×
This file seems to be a .NET executable .
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Architecture
IMAGE_FILE_MACHINE_I386
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date
2023-May-30 06:51:06
FileDescription
FileVersion
0.0.0.0
InternalName
Program.exe
LegalCopyright
OriginalFilename
Program.exe
ProductVersion
0.0.0.0
Assembly Version
0.0.0.0
Info
Matching compiler(s):
Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft
Info
Interesting strings found in the binary:
Contains domain names:
github.com
https://github.com
Suspicious
No VirusTotal score.
This file has never been scanned on VirusTotal.
MD5
66a3299c3be8612dd32069e7624bb31a
SHA1
d689bba889291546e88af557e69bc5471379e361
SHA256
01c41bf418ffe04ce7da058baf7a3a5025ad234374a2cc19253e637aff06732b
SHA3
b29aeb236c7a8d156b32c34f50d93f8dee3714c4a66b5848491a28e739ded5d7
SSDeep
48:6UiwxvMgO09C942ZJLwbyK8HOgDCmSFLZejuulxxxVKqXSfbNtm:Px/w4DD8HObAVxEzNt
Imports Hash
f34d5f2d4577ed6d9ceec516c1f5a744
e_magic
MZ
e_cblp
0x90
e_cp
0x3
e_crlc
0
e_cparhdr
0x4
e_minalloc
0
e_maxalloc
0xffff
e_ss
0
e_sp
0xb8
e_csum
0
e_ip
0
e_cs
0
e_ovno
0
e_oemid
0
e_oeminfo
0
e_lfanew
0x80
Signature
PE
Machine
IMAGE_FILE_MACHINE_I386
NumberofSections
3
TimeDateStamp
2023-May-30 06:51:06
PointerToSymbolTable
0
NumberOfSymbols
0
SizeOfOptionalHeader
0xe0
Characteristics
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
Magic
PE32
LinkerVersion
11.0
SizeOfCode
0x800
SizeOfInitializedData
0x800
SizeOfUninitializedData
0
AddressOfEntryPoint
0x0000277E (Section: .text)
BaseOfCode
0x2000
BaseOfData
0x4000
ImageBase
0x400000
SectionAlignment
0x2000
FileAlignment
0x200
OperatingSystemVersion
4.0
ImageVersion
0.0
SubsystemVersion
4.0
Win32VersionValue
0
SizeOfImage
0x8000
SizeOfHeaders
0x200
Checksum
0
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve
0x100000
SizeofStackCommit
0x1000
SizeofHeapReserve
0x100000
SizeofHeapCommit
0x1000
LoaderFlags
0
NumberOfRvaAndSizes
16
MD5
5568f92b9c7eeed1bbf0777941dcbd8f
SHA1
8eadc4c45ffaf25c0add78a60fa74b52293cc5d5
SHA256
c9212e079f63438f7b5314e9323df922df1bcba79041d18e9d9338808ff2b774
SHA3
0c9c750e08ad2c75d1d57654f014d207c237ec742aff8c842a554579b3575067
VirtualSize
0x784
VirtualAddress
0x2000
SizeOfRawData
0x800
PointerToRawData
0x200
PointerToRelocations
0
PointerToLineNumbers
0
NumberOfLineNumbers
0
NumberOfRelocations
0
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy
4.16836
MD5
c98bd4ec607f39c619c675cdf2990a6b
SHA1
853253c01a56e750db9f518ecf6314f53d3df1c2
SHA256
524d1f66f94a29a01808743fc52298109aacbd2feeabf4c6099b5a712254978a
SHA3
1781ae9f1b79913ca4d44a45c731ec2ee7ec5def7e9002251c8a9068584a10e3
VirtualSize
0x4d8
VirtualAddress
0x4000
SizeOfRawData
0x600
PointerToRawData
0xa00
PointerToRelocations
0
PointerToLineNumbers
0
NumberOfLineNumbers
0
NumberOfRelocations
0
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy
3.705
MD5
5a1ed3c6517272cdca0a82d393318c9d
SHA1
d54db32e4244621d08429f2b0dd5d907d39e6e89
SHA256
62f04448a7815b644ddd177530dd13bdb2f7c2ee2611ae967106e04ab28b4c61
SHA3
b9687fd16319dbd1d06e4aaf128df2169ee5286a6aad0bc9b82b38854f8df00a
VirtualSize
0xc
VirtualAddress
0x6000
SizeOfRawData
0x200
PointerToRawData
0x1000
PointerToRelocations
0
PointerToLineNumbers
0
NumberOfLineNumbers
0
NumberOfRelocations
0
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy
0.0815394
Type
RT_VERSION
Language
UNKNOWN
Codepage
UNKNOWN
Size
0x244
TimeDateStamp
1980-Jan-01 00:00:00
Entropy
3.1613
MD5
f27663b3fd8adaeacff3d358125d73e1
SHA1
edf24ea92d0a27358bba71445fd28b2ec2c44921
SHA256
1f1150127267cdc37c8c1b008b5312ea3d6d8396f9741042cb9f874d80b295ce
SHA3
aca4f2906ef3f1ad70a6ccff0d0c3beb0860ed3275dacb47e5e7d52bc87c26a6
Type
RT_MANIFEST
Language
UNKNOWN
Codepage
UNKNOWN
Size
0x1ea
TimeDateStamp
1980-Jan-01 00:00:00
Entropy
5.00112
MD5
a19a2658ba69030c6ac9d11fd7d7e3c1
SHA1
879dcf690e5bf1941b27cf13c8bcf72f8356c650
SHA256
c0085eb467d2fc9c9f395047e057183b3cd1503a4087d0db565161c13527a76f
SHA3
93cbaf236d2d3870c1052716416ddf1c34f21532e56dd70144e9a01efcd0ce34
Signature
0xfeef04bd
StructVersion
0x10000
FileVersion
0.0.0.0
ProductVersion
0.0.0.0
FileFlags
(EMPTY)
FileOs
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType
VFT_APP
Language
UNKNOWN
FileDescription
FileVersion (#2)
0.0.0.0
InternalName
Program.exe
LegalCopyright
OriginalFilename
Program.exe
ProductVersion (#2)
0.0.0.0
Assembly Version
0.0.0.0