home

HotKey.EXE

HotKey 应用程序

Siliten Electronics CO.,LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Launch JME-6110’.
Publisher:
Siliten Electronics CO.,LTD  (signed and verified)

Product:
HotKey 应用程序

Description:
HotKey Siliten 基础类应用程序

Version:
3, 9, 0, 225

MD5:
0e558242ffb71614b28ecfe17dd48924

SHA-1:
89feb8a7daa4abde45386e829dedeff0d54ee49e

SHA-256:
3abf6032334330cf1c4af0362616ab08de93500156d5e77e695413945258f4ed

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 1:58:14 AM UTC  (today)

File size:
2.7 MB (2,795,872 bytes)

Product version:
3, 9, 0, 225

Copyright:
版权所有 (C) 2012

Original file name:
HotKey.EXE

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\Program Files\jme-6110 driver\hotkey.exe

Digital Signature
Signed by:
Siliten Electronics CO.,LTD

Authority:
VeriSign, Inc.

Valid from:
12/5/2011 12:00:00 AM

Valid to:
12/4/2012 11:59:59 PM

Subject:
CN="Siliten Electronics CO.,LTD", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Siliten Electronics CO.,LTD", L=Dongguan, S=Guangdong, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
00C4F185EC385FD2F9CA2E11196FB574

File PE Metadata
Compilation timestamp:
7/12/2012 3:46:42 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:snMXUAW7BRKsG/F89gygtnN9EY2/LcSbog0bqUDFcsqfE8F+J+7RTFaNADDy2iTi:ozb7BRQ/69g5nNX2/LcSbog0bqUDFcsM

Entry address:
0x1A6A68

Entry point:
E8, B9, AB, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, FF, 75, 08, 51, E8, B1, AC, 00, 00, 59, 59, 5D, C2, 04, 00, 8B, FF, 51, C7, 01, 88, 04, 63, 00, E8, 2D, AC, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, 72, E8, E5, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, FF, 75, 08, 51, E8, 01, AE, 00, 00, 59, 59, 5D, C2, 04, 00, 8B, FF, 51, E8, 50, AD, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 46, AF...
 
[+]

Code size:
2 MB (2,057,728 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Launch JME-6110

Command:
C:\Program Files\jme-6110 driver\hotkey.exe


Scan HotKey.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.