b420fd99a0e543b4ec47d4f40489303f147b72e5e3c8614971a14d3760481621
Summary
| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2051-Dec-13 14:20:44 |
| Debug artifacts |
C:\Users\Admin\source\repos\SFVipPlayer\SFVipUpdater\obj\x64\Release\Updater.pdb
|
| Comments | |
| CompanyName | |
| FileDescription | SFVipUpdater |
| FileVersion | 1.0.0.0 |
| InternalName | Updater.exe |
| LegalCopyright | Copyright © salezli 2024 |
| LegalTrademarks | |
| OriginalFilename | Updater.exe |
| ProductName | SFVipUpdater |
| ProductVersion | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
Plugin Output
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Suspicious | The PE is possibly packed. | The PE only has 0 import(s). |
| Safe | VirusTotal score: 0/68 (Scanned on 2026-06-23 21:18:26) | All the AVs think this file is safe. |
Hashes
| MD5 | b88f8a1e6a201d6a88a0ccc15d20a237 🔍 |
|---|---|
| SHA1 | da5be8b2429ad424081801831448abb6b59dcbec 🔍 |
| SHA256 | b420fd99a0e543b4ec47d4f40489303f147b72e5e3c8614971a14d3760481621 🔍 |
| SHA3 | 2c88f4f0962904d5122a127179881f2abec7b788defc47da71ef38215a079636 🔍 |
| SSDeep | 12288:aLJH+nf8JqihDB7Paxn7pKG+B7Pa2nJ49:OH+f8JBDB7PalIG+B7PasC 🔍 |
| Imports Hash | d41d8cd98f00b204e9800998ecf8427e 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 2 |
| TimeDateStamp | 2051-Dec-13 14:20:44 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32+ |
|---|---|
| LinkerVersion | 48.0 |
| SizeOfCode | 0x63a00 |
| SizeOfInitializedData | 0x33800 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0000000000000000 (Section: ?) |
| BaseOfCode | 0x2000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x2000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x9a000 |
| SizeOfHeaders | 0x200 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x400000 |
| SizeofStackCommit | 0x4000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x2000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | d02a96bef5b058babfcdff824497a028 🔍 |
|---|---|
| SHA1 | c444e12f896a6543b4c2b45cceb16f65341db81d 🔍 |
| SHA256 | 7e829d29fa2d08a88b7fc8314947220341abd1d357df76be427d8faddc05d7bf 🔍 |
| SHA3 | f87ff60acef053fdaee06cab373ffcb90839ee5a63b5217a3d631a51326921ae 🔍 |
| VirtualSize | 0x63840 |
| VirtualAddress | 0x2000 |
| SizeOfRawData | 0x63a00 |
| PointerToRawData | 0x200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.77978 |
.rsrc
| MD5 | e371de32c48e5506fd887e4ee51752d4 🔍 |
|---|---|
| SHA1 | 9e67179225e30cd92c1ef3e60c9659538d8b3d2b 🔍 |
| SHA256 | 726bc459bd906b565d4f2a6463f5c2a913b682f84e324653d4e3a4a801e188a2 🔍 |
| SHA3 | d259620af79a70bdc8a7a497e1970f90e1b4b9449876f41fdfed9d66ca01a0cc 🔍 |
| VirtualSize | 0x33758 |
| VirtualAddress | 0x66000 |
| SizeOfRawData | 0x33800 |
| PointerToRawData | 0x63c00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 5.20965 |
Imports
Delayed Imports
1
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x10c04 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.9642 |
| Detected Filetype | PNG graphic file |
| MD5 | e817a261e225904f238e021072d766e1 🔍 |
| SHA1 | 6049c29de8ec4a51b6b95db12ab7db8bd381a1ad 🔍 |
| SHA256 | 5f52cba2b65d2a7b647b1f210966a05c0bd0be535cd24f4b339ac073c092e0b9 🔍 |
| SHA3 | eed2febe6aeba0d8d4bbe09b4faaf547f4d42b67168d3620c7a19390cc5ed197 🔍 |
2
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x10828 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.49601 |
| MD5 | fd16dbfa085aa70e87a666ee73c9561a 🔍 |
| SHA1 | 8a8b2a7ebe8869d7d71674cde540a5d34ffe9ffa 🔍 |
| SHA256 | 490657c2479c744a3917c538b5d3121b447738f00499a5bcbca42a29e76823c9 🔍 |
| SHA3 | dd28711929e736509d6b85ca83648ed00f4256a0c456ca1c270d060fc876820c 🔍 |
3
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x94a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.08461 |
| MD5 | ae4b0c0c145e3556f86153c69bd17342 🔍 |
| SHA1 | a59a61f22930f5a22776040e91ff1938312de070 🔍 |
| SHA256 | de3f18ec239efe9503699b017ec7eb36db8b46c5031206cf2458384fc1bf178c 🔍 |
| SHA3 | f67055927c132e2f794dbe3c54238eb91e0d846f28f0a0203f835130e4ccd0fa 🔍 |
4
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x4228 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.94746 |
