`49152:1n0Roz1K26gmNdrt83+J6Lhosrx0gRJep2JeVEoZhiZUQ9EuAxgFlk1AtLj:VKdJ8IsWo3EEoZRQGuAxg/X` 🔍
Imports Hash	`5b07a4100275f7405aa13103011b1037` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x108`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`6`
TimeDateStamp	2024-Dec-16 22:28:17
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_DLL` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0x180a00`
SizeOfInitializedData	`0x1dec00`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x00000000000FA020 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x180000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x364000`
SizeOfHeaders	`0x400`
Checksum	`0x366cf4`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_GUARD_CF` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`f0392bfef385716b011b5f3957e2fe53 🔍`
SHA1	`35ec24bbd1adb89555f4c0e8f1ccb7c27eb7105f 🔍`
SHA256	`af012b832bfb01acd9aaa8ed54537f612a37038132ac77def106307c3a25c25c 🔍`
SHA3	`a17134c6df2c8b0316559416e0f9a4f4d6359fddfdce78109aea4fafe2fc721b 🔍`
VirtualSize	`0x18084c`
VirtualAddress	`0x1000`
SizeOfRawData	`0x180a00`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.4998`

.rdata

MD5	`e69d493e9857b423358c238ff84ddb53 🔍`
SHA1	`b6825fc633a3c3d9764bcf30b17913fa55d75488 🔍`
SHA256	`bf1ed6e00bd5774d577b8518cf4aebf949c9d1e6d56722447eff11c98f30c8f9 🔍`
SHA3	`95c53f99a8a52b933d82fa8ccc1cd3d4c1c9f5eb869cffef16173f08fea24bf8 🔍`
VirtualSize	`0x1c5604`
VirtualAddress	`0x182000`
SizeOfRawData	`0x1c5800`
PointerToRawData	`0x180e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.76245`

.data

MD5	`a134095bec8c33e83c50f69dc268e0f2 🔍`
SHA1	`1ea61aebd20d356060fb0d3f046b23568dfd959d 🔍`
SHA256	`0eeac21d2f4bdf9ef7f940bc0ba4d3e06ee1fb3436674adf54753ea819c0ffd1 🔍`
SHA3	`085927581b35bb463bd8e79f8256dbef5461c3f59e6ef2803c8b71713ab557be 🔍`
VirtualSize	`0x492c`
VirtualAddress	`0x348000`
SizeOfRawData	`0x2800`
PointerToRawData	`0x346600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`3.54446`

.pdata

MD5	`003cc66ef1b8b3cec48ff0de76f42ddf 🔍`
SHA1	`4978a51d5e4ec2da72f963ab5afc31cda08d381f 🔍`
SHA256	`3b1353f4efb103e8311f4fb7fa2824c66013e7c665e44375c4be66bf39d907a9 🔍`
SHA3	`22ca6e03169aa5a2dc160e68d96f9aedd2b71a957c1ab22306879540687e14c4 🔍`
VirtualSize	`0x13188`
VirtualAddress	`0x34d000`
SizeOfRawData	`0x13200`
PointerToRawData	`0x348e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.2302`

.rsrc

MD5	`f09cf37dcb0605e8a8591abad0d7ad35 🔍`
SHA1	`b3cba4e0e3205b9de84089b67aa590ee52364bd4 🔍`
SHA256	`06212511d776ff7310bc4b113d8699b9e7723fde11df66b65ea1897f2f0c311c 🔍`
SHA3	`1f5c9684ce8cca61100e71fb4600a0c0ee84b849ad3952e829862db5a7e9a660 🔍`
VirtualSize	`0x1e0`
VirtualAddress	`0x361000`
SizeOfRawData	`0x200`
PointerToRawData	`0x35c000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.72473`

.reloc

MD5	`0139962073cdd09ba4aa4e5095a5ef59 🔍`
SHA1	`1a661a5c6e7010eb4047f9a698095402b3cafe7d 🔍`
SHA256	`9cbb242cc34c38f2d997dd193df693f6709599996fc6afca47182231c868c691 🔍`
SHA3	`9a733e1a824193130c6a0040f5189735178ec83c83337d23b8281520b5cdc15e 🔍`
VirtualSize	`0x15bc`
VirtualAddress	`0x362000`
SizeOfRawData	`0x1600`
PointerToRawData	`0x35c200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.43179`

