ac3cfa2ecf080fecaf7801796003e6dcf1b20cbe9e16b13b3e60f714165daaac
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Mar-24 10:54:58 |
| Detected languages |
Chinese - PRC
English - United States |
| Debug artifacts |
D:\jy_work\AutoUpgrader\Release\AutoUpgrader.pdb
|
| CompanyName | LagoFast LLC |
| FileDescription | LagoFast |
| FileVersion | 2.17.1.1361 |
| InternalName | autoupgrade.exe |
| LegalCopyright | (C) LagoFast LLC |
| OriginalFilename | autoupgrade.exe |
| ProductName | LagoFast |
| ProductVersion | 2.17.1.1361 |
Plugin Output
| Info | Matching compiler(s): |
Microsoft Visual C++ 6.0 - 8.0
MASM/TASM - sig1(h) |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Info | Cryptographic algorithms detected in the binary: |
Uses constants related to CRC32
Microsoft's Cryptography API |
| Suspicious | The PE contains functions most legitimate programs don't use. |
[!] The program may be hiding some of its imports:
|
| Info | The PE is digitally signed. |
Signer: JUNYUN LIMITED
Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 |
| Safe | VirusTotal score: 0/70 (Scanned on 2026-08-19 15:34:02) | All the AVs think this file is safe. |
Hashes
| MD5 | f38e6d85592e79d333f13bd2b3fe9939 🔍 |
|---|---|
| SHA1 | 46f730a74102bfd15d6932bae654c70a4dd2baf8 🔍 |
| SHA256 | ac3cfa2ecf080fecaf7801796003e6dcf1b20cbe9e16b13b3e60f714165daaac 🔍 |
| SHA3 | 228098b52712824306fd0a699fb2f56b9a13ba21a7ac542ec8078bd099b557c7 🔍 |
| SSDeep | 98304:63W/0ypA1+uGGUa70FeXwT7u7gmxCpquNupa2eUPppxl:63Mxu7gK2Nu1N7 🔍 |
| Imports Hash | d8b47a83baaced60228089499e3e89c8 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x148 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 5 |
| TimeDateStamp | 2026-Mar-24 10:54:58 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x19d000 |
| SizeOfInitializedData | 0x2d4e00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x001239F2 (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x19e000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x477000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x47a587 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | 6b0f45e4e56eeb434617e23e64639a83 🔍 |
|---|---|
| SHA1 | cb9f14b26e977c5c8ceae9097e66f948cfcffed5 🔍 |
| SHA256 | 9d31c318711943ee43e3efd4c09a39601645449ba615c5a98de74633681bfd91 🔍 |
| SHA3 | 18bded0f8ee8b5da0c54c83515401121577df5296c7a1121cdc5e91733dd79af 🔍 |
| VirtualSize | 0x19ceb0 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x19d000 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.55635 |
.rdata
| MD5 | c1f8c404042b671423427bc4da8854fc 🔍 |
|---|---|
| SHA1 | d84b258091fea399a53ee51d738a700a01d0b135 🔍 |
| SHA256 | a201c8f457131455d2ba0167069b458253a71f9a8eb42fa5992da33b1e1b77db 🔍 |
| SHA3 | 69241860ab0ee864d1e269d965fb8273f398a5b3a9fca630f78704a8cd8ba7ab 🔍 |
| VirtualSize | 0x59100 |
| VirtualAddress | 0x19e000 |
| SizeOfRawData | 0x59200 |
| PointerToRawData | 0x19d400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 5.29985 |
.data
| MD5 | 016d6065239ef984e864f9c061d99184 🔍 |
|---|---|
| SHA1 | 0ccae06d0cf997cace3042bd31f939ec9b2a65bb 🔍 |
| SHA256 | a1f794e95c38458e60cf20906bd3780b6325e028ce060739c076b38e98441832 🔍 |
| SHA3 | 4e7c985592318bc26368148603e79a5d3e049eeae41e9e7fdb0e31d5c911b775 🔍 |
| VirtualSize | 0x8ebc |
| VirtualAddress | 0x1f8000 |
| SizeOfRawData | 0x5e00 |
| PointerToRawData | 0x1f6600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 4.81511 |
