517a43003923965e5c6e220aac3c6540

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2017-Jun-30 08:00:01
Debug artifacts C:\Users\jan\Documents\Visual Studio 2017\Projects\Windows ISO Downloader\Windows ISO Downloader\obj\Release\Windows ISO Downloader.pdb
Comments
CompanyName
FileDescription Windows ISO Downloader
FileVersion 5.0.6.0
InternalName Windows ISO Downloader.exe
LegalCopyright Copyright © 2017
LegalTrademarks
OriginalFilename Windows ISO Downloader.exe
ProductName Windows ISO Downloader
ProductVersion 5.0.6.0
Assembly Version 5.0.6.0

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft
Info The following exploit mitigation techniques have been detected Stack Canary: disabled
SafeSEH: disabled
ASLR: enabled
DEP: enabled
Safe VirusTotal score: 0/63 (Scanned on 2017-07-09 13:32:50) All the AVs think this file is safe.

Hashes

MD5 517a43003923965e5c6e220aac3c6540
SHA1 39108a27288a85b9c8297e01ff8654b75aa4e459
SHA256 6618fd13b126013fc5df8bf397d949fcb782fb78c3c0c0df06c3c8d3423f0ae1
SHA3 75d8bd2d855bd8e7ba1b94459ecdfb1fca8f5822c3cf2ff171a39b755bb53b9a
SSDeep 6144:5pSiJEyj9iMlniJKbhMlpgJKbhMlpKVtQmGpSijBDgqHyQ7/1PTcQDU8Cu5iTTH:TiJaOpgJaOpK4pSiqOXTcKivHaFp
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2017-Jun-30 08:00:01
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 80.0
SizeOfCode 0x136c00
SizeOfInitializedData 0x4b600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x138a62 (Section: .text)
BaseOfCode 0x2000
BaseOfData 0x13a000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x188000
SizeOfHeaders 0x200
Checksum 0x18ea3c
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 274e13986db4be8901169994cc5629b7
SHA1 2d1df273cbf44330c7ef423d72602ebdf89521bf
SHA256 ae6fd8f80e368a53e1f3dd3fe510d7b51a8ebc594fb76812a80b140cdbeb9e83
SHA3 0388ef66c489be6e3daeb2175d59ec6221858f197561add55ca8ff0d4963ed26
VirtualSize 0x136a68
VirtualAddress 0x2000
SizeOfRawData 0x136c00
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.53017

.rsrc

MD5 4721b1d45572d34f95e448664bae65f2
SHA1 7fe9824786a61a240265687555ee2b3edc9d216f
SHA256 b6b6ed6b46c52eaa4798c48a36753eb5c371d5f49917ff2709433a41d920fbda
SHA3 a83def038421d617d0ac0ce5379986dcfaa888e1dccd3b9304264af92b19d542
VirtualSize 0x4b3a4
VirtualAddress 0x13a000
SizeOfRawData 0x4b400
PointerToRawData 0x136e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.42874

.reloc

MD5 df46114db1056c760aa2d627461b8833
SHA1 ffe6d669a1f324095d7fd7da7092e93027167b51
SHA256 1ac2ad2ef6e6d947b9f022b96d046666e761a0ab95d24d822c57424e29d53743
SHA3 6f7b5489b5f971d1bc31903976427977faf0de5f89f0feb8eb39f43bcc7626fb
VirtualSize 0xc
VirtualAddress 0x186000
SizeOfRawData 0x200
PointerToRawData 0x182200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.10191

Imports

mscoree.dll _CorExeMain

Delayed Imports

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x38c
Entropy 3.34496
MD5 99b716b7b59c132aea93a156ac1ef592
SHA1 16e147c57c045427ab56f477c6e3f51d5f5dcdde
SHA256 7d3d7e845848bb141dcea44014a3391ba78d652b89ec886a18d515324cc2d006
SHA3 ab449f67c4151bd5e90c2eecaa092c5fcc53d00873d89c4a358876bc87553fe6

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x988
Entropy 4.66927
MD5 bb0dac0486caae3cbdb7cf6e5d6dab67
SHA1 2b5715518a92c1520986053dd830e2c7d9d3d673
SHA256 788d7e4bf17d7f4bbe92a169d1c3fe76a9920032be8c6ef98ad23370c77c4a4f
SHA3 ec4e6a0c20e11015562542f31794b5e1c8372663fef4642318e73843cf0a2b16

