home

_iu14d2n.tmp

Genxing Lv

Publisher:
Genxing Lv  (signed and verified)

Description:
Setup/Uninstall

Version:
51.1052.0.0

MD5:
6937437803e9894b42ac0b0e35713cb2

SHA-1:
0e769277f61d5a98d4fd8659d0852d2bb56f8d16

SHA-256:
73a23d0e95f67b20a545325dd281c9a164899efc90bd51ed82ddcf940156a684

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 5:40:40 PM UTC  (today)

File size:
1.2 MB (1,272,880 bytes)

Common path:
C:\users\{user}\appdata\local\temp\_iu14d2n.tmp

Digital Signature
Signed by:
Genxing Lv

Authority:
COMODO CA Limited

Valid from:
4/24/2013 8:00:00 AM

Valid to:
4/25/2014 7:59:59 AM

Subject:
CN=Genxing Lv, O=Genxing Lv, STREET=205/74/4 JingAn New Town 1467 CaoBao Rd. MinHang District, L=Shanghai, S=Shanghai, PostalCode=200000, C=CN

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FC50AE61C66FDB9E42C3E542696E06AC

File PE Metadata
Compilation timestamp:
1/30/2013 10:21:57 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:54VN4kkKF3hDXq8xeidJLvkU99kkkkJE58dlX3IiAtp3Nq3E/HoQYx96wS2Yx9ba:CT90guMXEdqwHkUwSrs

Entry address:
0xFF004

Entry point:
55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, E4, CE, 4F, 00, E8, 25, 9F, F0, FF, 6A, EC, A1, 08, 2E, 50, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, B8, AD, F0, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, 08, 2E, 50, 00, 53, E8, 0D, B0, F0, FF, 33, C0, 55, 68, 7F, F0, 4F, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, 60, A7, F0, FF, E8, CF, DB, FF, FF, A1, 1C, CB, 4F, 00, 50, 68, 80, CB, 4F, 00, A1, 08, 2E, 50, 00, 8B, 00, E8, 48, CE, F7, FF, E8, 23, DC, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, 5C, 56, F0, FF...
 
[+]

Entropy:
6.4397

Developed / compiled with:
Microsoft Visual C++

Code size:
1014 KB (1,038,336 bytes)

Scan _iu14d2n.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.