91Assist.exe

91助手

Fuzhou BoYuan Wireless Websoft Technology Ltd.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘91Mobile’.
Scan 91Assist.exe - Powered by Reason Core Security
Publisher:
福州博远无线网络科技有限公司  (signed by Fuzhou BoYuan Wireless Websoft Technology Ltd.)

Product:
91助手

Version:
5,3,2,1024

MD5:
400213bbe74bf7a1af6da841935d800d

SHA-1:
cb56bbbb52dc434d8ad7b1c98dd1b62d40243030

SHA-256:
3d4a7ca9c3ef5bb134f7d861099abad0d480213fc5f5ea9b80b11aaa8d2c3175

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/10/2016 4:00:30 AM UTC  (a few moments ago)

File size:
1.1 MB (1,122,656 bytes)

Product version:
5,3,2,1024

Copyright:
Copyright (C) 2012 福州博远无线网络科技有限公司

Original file name:
91Assist.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, China)

Common path:
C:\Program Files\91 wireless\91mobile v5\91assist.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
5/31/2012 8:00:00 AM

Valid to:
6/1/2014 7:59:59 AM

Subject:
CN=Fuzhou BoYuan Wireless Websoft Technology Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Fuzhou BoYuan Wireless Websoft Technology Ltd., L=Fuzhou, S=Fujian, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3D7E2C379AF7E2649463D3D6AC051DCF

File PE Metadata
Compilation timestamp:
4/22/2014 8:55:39 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:xDg7XgiheO0kqkngUg5Bj3D5DqbD88IQP+Ea6qFARLNVGi/BL/WS1:l8gUKj3DwI+NajFARLNVn5/WS1

Entry address:
0x87D62

Entry point:
E8, 91, 04, 00, 00, E9, 37, FD, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 68, B0, 4D, 00, 89, 0D, 64, B0, 4D, 00, 89, 15, 60, B0, 4D, 00, 89, 1D, 5C, B0, 4D, 00, 89, 35, 58, B0, 4D, 00, 89, 3D, 54, B0, 4D, 00, 66, 8C, 15, 80, B0, 4D, 00, 66, 8C, 0D, 74, B0, 4D, 00, 66, 8C, 1D, 50, B0, 4D, 00, 66, 8C, 05, 4C, B0, 4D, 00, 66, 8C, 25, 48, B0, 4D, 00, 66, 8C, 2D, 44, B0, 4D, 00, 9C, 8F, 05, 78, B0, 4D, 00, 8B, 45, 00, A3, 6C, B0, 4D, 00, 8B, 45, 04, A3, 70, B0, 4D, 00, 8D, 45, 08, A3, 7C, B0, 4D...
 
[+]

Entropy:
6.4022

Code size:
597 KB (611,328 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
91Mobile

Command:
"C:\Program Files\91 wireless\91mobile v5\91assist.exe" min


Scan 91Assist.exe - Powered by Reason Core Security