Manalyze report for 5d8d02838662028bfdb7526b97197640644c2b040f98c5c0a506be2515da05e2

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-Jun-30 15:53:24
Debug artifacts	C:\Build\slots\rebextinyftpserver-publish-e9e647db8a5fe69ac8c62d46ed35577a669f6d6b\tmp\source\TinyFtpServer\bin\release\net40\RebexTinyFtpServerMerged.pdb

Plugin Output

Info	Interesting strings found in the binary:	Contains domain names: http://www.w3.org http://www.w3.org/2000/09/xmldsig#dsa-sha1 http://www.w3.org/2000/09/xmldsig#rsa-sha1 https://www.rebex.net https://www.rebex.net/buru-sftp-server/?utm_medium https://www.rebex.net/kb/elliptic-curve-plugins/ https://www.rebex.net/kb/license-keys/ https://www.rebex.net/kb/pqc-plugins/ https://www.rebex.net/kb/simple-elliptic-curve-libraries/ https://www.rebex.net/shop. https://www.rebex.net/shop/. https://www.rebex.net/support/trial/ https://www.rebex.net/tiny-ftp-server/ https://www.rebex.net/tiny-ftp-server/?utm_medium libssh.org openssh.com rebex.net www.rebex.net www.w3.org
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to MD5` `Uses constants related to SHA256` `Uses constants related to SHA512` `Uses constants related to Blowfish` `Uses constants related to Twofish` `Uses known Diffie-Helman primes`
Info	The PE is digitally signed.	`Signer: REBEX \xC4\x8CR s.r.o.` `Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1`
Safe	VirusTotal score: 0/70 (Scanned on 2026-08-21 19:05:48)	`All the AVs think this file is safe.`

Hashes

MD5	`606c9d7e114a39f2378be40507ff4c03` 🔍
SHA1	`a3a72813f209ab100a9457b325de66a1ca7e48f3` 🔍
SHA256	`5d8d02838662028bfdb7526b97197640644c2b040f98c5c0a506be2515da05e2` 🔍
SHA3	`5efcdaab805a7337f01aa2478fca656c48f6dfc1c70639cd7d7556f688428135` 🔍
SSDeep	`49152:IcThArJT5+HFzvGC6xK8itiSfC3lb/y2/3cR/WBk/uIZiwRHM:IcTETsHFTP6xzN3lb/y2/3a+BMZls` 🔍
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2026-Jun-30 15:53:24
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`8.0`
SizeOfCode	`0x3ff600`
SizeOfInitializedData	`0x65000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x004014E6 (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x402000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`4.0`
Win32VersionValue	`0`
SizeOfImage	`0x46a000`
SizeOfHeaders	`0x200`
Checksum	`0x46bba3`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`d5c64b77cd9692309d056bfe49e54d3a 🔍`
SHA1	`cba0b8bd12515f01c6e7489c5abc95fbab5a227f 🔍`
SHA256	`be343eaeacb8e3311ee1d58e12a270487a73c6f08ea23f88547a9cda371c10ec 🔍`
SHA3	`8610e0c4d2f8e37480d04f9b7f869bb5e9ab541e6569f377e21a21df8aa5c089 🔍`
VirtualSize	`0x3ff5cb`
VirtualAddress	`0x2000`
SizeOfRawData	`0x3ff600`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`5.93423`

.rsrc

MD5	`d17d2993ab41b691be378db8ca76a3a2 🔍`
SHA1	`4e5868e7488db0a2c829013b1cf3d7b1c597426a 🔍`
SHA256	`97d203fd7127905355ac0ca1285218e4b0c484d85b72c6ec0f6be520b7a4c960 🔍`
SHA3	`2cdcad5b151026941b63db10b5d75dd2e0f22e42fa07798722c195de76df7d9b 🔍`
VirtualSize	`0x64c88`
VirtualAddress	`0x402000`
SizeOfRawData	`0x64e00`
PointerToRawData	`0x3ff800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.08172`

.reloc

MD5	`34335ed70735288643ca941fd83ca06e 🔍`
SHA1	`c2d70687ad46913fd3a9a2585292c9929fd6b9e4 🔍`
SHA256	`ac17bf8fe6d8ac4d9d61a004ad38f665661cf91d78acedb5a667b0d90b880871 🔍`
SHA3	`0604c469add5c53d85eff176709e8fa96720efaaaf1ccb1efd3804400c0f70cc 🔍`
VirtualSize	`0xc`
VirtualAddress	`0x468000`
SizeOfRawData	`0x200`
PointerToRawData	`0x464600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.10191`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.68661`
MD5	`d688fb86b782a79e461084195ddfd0a9 🔍`
SHA1	`5d831f7ad961aa1ad1b6d9e182d3d11229c2f29e 🔍`
SHA256	`21370cb9bcc290e83090c7d031b0b7ffc47122a734b9ed10677f982626bd3c80 🔍`
SHA3	`27174240d7f0e8c5a8b1f19777c48e9f09448520b37247d3fc255582daf2e19c 🔍`