| MD5 | cb4b789ca8b6528af49bfbc13f923fba 🔍 |
| SHA1 | a7b398bf39fdc8fcdae05c149271b3f410b3bbd6 🔍 |
| SHA256 | 0466c4c347da2e3ce69ea3762dd134c37f534a31ac71aeb2e21a7f629c791ba0 🔍 |
| SHA3 | af4713e19a16b8efd8e5d0739a36072a5754766d029189d8d8d1f4944fbc96b5 🔍 |
5
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x25a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.54261 |
| MD5 | 5ecba4ef90eb63eb86f791294d7fa542 🔍 |
| SHA1 | 4314a95137c59a11933440202a8cd015af4115a5 🔍 |
| SHA256 | 76a5e5b3e7a7e2e59f4ccef94c1533df8f9ff07b28ef1951892581bfa9eb23bf 🔍 |
| SHA3 | 3a8560048ea40d277d94b5366c86cd5d28977273fc028e7a963885eff0c11f2c 🔍 |
6
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x10a8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.56703 |
| MD5 | 011b7c4ba6001a2de23a8fc5e8dcf628 🔍 |
| SHA1 | 4ccc627d3518289cc46d315513506dfed46f7865 🔍 |
| SHA256 | bea53f9f206d55fa573fd38694cc4004fb3f81299624ad16c4a6a1e70e13777b 🔍 |
| SHA3 | 995f8f9099c0cda7f9208eda5eb5aafa52c07fcf28fc3f10dc226b5a7ff52055 🔍 |
7
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x988 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.36939 |
| MD5 | 124f75b71f8707c2b532fd544faca88e 🔍 |
| SHA1 | 60a2ce3e6e92d07233c343679acf4c3fb149fdc5 🔍 |
| SHA256 | e1454cc096ec9dedfe748bb8304dd5625d212ecf844cccb637a9a3f5678db28f 🔍 |
| SHA3 | c4eb50b623dc2530597a2bc88b6241d26061e32e56f26b07708af606a41fc0d9 🔍 |
8
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x468 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.84551 |
| MD5 | 8124fdd34b676ab80f4d6a3e142a675a 🔍 |
| SHA1 | 7f3debd9b95c946849888305b7d2d30b2af359c8 🔍 |
| SHA256 | 3b25d02efb22fc83d18c218b6779edb44bfa2c3823c32cce775932b1bcc71c23 🔍 |
| SHA3 | e8b3e64273ceeabb70460a1512c6ea52224e5c74cbc91a917f96ba28ede7920e 🔍 |
32512
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x76 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.97017 |
| Detected Filetype | Icon file |
| MD5 | 61f8b3f3b8d004f3a37da7d796d31d6e 🔍 |
| SHA1 | 887bdc4824c2df751a07dd9003071ad080287108 🔍 |
| SHA256 | 0f61d2460dfdbddb42c9315ef9419866592e2a9c06aacef5b9ddcda28fcec2de 🔍 |
| SHA3 | 75ca9339b32d203498c89575235100cb496c068a63a011bb8047e8b959ee2001 🔍 |
1 (#2)
| Type |
RT_VERSION
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x334 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.25993 |
| MD5 | cb407478b64542bdf0b4ca28633d1241 🔍 |
| SHA1 | d3267c13b91f8231642afc0867a768912484a5b0 🔍 |
| SHA256 | 24327619a549ad24692b1cd4cab4f08a511ebed981fd9175c523d303411712ae 🔍 |
| SHA3 | a4bd5e3d2979fb1ca23868505b0d29ecf8fcf3229b351c4956a88ca4e8754725 🔍 |
1 (#3)
| Type |
RT_MANIFEST
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x1ea |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.00112 |
| MD5 | b7db84991f23a680df8e95af8946f9c9 🔍 |
| SHA1 | cac699787884fb993ced8d7dc47b7c522c7bc734 🔍 |
| SHA256 | 539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a 🔍 |
| SHA3 | 4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff 🔍 |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.0.0.0 |
| ProductVersion | 1.0.0.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | UNKNOWN |
| Comments | |
| CompanyName | |
| FileDescription | SFVipUpdater |
| FileVersion (#2) | 1.0.0.0 |
| InternalName | Updater.exe |
| LegalCopyright | Copyright © salezli 2024 |
| LegalTrademarks | |
| OriginalFilename | Updater.exe |
| ProductName | SFVipUpdater |
| ProductVersion (#2) | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
| Resource LangID | UNKNOWN |
|---|
IMAGE_DEBUG_TYPE_CODEVIEW
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2103-May-14 11:51:03 |
| Version | 0.0 |
| SizeofData | 105 |
| AddressOfRawData | 0x631e0 |
| PointerToRawData | 0x613e0 |
| Referenced File | C:\Users\Admin\source\repos\SFVipPlayer\SFVipUpdater\obj\x64\Release\Updater.pdb |
UNKNOWN
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| SizeofData | 0 |
| AddressOfRawData | 0 |
| PointerToRawData | 0 |
TLS Callbacks
Load Configuration
RICH Header
Errors
Leave a comment
No comments yet.