» kmusic_21_1_yc.exe
Overview
Analysis
File Details

kmusic_21_1_yc.exe

百度随心听2.0

Zemi Interactive Co., Ltd.

File name:

kmusic_21_1_yc.exe

Publisher:

Zemi Interactive Co., Ltd. (signed and verified)

Product:

百度随心听2.0

Version:

2.0.0.0

MD5:

e9068ce833be3268bc347e8a58a0d230

SHA-1:

018c1bf1bf416c1ccf0d1daa1fd627f253d28b9b

SHA-256:

56f22a738383f9e3773b99a2d2f2ab09c35845c79700535a67ef3ac2fd671343

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

7/1/2025 5:01:57 AM UTC (today)

File size:

927.5 KB (949,712 bytes)

Product version:

2.0.0.0

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\kmusic_21_1_yc.exe

Digital Signature

Signed by:

Zemi Interactive Co., Ltd.

Authority:

VeriSign, Inc.

Valid from:

7/9/2013 8:00:00 AM

Valid to:

8/9/2014 7:59:59 AM

Subject:

CN="Zemi Interactive Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Zemi Interactive Co., Ltd.", L=SeoChoGu, S=Seoul, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4505E9AC8D288D763A1088ED1E2C8A60

File PE Metadata

Compilation timestamp:

9/13/2015 11:27:18 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

24576:CaJqEm+q3qpUVEBVy/DPXAuwYkAuKAqTbbN3N5n3gqoo:jqP+wGEXDPwYfRLJLgDo

Entry address:

0x26E592

Entry point:

9C, 68, CF, CD, DC, CB, 60, 68, C0, 2C, 3C, 1F, C7, 44, 24, 28, 7D, 01, 2C, B2, E8, 57, 69, F9, FF, C1, 25, EE, 32, E1, 22, 42, C7, B2, AB, 0A, 4B, 9A, CF, FE, EF, D6, F3, A3, A6, 1D, 1E, A4, 5A, A8, 56, 04, 57, 76, 6B, A3, 53, 43, 50, 49, C9, CD, C8, 18, DD, 78, CD, 30, 25, 7D, 6A, EE, C1, 0A, C2, 5D, 92, 66, A8, 27, AA, B5, 4A, B7, C4, 2B, 10, D8, F8, A7, C0, 2A, F2, FA, 5A, 82, 53, 9F, 7C, 53, C1, 74, EB, 0B, 94, B4, 52, 1E, 02, C1, 0F, AD, 85, 13, 0F, BE, B5, DA, 7F, D7, F4, DC, 3D, C5, B2, 6E, 32, 7D... 
[+]

Entropy:

7.9138 (probably packed)

Code size:

1008 KB (1,032,192 bytes)

Scan kmusic_21_1_yc.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.