Imports

api-ms-win-core-debug-l1-1-0.dll	`OutputDebugStringW` `IsDebuggerPresent` `OutputDebugStringA`
api-ms-win-core-com-l1-1-0.dll	`CoCreateGuid`
api-ms-win-core-sysinfo-l1-1-0.dll	`GetSystemTimeAsFileTime` `GetSystemTime` `GetTickCount64`
api-ms-win-core-timezone-l1-1-0.dll	`GetTimeZoneInformation` `SystemTimeToFileTime`
api-ms-win-core-profile-l1-1-0.dll	`QueryPerformanceFrequency` `QueryPerformanceCounter`
api-ms-win-core-synch-l1-1-0.dll	`EnterCriticalSection` `InitializeCriticalSectionEx` `CreateSemaphoreExW` `CreateEventExW` `TryAcquireSRWLockExclusive` `InitializeCriticalSectionAndSpinCount` `ReleaseSRWLockExclusive` `AcquireSRWLockExclusive` `DeleteCriticalSection` `LeaveCriticalSection`
api-ms-win-core-processthreads-l1-1-0.dll	`GetCurrentThreadId` `TlsAlloc` `TerminateProcess` `GetCurrentProcess` `FlushProcessWriteBuffers` `GetCurrentProcessId` `GetCurrentThread` `TlsGetValue` `TlsSetValue` `ExitProcess` `GetStartupInfoW` `TlsFree`
api-ms-win-core-localization-l1-2-0.dll	`GetLocaleInfoW` `FormatMessageA` `GetLocaleInfoEx` `EnumSystemLocalesW` `GetACP` `GetOEMCP` `IsValidLocale` `GetUserDefaultLCID` `LCMapStringW` `LCMapStringEx` `IsValidCodePage` `GetCPInfo`
api-ms-win-core-string-l1-1-0.dll	`GetStringTypeW` `CompareStringW` `MultiByteToWideChar` `CompareStringEx` `WideCharToMultiByte`
api-ms-win-core-util-l1-1-0.dll	`DecodePointer` `EncodePointer`
api-ms-win-core-heap-l2-1-0.dll	`LocalFree`
api-ms-win-core-file-l1-1-0.dll	`GetFileSizeEx` `CreateFileW` `WriteFile` `GetFileType` `FlushFileBuffers` `ReadFile` `SetFilePointerEx` `SetFileInformationByHandle` `FindClose` `FindFirstFileExW` `FindNextFileW`
api-ms-win-core-file-l1-2-0.dll	`GetTempPathW`
api-ms-win-core-synch-l1-2-0.dll	`InitOnceExecuteOnce`
api-ms-win-core-processthreads-l1-1-1.dll	`IsProcessorFeaturePresent` `GetCurrentProcessorNumber`
api-ms-win-core-threadpool-l1-2-0.dll	`CreateThreadpoolWait` `CreateThreadpoolTimer` `WaitForThreadpoolTimerCallbacks` `FreeLibraryWhenCallbackReturns` `CloseThreadpoolTimer` `SetThreadpoolWait` `SetThreadpoolTimer` `CloseThreadpoolWait`
api-ms-win-core-libraryloader-l1-2-0.dll	`FreeLibrary` `GetModuleHandleExW` `GetModuleFileNameW` `LoadLibraryExW` `GetModuleHandleW` `GetProcAddress`
api-ms-win-core-file-l2-1-0.dll	`CreateSymbolicLinkW` `GetFileInformationByHandleEx`
api-ms-win-core-rtlsupport-l1-1-0.dll	`RtlPcToFileHeader` `RtlUnwind` `RtlCaptureContext` `RtlUnwindEx` `RtlVirtualUnwind` `RtlLookupFunctionEntry`
api-ms-win-core-errorhandling-l1-1-0.dll	`UnhandledExceptionFilter` `SetUnhandledExceptionFilter` `SetLastError` `GetLastError` `RaiseException`
api-ms-win-core-interlocked-l1-1-0.dll	`InitializeSListHead` `InterlockedPushEntrySList` `InterlockedFlushSList`
api-ms-win-core-heap-l1-1-0.dll	`HeapReAlloc` `HeapAlloc` `HeapFree` `GetProcessHeap` `HeapSize`
api-ms-win-core-processenvironment-l1-1-0.dll	`FreeEnvironmentStringsW` `SetEnvironmentVariableW` `SetStdHandle` `GetCommandLineW` `GetCommandLineA` `GetEnvironmentStringsW` `GetStdHandle`
api-ms-win-core-fibers-l1-1-0.dll	`FlsFree` `FlsAlloc` `FlsSetValue` `FlsGetValue`
api-ms-win-core-datetime-l1-1-0.dll	`GetDateFormatW` `GetTimeFormatW`
api-ms-win-core-console-l1-1-0.dll	`WriteConsoleW` `ReadConsoleW` `SetConsoleCtrlHandler` `GetConsoleMode` `GetConsoleOutputCP`
api-ms-win-core-handle-l1-1-0.dll	`CloseHandle`

