7f8b8d05d22c24e9444e8c5da63e5631c762971f4ba6e79ba823fe3880fa95df

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2067-Jan-28 10:42:23
Debug artifacts C:\Users\yousm\Desktop\VelocityAPI\obj\Release\net8.0\VelocityAPI.pdb
CompanyName VelocityAPI
FileDescription VelocityAPI
FileVersion 1.0.0.0
InternalName VelocityAPI.dll
LegalCopyright
OriginalFilename VelocityAPI.dll
ProductName VelocityAPI
ProductVersion 1.0.0
Assembly Version 1.0.0.0

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • https://realvelocity.xyz
  • realvelocity.xyz
Suspicious The PE is possibly packed. The PE only has 1 import(s).
Safe VirusTotal score: 0/72 (Scanned on 2026-02-26 00:45:43) All the AVs think this file is safe.

Hashes

MD5 229bdd461d751c7b63e61c926f5ed6b7
SHA1 d2569c72e9408de66c36780e5c48074dd605db3a
SHA256 7f8b8d05d22c24e9444e8c5da63e5631c762971f4ba6e79ba823fe3880fa95df
SHA3 17a18d7c4e25fe3228043aad33101e013f38ce867fd8cf3d06fe90575853ad61
SSDeep 384:BVrr3r+K+ftBdZ0rCbv/YOJaPhLuo2O6xNEQEQrzdaRS:BVrr3r+K+fPh/Y2UyDVl
Imports Hash dae02f32a21e03ce65412f6e56942daa

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2067-Jan-28 10:42:23
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 48.0
SizeOfCode 0x3c00
SizeOfInitializedData 0x600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00005A0A (Section: .text)
BaseOfCode 0x2000
BaseOfData 0x6000
ImageBase 0x10000000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0xa000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 b4ab013d057b7351f142735aec67dd09
SHA1 ef10574e215b938cbc3f6b512a44911c2f9d5ac2
SHA256 374f5834bd59baa8c1400786fbe1d9b842c025798752742f04dfc69fccd5c075
SHA3 212e684dcee54adf5fd1115207b9f76f6e5af81cbcae2eefc7ba13cba8884d23
VirtualSize 0x3a10
VirtualAddress 0x2000
SizeOfRawData 0x3c00
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.5679

.rsrc

MD5 f0d3c0f61b70f741d435e5bc49dc6f64
SHA1 14f8adc8bf1678e130f03904c2a7e58f2e53e981
SHA256 4d0ced9eefcc8ef9d4c0c5a2bda45fcd51c3a7f927d376753f0148cabc09c9c6
SHA3 5ad05e71d0cf4d7ff151cbf2357681f0a9504787a95f3edd109cbbbb08637f77
VirtualSize 0x330
VirtualAddress 0x6000
SizeOfRawData 0x400
PointerToRawData 0x3e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.59961

.reloc

MD5 05355a43005158129ff2ee375d7906d1
SHA1 1bfa9afe8966bc3c116425d5d819689afb08de01
SHA256 eaa94cc021330eb3a1a1703e78db074f7c236b83e1f957c8242d0a70e3f1f0cc
SHA3 a861620ee5ee41096c4a4264df7428c215a1c4ef722f1a70de77f688aa4cea37
VirtualSize 0xc
VirtualAddress 0x8000
SizeOfRawData 0x200
PointerToRawData 0x4200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.0776332

Imports

mscoree.dll _CorDllMain

Delayed Imports

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x2d4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.25184
MD5 255c18f1daa4797e0fe55c35abf6c47c
SHA1 3870b7aea7b21ea7d351c845eb919a97cf679061
SHA256 0b4f2bce91693c96fdf989a4926742a6ca20a5df542a8d45297ca02626736c03
SHA3 cf7c12a5bc218d44347c6d308b3bbc1b5bf51869539b52f05db9db3ed71af2bc

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.0.0
ProductVersion 1.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DLL
Language UNKNOWN
CompanyName VelocityAPI
FileDescription VelocityAPI
FileVersion (#2) 1.0.0.0
InternalName VelocityAPI.dll
LegalCopyright
OriginalFilename VelocityAPI.dll
ProductName VelocityAPI
ProductVersion (#2) 1.0.0
Assembly Version 1.0.0.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2094-Jul-10 16:19:08
Version 256.20557
SizeofData 94
AddressOfRawData 0x5930
PointerToRawData 0x3b30
Referenced File C:\Users\yousm\Desktop\VelocityAPI\obj\Release\net8.0\VelocityAPI.pdb

UNKNOWN

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 1.0
SizeofData 39
AddressOfRawData 0x598e
PointerToRawData 0x3b8e

UNKNOWN (#2)

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.