2

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x988`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.41507`
MD5	`c6690e1ec40ffcb476c46c3c10544243 🔍`
SHA1	`27ad7ce2cf61b4a3ecec84c10a7bccefe9a4f3a0 🔍`
SHA256	`0512fa990a3139d7399313ceb739797f371bff46f91e6ad134dc53ee15c831b8 🔍`
SHA3	`f9e5bac2a265cd9c28525d3dba69b0681f1b62bc2a95af8944f8a88d2ad8f1cd 🔍`

3

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.18712`
MD5	`0bf48722b048c3f830d12326f1fc1d73 🔍`
SHA1	`2aa54580047fafdfd97a77417db9c3213e492ca4 🔍`
SHA256	`26a74b0d5cccf4e87d052161e8b50332e4007caba2db6838e19a7b2f277aa5ca 🔍`
SHA3	`9dfc92e1ffe24b9ab479a8e18a3d9ea6a7247b3c716358ffe5a6dbda5af21b39 🔍`

4

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.81266`
MD5	`47e94c7656d1fba578bc91ec8a66031d 🔍`
SHA1	`74314657a136164967d0f63e6690e912b2a9c869 🔍`
SHA256	`9e253c53d28bd41302dfe912ced0b97b74b5d42eb82ee84ea5108bc7b305f4ce 🔍`
SHA3	`e9f37c6b9cfb5056dcfea090e63150aedad9fda139d5d94dc91b6a7ed0f2f85a 🔍`

5

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x4228`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.58748`
MD5	`8922b38723dc16294f38c9fd038a41cc 🔍`
SHA1	`00527687da0d3fe62b5bac817778cca8070cabb2 🔍`
SHA256	`236561d28d3957a967e4926277e08a8cc21419c0a57cd969e102595714a94c40 🔍`
SHA3	`34e1cde9477b4eaabafb9febe550d3eb06c416fdbcb9809f803d29ce28c1c8fb 🔍`

6

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x94a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.29897`
MD5	`23f88a3d14ee9804b32bea020f6e7a79 🔍`
SHA1	`5a4915da45c2000184feeda02a80d729391f5288 🔍`
SHA256	`7d9c0d46ec7b86f95a8c7b893328fccab259885f43f0b288bf76dc5193361df3 🔍`
SHA3	`02553fac45627e8f02b9f353e6aae0c2f806b2fb14f6788db1ee487b984e5d35 🔍`

7

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10828`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.1205`
MD5	`1400399a825bef0c1f442070214466bf 🔍`
SHA1	`4f47ade2de8e384793df7aa6603ffa9b61dea418 🔍`
SHA256	`60df33f54604db34b4eceadf3109efba7fad05fa17d7047af58db827d1d651f2 🔍`
SHA3	`9c2c2584e9b0be8dd13e1c9a0207298467bd94f2211dd3586c553d06f31ee608 🔍`

8

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x42028`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.84793`
MD5	`962419a0d81d88e246089d3f2d5ff277 🔍`
SHA1	`22af334dcba8881369c3a7755fe950c6fddcb4ba 🔍`
SHA256	`3f289208ad8114887fc7cddd421d2c77b6b86e61ab1686d73f91a0952ace3e98 🔍`
SHA3	`cef5d05f6b700a70637e47435c19eab8c04d1cc01bd219e0bcbf90a17c421833 🔍`

32512

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x76`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.94794`
Detected Filetype	Icon file
MD5	`19b8a1373207d2ceacaf26fce76f8a56 🔍`
SHA1	`d67585b88fcb9a45d3e59198ae4deec70fac8a52 🔍`
SHA256	`8221fe91b14c89d9acf6c69e626cdfd9a3acfaf8f1a373149705a38d861891cd 🔍`
SHA3	`e4c9410d242c44c20e7af255504a0b44cf298299936cbabd6168ceeb4cb7785a 🔍`

1 (#2)

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x448`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.45698`
MD5	`08cd4914842496acdfd99ee891d9330e 🔍`
SHA1	`563f58060474f3a151d28982b74b918c3b82fc66 🔍`
SHA256	`617f2b6e9dfc17eb28c5fe4d13991afb1be8675d04a989f83734d512ab451f5d 🔍`
SHA3	`e4c7351b879e8e3f087387a45ef5566859e6979616d01f5abc90e782fb03c503 🔍`

1 (#3)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.00112`
MD5	`b7db84991f23a680df8e95af8946f9c9 🔍`
SHA1	`cac699787884fb993ced8d7dc47b7c522c7bc734 🔍`
SHA256	`539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a 🔍`
SHA3	`4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff 🔍`

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2026-Jun-30 15:53:24
Version	`0.0`
SizeofData	`179`
AddressOfRawData	`0x401518`
PointerToRawData	`0x3ff718`
Referenced File	C:\Build\slots\rebextinyftpserver-publish-e9e647db8a5fe69ac8c62d46ed35577a669f6d6b\tmp\source\TinyFtpServer\bin\release\net40\RebexTinyFtpServerMerged.pdb

TLS Callbacks

Load Configuration

RICH Header

Errors

[!] Error: Could not read a VS_FIXED_FILE_INFO!
[!] Error: Could not read a VS_FIXED_FILE_INFO!
[*] Warning: Could not parse a VERSION_INFO resource!

Leave a comment

No comments yet.