Delayed Imports

CreateDecoder

Ordinal	`1`
Address	`0xb3e30`

DeleteDecoder

Ordinal	`2`
Address	`0xb3f70`

Detect

Ordinal	`3`
Address	`0xb40d0`

EnableExtendedReadingDistance

Ordinal	`4`
Address	`0xb4140`

EnableFalsePositiveMitigation

Ordinal	`5`
Address	`0xb4170`

EnableInvertedReads

Ordinal	`6`
Address	`0xb41a0`

GetActiveBarcodeTypes

Ordinal	`7`
Address	`0xb41d0`

GetBarcodeAttributesSupport

Ordinal	`8`
Address	`0xb4220`

GetExceptions

Ordinal	`9`
Address	`0xb4280`

GetMillisecsPerFrameBarcode

Ordinal	`10`
Address	`0xb42d0`

GetMillisecsPerFrameDWCode

Ordinal	`11`
Address	`0xb4300`

GetPayloadBarcodeType

Ordinal	`12`
Address	`0xb4330`

GetPayloadCount

Ordinal	`13`
Address	`0xb4370`

GetPayloadData

Ordinal	`14`
Address	`0xb43a0`

GetPayloadRawData

Ordinal	`15`
Address	`0xb4400`

GetRebarNV12BufferPtr

Ordinal	`16`
Address	`0xb4460`

GetStatus

Ordinal	`17`
Address	`0xb44d0`

GetSupportedBarcodeTypes

Ordinal	`18`
Address	`0xb4520`

SetActiveBarcodeTypes

Ordinal	`19`
Address	`0xb4570`

SetBarcodeCheckDigitAttribute

Ordinal	`20`
Address	`0xb45b0`

SetBarcodeDecodeLengthAttribute

Ordinal	`21`
Address	`0xb4600`

SetBarcodeTransmitCheckDigitAttribute

Ordinal	`22`
Address	`0xb4660`

2

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x17d`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.91161`
MD5	`1e4a89b11eae0fcf8bb5fdd5ec3b6f61 🔍`
SHA1	`4260284ce14278c397aaf6f389c1609b0ab0ce51 🔍`
SHA256	`4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df 🔍`
SHA3	`4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353 🔍`

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2024-Dec-16 22:28:17
Version	`0.0`
SizeofData	`91`
AddressOfRawData	`0x325d40`
PointerToRawData	`0x324b40`
Referenced File	C:\__w\1\s\DMRCDecoder\DMRCDecoder\bin\x64\Release\DMRCDecoder.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics	`0`
TimeDateStamp	2024-Dec-16 22:28:17
Version	`0.0`
SizeofData	`20`
AddressOfRawData	`0x325d9c`
PointerToRawData	`0x324b9c`

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2024-Dec-16 22:28:17
Version	`0.0`
SizeofData	`964`
AddressOfRawData	`0x325db0`
PointerToRawData	`0x324bb0`

TLS Callbacks

Load Configuration

Size	`0x140`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x180348100`
GuardCFCheckFunctionPointer	`6444033192`
GuardCFDispatchFunctionPointer	`0`
GuardCFFunctionTable	`0`
GuardCFFunctionCount	`0`
GuardFlags	`(EMPTY)`
CodeIntegrity.Flags	`0`
CodeIntegrity.Catalog	`0`
CodeIntegrity.CatalogOffset	`0`
CodeIntegrity.Reserved	`0`
GuardAddressTakenIatEntryTable	`0`
GuardAddressTakenIatEntryCount	`0`
GuardLongJumpTargetTable	`0`
GuardLongJumpTargetCount	`0`

RICH Header

XOR Key	`0x9359082c`
Unmarked objects	`0`
C++ objects (29395)	`162`
ASM objects (33808)	`8`
C objects (33808)	`14`
C++ objects (33808)	`85`
ASM objects (29395)	`20`
C objects (29395)	`33`
Imports (VS2008 SP1 build 30729)	`55`
Total imports	`122`
C++ objects (LTCG) (34120)	`228`
C++ objects (34120)	`10`
Exports (34120)	`1`
Resource objects (34120)	`1`
Linker (34120)	`1`

Errors

Leave a comment

No comments yet.