home

delayplugini.exe

Shenzhen Yi Xing Investment Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DelaypluginInstall’.
Publisher:
Shenzhen Yi Xing Investment Co., Ltd.  (signed and verified)

MD5:
b2e195e6492e9aad293b8a0db8b653a2

SHA-1:
261df17ac5c0a3c54366d80cdeca39e8b17f31f0

SHA-256:
caed01f336ad94d35cca5f13090700f9036b92b5077b3f249729ead024086a4d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2025 12:50:49 PM UTC  (today)

File size:
1.9 MB (1,962,944 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\iskysoft\video converter ultimate\delayplugini.exe

Digital Signature
Signed by:
Shenzhen Yi Xing Investment Co., Ltd.

Authority:
Symantec Corporation

Valid from:
2/22/2016 5:00:00 AM

Valid to:
2/22/2017 4:59:59 AM

Subject:
CN="Shenzhen Yi Xing Investment Co., Ltd.", OU=IT, O="Shenzhen Yi Xing Investment Co., Ltd.", L=Shenzhen, S=Guangdong, C=CN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
53AEEAAEB4205551C1F874CA136735E5

File PE Metadata
Compilation timestamp:
5/7/2014 7:43:54 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x64834

Entry point:
55, 8B, EC, B9, 08, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, B8, EC, 34, 46, 00, E8, 3E, 30, FA, FF, 33, C0, 55, 68, 9D, 4A, 46, 00, 64, FF, 30, 64, 89, 20, A1, 14, 6C, 46, 00, 8B, 00, E8, 84, BD, FF, FF, 8D, 55, E4, A1, 14, 6C, 46, 00, 8B, 00, E8, 61, C4, FF, FF, 8B, 45, E4, 8D, 55, E8, E8, F2, 6C, FA, FF, 8B, 45, E8, 8D, 4D, EC, 33, D2, E8, 15, 6B, FA, FF, 8B, 55, EC, B8, 14, C2, 46, 00, E8, 70, 0D, FA, FF, A1, 14, C2, 46, 00, E8, F2, 0D, FA, FF, 50, 6A, 00, 6A, 00, E8, 48, 34, FA, FF, 8B, D8, E8, 49...
 
[+]

Entropy:
4.9044

Developed / compiled with:
Microsoft Visual C++

Code size:
397.5 KB (407,040 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DelaypluginInstall

Command:
C:\ProgramData\iskysoft\video converter ultimate\delayplugini.exe


Scan delayplugini.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.