home

client.exe

client

WISE GAME INFORMATION TECHNOLOGY (SHANGHAI) CO., LTD.

Publisher:
WISE GAME INFORMATION TECHNOLOGY (SHANGHAI) CO., LTD.  (signed and verified)

Product:
client

Version:
1.4.0.58192

MD5:
6e774b420d2c545ee2ea207ad7070340

SHA-1:
1b0eae0ba7dedd59c2b2cc80edcb5dc2f2b28a6c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:05:43 AM UTC  (today)

File size:
2.6 MB (2,748,416 bytes)

Product version:
1.4.0.58192

Copyright:
Copyright (C) 2013 WISE GAME INFORMATION TECHNOLOGY (SHANGHAI) CO., LTD.

Original file name:
client.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (PRC)

Common path:
C:\Program Files\eznet\avatarstar\client.exe

Digital Signature
Signed by:
WISE GAME INFORMATION TECHNOLOGY (SHANGHAI) CO., LTD.

Authority:
VeriSign, Inc.

Valid from:
3/22/2013 8:00:00 AM

Valid to:
3/22/2016 7:59:59 AM

Subject:
CN="WISE GAME INFORMATION TECHNOLOGY (SHANGHAI) CO., LTD.", OU=Business Dept., OU=Digital ID Class 3 - Microsoft Software Validation v2, O="WISE GAME INFORMATION TECHNOLOGY (SHANGHAI) CO., LTD.", L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
65E5012FC61A49962C52B1534CBFC011

File PE Metadata
Compilation timestamp:
12/22/2015 2:37:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:QkGkSho2BeTYkzA4KUVS1fGp/3BIFrVY4VGpIn83zKQEvKih4ruJgjYpvD4+uX+E:QkTSvdkzbgfGpvGTGpIn83UvhcjY++Ji

Entry address:
0xF5A000

Entry point:
55, 8B, EC, 83, EC, 70, 53, 83, 65, D0, 00, 83, 65, F8, 00, 83, 65, D8, 00, 33, C0, 66, 89, 45, CC, 83, 65, E0, 00, 83, 65, EC, 00, 83, 65, E4, 00, 83, 65, F4, 00, 83, 4D, DC, FF, 83, 65, D4, 00, 83, 65, C8, 00, 83, 65, E8, 00, 83, 65, F0, 00, 83, 65, FC, 00, C7, 45, AC, 72, 6F, 63, 41, 90, 90, 90, B8, 2F, 00, 00, 00, 40, 64, FF, 30, 5B, 89, 5D, E0, 8B, 45, E0, 8B, 40, 0C, 8B, 40, 1C, 8B, 00, 89, 45, EC, C7, 45, A8, 47, 65, 74, 50, 8B, 45, EC, 8B, 40, 08, 89, 45, F4, C7, 45, B4, 73, 73, 00, 00, 8B, 45, F4...
 
[+]

Entropy:
7.8807

Developed / compiled with:
Microsoft Visual C++

Code size:
8.8 MB (9,198,080 bytes)

Scan client.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.