» flmx10.exe
Overview
Analysis
File Details

flmx10.exe

QHighTech

fuzhou tian xia chuang shi digital Co.,Ltd

File name:

flmx10.exe

Publisher:

rvSisters Corporation. (signed by fuzhou tian xia chuang shi digital Co.,Ltd)

Product:

QHighTech

Description:

QHighTech's HighTech runner.

Version:

9, 5, 0, 11671

MD5:

bef64b700fb2999da85465f596848920

SHA-1:

5b9b678e0d62f78544d6ee7bb834b09fcf6a7688

SHA-256:

0d71371294ec56ff22b47b8c68efbd347dd35aba60ccaf5bcd94630ff79d79fc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 2:23:55 AM UTC (today)

File size:

6.6 MB (6,951,982 bytes)

Product version:

9, 5, 0, 11671

Original file name:

myHighTech.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\flmx10.exe

Digital Signature

Signed by:

fuzhou tian xia chuang shi digital Co.,Ltd

Authority:

VeriSign, Inc.

Valid from:

4/12/2011 2:00:00 AM

Valid to:

4/12/2013 1:59:59 AM

Subject:

CN="fuzhou tian xia chuang shi digital Co.,Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="fuzhou tian xia chuang shi digital Co.,Ltd", L=fuzhou, S=fujian, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

209E746C15A85E547AFAF6A4C3277C81

File PE Metadata

Compilation timestamp:

11/19/2012 5:53:05 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

196608:QueDgAopYr5S1XuKVCwC4ouXIFQ59NoeuxCoXXRS:QlDCpYrmXuKA4pIFneuC0S

Entry address:

0x2E958A

Entry point:

68, 31, 14, A4, C2, E8, A5, 35, 02, 00, 7B, 8D, 25, B9, E3, 03, 60, 68, 0D, BF, D2, 28, 41, ED, 8E, DC, 53, AD, B6, 00, 6C, E3, 2E, BC, 82, F5, 68, A1, AD, F3, 67, E7, F3, BD, D4, D5, B5, CD, 22, A6, 9F, C1, 27, F9, 6D, 45, 0B, C1, CB, 50, 23, 5C, D5, 80, 49, 21, 5F, 1E, 99, 1C, 87, 1C, 24, 4B, 50, FF, E6, 11, CC, E6, B0, 29, 51, 99, C7, 77, 53, EF, B9, 95, 23, A6, D5, 7F, 9F, 77, 43, CF, BE, 86, 69, 76, 54, BA, 27, 92, 8B, 11, 93, 02, E7, 8D, BF, 97, 75, 4C, 3A, B0, 8A, DC, D2, 8A, C0, 77, 8E, 54, 35, B1... 
[+]

Entropy:

7.8576 (probably packed)

Code size:

3 MB (3,194,880 bytes)

Scan flmx10.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.