Manalyze report for b4abf3a179d462c1e81ff58efeb3ac9e

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2051-Sep-23 03:14:31
Debug artifacts	D:\VS\SimpleNotes\SimpleNotes\obj\Release\SimpleNotes.pdb
Comments
CompanyName	Ongart Creations™ and Hendrik Lüdtke
FileDescription	SimpleNotes
FileVersion	`2.6.1.0`
InternalName	SimpleNotes.exe
LegalCopyright	Copyright © Ongart Creations™ and Hendrik Lüdtke 2019
LegalTrademarks
OriginalFilename	SimpleNotes.exe
ProductName	SimpleNotes
ProductVersion	`2.6.1.0`
Assembly Version	2.6.1.0

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C# v7.0 / Basic .NET`
Safe	VirusTotal score: 0/69 (Scanned on 2019-11-20 20:46:14)	`All the AVs think this file is safe.`

Hashes

MD5	`b4abf3a179d462c1e81ff58efeb3ac9e`
SHA1	`bab98138be44d82935a53c42a77c306c320e7e10`
SHA256	`bbf2e6a5968968fa3b94e86e9057c37ac3728e15a6693e628ce43a59a1638854`
SHA3	`70835e2bb13a5d4473b3c386648b41d6d0dbc4289074e4cb3642cf3ffc5106c4`
SSDeep	`1536:PZucdTmbfZLfQ1TG28LR5XfyKyhyaaGG3hOqMPYDmvyoJ0:PZ1dTmrZb+TG28LR5XwaGohOmy0`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2051-Sep-23 03:14:31
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`48.0`
SizeOfCode	`0x17800`
SizeOfInitializedData	`0x4c00`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x000196DA (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x1a000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x22000`
SizeOfHeaders	`0x200`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`c1c87a732980125f3ce6ca632cfbd961`
SHA1	`5bade62159effc84298cf3516c402cc4f48f478c`
SHA256	`8bf74a856572faed6aac7b1fd24d668ba04b164cd6585825efd57a7f2865f654`
SHA3	`15e9a45fb9034eb3b6895edecc4d70f731e1cc8e3a75ec4953772b87f056c647`
VirtualSize	`0x176e0`
VirtualAddress	`0x2000`
SizeOfRawData	`0x17800`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`5.27302`

.rsrc

MD5	`2c75544e081cc1a703612ad388b098da`
SHA1	`dce3e4d1f2c7cedd0aa016e75a97114f3e64cfd9`
SHA256	`6ed9d4139b0f7bb310d71cd33e51ced0c3d3d6c6efae348600f29e244d2b1a62`
SHA3	`b17bec503a09f2ba7d018e7c7f695f463aa7ed0030a9ee78a3bff6fe40f47903`
VirtualSize	`0x4918`
VirtualAddress	`0x1a000`
SizeOfRawData	`0x4a00`
PointerToRawData	`0x17a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`1.78664`

.reloc

MD5	`e61015b42051fa7be37c1008715f3fb2`
SHA1	`fe24877f8c03bd4a47126b09afdeaae2fbb66aa4`
SHA256	`c724081a33c38c60d7e363fa90fb3206fd8c762fbba3832d354e6ecb9c31d3c7`
SHA3	`8384bb7b26ca685d3f888c7f641686f656f89827c317e64da3c6412fd25cd047`
VirtualSize	`0xc`
VirtualAddress	`0x20000`
SizeOfRawData	`0x200`
PointerToRawData	`0x1c400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.10191`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x4228`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.37848`
MD5	`15676f54da6cec3effba992efd9adc9e`
SHA1	`157dc45923e9be8ccf90283f9a990da548c91064`
SHA256	`97c5ac31dfaf8076f785498772ce47b49d996356ac62a561c713830d46a026c0`
SHA3	`0f1d10f39429cca6c0d8b4830a3ec171507647acc58d13873a4239fc86e9e91b`

32512

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.91924`
Detected Filetype	Icon file
MD5	`3e1d980f0dc747eec9d946c155cb1498`
SHA1	`15414ced0202f709d400c957d441a8856dde8479`
SHA256	`027e12c81d53ebb492d0e1ce8166c0c004e135274105fb79465b6b97bc6c71cd`
SHA3	`11e83c27ff3b8cca2c537273338202138c94fb4b10a6b2daf0f7d23d177cc049`

1 (#2)

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x3bc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.40809`
MD5	`e94e8e415bf44abfef64b948af034936`
SHA1	`58edc7a7ac3aa5f719f32b1a61eb1d0ee31d0a96`
SHA256	`51269ce134b240a51064429d52d4c19755a81274811eb68fd02495945083657c`
SHA3	`f5bbca8e270ae023a73fa4dd2881d0631dd86b15a678d262ac25f0f723e2177d`

1 (#3)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.00112`
MD5	`b7db84991f23a680df8e95af8946f9c9`
SHA1	`cac699787884fb993ced8d7dc47b7c522c7bc734`
SHA256	`539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a`
SHA3	`4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	2.6.1.0
ProductVersion	2.6.1.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments
CompanyName	Ongart Creations™ and Hendrik Lüdtke
FileDescription	SimpleNotes
FileVersion (#2)	2.6.1.0
InternalName	SimpleNotes.exe
LegalCopyright	Copyright © Ongart Creations™ and Hendrik Lüdtke 2019
LegalTrademarks
OriginalFilename	SimpleNotes.exe
ProductName	SimpleNotes
ProductVersion (#2)	2.6.1.0
Assembly Version	2.6.1.0

Resource LangID	UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2078-Sep-11 22:29:57
Version	`256.20557`
SizeofData	`82`
AddressOfRawData	`0x1960c`
PointerToRawData	`0x1780c`
Referenced File	D:\VS\SimpleNotes\SimpleNotes\obj\Release\SimpleNotes.pdb

UNKNOWN

Characteristics	`0`
TimeDateStamp	1970-Jan-01 00:00:00
Version	`1.0`
SizeofData	`39`
AddressOfRawData	`0x1965e`
PointerToRawData	`0x1785e`

UNKNOWN (#2)

Characteristics	`0`
TimeDateStamp	1970-Jan-01 00:00:00
Version	`0.0`
SizeofData	`0`
AddressOfRawData	`0`
PointerToRawData	`0`

TLS Callbacks

Load Configuration

RICH Header

b4abf3a179d462c1e81ff58efeb3ac9e

Summary

Plugin Output

Hashes

DOS Header

PE Header

Image Optional Header

.text

.rsrc

.reloc

Imports

Delayed Imports

1

32512

1 (#2)

1 (#3)

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

UNKNOWN

UNKNOWN (#2)

TLS Callbacks

Load Configuration

RICH Header

Errors