.rsrc
| MD5 | c01c218ee1618f7a21df777e26bafc04 🔍 |
|---|---|
| SHA1 | c3def712d536140cd43352832596518bd712709d 🔍 |
| SHA256 | 5df4498bbaa0ca729766bf6f0878e7ce0af3d2c27ebee3c8d1e7a066cc78be79 🔍 |
| SHA3 | 6cf693976fde81d2c2f470584a4118286c58075f24549292397da13501998382 🔍 |
| VirtualSize | 0x260e74 |
| VirtualAddress | 0x201000 |
| SizeOfRawData | 0x261000 |
| PointerToRawData | 0x1fc400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 6.20613 |
.reloc
| MD5 | 8175a4513e4dab58c120612a5004dd28 🔍 |
|---|---|
| SHA1 | 371eaf262432afc4274c96f4ca0e7bdb7de6c0bf 🔍 |
| SHA256 | 9ce053329daec929d056d91f3af4bc7bb1f215c4da0c910f164f775775b9253c 🔍 |
| SHA3 | 957837538c7fe2f61168f5473d7dd2a894aecca41ef500c6c95d361684900c8e 🔍 |
| VirtualSize | 0x14cb8 |
| VirtualAddress | 0x462000 |
| SizeOfRawData | 0x14e00 |
| PointerToRawData | 0x45d400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.59297 |
Imports
| ADVAPI32.dll |
RegCloseKey
RegOpenKeyExW RegGetValueW CryptAcquireContextA CryptReleaseContext CryptGenRandom CryptEncrypt CryptImportKey CryptDestroyKey CryptGetHashParam CryptDestroyHash CryptHashData CryptCreateHash |
|---|---|
| WS2_32.dll |
gethostbyname
sendto recvfrom freeaddrinfo getaddrinfo WSAIoctl socket setsockopt ntohs htons getsockopt getsockname WSAStartup getpeername connect accept listen send recv ioctlsocket gethostname bind htonl ntohl WSASetLastError select __WSAFDIsSet WSAGetLastError WSACleanup closesocket |
| CRYPT32.dll |
CertFreeCertificateContext
|
| WLDAP32.dll |
#45
#301 #200 #30 #79 #35 #33 #32 #27 #26 #22 #41 #50 #143 #60 #211 #46 |
| Normaliz.dll |
IdnToAscii
|
| KERNEL32.dll |
DecodePointer
RaiseException GetLastError InitializeCriticalSectionEx DeleteCriticalSection GlobalAlloc GlobalUnlock GlobalLock CreateDirectoryW DeleteFileW OutputDebugStringA OutputDebugStringW HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSection EnterCriticalSection LeaveCriticalSection SetEvent ResetEvent WaitForSingleObject CreateEventW Sleep TerminateProcess OpenProcess GetSystemInfo GetModuleFileNameW lstrcmpiW lstrcpyW MultiByteToWideChar WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCommandLineW GetTempPathW ConnectNamedPipe DisconnectNamedPipe CreateNamedPipeW GetCurrentProcessId GetExitCodeProcess CreateProcessW GetTickCount64 FindResourceExW GetStdHandle GetFileAttributesA GetCurrentThreadId GetDynamicTimeZoneInformation WriteConsoleA GetConsoleScreenBufferInfo SetConsoleTextAttribute GetCurrentProcess GetModuleHandleW GetProcAddress SizeofResource AreFileApisANSI SetLastError FormatMessageA FreeLibrary SleepEx VerSetConditionMask GetSystemDirectoryA GetModuleHandleA LoadLibraryA GetFileSize WaitForSingleObjectEx GetFileType PeekNamedPipe WaitForMultipleObjects ExpandEnvironmentStringsA GetACP GetCurrentDirectoryW GetTickCount LoadLibraryW lstrlenW GetFileAttributesW LocalFileTimeToFileTime SetFilePointer SetFileTime SystemTimeToFileTime GetVersionExW MulDiv ExitProcess LocalFree FormatMessageW InitializeCriticalSectionAndSpinCount GetLocalTime lstrcpynW CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SetThreadPriority CreateThread SignalObjectAndWait CreateTimerQueue InitializeSListHead GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW GetCPInfo GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc QueryPerformanceCounter EncodePointer CreateHardLinkW CopyFileW SetFilePointerEx