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a8
Entropy 4.31647
MD5 f27df574bd14b051d3c44fdc13217c96
SHA1 9150b576ff8c7af2f006b8a8a1bbc25ea9422267
SHA256 53758086086d2982b738708442249a90b552898948fa425aa9dc9578f9abbf65
SHA3 ea1d5b746b78703436ef253bc973223287aa3a05528b2a56282716514a1ec570

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25a8
Entropy 3.81771
MD5 b43b8aaf2a8b84a2019b38b0b75021dd
SHA1 ba332b28410ff09705ec03af65b23c2025b4bb8e
SHA256 cada59a515b65efa092f22aa14e2cb29fb115e62a95a13ab482157f9aedf28a4
SHA3 75bf374d072f3903df03593c91fecf0853b6ef96121b326e194256a0835a3c01

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x4228
Entropy 3.50631
MD5 9ddcba50dbb7373906d478456aa385d8
SHA1 92880b7dcdd0e96001cf4e9de30a718021715300
SHA256 7476411991f19ec16b7ba757af2a2ceeb49ce8dea6736dd7e078670c62094801
SHA3 b904e9354dbd23f65ea676025144171fe6c5eb40c4e86eb5af8e52c1d26b4fa3

6

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x94a8
Entropy 3.15714
MD5 2f6f18fa3f6f226925b61bd0dff810b1
SHA1 462f74fcc34f16311f39d2ec3842f9c717b68161
SHA256 8ccc865bcb8c4b3e9ec0adc130d6869f5e89d70fbbcbf70e80e3cba04a30bd89
SHA3 87587cc2e65500839426340b331cd1e34f66cbfa77ff4c0f81f987a99a7e12ee

7

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10828
Entropy 3.02373
MD5 f778f74b8ae229c75f84b114d5a9f627
SHA1 79af30de7bab015b160f6d09622ea643889a711f
SHA256 3d31919bbdec1c84042b739839538f42d2e12483e97d2ca011faffff1e4b21c7
SHA3 38a6ddf35af8b67e12166613b6bfea65592fb476700515bc82c320255f84019a

8

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25228
Entropy 2.78483
MD5 1dbd59cfb8f469b7d4a66efc84e97a74
SHA1 f5e63a1e69474d795c89ba41eba1c70ffaa50f9f
SHA256 53c921c10d6d4e943c87f9181f859c9fc37da5c89417ac9d4ed41635fa18c4c9
SHA3 5b494c9fac3343e54b4abb19e5c859462829209a1229994989a9e077ed4976b9

9

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x37c7
Entropy 7.95518
Detected Filetype PNG graphic file
MD5 efa5247f3a96fbbb3806ac65006c5c76
SHA1 f3eabc10a322ff6243bbb5c41ae873b55a1fb0aa
SHA256 f562235522cacda6c9dec1c26ec84b62721bc5d871f6d44aba21e1bc41601a5a
SHA3 4573c21640f8755c269ad0fb76808665c6ad851593b4ae015d19d78139d0c79f

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x84
Entropy 3.07075
Detected Filetype Icon file
MD5 6b7beac2f9a23cc819d2a2c1060642cf
SHA1 9dad20ea7fd54cdee46787b9cd11b00bc1385a19
SHA256 75af233835f7b346885a23c575f8ce6c9a5e0f7d5011fc2a08e36986f8c2f51e
SHA3 beca2065c38a25b0daf6921c637348c1f763af679969b066cd70e29bd41df73a

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 5.0.6.0
ProductVersion 5.0.6.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments
CompanyName
FileDescription Windows ISO Downloader
InternalName Windows ISO Downloader.exe
LegalCopyright Copyright © 2017
LegalTrademarks
OriginalFilename Windows ISO Downloader.exe
ProductName Windows ISO Downloader
Assembly Version 5.0.6.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2017-Jun-30 08:00:01
Version 0.0
SizeofData 284
AddressOfRawData 0x1388f4
PointerToRawData 0x136af4
Referenced File C:\Users\jan\Documents\Visual Studio 2017\Projects\Windows ISO Downloader\Windows ISO Downloader\obj\Release\Windows ISO Downloader.pdb

TLS Callbacks

Load Configuration

Errors