1286e6a49dd0aff95457ada53664817c00b778a64c0cdf1139fcdcb21690eb2c

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Aug-06 16:33:29
Comments Windows identity profile manager with signed licensing
CompanyName Zytrano
FileDescription Zytrano Spoofer
FileVersion 1.5.0.0
InternalName Zytrano Spoofer.exe
LegalCopyright Copyright © Zytrano 2026
OriginalFilename Zytrano Spoofer.exe
ProductName Zytrano Spoofer
ProductVersion 1.5.0.0
Assembly Version 1.5.0.0

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft
Suspicious Strings found in the binary may indicate undesirable behavior: Contains references to security software:
  • rshell.exe
 Contains domain names:
  • api.ipify.org
  • cdn.discordapp.com
  • cv.iptc.org
  • discord.com
  • discordapp.com
  • epicgames.com
  • http://127.0.0.1
  • http://cv.iptc.org
  • http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia
  • http://www.w3.org
  • http://www.w3.org/2000/svg
  • https://api.ipify.org
  • https://ca.trufo.ai
  • https://ca.trufo.ai/c2pa-ca.crt03
  • https://ca.trufo.ai/root-ca.crt0
  • https://cdn.discordapp.com
  • https://cdn.discordapp.com/avatars/
  • https://cdn.discordapp.com/embed/avatars/
  • https://discord.com
  • https://ocsp.trufo.ai0
  • https://ocsp.trufo.ai0+
  • https://support.cfx.re
  • https://support.cfx.re/hc/en-us/articles/8444465475356-FiveM-RedM-Community-Server-Ban-FAQ
  • https://techwiki.scpslgame.com
  • https://techwiki.scpslgame.com/books/common-debugging-steps/page/global-ban-information
  • https://trufo.ai
  • https://www.epicgames.com
  • https://www.epicgames.com/help/en-US/c-Category_Fortnite/c-Fortnite_PlayerBehavior/a000085508
  • ipify.org
  • scpslgame.com
  • techwiki.scpslgame.com
  • www.epicgames.com
  • www.w3.org
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA256
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 81cab1661d2d2fbad3b5022ec62dcb62
SHA1 93836faa4737033db098958a63802c9ad3ae97a3
SHA256 1286e6a49dd0aff95457ada53664817c00b778a64c0cdf1139fcdcb21690eb2c
SHA3 1d98e470856fbfa2381112e4b730c1c419a3af83a5b1a1e2b01baa19d6400bde
SSDeep 49152:iSSRc5yX27v5gYJhYZAiOSeiO8zL6UfK4ony5bpS/zDeAyFKac0hs2ZAi:i9d2dgYAZAiReiO8lfK4onO0/XeANCh
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2026-Aug-06 16:33:29
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 11.0
SizeOfCode 0x27ac00
SizeOfInitializedData 0x25400
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0027CB4E (Section: .text)
BaseOfCode 0x2000
BaseOfData 0x27e000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x2a6000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 75c7776babe15d3e3dace2284e366c04
SHA1 607f2287eb8c90aa2aba0d6cebb26c5a677bc57d
SHA256 fe21037b1acb0484413bb29e692386653c0c65dfef7700b8042f05d5e02eaa16
SHA3 c71394314cbe6a7032f167beba42680777f1da49b482f1c1a62a781e5b1ca559
VirtualSize 0x27ab54
VirtualAddress 0x2000
SizeOfRawData 0x27ac00
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 7.9696

.rsrc

MD5 3916d79865630f611cadb5312db3af81
SHA1 0abee99faaba27314c9c4a0d0fa468c96882b048
SHA256 2efd559a4079c25def07b747b41711647f166e18d078e3d9f856cba2fb58fd3d
SHA3 e82190212ff252fdfa0d75c4f5560046db49c85635f74866b99ad68114df8fc3
VirtualSize 0x250b8
VirtualAddress 0x27e000
SizeOfRawData 0x25200
PointerToRawData 0x27ae00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.98434

.reloc

MD5 9fc89394bc99eb583486647a2092742a
SHA1 5769d8fc65620059a0a05eb0fa530a417de9fc9a
SHA256 e289a2afdf8cd57efb8658715d19dd10421beacace7067d49be0113360dab6e3
SHA3 95d14ce6824e4bc6ccccb7cf6210188e2a79329984db1cadac4bda0dac4a0d67
VirtualSize 0xc
VirtualAddress 0x2a4000
SizeOfRawData 0x200
PointerToRawData 0x2a0000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.10191

