File Name | ValorantExternalFree.exe |
File Type |
PE32+ executable (console) x86-64, for MS Windows
|
Scanner Version | 1.0.191.174 |
Database Version | 2024-10-03 16:00:54 UTC |
Malware family: Patcher
Hash Type | Value | Action |
---|---|---|
MD5 |
4ac882ebdbc1431cdd3ab45e1712ada1
|
|
SHA1 |
b871304fd060b700fd66ce0c87014ec955d12979
|
|
SHA256 |
b13f23643fddce3f41b6908a00051b6688788668c81d698994c140bf6290c2d6
|
|
SHA512 |
f3ff8d00849289436b723bc48c14113e51b583955d7f69870458d7b7d72ba214ad531d601a950b247f43325a610fd15cd6584008fd842a29c1dd0804ee2e6f98
|
|
ImpHash |
5397e91e3bea53fd788a5ca1224e7738
|
Image Base | 0x140000000 |
Entry Point | 0x1400a996c |
Compilation Time | 2024-05-28 09:26:28 |
Checksum | 0x00000000 (Actual: 0x000d695a) |
OS Version | 6.0 |
PEiD Signatures |
PE32+ executable (console) x86-64, for MS Windows
|
PDB Path | C:\Users\Lenovo\Desktop\Developer\valorant-example-external-main\x64\Release\ValorantExternalFree.pdb |
Digital Signature | The PE file does not contain a certificate table. |
Imports | 21 libraries |
Exports | 0 functions |
Resources | 1 Resources |
Sections | 6 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
698,064 bytes | 698,368 bytes | 6.01 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
DA9EA3C5711FD7ABB0D6FD4D1C1B6503 |
.rdata |
0x000ac000 |
108,658 bytes | 109,056 bytes | 6.34 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A2E6C83F6781D83B6802587B50738E2F |
.data |
0x000c7000 |
9,600 bytes | 2,560 bytes | 2.43 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D085AD231FEE77F5C3F2C40C9800D0B9 |
.pdata |
0x000ca000 |
15,132 bytes | 15,360 bytes | 5.95 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F3471457149CD37BF2FFBAD18FE744F3 |
.rsrc |
0x000ce000 |
488 bytes | 512 bytes | 4.77 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A9A0E1632294F4E90A8023A2A65F1C55 |
.reloc |
0x000cf000 |
984 bytes | 1,024 bytes | 5.11 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
F4FB32D396B93AF889EEE4D29C3D80F4 |
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_MANIFEST | 1 | 392 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Hack.Win64.Patcher.sa without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system