Manalyze report for b81d0c4b1cacfb5a66b15e2a99cc5c941b3e1e0d29d07a8dc423f529d2c0738b

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-Feb-05 16:51:00
Comments
CompanyName	M-Engineering
FileDescription	M-TunerV3
FileVersion	`3.1.9.0`
InternalName	M-TunerV3.exe
LegalCopyright	Copyright Â© M-Engineering 2025
LegalTrademarks
OriginalFilename	M-TunerV3.exe
ProductName	M-TunerV3
ProductVersion	`3.1.9.0`
Assembly Version	3.1.9.0

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C# v7.0 / Basic .NET` `.NET executable -> Microsoft`
Info	Interesting strings found in the binary:	Contains domain names: costura.crc32.net costura.de crc32.net engineering.us http://schemas.microsoft.com http://schemas.microsoft.com/expression/blend/2008 http://schemas.microsoft.com/winfx/2006/xaml http://schemas.microsoft.com/winfx/2006/xaml/presentation http://schemas.openxmlformats.org http://schemas.openxmlformats.org/markup-compatibility/2006 http://www.iec.ch http://www.w3.org http://www.w3.org/2001/XMLSchema http://www.w3.org/2001/XMLSchema-instance m-engineering.us microsoft.com openxmlformats.org schemas.microsoft.com schemas.openxmlformats.org www.iec.ch www.w3.org
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`3cf4ca3ed62fbc8e3e870f3b438043e1`
SHA1	`531aca839abd3ed4eec6750ec7caccb1447026a3`
SHA256	`b81d0c4b1cacfb5a66b15e2a99cc5c941b3e1e0d29d07a8dc423f529d2c0738b`
SHA3	`7e934f9eb8f3c4aabb523d9bf894c83a8ee3e4c9ca8f95326ea8b70b786d069c`
SSDeep	`98304:2U926p5Kr9V7cKdRLuNpsTlY1mtG/xkWrip:J95+mKbLuITlY1mtcx`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2026-Feb-05 16:51:00
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`48.0`
SizeOfCode	`0x332200`
SizeOfInitializedData	`0x6800`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x003341AE (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x340000`
SizeOfHeaders	`0x200`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`b3a001c027c2edd2bc97788a9c3b0953`
SHA1	`f9454506e8ff303eb10abb31dfe189eaa6424294`
SHA256	`9c38da7374211e29fc0f69f4388763af9f1d4e900193a6c039fe14dd20666d9d`
SHA3	`f26de72bdc869f8210399acd3a5d26bdb604d5a953f784a53e3701d3b0c02f47`
VirtualSize	`0x3321b4`
VirtualAddress	`0x2000`
SizeOfRawData	`0x332200`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`7.8067`

.rsrc

MD5	`4d95ba83562fd2c088a6d3f40e46b85b`
SHA1	`12033c5a9185091a530a1b366b37eb5c59632a39`
SHA256	`7b9ed24ae13275f736b1dd9206ca42538e45c71f62b3e170b17f0e9322d12808`
SHA3	`2bb15a570d71acab9b9a7864dfdde4b6f883d1ecf576e9bd0344ed2a82d7d9ad`
VirtualSize	`0x6600`
VirtualAddress	`0x336000`
SizeOfRawData	`0x6600`
PointerToRawData	`0x332400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`3.65772`

.reloc

MD5	`5a37a71cec79f222e2795447f128ce36`
SHA1	`5ddf4c9155261b8c2084684b2386c1766931f811`
SHA256	`5caa2c260d2dae29878705fa1c81b776d65c517b4f9de0057e3241b887c98e79`
SHA3	`0f1005a794a82980fbf346c48d042ac5b94ca5049935bfa53d82fb777c12c3c9`
VirtualSize	`0xc`
VirtualAddress	`0x33e000`
SizeOfRawData	`0x200`
PointerToRawData	`0x338a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.10191`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x4028`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.33175`
MD5	`84253f6e8675c8612e75bec44e991132`
SHA1	`1272f1952034b30d1889e9006f356505b5bcac34`
SHA256	`e56881aa7fdc9a745b535884f51f8cf0b3580389c36748eb206d1839d171d56d`
SHA3	`79f5953359fed4c04b0b6709267306d741fa2f67f8bdcfdc3f3fc4b124f18505`

2

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1028`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.64186`
MD5	`d0172a17ca3d0e021c723e7353b52659`
SHA1	`00a1d8ee91efb503dea76e5d7b0216d91fe1a8ad`
SHA256	`440d9d62de0af842df163af7e9286ae9eac0d5a82d5c9af8ba1fb70f66a72fac`
SHA3	`63e4d992ff9361cfc1b667e36373233ac7e3cef1232adcbc778c0b991b21cdaa`

3

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x928`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.03342`
MD5	`570cec1386e423bae98950317eada13e`
SHA1	`25b46bb2bee25a921b17547b4531407b8f6c5ef6`
SHA256	`7e651c20550a2aa266bdeef4e2b7045d4683ed918941ae146069ff6c5a26df6d`
SHA3	`dac9d8f3447fa28d2b7a98cfa5b92616e60fdfa89ed57c6205fda8e55872b198`

4

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x428`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.3391`
MD5	`a0ddf873f6bd2bd158592d9b2be02086`
SHA1	`0f9c1be686654a165fa9f36d4cbc633df92cb41e`
SHA256	`3f12f9a17ec9e20627c420dd015f62b2ef6afdfa99520704d703843d308eaa9c`
SHA3	`7c8e619c30bea9301aa01171c196df8bc7e25ca8f45abf1d785311e21b80bdc2`

32512

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.48187`
Detected Filetype	Icon file
MD5	`6975d183862d628d9c196b0c122007da`
SHA1	`08f79701b92712eaaef1c57c61c97d297ebd8fef`
SHA256	`06d7e90d971f6e66f715d10a1bf4249fcc172b46122bfb1ee2dc5d7f93b81f92`
SHA3	`727090af118fa078ba77b888fd39fbedc5f23b77978c027095b748840694372e`

1 (#2)

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x350`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.37024`
MD5	`9833a3c2a355c5931b8994cd37c4d8f9`
SHA1	`1abbfd2652d7ce137fffe69ffaff9eebb2958745`
SHA256	`86548aa0c4a023f5cc6148f38b1f2ae5822712bfb62c9404bb78138c04720b6d`
SHA3	`5dfb048f446f0b9f25ce807b49441462d8a48516075bb907a3361255548c29c5`

1 (#3)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.00112`
MD5	`b7db84991f23a680df8e95af8946f9c9`
SHA1	`cac699787884fb993ced8d7dc47b7c522c7bc734`
SHA256	`539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a`
SHA3	`4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	3.1.9.0
ProductVersion	3.1.9.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments
CompanyName	M-Engineering
FileDescription	M-TunerV3
FileVersion (#2)	3.1.9.0
InternalName	M-TunerV3.exe
LegalCopyright	Copyright Â© M-Engineering 2025
LegalTrademarks
OriginalFilename	M-TunerV3.exe
ProductName	M-TunerV3
ProductVersion (#2)	3.1.9.0
Assembly Version	3.1.9.0

Resource LangID	UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.