b4abf3a179d462c1e81ff58efeb3ac9e

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 1915-Aug-17 20:46:15
Debug artifacts D:\VS\SimpleNotes\SimpleNotes\obj\Release\SimpleNotes.pdb
Comments
CompanyName Ongart Creations™ and Hendrik Lüdtke
FileDescription SimpleNotes
FileVersion 2.6.1.0
InternalName SimpleNotes.exe
LegalCopyright Copyright © Ongart Creations™ and Hendrik Lüdtke 2019
LegalTrademarks
OriginalFilename SimpleNotes.exe
ProductName SimpleNotes
ProductVersion 2.6.1.0
Assembly Version 2.6.1.0

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
Safe VirusTotal score: 0/69 (Scanned on 2019-11-20 20:46:14) All the AVs think this file is safe.

Hashes

MD5 b4abf3a179d462c1e81ff58efeb3ac9e
SHA1 bab98138be44d82935a53c42a77c306c320e7e10
SHA256 bbf2e6a5968968fa3b94e86e9057c37ac3728e15a6693e628ce43a59a1638854
SHA3 70835e2bb13a5d4473b3c386648b41d6d0dbc4289074e4cb3642cf3ffc5106c4
SSDeep 1536:PZucdTmbfZLfQ1TG28LR5XfyKyhyaaGG3hOqMPYDmvyoJ0:PZ1dTmrZb+TG28LR5XwaGohOmy0
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 1915-Aug-17 20:46:15
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 48.0
SizeOfCode 0x17800
SizeOfInitializedData 0x4c00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000196DA (Section: .text)
BaseOfCode 0x2000
BaseOfData 0x1a000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x22000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 c1c87a732980125f3ce6ca632cfbd961
SHA1 5bade62159effc84298cf3516c402cc4f48f478c
SHA256 8bf74a856572faed6aac7b1fd24d668ba04b164cd6585825efd57a7f2865f654
SHA3 15e9a45fb9034eb3b6895edecc4d70f731e1cc8e3a75ec4953772b87f056c647
VirtualSize 0x176e0
VirtualAddress 0x2000
SizeOfRawData 0x17800
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.27302

.rsrc

MD5 2c75544e081cc1a703612ad388b098da
SHA1 dce3e4d1f2c7cedd0aa016e75a97114f3e64cfd9
SHA256 6ed9d4139b0f7bb310d71cd33e51ced0c3d3d6c6efae348600f29e244d2b1a62
SHA3 b17bec503a09f2ba7d018e7c7f695f463aa7ed0030a9ee78a3bff6fe40f47903
VirtualSize 0x4918
VirtualAddress 0x1a000
SizeOfRawData 0x4a00
PointerToRawData 0x17a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.78664

.reloc

MD5 e61015b42051fa7be37c1008715f3fb2
SHA1 fe24877f8c03bd4a47126b09afdeaae2fbb66aa4
SHA256 c724081a33c38c60d7e363fa90fb3206fd8c762fbba3832d354e6ecb9c31d3c7
SHA3 8384bb7b26ca685d3f888c7f641686f656f89827c317e64da3c6412fd25cd047
VirtualSize 0xc
VirtualAddress 0x20000
SizeOfRawData 0x200
PointerToRawData 0x1c400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.10191

Imports

mscoree.dll _CorExeMain

Delayed Imports

1

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.37848
MD5 15676f54da6cec3effba992efd9adc9e
SHA1 157dc45923e9be8ccf90283f9a990da548c91064
SHA256 97c5ac31dfaf8076f785498772ce47b49d996356ac62a561c713830d46a026c0
SHA3 0f1d10f39429cca6c0d8b4830a3ec171507647acc58d13873a4239fc86e9e91b

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.91924
Detected Filetype Icon file
MD5 3e1d980f0dc747eec9d946c155cb1498
SHA1 15414ced0202f709d400c957d441a8856dde8479
SHA256 027e12c81d53ebb492d0e1ce8166c0c004e135274105fb79465b6b97bc6c71cd
SHA3 11e83c27ff3b8cca2c537273338202138c94fb4b10a6b2daf0f7d23d177cc049

1 (#2)

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x3bc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.40809
MD5 e94e8e415bf44abfef64b948af034936
SHA1 58edc7a7ac3aa5f719f32b1a61eb1d0ee31d0a96
SHA256 51269ce134b240a51064429d52d4c19755a81274811eb68fd02495945083657c
SHA3 f5bbca8e270ae023a73fa4dd2881d0631dd86b15a678d262ac25f0f723e2177d

1 (#3)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0x1ea
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.00112
MD5 b7db84991f23a680df8e95af8946f9c9
SHA1 cac699787884fb993ced8d7dc47b7c522c7bc734
SHA256 539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a
SHA3 4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2.6.1.0
ProductVersion 2.6.1.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments
CompanyName Ongart Creations™ and Hendrik Lüdtke
FileDescription SimpleNotes
FileVersion (#2) 2.6.1.0
InternalName SimpleNotes.exe
LegalCopyright Copyright © Ongart Creations™ and Hendrik Lüdtke 2019
LegalTrademarks
OriginalFilename SimpleNotes.exe
ProductName SimpleNotes
ProductVersion (#2) 2.6.1.0
Assembly Version 2.6.1.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 1942-Aug-06 16:01:41
Version 256.20557
SizeofData 82
AddressOfRawData 0x1960c
PointerToRawData 0x1780c
Referenced File D:\VS\SimpleNotes\SimpleNotes\obj\Release\SimpleNotes.pdb

UNKNOWN

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 1.0
SizeofData 39
AddressOfRawData 0x1965e
PointerToRawData 0x1785e

UNKNOWN (#2)

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

RICH Header

Errors