home

gujiandlctools.exe

《古剑奇谭》内容管理器

Beijing Gamebar Entertainment Co.,Ltd.

Publisher:
GameBar.com  (signed by Beijing Gamebar Entertainment Co.,Ltd.)

Product:
《古剑奇谭》内容管理器

Version:
1.0.0.1

MD5:
b6974779d2dc8fdc430694161b02dc9f

SHA-1:
a55497ee5922e15289374b424e5a9d7433ea5f64

SHA-256:
570e33f8d464393cbd7053fa385bd2152e038eda5017612bd1de14ed67e16251

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:31:15 PM UTC  (today)

File size:
10 MB (10,524,952 bytes)

Product version:
1.0.0.1

Copyright:
?2009 gamebar Inc.

Original file name:
JuQingManage.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\aurogon\gujian\bin\gujiandlctools.exe

Digital Signature
Signed by:
Beijing Gamebar Entertainment Co.,Ltd.

Authority:
WoSign, Inc.

Valid from:
6/22/2010 8:00:00 AM

Valid to:
6/23/2011 7:59:59 AM

Subject:
CN="Beijing Gamebar Entertainment Co.,Ltd.", OU=WoSign Class 3 Code Signing, O="Beijing Gamebar Entertainment Co.,Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=WoSign Code Signing Authority, O="WoSign, Inc.", C=US

Serial number:
009085F536DEAB29FD7C4CC6CB0B5FD030

File PE Metadata
Compilation timestamp:
12/1/2010 4:16:10 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:qclvjvfVZfGw1Iz31PmlVYj7DxbIi2rTKsbIVyjrI6K1J:qcrZew1sFOlVYj7dAHK2IKrIp

Entry address:
0xAFEBB0

Entry point:
B8, 8B, FE, FF, FF, 8B, 84, 04, 75, 01, 00, 00, A3, A8, 97, 24, 01, 89, 25, AC, 97, 24, 01, E8, 07, 00, 00, 00, 2C, 42, BB, EF, 00, BC, 64, 81, 04, 24, 96, 00, 00, 00, FF, 34, 24, F8, 83, D3, 00, 81, 2C, 24, 95, 00, 00, 00, 53, 8B, 5C, 24, 04, 87, 1C, 24, 87, 2C, 24, 8B, 6D, 00, 83, EC, 24, C7, 44, 24, 20, 4B, 52, 41, 24, C7, 44, 24, 1C, 52, 00, 02, 00, 89, 74, 24, 18, BE, A0, EB, EF, 00, 89, 4C, 24, 14, 89, 74, 24, 20, C1, E9, 00, 33, F6, 8B, 4C, 24, 20, 8B, 09, 33, F1, 83, 44, 24, 20, 04, 66, FF, 4C, 24...
 
[+]

Entropy:
7.8798  (probably packed)

Code size:
10.5 MB (11,010,048 bytes)

Scan gujiandlctools.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.