home

Books.exe

酷阅读工作室阅读器

成都海宇通电气自动化工程有限公司

Publisher:
酷阅读工作室  (signed by 成都海宇通电气自动化工程有限公司)

Product:
酷阅读工作室阅读器

Description:
搜索器

Version:
1, 2, 0, 4

MD5:
c25ec8b18055ab6ff71aab8752c8af19

SHA-1:
da9edae72b62050814aeef052b9272eec40837d2

SHA-256:
4730d94ff9bd5b49b900a0da1cf30761254d84049b0ced7fd77dac49d897a063

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/5/2025 6:29:40 AM UTC  (today)

File size:
1 MB (1,096,824 bytes)

Product version:
1, 2, 0, 4

Copyright:
酷阅读工作室保留所有权利

Original file name:
Books.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\蹄堐黍\books.exe

Digital Signature
Signed by:
成都海宇通电气自动化工程有限公司

Authority:
WoSign eCommerce Services Limited

Valid from:
1/8/2013 5:46:36 AM

Valid to:
3/12/2014 3:03:59 AM

Subject:
E=haiyutong@foxmail.com, CN=成都海宇通电气自动化工程有限公司, O=成都海宇通电气自动化工程有限公司, L=都江堰市, S=四川省, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
11CF45C7EC8A41

File PE Metadata
Compilation timestamp:
9/24/2012 3:12:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:6+Rv/QypLdyq5GFbSbauXibD+V19L8qxVHKWyp+S:6evo1q5GFbSbaaF7iWyUS

Entry address:
0x40770

Entry point:
E8, BB, 79, 00, 00, E9, 17, FE, FF, FF, 6A, 14, 68, 80, E0, 47, 00, E8, 9A, 1B, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, FE, 79, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, 90, 1B, 00, 00, C2, 10, 00, 6A, 0C, 68, A0, E0, 47, 00, E8, 3C, 1B, 00, 00, 83, 65, E4, 00, 8B, 75, 0C, 8B, C6, 0F, AF, 45...
 
[+]

Entropy:
5.8839

Code size:
424 KB (434,176 bytes)

Scan Books.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.