Gridinsoft Logo
File Icon

The VEP Player For Windows.exe (-Player for GFXfather Videos) File Analysis

Updated 1 year ago
Checked by Malware Check
VEP Player For Windows.exe

Technical Analysis

File Name VEP Player For Windows.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.179.174
Database Version 2024-06-20 03:00:35 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
89,990,800
File Size (bytes)
2024-06-20
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
4843d3a2e8af313a2d223a299d07ebc3
SHA1
bb9bb93e878d73c31ea9dfb4a9d6f8844f46c091
SHA256
acfb56cf8309450f588cfe74518975d490d93d239bd699ad40da4909c19cae8f
SHA512
1882205847d36fc04dbba7cffd7f27cb51608aea40e3010ef48a11cdcf20a2128f9b2ef85f0170484ba3e8f866225fd112fea188283b78ab3583e81818b27a21
ImpHash
27a677547c8f5b0dd0f76bf601ee0f94

PE Analysis

Basic Information

▼
Icon
Hash: ea49d85c7641ca71440ed1081919774a
Fuzzy: 4a1005d1b48ae0144b2a351bac9fefe7
dHash: 69f0e8caecccf030
Image Base 0x00400000
Entry Point 0x006d0a7c
Compilation Time 2021-04-22 10:39:22
Checksum 0x055dc0bb (Actual: 0x055d6e32)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 15 libraries
Exports 0 functions
Resources 202 Resources
Sections 10 Sections

Version Information

▼
CompanyName GFXFather
FileDescription -Player for GFXfather Videos
FileVersion 1.1.4.0
InternalName GFX Player
LegalCopyright GFXfather
LegalTrademarks
OriginalFilename
ProductName GFX Player
ProductVersion 1.1.4.0
Translation 0x0804 0x03a8

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,940,176 bytes 2,940,416 bytes 6.38 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D3D413FE0B24FDB8221F96210157FA36
.itext 0x002cf000 6,864 bytes 7,168 bytes 5.95 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6708D3AFD719A455481B998DE6AB5B49
.data 0x002d1000 70,820 bytes 71,168 bytes 6.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0E714DCE01BE70DD53A3E0CFEAC49C5E
.bss 0x002e3000 27,872 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x002ea000 16,588 bytes 16,896 bytes 5.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BA31023067A410CA2D7F43C5ED97CCB5
.didata 0x002ef000 974 bytes 1,024 bytes 3.91 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B315CAEB77FE84EDF96FE6A2DFA09FAF
.tls 0x002f0000 72 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x002f1000 24 bytes 512 bytes 0.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2DFBE258488E46212C7A74C3FBFC8008
.reloc 0x002f2000 212,148 bytes 212,480 bytes 6.72 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 03464B720F32F595A5A55D5910B86895
.rsrc 0x00326000 86,733,195 bytes 86,733,312 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1441817B036F0BADDF1D6947E4213633
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 202 (86,719,952 bytes)
Resource Type Count Total Size Percentage
FILE 16 86,163,628 bytes
99.4%
RT_CURSOR 9 2,772 bytes
0%
RT_BITMAP 105 64,228 bytes
0.1%
RT_ICON 8 161,728 bytes
0.2%
RT_DIALOG 2 164 bytes
0%
RT_STRING 39 33,088 bytes
0%
RT_RCDATA 11 292,439 bytes
0.3%
RT_GROUP_CURSOR 9 180 bytes
0%
RT_GROUP_ICON 1 118 bytes
0%
RT_VERSION 1 728 bytes
0%
RT_MANIFEST 1 879 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product GFX Player
Description -Player for GFXfather Videos
File Version 1.1.4.0
Verification Status The digital signature of the object did not verify.
Signers Kakasoft Software Co., Ltd.; DigiCert SHA2 Assured ID Code Signing CA; DigiCert
Internal Name GFX Player
Copyright GFXfather
Certificate Chain Summary
DigiCert SHA2 Assured ID Code Signing CA #1 Primary
Validity Period: 2013-10-22 12:00:00 → 2028-10-22 12:00:00
Signature Algorithm: sha256RSA
Serial Number: 04 09 18 1B 5F D5 BB 66 75 53 43 B5 6F 95 50 08
Kakasoft Software Co., Ltd. #2 Chain
Validity Period: 2021-02-09 00:00:00 → 2022-02-15 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 02 05 FA CA 1C 57 B1 4F 07 82 BF 48 0C 2B 2A 3A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware