Manalyze report for b74fd3a4b2cbc877d4660c7b39814a5084a1c857d91e4fc2e0b0d53f4022538a

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2022-Dec-29 16:12:19
Comments	VCM Editor
CompanyName	HP Tuners LLC
FileDescription	VCM Editor
FileVersion	`5.1.448`
InternalName	VCM Editor.exe
LegalCopyright	Copyright Â© 2022 HP Tuners LLC
LegalTrademarks
OriginalFilename	VCM Editor.exe
ProductName	VCM Editor
ProductVersion	`5.1.448`
Assembly Version	5.1.448.0

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C# v7.0 / Basic .NET`
Suspicious	PEiD Signature:	`HQR data file`
Suspicious	Strings found in the binary may indicate undesirable behavior:	`Looks for Qemu presence: QEMu qeMu` Contains domain names: alert.com app.ford.com archives.media.gm.com astraownersclub.com astraownersnetwork.co.uk auto-data.net automotix.net autopartsfair.com autotrader.com blue-bird.com boat-alert.com callaghanholdenwarrnambool.com.au carsales.com.au cumminsengines.com duk63.narod.ru elcats.ru en.wikibooks.org en.wikipedia.org etis.ford.com etisorigin.app.ford.com exist.ru faculty.piercecollege.edu fleet.ford.com gmpowertrain.com hindecoder.com hptuners.com http://carinfo.kiev.ua http://carinfo.kiev.ua/cars/vin/mercedes-- http://carinfo.kiev.ua/cars/vin/opel http://cumminsengines.com http://duk63.narod.ru http://duk63.narod.ru/downloads/gmdat_introduction_for_ce_epc3.pdf-- http://en.wikipedia.org http://en.wikipedia.org/wiki/Chrysler_1.8,_2.0_%26_2.4_engine http://en.wikipedia.org/wiki/Cummins_B_Series_engine http://en.wikipedia.org/wiki/Cyclone_V6-- http://en.wikipedia.org/wiki/Duramax_V8_engine#LLY.2FLBZ http://en.wikipedia.org/wiki/Duramax_V8_engine-- http://en.wikipedia.org/wiki/Ford_Cologne_V6_engine-- http://en.wikipedia.org/wiki/Ford_Cyclone_engine-- http://en.wikipedia.org/wiki/Ford_Duratec_engine#Duratec_23-- http://en.wikipedia.org/wiki/Ford_Duratec_engine#Duratec_35 http://en.wikipedia.org/wiki/Ford_Duratec_engine#Duratec_35-- http://en.wikipedia.org/wiki/Ford_EcoBoost_engine http://en.wikipedia.org/wiki/Ford_Modular_engine http://en.wikipedia.org/wiki/Ford_Modular_engine#6.8.C2.A0L_V10 http://en.wikipedia.org/wiki/Ford_Modular_engine#6.8.C2.A0L_V10-- http://en.wikipedia.org/wiki/Ford_Modular_engine-- http://en.wikipedia.org/wiki/GM_Atlas_engine#LLV http://en.wikipedia.org/wiki/GM_Family_1_engine http://en.wikipedia.org/wiki/GM_Family_1_engine#L91-- http://en.wikipedia.org/wiki/GM_Family_II_engine http://en.wikipedia.org/wiki/GM_Family_II_engine#LAT-- http://en.wikipedia.org/wiki/GM_Family_II_engine#LE9 http://en.wikipedia.org/wiki/GM_High_Feature_engine#LAU_Turbo http://en.wikipedia.org/wiki/GM_High_Feature_engine#LCS http://en.wikipedia.org/wiki/GM_High_Feature_engine#LFW http://en.wikipedia.org/wiki/GM_L66_engine-- http://en.wikipedia.org/wiki/GM_Quad-4_engine#LD9 http://en.wikipedia.org/wiki/General_Motors_90%C2%B0_V6_engine#LU3_and_LG3_MPFI-- http://en.wikipedia.org/wiki/Northstar_engine_series http://en.wikipedia.org/wiki/Northstar_engine_series#L37-- http://en.wikipedia.org/wiki/Northstar_engine_series#LD8 http://en.wikipedia.org/wiki/Northstar_engine_series#LD8-- http://faculty.piercecollege.edu http://faculty.piercecollege.edu/murphyh/CS560/INSWMI.txt http://gmpowertrain.com http://media.ford.com http://media.ford.com/images/10031/2013_MustangBoss_Specs.pdf-- http://media.ford.com/images/10031/2013_Taurus_SHO_Specs.pdf-- http://opel-niedersachsen.de http://opel.dixi-car.pl http://opel.dixi-car.pl/vin.htm http://support.hptuners.com http://support.hptuners.com/staff/index.php?