home

k8rtlfix.exe

快吧游戏管理器

南京凡游网络技术有限公司

Publisher:
凡游网络  (signed by 南京凡游网络技术有限公司)

Product:
快吧游戏管理器

Description:
快吧游戏运行库修复工具

Version:
3.1.1.6271

MD5:
e4374d86a2342818cba0108e474e87a4

SHA-1:
620469247e21182085c2d331451f4f795af8e4f4

SHA-256:
ce8f91fe11bbe94e0523c753c82636960c6441cacc2d80fdda62a4decefb96a7

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/20/2024 12:11:24 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.3156

Rising Antivirus
PE:PUF.GMUnpackerInstaller!1.9C4F
23.00.65.15326

Trend Micro House Call
Suspicious_GEN.F47V0317
7.2.87

File size:
462.6 KB (473,696 bytes)

Product version:
3.1

Copyright:
版权所有(c) 2013 凡游网络

Original file name:
GMRunTime.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\kuai8\tool\k8rtlfix.exe

Digital Signature
Signed by:
南京凡游网络技术有限公司

Authority:
WoSign CA Limited

Valid from:
3/17/2014 5:30:26 PM

Valid to:
3/16/2016 5:30:26 PM

Subject:
CN=南京凡游网络技术有限公司, E=pujc@kuai8.com, O=南京凡游网络技术有限公司, L=南京市, S=江苏省, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
22DD36852F4742969DFC4CAB5050274F

File PE Metadata
Compilation timestamp:
3/16/2015 6:05:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:nAif1Lp4ar26T+Z/QLO/ysOeFTgEavOJEcHi7GWHeu:nHf1tvrj+Z/QqrTNuOGcHi7Gu

Entry address:
0x25F93

Entry point:
E8, BC, 03, 00, 00, E9, 36, FD, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 78, 2E, 44, 00, 89, 0D, 74, 2E, 44, 00, 89, 15, 70, 2E, 44, 00, 89, 1D, 6C, 2E, 44, 00, 89, 35, 68, 2E, 44, 00, 89, 3D, 64, 2E, 44, 00, 66, 8C, 15, 90, 2E, 44, 00, 66, 8C, 0D, 84, 2E, 44, 00, 66, 8C, 1D, 60, 2E, 44, 00, 66, 8C, 05, 5C, 2E, 44, 00, 66, 8C, 25, 58, 2E, 44, 00, 66, 8C, 2D, 54, 2E, 44, 00, 9C, 8F, 05, 88, 2E, 44, 00, 8B, 45, 00, A3, 7C, 2E, 44, 00, 8B, 45, 04, A3, 80, 2E, 44, 00, 8D, 45, 08, A3, 8C, 2E, 44, 00, 8B...
 
[+]

Entropy:
6.8750

Code size:
168 KB (172,032 bytes)

Scan k8rtlfix.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.