home

bhgui.exe

bhws

Shanghai Bo Yi Information Technology Co. Ltd.

Publisher:
CHINA  (signed by Shanghai Bo Yi Information Technology Co. Ltd.)

Product:
bhws

Description:
Chinese Chess

Version:
2.6.0.0

MD5:
80ed5edf425a300e66e5722929db211c

SHA-1:
fbfe4855ad150788ba68bf1060b432e9eaefd7c6

SHA-256:
043c48a3f1e8da2b0f64a33bd17437aa064084a5eb540ea72bc32fc156fd003a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:23:38 PM UTC  (today)

File size:
11.6 MB (12,132,200 bytes)

Product version:
2.6.0.0

Copyright:
COPYRIGHT(C) 2009～2012

Original file name:
Chess.exe

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Shanghai Bo Yi Information Technology Co. Ltd.

Authority:
VeriSign, Inc.

Valid from:
3/15/2012 8:00:00 AM

Valid to:
3/20/2015 7:59:59 AM

Subject:
CN=Shanghai Bo Yi Information Technology Co. Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Shanghai Bo Yi Information Technology Co. Ltd., L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3BDC743ADE918E2EC09F3A9FDD929776

File PE Metadata
Compilation timestamp:
9/1/2012 8:46:05 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:KnvCvr56GMOAqPt2Ji68iFrTgxitwqHiWcHNMKLkF4FWY1C:KvMXHAqPK8ixQCiWoNMKT4Yw

Entry address:
0x2634537

Entry point:
E8, 1C, 00, 00, 00, 53, 61, 66, 65, 6E, 67, 69, 6E, 65, 20, 53, 68, 69, 65, 6C, 64, 65, 6E, 20, 76, 32, 2E, 31, 2E, 34, 2E, 30, 00, 9C, F8, 52, 83, C4, 01, E8, 27, 00, 00, 00, 56, 61, E9, 77, 6C, FD, FF, C7, 41, D1, B0, 43, AF, 44, C7, 57, 32, C1, 26, D5, 44, F7, DE, 29, 05, 41, 2D, 85, 02, 81, C3, 54, A6, B2, 00, 89, 03, EB, DA, EB, 7B, 83, C4, 07, 8D, 64, 24, 02, 60, 66, 8B, DA, 0F, CF, B0, B6, EB, 4B, 66, 5A, 8A, 7C, 24, 09, 0F, 9A, C7, 89, 44, 24, 01, EB, 1C, 49, 0E, 53, 19, 3F, 26, 02, 49, 6E, 74, 65...
 
[+]

Entropy:
7.8520  (probably packed)

Scan bhgui.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.