/Tickets/Ticket/View/53004-- http://www.astraownersclub.com http://www.astraownersclub.com/vb/showthread.php?t http://www.astraownersnetwork.co.uk http://www.astraownersnetwork.co.uk/archive/index.php/t-127522.html-- http://www.auto-data.net http://www.auto-data.net/en/?f http://www.autopartsfair.com http://www.autopartsfair.com/st_search.html?cx http://www.callaghanholdenwarrnambool.com.au http://www.callaghanholdenwarrnambool.com.au/VehicleSearchResults?search http://www.carsales.com.au http://www.carsales.com.au-- http://www.elcats.ru http://www.elcats.ru/mercedes/-- http://www.etis.ford.com http://www.etis.ford.com/-- http://www.exist.ru http://www.exist.ru/cat/TecDoc/Cars/Mercedes-- http://www.ford.com http://www.ford.com/cars/fusion/2013/specifications/engine/-- http://www.ford.com/trucks/superduty/specifications/-- http://www.mcgrathholden.com.au http://www.mcgrathholden.com.au/VehicleSearchResults?search http://www.poyserholden.com.au http://www.poyserholden.com.au/VehicleSearchResults?search http://www.rambodybuilder.com http://www.rambodybuilder.com/2016/docs/intro/vin.pdf-- http://www.saabsunited.com http://www.saabsunited.com/wp-content/uploads/Saab2011VINdecoder.jpg-- http://www.scribd.com http://www.scribd.com/doc/38814808/Opel-Vin-Codes http://www.victorharborholden.com.au http://www.victorharborholden.com.au/VehicleSearchResults?search https://archives.media.gm.com https://archives.media.gm.com/us/chevrolet/en/product_services/r_cars/r_c_corvette/09index.html-- https://en.wikibooks.org https://en.wikibooks.org/wiki/Vehicle_Identification_Numbers_ https://en.wikipedia.org https://en.wikipedia.org/wiki/Hyundai_Lambda_engine-- https://en.wikipedia.org/wiki/Hyundai_Nu_engine-- https://en.wikipedia.org/wiki/Porsche_VIN_numbers https://hindecoder.com https://tis2web.service.gm.com https://tis2web.service.gm.com/tis2web-- https://vantage.blue-bird.com https://vantage.blue-bird.com/Portal/VIN-Definition-chart1.aspx-- https://vindecoder.eu https://vpic.nhtsa.dot.gov https://vpic.nhtsa.dot.gov/mid/home/displayfile/33873-- https://www-etisorigin.app.ford.com https://www-etisorigin.app.ford.com/vehicleSelection.do-- https://www.boat-alert.com https://www.boat-alert.com/?s https://www.etis.ford.com https://www.etis.ford.com/-- https://www.fleet.ford.com https://www.fleet.ford.com/content/dam/aem_fleet/en_us/fleet/vin-guides/2021_VIN_Guide.pdf https://www.fleet.ford.com/content/dam/aem_fleet/en_us/fleet/vin-guides/23377-2020-VIN-Guide.pdf https://www.fleet.ford.com/maintenance/vin_tools/pdfs/VIN2010.pdf-- https://www.fleet.ford.com/maintenance/vin_tools/pdfs/VIN2011.pdf https://www.fleet.ford.com/maintenance/vin_tools/pdfs/VIN2011.pdf-- https://www.fleet.ford.com/parts-service/resources/vin-guides/-- https://www.stuttcars.com https://www.stuttcars.com/technical/vin-decoder/ mcgrathholden.com.au media.ford.com media.gm.com narod.ru nhtsa.dot.gov niedersachsen.de opel-niedersachsen.de piercecollege.edu poyserholden.com.au rambodybuilder.com saabsunited.com scribd.com service.gm.com stuttcars.com support.hptuners.com tis2web.service.gm.com vantage.blue-bird.com victorharborholden.com.au vpic.nhtsa.dot.gov wikibooks.org wikipedia.org www-etisorigin.app.ford.com www.astraownersclub.com www.astraownersnetwork.co.uk www.auto-data.net www.autopartsfair.com www.boat-alert.com www.callaghanholdenwarrnambool.com.au www.carsales.com.au www.elcats.ru www.etis.ford.com www.exist.ru www.fleet.ford.com www.ford.com www.mcgrathholden.com.au www.poyserholden.com.au www.rambodybuilder.com www.saabsunited.com www.scribd.com www.stuttcars.com www.victorharborholden.com.au
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32` `Uses constants related to MD5` `Uses constants related to SHA256` `Uses constants related to AES`
Info	The PE is digitally signed.	`Signer: HP Tuners LLC` `Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1`
Safe	VirusTotal score: 0/74 (Scanned on 2024-06-11 09:40:58)	`All the AVs think this file is safe.`