SetEndOfFile GetFileInformationByHandle GetFileAttributesExW FindNextFileW FindFirstFileExW FindClose TryEnterCriticalSection GetExitCodeThread GetCurrentThread SwitchToThread DuplicateHandle ReadFile GetUserDefaultUILanguage GetPrivateProfileStringW VerifyVersionInfoA LockResource LoadResource FreeResource CloseHandle FindResourceW WriteFile GetShortPathNameW CreateFileW ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes FreeLibraryAndExitThread LoadLibraryExW VirtualAlloc VirtualProtect VirtualFree ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx RtlUnwind GetModuleHandleExW WriteConsoleW ExitThread GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetFullPathNameW SetEnvironmentVariableW RemoveDirectoryW MoveFileExW GetConsoleMode ReadConsoleW GetConsoleCP FlushFileBuffers GetFileSizeEx GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation SetStdHandle IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW lstrcatW |
| USER32.dll |
SetWindowRgn
SetRect FillRect DrawTextW CharPrevW GetPropW SetPropW GetSystemMetrics EnableWindow ShowWindow GetClassInfoExW RegisterClassExW RegisterClassW CallWindowProcW DefWindowProcW UpdateWindow LoadImageW GetWindow PtInRect IsRectEmpty MoveWindow IsWindowEnabled GetWindowRgn CreatePopupMenu DestroyMenu EnableMenuItem AppendMenuW TrackPopupMenu CreateCaret EqualRect SetWindowTextW GetWindowTextW GetWindowTextLengthW wsprintfA SetCaretPos DrawTextA CreateAcceleratorTableW wsprintfW GetCaretBlinkTime PostQuitMessage InvalidateRgn GetGUIThreadInfo SetForegroundWindow GetKeyboardLayout HideCaret IntersectRect GetSysColor MapWindowPoints ScreenToClient SetWindowPos MessageBoxW GetWindowLongW SetWindowLongW IsWindowVisible GetWindowRect OffsetRect GetParent MonitorFromRect MonitorFromWindow GetMonitorInfoW SetCursor InflateRect UnionRect LoadCursorW GetMessageW TranslateMessage DispatchMessageW SendMessageW PostMessageW CreateWindowExW IsWindow DestroyWindow IsIconic IsZoomed CharNextW SetFocus GetActiveWindow GetFocus GetKeyState SetCapture ReleaseCapture SetTimer KillTimer GetDC ReleaseDC BeginPaint EndPaint GetKeyNameTextW MapVirtualKeyExW UpdateLayeredWindow GetClientRect ShowCaret GetCaretPos LoadIconW ClientToScreen GetUpdateRect InvalidateRect GetCursorPos |
| GDI32.dll |
SaveDC
SelectObject RemoveFontMemResourceEx CloseEnhMetaFile RestoreDC GetEnhMetaFileHeader AddFontMemResourceEx GetStockObject GetDeviceCaps CreateEnhMetaFileW DeleteObject DeleteDC CreatePen CreateFontIndirectW CreateDIBitmap GetTextMetricsW SetWindowOrgEx CombineRgn CreatePenIndirect CreateRectRgnIndirect CreateRoundRectRgn CreateSolidBrush GetCharABCWidthsW GetClipBox GetTextColor GetTextExtentPoint32W GetViewportOrgEx LineTo SelectClipRgn ExtSelectClipRgn SetBkColor SetBkMode StretchBlt SetStretchBltMode SetTextColor CreateDIBSection GetObjectA MoveToEx TextOutW CreateCompatibleDC CreateCompatibleBitmap BitBlt Rectangle GdiFlush CreateRectRgn PtInRegion CreatePatternBrush GetTextExtentPointA GetBitmapBits SetBitmapBits GetObjectW SetLayout GetLayout PlayEnhMetaFile SetViewportOrgEx |
| SHELL32.dll |
SHGetSpecialFolderLocation
CommandLineToArgvW ShellExecuteA DragQueryFileW SHGetPathFromIDListW ShellExecuteW |
| ole32.dll |
OleDuplicateData
ReleaseStgMedium CLSIDFromProgID OleLockRunning CLSIDFromString DoDragDrop CoCreateInstance CoCreateGuid CreateStreamOnHGlobal |
| OLEAUT32.dll |
VariantClear
