Manalyze report for 4d6937e8d7d58cd1d9224a11e48549a08505836efabd6fed17a67d42466265bb

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2008-May-25 14:16:57
Debug artifacts	D:\SoftDev\AppDev\NetPinger\NetPinger\obj\Release\NetPinger.pdb
Comments	Simple ICMP Pinger
CompanyName	Coolsoft Company
FileDescription	Coolsoft NetPinger
FileVersion	`1.0.0.0`
InternalName	NetPinger.exe
LegalCopyright	Copyright Â© 2007
OriginalFilename	NetPinger.exe
ProductName	Coolsoft NetPinger
ProductVersion	`1.0.0.0`
Assembly Version	1.0.0.0

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C# v7.0 / Basic .NET`
Suspicious	Strings found in the binary may indicate undesirable behavior:	`May have dropper capabilities: CurrentVersion\Run` `Contains domain names: coolsoft-sd.com http://www.coolsoft-sd.com http://www.coolsoft-sd.com/ http://www.coolsoft-sd.com/Download.aspx http://www.coolsoft-sd.com/ProductRegistration.aspx www.coolsoft-sd.com`
Safe	VirusTotal score: 0/71 (Scanned on 2025-08-15 18:14:36)	`All the AVs think this file is safe.`

Hashes

MD5	`07e89e0d8c03f08ce2f72e45dcf2924d`
SHA1	`9e5753933838311c99d151fcc990d31b228a2b6b`
SHA256	`4d6937e8d7d58cd1d9224a11e48549a08505836efabd6fed17a67d42466265bb`
SHA3	`8822f76ca09e3ea1d9a55bbf902f48ccc265a1e92cf9b724938b71c689b55bfe`
SSDeep	`3072:ySuiioO+c+Su6DFt/y4tcxJrmHf6cqqRDmhJhtq0Jo8pl6:oiC+c7Ft/d5f6cBmhNq0c`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2008-May-25 14:16:57
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LINE_NUMS_STRIPPED` `IMAGE_FILE_LOCAL_SYMS_STRIPPED`

Image Optional Header

Magic	`PE32`
LinkerVersion	`8.0`
SizeOfCode	`0x27000`
SizeOfInitializedData	`0x2000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0002839E (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x2a000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x1000`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`4.0`
Win32VersionValue	`0`
SizeOfImage	`0x2e000`
SizeOfHeaders	`0x1000`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`53e6382f52594492f882e64b0a86fda3`
SHA1	`9ac17e4720bda95d1c14797c809e79d7f869c2c2`
SHA256	`63d35c24b7194caa89812f1c6e5ce3351f2815e196972b6ad0967477c87907c2`
SHA3	`27fe0d45e3afbce13439a1392638befb8669e1102bcebc6f04b9516d0c69e24a`
VirtualSize	`0x263a4`
VirtualAddress	`0x2000`
SizeOfRawData	`0x27000`
PointerToRawData	`0x1000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.8963`

.rsrc

MD5	`8040fd434d353fc891f031d2181fab50`
SHA1	`1aec3d1c70237d76b75d1fb96c603eb27e97b95a`
SHA256	`67608080eea87d0eb72dc04df7b7d094dcb4dfbbc13b23ea993d68c429fa92c5`
SHA3	`4f935df6280b72504dcea240470227b1a63a7fefdaaeb0770b89836f4e0ce809`
VirtualSize	`0xd08`
VirtualAddress	`0x2a000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x28000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`2.8722`

.reloc

MD5	`f9d09737d2c1e59eaef002a1fbc211cc`
SHA1	`d88ff101c286c3fcba0cbf4c78cb1a258e30aa6f`
SHA256	`33f2944e1561ef1afe4da776480680743be5ae4ef999c63ce56029ff6a98954c`
SHA3	`2babbc7a0d8a831e7880804ec13ceffcd0cbe0d1c4d1f4077dfe8b9cc8a7dfa8`
VirtualSize	`0xc`
VirtualAddress	`0x2c000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x29000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.0164085`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

2

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x8a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.98837`
MD5	`bd701f08a28f35b794b38a67add4bce6`
SHA1	`24c152c2e9c8f57669e49c8612cf70b0b1966e90`
SHA256	`21176de24b38edec9fea650139952317edb7c8f24d652eaaa8bacd49ffd48d8e`
SHA3	`d3cb88f81063d8d590bf4bcf71395ab7dea266f40f94904702fa86c74ee1c200`

32512

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.9815`
Detected Filetype	Icon file
MD5	`dd0739ecfcf14d5cde3b9fefc2cf4f8a`
SHA1	`a8c6d3902c94b9ba6072d2abf5f82893a1e850ed`
SHA256	`d6252cc737bc1f449bbc76aadb4ab7928e0e012296966ea530dd1b209ba39182`
SHA3	`331e28e534d12d99163123dd7dfc16533e87fb11a45dd344dbe33eb5d4509b0c`

1

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x35c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.28648`
MD5	`69f84d7bd7c706367f28d542c5044fbd`
SHA1	`312f0eb968a4758d6df3cef9b10558c671853215`
SHA256	`8bec53ca1f8d6561bd9415b57407c14398fc7d785a2410aea872b65a34ffb2a7`
SHA3	`3b1ed4f2248613d1378b3a24e54cb01fe2de2b5148192067202cd98c30c4c8b5`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.0.0.0
ProductVersion	1.0.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments	Simple ICMP Pinger
CompanyName	Coolsoft Company
FileDescription	Coolsoft NetPinger
FileVersion (#2)	1.0.0.0
InternalName	NetPinger.exe
LegalCopyright	Copyright Â© 2007
OriginalFilename	NetPinger.exe
ProductName	Coolsoft NetPinger
ProductVersion (#2)	1.0.0.0
Assembly Version	1.0.0.0

Resource LangID	UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2008-May-25 14:16:57
Version	`0.0`
SizeofData	`88`
AddressOfRawData	`0x282f8`
PointerToRawData	`0x272f8`
Referenced File	D:\SoftDev\AppDev\NetPinger\NetPinger\obj\Release\NetPinger.pdb

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.