home

kanyouxi.exe

Beijing Ruidongtiandi Info.Tech.Co.,Ltd.

Publisher:
Beijing Ruidongtiandi Info.Tech.Co.,Ltd.  (signed and verified)

Version:
1.0.0.0

MD5:
18594b9742d60dc15c08e57dbc0a2189

SHA-1:
9a557e88aaec9089533f8d8e1a7650bcaee001ee

SHA-256:
323302ab3e13bfd641f85c4f8047458c8a374f5a00700e4fbbe88752c496ee60

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:19:55 AM UTC  (today)

File size:
3 MB (3,194,136 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\Program Files\????\?????? 8.0\kanyouxi\kanyouxi.exe

Digital Signature
Signed by:
Beijing Ruidongtiandi Info.Tech.Co.,Ltd.

Authority:
WoSign eCommerce Services Limited

Valid from:
10/16/2012 11:05:31 AM

Valid to:
10/19/2014 6:57:03 AM

Subject:
E=xiamy@bj-rd.com, CN="Beijing Ruidongtiandi Info.Tech.Co.,Ltd.", O="Beijing Ruidongtiandi Info.Tech.Co.,Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
0BC1146F8CE218

File PE Metadata
Compilation timestamp:
8/9/2013 5:24:47 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:8oOsLaWy8vX2pyCgbjN8pD101v3XcP5pTFO3lAH2Cx9OrCkEN/H:8GWWpvKyCgN6OaH2C1

Entry address:
0x1A142C

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 6C, EA, 59, 00, E8, 7F, 7B, E6, FF, 68, 18, 16, 5A, 00, 6A, FF, 6A, 00, E8, 4D, 80, E6, FF, 8B, D8, E8, 7E, 81, E6, FF, 3D, B7, 00, 00, 00, 0F, 84, AF, 01, 00, 00, A1, F4, A3, 5A, 00, 8B, 00, E8, 77, C9, F0, FF, A1, F4, A3, 5A, 00, 8B, 00, B2, 01, E8, DD, E4, F0, FF, 8B, 0D, F4, A7, 5A, 00, 8B, 09, B2, 01, A1, A0, C1, 54, 00, E8, 29, 2A, F0, FF, 8B, 15, F4, A7, 5A, 00, 89, 02, 8B, 0D, DC, 9B, 5A, 00, 8B, 09, B2, 01, A1, EC, 34, 55, 00, E8, 0D, 2A, F0, FF, 8B, 15, DC, 9B, 5A...
 
[+]

Entropy:
7.0152

Developed / compiled with:
Microsoft Visual C++

Code size:
1.6 MB (1,702,400 bytes)

Scan kanyouxi.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.