5341e24b69119d18770916b92857c7b221b1bed8475c5a9dacc43b2efb23a59f

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2005-Nov-05 01:39:38
Detected languages English - United States
Ukrainian - Ukraine
FileVersion 9.81.0
ProductVersion 9.81.0
InternalName updatelauncher
OriginalFilename updatelauncher.exe
CompanyName Информационные технологии
FileDescription
ProductName UpdateLauncher

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryA
 Can access the registry:
  • RegQueryValueA
  • RegOpenKeyA
  • RegCloseKey
Info The PE is digitally signed. Signer: Information Technologies Ltd.
Issuer: Certum Code Signing CA
Safe VirusTotal score: 0/67 (Scanned on 2026-07-24 13:19:20) All the AVs think this file is safe.

Hashes

MD5 c97d19046bb009b25eba1bdff6541690 🔍
SHA1 be4a3ed41de9ec7a0dee9723026b335896856072 🔍
SHA256 5341e24b69119d18770916b92857c7b221b1bed8475c5a9dacc43b2efb23a59f 🔍
SHA3 13205a9bfc524b1592d9cd2c98384f4d7d795eae3ba32d4cc6609827d770b89e 🔍
SSDeep 768:/ojKqcQrFZqvb0NWMALlvOHxvUWJbZrkE4jev6KXakX+orFBKYV0Nu:/ojKMqvbkALlvOHxvbJb+Ejv6KfXPlV5 🔍
Imports Hash 2fc48abcfc4886d28d2790323d96cffb 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xf0

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 4
TimeDateStamp 2005-Nov-05 01:39:38
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 7.0
SizeOfCode 0xc00
SizeOfInitializedData 0x1600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00001873 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x2000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x5000
SizeOfHeaders 0x400
Checksum 0xe3ac
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 a9e3c489cf6313c6db49f77eb10fbba7 🔍
SHA1 ee1ff3262e260355cd8605e5b409abe913c412a6 🔍
SHA256 c5b82b6f6726c94f9f2907c7e42a41f5aaea36a2368c360d7e0b038c8d6fc044 🔍
SHA3 08687c01bdda1dbfee73829d4c7f01c63ee1d8a103d60f54c70ca758bf79224f 🔍
VirtualSize 0xbba
VirtualAddress 0x1000
SizeOfRawData 0xc00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.10676

.rdata

MD5 adc803db213b32e9ecd367864a8b88aa 🔍
SHA1 792aaa764cfe80254aca5aa7753c8bd6707547f3 🔍
SHA256 ebbd1c382383dd7d634276bfdac4518d030d1543248f33773a0295bd3bd64d0f 🔍
SHA3 b90cffd89bc191f896e4e661c5093e9e9ad0209273816c3dff1f07af31d93d6b 🔍
VirtualSize 0x5b6
VirtualAddress 0x2000
SizeOfRawData 0x600
PointerToRawData 0x1000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.61322

.data

MD5 55743481aebf44ec95e86d5d2a35f255 🔍
SHA1 078415b122ba1807136fa220bb75bd14cc5d0cb6 🔍
SHA256 ff19c8b2fe345ee6d7f3bee4c026988dfb11dacecec91e157f1b652f5d257bb7 🔍
SHA3 a7f58ec998894920183fa9042081cb2fee01d2906e3119943f5dc93969fce3a1 🔍
VirtualSize 0x47c
VirtualAddress 0x3000
SizeOfRawData 0x200
PointerToRawData 0x1600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.11837

.rsrc

MD5 266376e543fe9fc707e629d01a53377c 🔍
SHA1 a025270a6370375af0d73a2bbf994edaec822e05 🔍
SHA256 921a9fc8efce1f417f27b77df3bd6c9c98325aea4ae71c57cd08313e4f4d8e0b 🔍
SHA3 ace921785e5865fd698028967e97439a54bef20c08bdcd8b4710bc78c00cfb6a 🔍
VirtualSize 0xc88
VirtualAddress 0x4000
SizeOfRawData 0xe00
PointerToRawData 0x1800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.38221

Imports

MSVCR71.dll __p__commode
__p__fmode
__set_app_type
_adjust_fdiv
__dllonexit
_onexit
_controlfp
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_mbschr
_mbsicmp
_access
_mbsrchr
isspace
_splitpath
_except_handler3
_makepath
KERNEL32.dll GetModuleHandleA
GetModuleFileNameA
FreeLibrary
GetProcAddress
GetSystemDirectoryA
lstrcatA
GetCurrentDirectoryA
LoadLibraryA
lstrcpyA
_lopen
_lclose
_llseek
_lread
GetStartupInfoA
USER32.dll MessageBoxA
LoadStringA
wsprintfA
ADVAPI32.dll RegQueryValueA
RegOpenKeyA
RegCloseKey

