a11e10139d74dec7b9188aebe3015789955ad8aecf271ac7363061bdac9e4896

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2055-Nov-10 21:10:38
Debug artifacts C:\Users\Doryan\source\repos\ExeAnalyzer1\ExeAnalyzer1\obj\Release\ExeAnalyzer1.pdb
Comments Code assistance provided by Google's Gemini
CompanyName GlacialWorld
FileDescription Executable Analyzer 1.01
FileVersion 1.0.1.0
InternalName ExeAnalyzer1.exe
LegalCopyright Copyright © Dorian Luparu 2025
LegalTrademarks
OriginalFilename ExeAnalyzer1.exe
ProductName Executable Analyzer
ProductVersion 1.0.1.0
Assembly Version 1.0.1.0

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft
Malicious The program tries to mislead users about its origins. The PE pretends to be from Google but is not signed!
Safe VirusTotal score: 0/72 (Scanned on 2025-06-19 16:13:35) All the AVs think this file is safe.

Hashes

MD5 52e7bb4e7b4dfbced10fe6f173443c38 🔍
SHA1 f31b65f33ae6d4231d8364ebde0c6c65149341ef 🔍
SHA256 a11e10139d74dec7b9188aebe3015789955ad8aecf271ac7363061bdac9e4896 🔍
SHA3 0be3423730a00d4588269d15bc3fe1d8332414f44bc54c9ac29b353d523f81c2 🔍
SSDeep 384:dPTMQaugC1kfuWrE8YcFBWi/sD7Gi3xLVOkvwKwq6uy0G:dP3augC1kfuWrwbSni3RG 🔍
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2055-Nov-10 21:10:38
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 48.0
SizeOfCode 0x5400
SizeOfInitializedData 0x1a00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000728E (Section: .text)
BaseOfCode 0x2000
BaseOfData 0x8000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xc000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 f83748a8166a7ee4b249f26bd4bdc85e 🔍
SHA1 d3a94bc393feee93205c1ffd7cdbac5b76b0c941 🔍
SHA256 8ebbae526138277335ca75f9a4e1ae451f36d5d566ead721128b3e0ae3b8f097 🔍
SHA3 e52f11647a3e25c1870341fcac144d3983b3a110e08255aff2d91e0d4c922cb6 🔍
VirtualSize 0x5294
VirtualAddress 0x2000
SizeOfRawData 0x5400
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 4.89713

.rsrc

MD5 0fc29fac21bffdc14614615dcdbe699f 🔍
SHA1 bdd0a3849a5165c5f408932c6571b01bb18bbb45 🔍
SHA256 5e073cf0f7779ce29fe35345a1c3a36b02cb4e7fc58a8f7ec4abe529b74334d9 🔍
SHA3 6a91184e3389d5571c94a5e776dc1b138f9a12d24db9f93e3f795570a710b99a 🔍
VirtualSize 0x17c4
VirtualAddress 0x8000
SizeOfRawData 0x1800
PointerToRawData 0x5600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.3651

.reloc

MD5 11d49b5087600221430a302c55a1a1e4 🔍
SHA1 20865f4af95b6103f1acb44d5f8d64bfe09ac486 🔍
SHA256 663f5bac58bfd1b4f573488aac4da661653c4c1aa06cf30a57b79e6371cf91db 🔍
SHA3 7910f8def39d39fcfb6a50da979908406967a8b5ad319c9386bee472f3461664 🔍
VirtualSize 0xc
VirtualAddress 0xa000
SizeOfRawData 0x200
PointerToRawData 0x6e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.0815394

Imports

mscoree.dll _CorExeMain

Delayed Imports

1

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.613432
MD5 f87c117dbe00ac622b35eb6097e95e80 🔍
SHA1 b6de95ebcf6d5845c4cb8621b37ffc869cc0b32c 🔍
SHA256 c9e9ae5683608824f3674f785bb8e597e8874d3bf6b49a1444dc6b21956d20a6 🔍
SHA3 3b90af77b978e33fc9df8329159ae499b95847cb990b4747a9ebdc2a394cd5f5 🔍

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.7815
Detected Filetype Icon file
MD5 3c68f77c35c26ff079a1c410ee44fa62 🔍
SHA1 0b40150c95fc2c6414c90d44ee78b8d8814b3393 🔍
SHA256 a14e70ed824f3f17d3a51136aa08839954d6d3ccadaa067415c7bfc08e6636b0 🔍
SHA3 590dcbf2ec3f485a6c24e3e627f383ee7588eb49978321f12c07d8190a6c1396 🔍

1 (#2)

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x3e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.37595
MD5 467c85bd443ef23e13bde0f0041ed776 🔍
SHA1 5b59b06a01d4d4f93e13d650139ca46f1e94e2f4 🔍
SHA256 636ad093e14b2a17b03360b2de74e61512b015b372e3f77fb50de86a32f2e2e8 🔍
SHA3 03a0e21d3eea3b2fa40ec569b67718d6f78861ee3b5ead36da54ef383a0d8986 🔍

1 (#3)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0x1ea
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.00112
MD5 b7db84991f23a680df8e95af8946f9c9 🔍
SHA1 cac699787884fb993ced8d7dc47b7c522c7bc734 🔍
SHA256 539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a 🔍
SHA3 4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.1.0
ProductVersion 1.0.1.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments Code assistance provided by Google's Gemini
CompanyName GlacialWorld
FileDescription Executable Analyzer 1.01
FileVersion (#2) 1.0.1.0
InternalName ExeAnalyzer1.exe
LegalCopyright Copyright © Dorian Luparu 2025
LegalTrademarks
OriginalFilename ExeAnalyzer1.exe
ProductName Executable Analyzer
ProductVersion (#2) 1.0.1.0
Assembly Version 1.0.1.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2087-Jul-18 09:23:44
Version 0.0
SizeofData 108
AddressOfRawData 0x71d0
PointerToRawData 0x53d0
Referenced File C:\Users\Doryan\source\repos\ExeAnalyzer1\ExeAnalyzer1\obj\Release\ExeAnalyzer1.pdb

UNKNOWN

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.