Manalyze report for 47f7bb7f95c796361e74034110db49d55bc91a0d3b5dcd4a3f02827438e21959

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-Apr-15 14:05:01
Debug artifacts	c:\Users\Administrator\Documents\Visual Studio 2012\Projects\cwgrnt-flag-sender\cwgrnt-flag-sender\obj\Debug\cwgrnt-flag-sender.pdb
FileDescription	cwgrnt-flag-sender
FileVersion	`1.0.0.0`
InternalName	cwgrnt-flag-sender.exe
LegalCopyright	Copyright Â© 2026
OriginalFilename	cwgrnt-flag-sender.exe
ProductName	cwgrnt-flag-sender
ProductVersion	`1.0.0.0`
Assembly Version	1.0.0.0

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C# v7.0 / Basic .NET` `.NET executable -> Microsoft`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`2a274724d01d3ca8db6122fe69daa8ff`
SHA1	`ee14095f6e7c4efab7d51edd4a61b20f9ac27350`
SHA256	`47f7bb7f95c796361e74034110db49d55bc91a0d3b5dcd4a3f02827438e21959`
SHA3	`43953a7e4b4afe325cccb5ebcfb1dc041d34b416b8528ad6215199101a39e8cb`
SSDeep	`192:C+mG4hgfCXrIP0MIwh7zDvfh2xHxsKCSymM:CJhgfIIMMV5zDfhZnSym`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2026-Apr-15 14:05:01
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`11.0`
SizeOfCode	`0x2200`
SizeOfInitializedData	`0x800`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000413E (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x6000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`4.0`
Win32VersionValue	`0`
SizeOfImage	`0xa000`
SizeOfHeaders	`0x200`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`2cc367341b0292b1de68cfe0025a45a2`
SHA1	`8b46b0e0a68f7a4faefb16da3c7d191654bc1d24`
SHA256	`796749da04dba24a7b688810394c065d41e4af07c08bcbd2c3823fda8696ef75`
SHA3	`3bec3cad119dad85b1719028305eaebcf642abf68be85bf5b6e02ba8d25df986`
VirtualSize	`0x2144`
VirtualAddress	`0x2000`
SizeOfRawData	`0x2200`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`5.56992`

.rsrc

MD5	`d00f892e75d13f556d9586c4c91a5e78`
SHA1	`820d8e3138988677a9ca8cf68e1475235592d2a9`
SHA256	`70f71dae0e8a58bb38f24b22fcd35ecd5ee6963ceffce30bacfabd3ac6c56e11`
SHA3	`4aefa9170293720d092f6027f3afed628e314f87abe7bbf1f7c347c35890dd3e`
VirtualSize	`0x590`
VirtualAddress	`0x6000`
SizeOfRawData	`0x600`
PointerToRawData	`0x2400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.02114`

.reloc

MD5	`53e66740eccf4efc558e68bcbf4fd6a3`
SHA1	`e93bad64c4a4c7b39fe3150e99c7d1464a6db2f9`
SHA256	`f12563ffa9c922c3ac9dbc1c349f454c5c8df89b9f757ad0b1cc0c36025cd980`
SHA3	`3c33da0d420b5593840260d62091c3c798d7645b6be95fe1adc8316b700cbc33`
VirtualSize	`0xc`
VirtualAddress	`0x8000`
SizeOfRawData	`0x200`
PointerToRawData	`0x2a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.0776332`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x300`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.28712`
MD5	`7bc87f221e135b42e5a4aebf49f3aace`
SHA1	`ef7ee4658693a0c40ee1daf0ce6c9dc88dfca04f`
SHA256	`96f8bfd7229a8d7b62b1b464c60fa65112f9981d2cac5d07ac56b8faa899cbb4`
SHA3	`46e1eb5259b45c45d0d30dc3b817e21f49623d74143b7ff7d2db9f63173d4fef`

1 (#2)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.00112`
MD5	`a19a2658ba69030c6ac9d11fd7d7e3c1`
SHA1	`879dcf690e5bf1941b27cf13c8bcf72f8356c650`
SHA256	`c0085eb467d2fc9c9f395047e057183b3cd1503a4087d0db565161c13527a76f`
SHA3	`93cbaf236d2d3870c1052716416ddf1c34f21532e56dd70144e9a01efcd0ce34`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.0.0.0
ProductVersion	1.0.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
FileDescription	cwgrnt-flag-sender
FileVersion (#2)	1.0.0.0
InternalName	cwgrnt-flag-sender.exe
LegalCopyright	Copyright Â© 2026
OriginalFilename	cwgrnt-flag-sender.exe
ProductName	cwgrnt-flag-sender
ProductVersion (#2)	1.0.0.0
Assembly Version	1.0.0.0

Resource LangID	UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2026-Apr-15 14:05:01
Version	`0.0`
SizeofData	`284`
AddressOfRawData	`0x3fc8`
PointerToRawData	`0x21c8`
Referenced File	c:\Users\Administrator\Documents\Visual Studio 2012\Projects\cwgrnt-flag-sender\cwgrnt-flag-sender\obj\Debug\cwgrnt-flag-sender.pdb

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.