Imports

mscoree.dll _CorExeMain

Delayed Imports

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x30f
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.68136
Detected Filetype PNG graphic file
MD5 73b8a223212f9587d1f3b7c24aef665d
SHA1 48eb7c7e1189e716e1b2f13452b78d4ba68dd0da
SHA256 5fac960154a18d4f4b1d34a84f50177c9e824758fe822f559126117ed1884e18
SHA3 0219e1a87bfb3b9dde2f69d850a91e4d75ffb5131cb1f72aa5f3fabdba3d57bd

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x60a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.85682
Detected Filetype PNG graphic file
MD5 547de616a3bc6b853197b2b7dd2d6264
SHA1 8d529692e7d091fd672d73dea1e5aedc84fa35b8
SHA256 aefd44804001a4018d588051af7ca40698bad6bcd9b5fc94ee19d41d42e56116
SHA3 1d5414832744e4a1b173c03c7e17676b332c561ec7779e341f04c9917ab9bb5a

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x9c8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.91354
Detected Filetype PNG graphic file
MD5 4eaf8ec34dcfc39272917f99d881255c
SHA1 9712f26b970b9f626508117afff38c0d4af185a7
SHA256 15dac4c996c62b17dae1a9bfc6caf5fb263d828acda3473bf2a9947c0e885e7f
SHA3 27f9d48e7e2087c0d1111aabfc2c91a33b4894b7c48b0585652759dea2ba0085

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x1457
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.94999
Detected Filetype PNG graphic file
MD5 1432e30d5eb5af73354a5c03616f8462
SHA1 4783f68295784edccda588d85cd9990686af6cc9
SHA256 17c0026705a90150d2db4704d98dd0784fc5e541ab8e54125559241f3ad24400
SHA3 0f5e8e4af0d9dd518e32997abfea1689aff950e82260612d0f8448127f0a2eea

6

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x2245
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97074
Detected Filetype PNG graphic file
MD5 e459242720b4897056c53845c08122a7
SHA1 b4807bab7feb7fcd4fa04d4c0654cab8e2c073fb
SHA256 d743b4810aa59844f592eccd9418ba7239b70d2c5bd73e1a5565e07c9ed8116b
SHA3 39ca16d48dad2ca0b3d630ca05941b9e0caa25af0285261ff535b5f10e2bacea

7

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x7592
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98815
Detected Filetype PNG graphic file
MD5 aedfe60a783071b24b70fce5d79c6fe9
SHA1 229497152bcaf6bd2222d8b7ab33cbb0826a267c
SHA256 c9b78c5bb7a80cb80f83ead9a2c34b1080529a6c2ccfb57d684952b6c3b4899e
SHA3 de407071e1029eb95d39839c3a08480b794b3c39500a6d6c55088c84cdcdb576

8

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x1878c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99291
Detected Filetype PNG graphic file
MD5 edbb823cd64ea5364109eb8f97c1eab8
SHA1 502f6586181c7331367c8488842ab325fbdd2f2e
SHA256 1d0dfaafbc4d4c9917545c8bff9d386561e65a82c84f4b1c70e8365f89386feb
SHA3 d38d2074cb3b6a100a1297be277d195482ce1dff86c4eab4bfacf0fdea651a7a

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.77444
Detected Filetype Icon file
MD5 60fe3209b5c7cfb422ffec0c0b6bdfa6
SHA1 5a8d4123fa761bff328eaca3b59f68104e30ca21
SHA256 2f2957043103247f72fcd2184d48650ec807b02c2241bf061fa518c326db5377
SHA3 5ce418b0d8259b88af077d2cc3b084b985442bbbb645b064fbb4adf985bcffcf

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x3a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.35593
MD5 7cdb3740e1f57a388fb0760473130d83
SHA1 2a541910fa4f606b5c04b9eaf801b939d2451774
SHA256 68abb9301e5e8c8e0327be96ec5d665fd7982ddabee70a46673d04254f256402
SHA3 cfb99731fd87e8d3788701f841249fb1472d969ea883e932334322877b643437

1 (#2)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0x3a2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.08013
MD5 93c6658a839ed4df1046ed0f51c7b439
SHA1 76271f1742c79cba154417f753bc25a1e39f91cf
SHA256 37cb366b4e1111f63135b7946dce650db04a8300cde729984f2088080fe68db5
SHA3 3b21ed6ede9d548027d0338a2d966c8cd8c4c983f40a9bc90fa224150e355007

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.5.0.0
ProductVersion 1.5.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments Windows identity profile manager with signed licensing
CompanyName Zytrano
FileDescription Zytrano Spoofer
FileVersion (#2) 1.5.0.0
InternalName Zytrano Spoofer.exe
LegalCopyright Copyright © Zytrano 2026
OriginalFilename Zytrano Spoofer.exe
ProductName Zytrano Spoofer
ProductVersion (#2) 1.5.0.0
Assembly Version 1.5.0.0
Resource LangID UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.