Hashes

MD5	`60755a149d243d79126cd029e3d85ad8`
SHA1	`78720f5e54f2e9b0fc837f36c2f6546b7503ac80`
SHA256	`b74fd3a4b2cbc877d4660c7b39814a5084a1c857d91e4fc2e0b0d53f4022538a`
SHA3	`6d212b4590b9b181167f49674bfef37a59bcf9bf9c02b4a04719767aa306e3d3`
SSDeep	`393216:8m70dehz7jdD77Wb2Y8jJGGRdVQVKacN/fX0ZRMO:8m70dehz7N7WN8laQxtACO`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2022-Dec-29 16:12:19
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`8.0`
SizeOfCode	`0x1a00400`
SizeOfInitializedData	`0x9000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x01A022E6 (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x1a04000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x1a10000`
SizeOfHeaders	`0x200`
Checksum	`0x1a175d3`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`7a47bb9c294ef18f8e1fb288191a7478`
SHA1	`0dee004730adf693a9307d1a54d337d160d901fa`
SHA256	`bebf4cfa94441f4232e61edd9b5a107b8e4629641ff22d73861a926dd7ab9a45`
SHA3	`0049941bff0e368d57ab3b7098dc2f62b99689708f88826bdf6029428dd49422`
VirtualSize	`0x1a002ec`
VirtualAddress	`0x2000`
SizeOfRawData	`0x1a00400`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`7.40755`

.rsrc

MD5	`ac5d2090afbe649de0f97ea2e49cae1c`
SHA1	`66d0b99a0dd6cabe49b2a7c29620736e52be3895`
SHA256	`8360266f245d3a96aed4dbff57ca5537b8c751d9fb0013bd2f446a751e9a343c`
SHA3	`3eade5a794c279ea442c06af053e8c7d14d575a60132f3dd472364e57ad06405`
VirtualSize	`0x8de6`
VirtualAddress	`0x1a04000`
SizeOfRawData	`0x8e00`
PointerToRawData	`0x1a00600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.0906`