SysAllocString SysFreeString VariantInit |
| COMCTL32.dll |
_TrackMouseEvent
InitCommonControlsEx #17 |
| gdiplus.dll |
GdipCloneImage
GdipCreateBitmapFromScan0 GdipLoadImageFromStream GdipFree GdipAlloc GdipBitmapLockBits GdipBitmapUnlockBits GdipCreateFromHDC GdipSetStringFormatFlags GdipDeleteGraphics GdipSetSmoothingMode GdipTranslateWorldTransform GdipRotateWorldTransform GdipDrawImageRectI GdiplusStartup GdiplusShutdown GdipCreatePath GdipDeletePath GdipAddPathLine GdipAddPathArc GdipCloneBrush GdipDeleteBrush GdipCreateSolidFill GdipCreatePen1 GdipDeletePen GdipSetPenMode GdipSetTextRenderingHint GdipSetInterpolationMode GdipDrawRectangleI GdipDrawPath GdipFillRectangleI GdipFillPath GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipDeleteFont GdipDrawString GdipMeasureString GdipStringFormatGetGenericTypographic GdipDeleteStringFormat GdipCloneStringFormat GdipSetStringFormatAlign GdipDisposeImage GdipSetStringFormatLineAlign GdipSetStringFormatTrimming GdipGetImageWidth GdipGetImageHeight GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipImageGetFrameCount GdipGetPropertyItem GdipGetPropertyItemSize GdipLoadImageFromStreamICM GdipImageSelectActiveFrame |
| IMM32.dll |
ImmReleaseContext
ImmSetCompositionWindow ImmGetContext |
| SHLWAPI.dll |
PathFileExistsW
|
| NETAPI32.dll |
Netbios
|
Delayed Imports
IDR_ZIPRES
| Type |
ZIPRES
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0xfd31b |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.99685 |
| Detected Filetype | Zip Compressed Archive |
| MD5 | 1fcf92bafecb9e35f8c419b1ed1504a0 🔍 |
| SHA1 | 48d0f9dc7ce2bfc9460ef2872446f072b6407528 🔍 |
| SHA256 | 762cff3773c14df440457d8b64c3051daad4c011efdd767a1da4e9f6c6d21e2f 🔍 |
| SHA3 | 6d50c059d2987533d884bfe1c6cc1e046b2b230edeaba1a8d432449c65b58708 🔍 |
1
| Type |
RT_ICON
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x42028 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.11289 |
| MD5 | f6e5623fc74200c909726bd0f937db31 🔍 |
| SHA1 | 3c3cfb8a03e942cc13bdabcdcf9a8ce346998707 🔍 |
| SHA256 | 88c7b3b4a7484d0c362276f63dbd289cd90ba95135b1f793959c2e4ccc0ed786 🔍 |
| SHA3 | 56809cc73187a167c0c5144675354df0228c295962dc93bc5c7cc7e985e3564b 🔍 |
2
| Type |
RT_ICON
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x10828 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.41346 |
| MD5 | 0f5d060d29a2c97a4516252508cb6760 🔍 |
| SHA1 | 59a9445c0f48fc28fb71d9f87e782a8019dab45b 🔍 |
| SHA256 | 6506fb981bc5c25ff081b7cdb0b1a41d86915ce8caf5066460026d6660495833 🔍 |
| SHA3 | 4aa911c485d9959d5164d457bb173e17b6c6dc81dbb198105f1fc1b1d71d6cd1 🔍 |
3
| Type |
RT_ICON
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x4228 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.90629 |
| MD5 | 183dd359c6dd5ecf086773b30c81e77e 🔍 |
| SHA1 | 81c8017c26f6644b2075cb073239b2127d818584 🔍 |
| SHA256 | 073915f88b2043fa774a3d3ba9070ef8026f33a44b095b3e6077949412cac454 🔍 |
| SHA3 | 54b1ea96d80a2feb6b9cfec4fd2825e9b47bf455818df242471e995f81bd3cf0 🔍 |
4
| Type |
RT_ICON
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x25a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.11207 |
| MD5 | c6281d37b91f85d8f2967a43f194e5c2 🔍 |
| SHA1 | 4985974fca7eff3cee961444d255900a41d83ba8 🔍 |
| SHA256 | d3862de8536b7a08c3af671e8a390ea09c3b99f3968223b5e0dde1c97eecb1df 🔍 |
| SHA3 | 3bc2ac1f83dfe4a154d489fe04ecd4762e9c2f19ca1d9737328e88dfaed728fc 🔍 |
5
| Type |
RT_ICON
