home

EIOffice.exe

EIOffice

Wuxi Evermore Software, Inc

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘EIOPersonal’.
Publisher:
Wuxi Evermore SoftWare, Inc.  (signed by Wuxi Evermore Software, Inc)

Product:
EIOffice

Description:
Evermore Integrated Office

Version:
5.0.10.0

MD5:
7eba7e58c83e168024df3129ac2cbc84

SHA-1:
86362be14b2f34ff838f686b9c933d4e8d565a5c

SHA-256:
51194c5fcc21569bc93f407bcc78c1332643b5efaca7fb2906196333f3479ffc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:12:53 PM UTC  (today)

File size:
79.8 KB (81,728 bytes)

Product version:
5.0

Copyright:
Copyright (C) 2001-2008 Wuxi Evermore Software, Inc. All rights reserved.

Original file name:
EIOffice.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\evermore\eioffice\eioffice.exe

Digital Signature
Signed by:
Wuxi Evermore Software, Inc

Authority:
WoSign, Inc.

Valid from:
2/19/2009 8:00:00 AM

Valid to:
2/20/2010 7:59:59 AM

Subject:
CN="Wuxi Evermore Software, Inc", OU=WoSign Class 3 Code Signing, O="Wuxi Evermore Software, Inc", L=wuxi, S=jiangsu, C=CN

Issuer:
CN=WoSign Code Signing Authority, O="WoSign, Inc.", C=US

Serial number:
00951F440C6E0EA06276BCCD085FBF1A78

File PE Metadata
Compilation timestamp:
8/22/2008 1:59:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:Jot2grz3NYHoZUSGj0gH6lhox9S1fiBit:uh/9mqUS2Na3ox01Kit

Entry address:
0x5538

Entry point:
55, 8B, EC, 6A, FF, 68, B8, D1, 40, 00, 68, 20, 87, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 18, D1, 40, 00, 33, D2, 8A, D4, 89, 15, 84, 08, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 80, 08, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 7C, 08, 41, 00, C1, E8, 10, A3, 78, 08, 41, 00, 33, F6, 56, E8, DF, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, AF, 00, 00, 00, 59, 89, 75, FC, E8, D0, 2E, 00, 00, E8, 2A, 2E, 00, 00, A3, 00, 1F, 41, 00, E8, B3...
 
[+]

Entropy:
5.7581

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
48 KB (49,152 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
EIOPersonal

Command:
C:\Program Files\evermore\eioffice\eioffice.exe "?q?"


Scan EIOffice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.