home

dbankplugin64.exe

华为网盘

Huawei Software Technologies Co., LTD.

Publisher:
华为技术有限公司  (signed by Huawei Software Technologies Co., LTD.)

Product:
华为网盘

Description:
DBankPluginEXE

Version:
1.1.0.2

MD5:
0bc8545be040ac0aeb2acc67629885f8

SHA-1:
09b9c64fdb42de78e5e5141d7d86fa5d89c7ed0c

SHA-256:
b6871a1b828c20c8513f99e4d4468c81413f686e31c40120bf8f55f00df52a86

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 2:37:40 PM UTC  (today)

File size:
4.1 MB (4,304,480 bytes)

Product version:
1.1.0.2

Copyright:
(C) <华为技术有限公司>。保留所有权利。

Original file name:
DBankPluginEXE.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\dbankplugin64.exe

Digital Signature
Signed by:
Huawei Software Technologies Co., LTD.

Authority:
WoSign eCommerce Services Limited

Valid from:
11/29/2011 7:18:14 PM

Valid to:
12/1/2013 10:47:06 PM

Subject:
E=liuqinglun@huawei.com, CN="Huawei Software Technologies Co., LTD.", O="Huawei Software Technologies Co., LTD.", L=Nanjing, S=Jiangsu, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
16393AC431F73D

File PE Metadata
Compilation timestamp:
3/19/2013 9:15:06 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:guak2aHb0eYmOBQnuc86289+VKMPYpRxSKHhWoc3L3e3qKJ3KsEpr8V:giuQLErYMPYpRxSQhy3nKwp+

Entry address:
0x101D54

Entry point:
E8, 7F, 6F, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 10, 0E, 57, 00, 75, 02, F3, C3, E9, 06, 70, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, 70, 62, 52, 00, 57, FF, 35, A8, 9A, 57, 00, FF, D6, FF, 35, A4, 9A, 57, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, DC, 39, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 39, 71, 00, 00, 59, 59, 85...
 
[+]

Entropy:
6.3305

Code size:
1.1 MB (1,199,616 bytes)

Scan dbankplugin64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.