home

lame.exe

NaTeTianCheng Technolgy Co., Ltd

Publisher:
NaTeTianCheng Technolgy Co., Ltd  (signed and verified)

MD5:
96e6493d0f2d4ce5da4244fbd7efd5d4

SHA-1:
eb5ba8a08459659cbaaf75e4d5b24745cc2cf0d3

SHA-256:
5ecbac119c55d6abd2b634291607a0fe60280ba8fbfc8a37d635923aaa7796d8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 5:05:51 PM UTC  (today)

File size:
462.8 KB (473,928 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\haier\u-school\files\亲子乐园\音乐之星\music\lame.exe

Digital Signature
Signed by:
NaTeTianCheng Technolgy Co., Ltd

Authority:
WoSign, Inc.

Valid from:
2/24/2010 2:00:00 AM

Valid to:
2/25/2011 1:59:59 AM

Subject:
CN="NaTeTianCheng Technolgy Co., Ltd", OU=Class 3 - for Microsoft Authenticode Signing, O="NaTeTianCheng Technolgy Co., Ltd", L=ShenZhen, S=GuangDong, C=CN

Issuer:
CN=WoSign Code Signing Authority, O="WoSign, Inc.", C=US

Serial number:
33E3C2EBC5DF02254A311880EC9F15EA

File PE Metadata
Compilation timestamp:
5/13/2010 4:21:51 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
12288:iMZXjZ0vYQP6SPRUeTie3QDh3hWsPkPa/UnV2w:iMZXjZ0vYQiwz6/Unj

Entry address:
0x5A6F

Entry point:
E8, 9C, BA, 00, 00, E9, A4, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, 83, 3D, 18, 5C, 49, 00, 00, 0F, 84, 82, 00, 00, 00, 83, EC, 08, 0F, AE, 5C, 24, 04, 8B, 44, 24, 04, 25, 80, 1F, 00, 00, 3D, 80, 1F, 00, 00, 75, 0F, D9, 3C, 24, 66, 8B, 04, 24, 66, 83, E0, 7F, 66, 83, F8, 7F, 8D, 64, 24, 08, 75, 55, E9, 19, BB, 00, 00, 90, 83, 3D, 18, 5C, 49, 00, 00, 74, 32, 83, EC, 08, 0F, AE, 5C, 24, 04, 8B, 44, 24, 04, 25, 80, 1F, 00, 00, 3D, 80, 1F, 00, 00, 75, 0F, D9, 3C, 24, 66, 8B, 04, 24, 66, 83, E0, 7F, 66, 83, F8...
 
[+]

Entropy:
6.6272

Code size:
341 KB (349,184 bytes)

Scan lame.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.