» flmx10.exe
Overview
Analysis
File Details
Downloads (1)

flmx10.exe

QHighTech

fuzhou tian xia chuang shi digital Co.,Ltd

This is a setup program which is used to install the application. The file has been seen being downloaded from docs.google.com.

File name:

flmx10.exe

Publisher:

rvSisters Corporation. (signed by fuzhou tian xia chuang shi digital Co.,Ltd)

Product:

QHighTech

Description:

QHighTech's HighTech runner.

Version:

9, 5, 0, 11671

MD5:

d52a942ecedb4fdb68c725cac59a67b6

SHA-1:

5e41878ed041eb90cf2b9307553bd7741a1977cc

SHA-256:

d0850ea1ca8b3bf86641c73455ed91ce2ae2658abb10152d8fad9d6004f09e61

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 4:47:21 PM UTC (today)

File size:

6 MB (6,318,118 bytes)

Product version:

9, 5, 0, 11671

Original file name:

myHighTech.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\flmx10.exe

Digital Signature

Signed by:

fuzhou tian xia chuang shi digital Co.,Ltd

Authority:

VeriSign, Inc.

Valid from:

4/12/2011 8:00:00 AM

Valid to:

4/12/2013 7:59:59 AM

Subject:

CN="fuzhou tian xia chuang shi digital Co.,Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="fuzhou tian xia chuang shi digital Co.,Ltd", L=fuzhou, S=fujian, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

209E746C15A85E547AFAF6A4C3277C81

File PE Metadata

Compilation timestamp:

11/19/2012 12:53:05 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

98304:Quxcf0ZebExAtoGBAMzrwTDkgAgJpZS1wDmIVoS1Xuw1fpezCbQ8uyMhKQxYgR/X:QueDgAopYr5S1XuwRcCMHFxDJrKN3IPN

Entry address:

0x2E958A

Entry point:

68, 31, 14, A4, C2, E8, A5, 35, 02, 00, 7B, 8D, 25, B9, E3, 03, 60, 68, 0D, BF, D2, 28, 41, ED, 8E, DC, 53, AD, B6, 00, 6C, E3, 2E, BC, 82, F5, 68, A1, AD, F3, 67, E7, F3, BD, D4, D5, B5, CD, 22, A6, 9F, C1, 27, F9, 6D, 45, 0B, C1, CB, 50, 23, 5C, D5, 80, 49, 21, 5F, 1E, 99, 1C, 87, 1C, 24, 4B, 50, FF, E6, 11, CC, E6, B0, 29, 51, 99, C7, 77, 53, EF, B9, 95, 23, A6, D5, 7F, 9F, 77, 43, CF, BE, 86, 69, 76, 54, BA, 27, 92, 8B, 11, 93, 02, E7, 8D, BF, 97, 75, 4C, 3A, B0, 8A, DC, D2, 8A, C0, 77, 8E, 54, 35, B1... 
[+]

Entropy:

7.8335 (probably packed)

Code size:

3 MB (3,194,880 bytes)

The file flmx10.exe has been seen being distributed by the following URL.

https://docs.google.com/uc?id=0BxgBlmfKXCRFbGQ3QXJIems0WFk&export=download

Scan flmx10.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.