.reloc

MD5	`dbee2ab2fdfea80bc1a0dcbdb7caa411`
SHA1	`d9f02d3b992aedbe0329419c5c1fb0f34f67afa1`
SHA256	`bfe49bfcab7ba06c4318a1ca35539bba9c0cb0edfee29d7a9ad6bdc854347d99`
SHA3	`db3e4b9b880d3b94fd8577e23b71fb4d1ac474c9d2016a1bdc636ec82f306d29`
VirtualSize	`0xc`
VirtualAddress	`0x1a0e000`
SizeOfRawData	`0x200`
PointerToRawData	`0x1a09400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.122276`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x4228`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.45465`
MD5	`bfacf613319e9a800d0a345cc33bc1d9`
SHA1	`de0ad54bb7a9b12bbde5013b0d2ed68f9b8f4ee9`
SHA256	`cb47aa8f5a23b22ae4e12a9c0667331be77f499f2d1a4b9ada585405c16c70b0`
SHA3	`e190920424e4e6d773f76563f42a65de148912759bf12d9b61163e3887395ab3`

2

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.81283`
MD5	`0210836dc8978189893fa730feef3880`
SHA1	`8dd4115561423a890424d4164ead7d8ddcd56605`
SHA256	`4256f4e56937604beca9473fe531ef581e8ab50fb25b64792c68025fe9973229`
SHA3	`97076a39d1060a9542d313612b6094a76184e279391a4d278e1fd6bba2ea101c`

3

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.0629`
MD5	`223aa00d05998a78508209b74b9a09e6`
SHA1	`d3e69db00448230a94858178e9e5f77ebae9fc77`
SHA256	`9d76bb5a8269f13e649c78a7f09205ff46216707cbd04edb690300832d04ad75`
SHA3	`abbb6d447299bcc4923f04a25026bddc9065beb4dbf213afa42051a8a288f44d`

4

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x988`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.99751`
MD5	`77c9904fc121a4703cfa1a6509ef8979`
SHA1	`e786df8286f02e461124f63d6781a637c9a7082e`
SHA256	`d09dc5e4ec29a62f63adaadc7ab6339fcbfd40efc272fd6d9041874958182d58`
SHA3	`1baae5479ce2a3b8aeda39666499815a515bb618b3777be1462e756e48fa20fa`

5

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.25758`
MD5	`9679c5637f92bc315799843216d4eed7`
SHA1	`697584334597bdf6267d1670ba92862dba0c9b93`
SHA256	`d5acdcb9587ae048f706631e1e159397dd7ff19f2fe3c054f2c7bd50b9690a98`
SHA3	`2b4ed8c5b22fb5a9390ca72a1fcef495dab590c5921f18217d008dbff5205601`

32512

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x4c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.79808`
Detected Filetype	Icon file
MD5	`aae6decb939a13d7048a1829b30157f2`
SHA1	`b927e97b6642fbb6121d0ece607a96d07b55ac7d`
SHA256	`672569335f397f199e8e5ffd52c221068b0082ae9607e73edb0418832db3e2ac`
SHA3	`1bbb1d06db6fbcfe5725b8156ce06ac465c4487a15c0bbd60aa75b4459527bad`

1 (#2)

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x378`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.40297`
MD5	`8e09c2516d96bb9a24eb3ae741cd8dec`
SHA1	`8de92f8a5a5498e802c52806b8fee12c376d0fe5`
SHA256	`34adf12967c4f652f6f0c6dcc26a899bfeba8de8a164a435a5d69429adfdfcc5`
SHA3	`683dc8ca98f4891292ef7323315282e18773a5fd0aa72d46846c7bbffe1d39a3`

1 (#3)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.00112`
MD5	`b7db84991f23a680df8e95af8946f9c9`
SHA1	`cac699787884fb993ced8d7dc47b7c522c7bc734`
SHA256	`539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a`
SHA3	`4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	5.1.448.0
ProductVersion	5.1.448.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments	VCM Editor
CompanyName	HP Tuners LLC
FileDescription	VCM Editor
FileVersion (#2)	5.1.448
InternalName	VCM Editor.exe
LegalCopyright	Copyright Â© 2022 HP Tuners LLC
LegalTrademarks
OriginalFilename	VCM Editor.exe
ProductName	VCM Editor
ProductVersion (#2)	5.1.448
Assembly Version	5.1.448.0

Resource LangID	UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.