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x10a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.12647 |
| MD5 | 211ded0418d48e82b3df02c15a0dde74 🔍 |
| SHA1 | f74f3fb061001983f3272c22f1216db0596da486 🔍 |
| SHA256 | 5cf3a147fcba9fd8d039523ee0f5444b80b112753fb8bf4106a5cc420ae693f9 🔍 |
| SHA3 | 28866fee694f97ba8db28b53306da67543447a8ec82224af4c3ce85f3c0ebfe1 🔍 |
6
| Type |
RT_ICON
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x988 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.39681 |
| MD5 | fbefc2f3692f52784bdc77b42d762921 🔍 |
| SHA1 | 865d34358c38d004acb302cf14e30e1a9003e3c9 🔍 |
| SHA256 | d0e347c395fbe15eabab7fbd74f1a2c8adc9a19ada4fe6b31b731cdcc5a14e96 🔍 |
| SHA3 | b0c28b57cb5069d56c9d58dc6cce7bac64b36a05fb8428659120cc5168c40680 🔍 |
7
| Type |
RT_ICON
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x468 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.70369 |
| MD5 | 982d54caaeac60bd69601f6d7126fcc4 🔍 |
| SHA1 | 7243759df156aa7de8df45ea37f2b53fda4af6e6 🔍 |
| SHA256 | 91fc1dfe039a3f004fed08c1dbd0411634ea814a252577572c56c55bb6d7ee36 🔍 |
| SHA3 | 4a0030f8c6f9763615986d5997a0f9450c58365ac29c8955174b89a00dc3d212 🔍 |
8
| Type |
RT_ICON
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x108028 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.76145 |
| MD5 | 09d38b6131963e07c2b1985de3679755 🔍 |
| SHA1 | 31f8e30e4f941aa1df2237f5c79a7246d4fa8445 🔍 |
| SHA256 | 6853906405adab7f6b8287f79ffc48ec1fbddd2c86a2ea0172e4d3e6de21f854 🔍 |
| SHA3 | 504a17522c340afa8e5ef27e0f970eb54bc45b057127dde35f6e29707cc3ce20 🔍 |
109
| Type |
RT_MENU
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x50 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.24529 |
| MD5 | 3768d661f1606dafe0bbd6dbcbb1aa50 🔍 |
| SHA1 | 250a2f56a3becde33eceeb3ef69a502fc3bdfcca 🔍 |
| SHA256 | 8f0d417b64215ec2f33379d29e91fbdcd15cd710652ef28e0478c7f4be0a030c 🔍 |
| SHA3 | e3cf07897350f1c39ad0376f00125782ae1786e1592554044d93e4f679f73935 🔍 |
103
| Type |
RT_DIALOG
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x11c |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.23063 |
| MD5 | 6930870d6037d7d6230e11d6b5c3dd09 🔍 |
| SHA1 | 5df7d3709af9ec438a593b5c13cc500a24a07cb6 🔍 |
| SHA256 | ed5f7dda6dbee0f1f5d16e997b902b3e32b9ffa2d5cedccb7fe0b1864c16b938 🔍 |
| SHA3 | bc42b4577f2d81c72b18771c66d54cd3ecd70b3159805571ec31ea3182237fd3 🔍 |
7 (#2)
| Type |
RT_STRING
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x3c |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.80331 |
| MD5 | aa5fd07b5392e299b41b47f700b5f283 🔍 |
| SHA1 | 50a456510e11b19b4951a6267bca1d36ed245001 🔍 |
| SHA256 | 1d4084fe21f66dbb6e50c69b33d3b0453dc09a61a01be79b016fd58168d9c4db 🔍 |
| SHA3 | 509fe420e6fe8c146821f08937fac10dc8f2a1a2d4b05f9b4dd79b05a46d324b 🔍 |
109 (#2)
| Type |
RT_ACCELERATOR
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x10 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.79879 |
| MD5 | 3d2b1af3424dbcd504f73918619c7d99 🔍 |
| SHA1 | 10d6ed54ea742211a14a05414883f6c00c03080a 🔍 |
| SHA256 | c2f0c188d6c493d7827bf83fb89c704815796445a0178bb2ae79658d96703a3c 🔍 |
| SHA3 | b8c5f28d2c132e5bc304e4dc1b314a3f32a2e48675c06828a2a8a014ea05e7fb 🔍 |
133
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x76 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.8475 |
| Detected Filetype | Icon file |
| MD5 | 85d584bc6811f84bda4bd0343b2b0ef0 🔍 |
| SHA1 | 01b88792235619277c8f97e4d8566c68867ce029 🔍 |
