f9a5bd2bfa0686f8ed109254b8a0b64859fa528d887f2392b1912d7aabedbf25

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2094-Jul-16 21:08:28
Debug artifacts S:\Downloads\GWYFModMenu_v2\GWYFModMenu\ModMenu\obj\Release\netstandard2.1\ModMenu.pdb
CompanyName ModMenu
FileDescription ModMenu
FileVersion 2.0.0.0
InternalName ModMenu.dll
LegalCopyright
OriginalFilename ModMenu.dll
ProductName ModMenu
ProductVersion 2.0.0
Assembly Version 2.0.0.0

Plugin Output

Suspicious The PE is possibly packed. The PE only has 1 import(s).
Safe VirusTotal score: 0/70 (Scanned on 2026-07-23 01:49:42) All the AVs think this file is safe.

Hashes

MD5 85e50c4652a8949e6b717f508a6ef803
SHA1 109f2a9578939c86c3bdf16c18b810ca8d3e79a9
SHA256 f9a5bd2bfa0686f8ed109254b8a0b64859fa528d887f2392b1912d7aabedbf25
SHA3 656d9d559dd2c76a3552b2e08684a44962ad2a56f882b134dc9551703e117d71
SSDeep 1536:VUBG3BxMLaumdRHwVKnfIp1JIptCRn9Y:VUU3BxMuDjLnfoJIptCRnO
Imports Hash dae02f32a21e03ce65412f6e56942daa

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2094-Jul-16 21:08:28
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 48.0
SizeOfCode 0xc400
SizeOfInitializedData 0x600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000E17A (Section: .text)
BaseOfCode 0x2000
BaseOfData 0x10000
ImageBase 0x10000000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x14000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 b6635938652d8ba13ddc38a18b70622a
SHA1 e56deb1870d49130e9d40169e2e6d955634afce4
SHA256 59958d2866197e738520a8e76f16072a39adbe9555481068f31627600f08685b
SHA3 e81cfce5be0bf5574c45a29aeb505f7a48875e20176ce834a897ab3c48fd9adb
VirtualSize 0xc228
VirtualAddress 0x2000
SizeOfRawData 0xc400
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.57679

.rsrc

MD5 cfcdcdaec017654253fb69baf6c6b3d5
SHA1 dd1be38d2e1c0410c9b145bcaede59f3654886e6
SHA256 bceda6d951ae4f954c604070807fe1e10d2e2a39db033ba6df815392f919c227
SHA3 ad3b64b102d50f2681b8b71df97ec63826e724a3479a13f31ce8597f95cf7a3d
VirtualSize 0x308
VirtualAddress 0x10000
SizeOfRawData 0x400
PointerToRawData 0xc600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.46999

.reloc

MD5 f83eddbd98ef872c81d7d28152e10044
SHA1 2565bf8f159dd103b160945567e7f25269b83785
SHA256 5414e2c2cbc17244969a3e27158cf01f620838b802fcb034fff320dae6f2245f
SHA3 420036d93d5ea794c89f65a6845b1d8b428556af21e642eafa9676312c1893c4
VirtualSize 0xc
VirtualAddress 0x12000
SizeOfRawData 0x200
PointerToRawData 0xca00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.0815394

Imports

mscoree.dll _CorDllMain

Delayed Imports

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x2ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.2249
MD5 2ec35036beb8f877b19edfaf816bb5a8
SHA1 3171c2d80a4fc402d3dd5a01e831591ec813e480
SHA256 3ce66391386a5601e1c536dcbab4bc3fa59e9482311f0ea60493a30c5a63f6cd
SHA3 579621379e34ffa6c61f9b35f5953b0ce7bed9bb47766055f7e06f76e608ad7d

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2.0.0.0
ProductVersion 2.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DLL
Language UNKNOWN
CompanyName ModMenu
FileDescription ModMenu
FileVersion (#2) 2.0.0.0
InternalName ModMenu.dll
LegalCopyright
OriginalFilename ModMenu.dll
ProductName ModMenu
ProductVersion (#2) 2.0.0
Assembly Version 2.0.0.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2041-May-25 11:31:39
Version 256.20557
SizeofData 111
AddressOfRawData 0xe090
PointerToRawData 0xc290
Referenced File S:\Downloads\GWYFModMenu_v2\GWYFModMenu\ModMenu\obj\Release\netstandard2.1\ModMenu.pdb

UNKNOWN

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 1.0
SizeofData 39
AddressOfRawData 0xe0ff
PointerToRawData 0xc2ff

UNKNOWN (#2)

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.