home

gujiandlctools.exe

《古剑奇谭》内容管理器

Beijing Gamebar Entertainment Co.,Ltd.

Publisher:
GameBar.com  (signed by Beijing Gamebar Entertainment Co.,Ltd.)

Product:
《古剑奇谭》内容管理器

Version:
1.0.0.1

MD5:
3d0ff8c22c1ffa21c440415cb697e6a6

SHA-1:
da381f8f7eac29c37f3a05bb2a729518154e85ee

SHA-256:
8ddaf3cf359c7a5d9a8cd67456004bb88bc6d2a63431396e6796906dd586035f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 2:48:44 AM UTC  (today)

File size:
10.1 MB (10,635,544 bytes)

Product version:
1.0.0.1

Copyright:
?2009 gamebar Inc.

Original file name:
JuQingManage.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\aurogon\gujian\bin\gujiandlctools.exe

Digital Signature
Signed by:
Beijing Gamebar Entertainment Co.,Ltd.

Authority:
WoSign, Inc.

Valid from:
6/22/2010 8:00:00 AM

Valid to:
6/23/2011 7:59:59 AM

Subject:
CN="Beijing Gamebar Entertainment Co.,Ltd.", OU=WoSign Class 3 Code Signing, O="Beijing Gamebar Entertainment Co.,Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=WoSign Code Signing Authority, O="WoSign, Inc.", C=US

Serial number:
009085F536DEAB29FD7C4CC6CB0B5FD030

File PE Metadata
Compilation timestamp:
12/21/2010 8:31:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:GiiXNZJYvjvNaZfGw1b69D+3azGvhsAO3+WF4N6S05whV2eHg:QvJJZew1bQ+3nebF4N6S05why

Entry address:
0xB37BB0

Entry point:
B8, 8B, FE, FF, FF, 8B, 84, 04, 75, 01, 00, 00, A3, A8, 27, 28, 01, 89, 25, AC, 27, 28, 01, E8, 07, 00, 00, 00, 2C, 42, 4B, F3, 00, BC, 64, 81, 04, 24, 96, 00, 00, 00, FF, 34, 24, F8, 83, D3, 00, 81, 2C, 24, 95, 00, 00, 00, 53, 8B, 5C, 24, 04, 87, 1C, 24, 87, 2C, 24, 8B, 6D, 00, 83, EC, 24, C7, 44, 24, 20, DF, 86, D5, 99, C7, 44, 24, 1C, 52, 00, 02, 00, 89, 74, 24, 18, BE, A0, 7B, F3, 00, 89, 4C, 24, 14, 89, 74, 24, 20, C1, E9, 00, 33, F6, 8B, 4C, 24, 20, 8B, 09, 33, F1, 83, 44, 24, 20, 04, 66, FF, 4C, 24...
 
[+]

Entropy:
7.8906  (probably packed)

Code size:
10.4 MB (10,891,264 bytes)

Scan gujiandlctools.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.