Manalyze report for db83a8f4d002c9209a446651f3b5da13df7e8b278023aa852245a6ae6827702f

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-May-18 07:17:55
Debug artifacts	C:\Develop\C#\åé å°ç¨å¼\AutoCast\AutoCast\obj\Release\AutoCast.pdb
Comments
CompanyName	KunYuTech
FileDescription	CGA AutoCast
FileVersion	`1.2.0.0`
InternalName	AutoCast.exe
LegalCopyright	Copyright Â© 2020
LegalTrademarks
OriginalFilename	AutoCast.exe
ProductName	CGA AutoCast
ProductVersion	`1.2.0.0`
Assembly Version	1.2.0.0

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C# v7.0 / Basic .NET` `.NET executable -> Microsoft`
Info	Interesting strings found in the binary:	`Contains domain names: ftp://10.1.4.102 ftp://10.1.4.102/ ftp://10.1.4.235 ftp://10.1.4.235/`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`174fb3a24bac404350ab1267cb957829`
SHA1	`25aca063885aacceb7bf49579bd75e8fff97839e`
SHA256	`db83a8f4d002c9209a446651f3b5da13df7e8b278023aa852245a6ae6827702f`
SHA3	`889a42f26350880aeefb71f95006373439d27aaa2008c6155986beb0c06079e2`
SSDeep	`3072:LWCldGdK4ti6xlxCuUbjpeqhFdO6UJy2g27/EVCIR1nGK2gv3lSe9yRamjNeCsI:qDnXxCOyG+1Oa0MK2+1Oa0MK`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2026-May-18 07:17:55
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`48.0`
SizeOfCode	`0x29800`
SizeOfInitializedData	`0x600`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0002B726 (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x2c000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x30000`
SizeOfHeaders	`0x200`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`969ef106839fd8ba69dcd4d87d5720f1`
SHA1	`90a29996226630dcb6aa2a249717205337a5f285`
SHA256	`4736508ff6d7b28dcbd21aaa7afa1e0b5fabbc01e6d35030db8b0bb89bc32617`
SHA3	`3aa4f070f62066649408feb6c701f06e56604794d5f9a7f346199b82ea971f96`
VirtualSize	`0x2972c`
VirtualAddress	`0x2000`
SizeOfRawData	`0x29800`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`7.01849`

.rsrc

MD5	`564cd2904bd142164d358b092b4f4ba7`
SHA1	`7c5aefb11051802c1bb4f0c736a13eec75693b0d`
SHA256	`de0e3a4d34c11dc64a58a47e2a69ba912a5a1dca77d9c8460ee8d0de852286d3`
SHA3	`2f1ed4eae8522b3096ebfcf2bb4a977e8119d452c3c135132f6dc158015e3699`
VirtualSize	`0x398`
VirtualAddress	`0x2c000`
SizeOfRawData	`0x400`
PointerToRawData	`0x29a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`2.93924`

.reloc

MD5	`ee0df4f3765482c5e82de1d199f18183`
SHA1	`b357bcb6b84fc3440d0d4890a885e5e3fba23229`
SHA256	`06985d8031882f169338af93df35e3d5124219bdf7a9ec3304b209d5bbbecade`
SHA3	`a6442a64895fb562523ded1233c385bc70172b319bf6e8b675b05863b01c6af4`
VirtualSize	`0xc`
VirtualAddress	`0x2e000`
SizeOfRawData	`0x200`
PointerToRawData	`0x29e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.10191`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x33c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.32088`
MD5	`91df7d46f569be139d217d27f590abe6`
SHA1	`d758a0b6fc4497865a7dce24544fe5a9ce538773`
SHA256	`11bb138a6acd7b70405fe8a5a2dc171c52203d956d12e01f53e45a350888ccfc`
SHA3	`cf5a4e4bd7a47326604a17e0748db28dd89c5f216fdb59dc6899f65f9f7a7079`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.2.0.0
ProductVersion	1.2.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments
CompanyName	KunYuTech
FileDescription	CGA AutoCast
FileVersion (#2)	1.2.0.0
InternalName	AutoCast.exe
LegalCopyright	Copyright Â© 2020
LegalTrademarks
OriginalFilename	AutoCast.exe
ProductName	CGA AutoCast
ProductVersion (#2)	1.2.0.0
Assembly Version	1.2.0.0

Resource LangID	UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2026-May-18 07:17:55
Version	`0.0`
SizeofData	`284`
AddressOfRawData	`0x2b5b8`
PointerToRawData	`0x297b8`
Referenced File	C:\Develop\C#\åé å°ç¨å¼\AutoCast\AutoCast\obj\Release\AutoCast.pdb

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.