| SHA256 | 3b65f226211c442a80cac96c4a764e9a64a6eaff0fc5db9ef25fa1b22e938009 🔍 |
| SHA3 | 8c1295a1a0ecc374c297769384b541701bb26de9e49cd27ec7c3c5b868de4e36 🔍 |
1 (#2)
| Type |
RT_VERSION
|
|---|---|
| Language | Chinese - PRC |
| Codepage | Latin 1 / Western European |
| Size | 0x310 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.17701 |
| MD5 | 7c5ec5ab78d2c107957bf2a67dd4d932 🔍 |
| SHA1 | 1071167f5aab85d93a36c618bf57b01d1a3cb887 🔍 |
| SHA256 | b8846d76371583cab7e68e6ace8c8e496ccb3936b240fa2d78ac141b0b53d3c9 🔍 |
| SHA3 | bb71afcdb1702165a1679e5105555fe7c6c402fdc9f4ad110e20f6179d1997a8 🔍 |
1 (#3)
| Type |
RT_MANIFEST
|
|---|---|
| Language | English - United States |
| Codepage | Latin 1 / Western European |
| Size | 0x32a |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.12227 |
| MD5 | fb3baa426c1d6faeeec533b5ae6d4496 🔍 |
| SHA1 | dc884ecf08d4d74abb1fd3036879301256c8398d 🔍 |
| SHA256 | 0304204b266e269558f5f0b86fcf5aefe6919358c47e3e435e04471f3ffc16f7 🔍 |
| SHA3 | 23df4008bae7c8d8df05380aa079a89f4e51f3c7b14d177edaf15e1041722369 🔍 |
String Table contents
| install |
| INSTALL |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 2.17.1.1361 |
| ProductVersion | 5.1.14.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | LagoFast LLC |
| FileDescription | LagoFast |
| FileVersion (#2) | 2.17.1.1361 |
| InternalName | autoupgrade.exe |
| LegalCopyright | (C) LagoFast LLC |
| OriginalFilename | autoupgrade.exe |
| ProductName | LagoFast |
| ProductVersion (#2) | 2.17.1.1361 |
| Resource LangID | Chinese - PRC |
|---|
IMAGE_DEBUG_TYPE_CODEVIEW
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Mar-24 10:54:58 |
| Version | 0.0 |
| SizeofData | 73 |
| AddressOfRawData | 0x1e20b0 |
| PointerToRawData | 0x1e14b0 |
| Referenced File | D:\jy_work\AutoUpgrader\Release\AutoUpgrader.pdb |
IMAGE_DEBUG_TYPE_VC_FEATURE
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Mar-24 10:54:58 |
| Version | 0.0 |
| SizeofData | 20 |
| AddressOfRawData | 0x1e20fc |
| PointerToRawData | 0x1e14fc |
IMAGE_DEBUG_TYPE_POGO
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Mar-24 10:54:58 |
| Version | 0.0 |
| SizeofData | 940 |
| AddressOfRawData | 0x1e2110 |
| PointerToRawData | 0x1e1510 |
TLS Callbacks
| StartAddressOfRawData | 0x5e24cc |
|---|---|
| EndAddressOfRawData | 0x5e24e8 |
| AddressOfIndex | 0x6000cc |
| AddressOfCallbacks | 0x59e8fc |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_4BYTES
|
| Callbacks | (EMPTY) |
Load Configuration
| Size | 0xa0 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x5f8220 |
| SEHandlerTable | 0x5e0ed0 |
| SEHandlerCount | 1144 |
RICH Header
| XOR Key | 0x28b9aef3 |
|---|---|
| Unmarked objects | 0 |
| ASM objects (26213) | 38 |
| C++ objects (26213) | 221 |
| C objects (27047) | 9 |
| C++ objects (27047) | 20 |
| 199 (41118) | 5 |
| ASM objects (VS 2015/2017 runtime 26706) | 28 |
| C++ objects (CVTCIL) (26213) | 1 |
| C++ objects (VS 2015/2017 runtime 26706) | 131 |
| C objects (VS 2015/2017 runtime 26706) | 40 |
| C objects (26213) | 43 |
| C objects (CVTCIL) (26213) | 1 |
| Imports (26213) | 22 |
| C++ objects (27048) | 52 |
| Total imports | 519 |
| Imports (VS2015/2017 runtime 25711) | 11 |
| C objects (VS2017 v15.8.1 compiler 26726) | 100 |
| C++ objects (27049) | 14 |
| Resource objects (27049) | 1 |
| 151 | 1 |
| Linker (27049) | 1 |
Errors
Leave a comment
No comments yet.