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.23433
MD5 6991490262b2b6af17c1291060d5f9f2 🔍
SHA1 98e2cc7b4f371760b59f1e68b2ad97748d18e16d 🔍
SHA256 14249db165f413ba2e1da02d461fb52a04cac9be2d66df3312ace1450ea05782 🔍
SHA3 49dfdf758c56e80b3b710d4e565955c2afc747eecf37361e46c752786e8f3001 🔍

2

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.46172
MD5 dab94a1ff6fc2b9289fc5d7794c36c0d 🔍
SHA1 9e34eedfcb6a17027b3d83a4a985e9e05dc4f587 🔍
SHA256 1a562e6ac67d1d6eb749023d4a821e2814996a6802c0db822c8346c97ce5c7ca 🔍
SHA3 fa2050c62e4d4cecc0154e5476da1bb85382a7cd178661a71a3c0339ce86c487 🔍

1 (#2)

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x18c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.34862
MD5 fd20fae35cb8231f6c3fa284d6a3165e 🔍
SHA1 f554887f5e686c0067b2da36b8b0fa72775dd292 🔍
SHA256 bcdae1ceb34a6111a0cd9275552139235ce7dcdda29466bfc0f86e26cc7d83d9 🔍
SHA3 12ce8d033c1ebad1fc8cd984ccac62415dbb45f47ad918513493a130d4afc5f2 🔍

15000

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x22
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.97134
Detected Filetype Icon file
MD5 3c63396f9df05c30fcf0457bdd2f12e1 🔍
SHA1 1f71519f9fd81839bbfee71f16612eb5cb576499 🔍
SHA256 961a0b88ac1d9d765b120580809f5ac2c513e9092b6c4503a1264f034bd2d938 🔍
SHA3 e3e628b7c9dad948aa2be5329c6fbe7997cf58104181b06462516bd09a0eaf50 🔍

1 (#3)

Type RT_VERSION
Language English - United States
Codepage Latin 1 / Western European
Size 0x290
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.65084
MD5 b290c39b4eabdadc5d43128482b506b9 🔍
SHA1 ab05bde8cc1cef2cb59ca4b64ebef13be952810a 🔍
SHA256 b419f520f39897fcb609db321385279f484b1cb5e7b50e8786405d6cbfdee813 🔍
SHA3 630d9c47204b3d9bf1593da39ef0e81b6e560354f90332272e36103351ddcb8f 🔍

1 (#4)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x28f
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.94575
MD5 61603bc643849491496c06a2c8b3686c 🔍
SHA1 faf9cce0a2d99a3e38c0d7938594ecdfa38006ce 🔍
SHA256 da5d443973bacbf19f12b75b5e8996434c100fdc5f64e09dabe9d5d3f817ce4c 🔍
SHA3 40ebd57c3aa1b8b4aa1a1bc42f340d45858b2bf3d45bcdcd25c486031f846e4d 🔍

String Table contents

VFP9.EXE
VFP9R.DLL
VFP9T.DLL
Microsoft Visual FoxPro
Cannot locate the Microsoft Visual FoxPro support library.
The %s file is invalid or damaged.
Cannot run the file %s.
Error code 0xlX.

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 9.81.0.0
ProductVersion 9.81.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language Ukrainian - Ukraine
FileVersion (#2) 9.81.0
ProductVersion (#2) 9.81.0
InternalName updatelauncher
OriginalFilename updatelauncher.exe
CompanyName Информационные технологии
FileDescription
ProductName UpdateLauncher
Resource LangID English - United States

TLS Callbacks

Load Configuration

Size 0x48
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x403018
SEHandlerTable 0x4021c0
SEHandlerCount 1

RICH Header

XOR Key 0x97cbdd04
Unmarked objects 0
Imports (2067) 2
Imports (2179) 4
Total imports 46
Imports (VS2003 (.NET) build 3077) 3
C++ objects (VS2003 (.NET) build 3077) 1
ASM objects (VS2003 (.NET) build 3077) 1
C objects (VS2003 (.NET) build 3077) 14
94 (VS2003 (.NET) build 3077) 1
Linker (VS2003 (.NET) build 3077) 1

Errors

Leave a comment

No comments yet.