home

netkeeper.exe

闪讯1.1

Xi'an Xinli Software Technology Co.,Ltd.

Publisher:
XI AN XINLI SOFTWARE TECHNOLOGY CO.,LTD  (signed by Xi'an Xinli Software Technology Co.,Ltd.)

Product:
闪讯1.1

Description:
DialTerminal Microsoft 基础类应用程序

Version:
0, 1, 8, 1

MD5:
1812779ec6d950c0340ea3781da45e23

SHA-1:
b8e69ce2b66faca4a190f21f42cce6ca2b0b7b8d

SHA-256:
9bf7fefff0d505653acc96d97cd511bb503e3f008dad3bbc3110dea296e3d86d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:10:37 PM UTC  (today)

File size:
10.2 MB (10,665,632 bytes)

Product version:
1, 1, 8, 1

Copyright:
版权所有 (C) 2008 - 2013

Original file name:
DialTerminal.EXE

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Xi'an Xinli Software Technology Co.,Ltd.

Authority:
VeriSign, Inc.

Valid from:
3/5/2013 8:00:00 AM

Valid to:
3/18/2014 7:59:59 AM

Subject:
CN="Xi'an Xinli Software Technology Co.,Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Xi'an Xinli Software Technology Co.,Ltd.", L=Xi'an, S=Shaanxi, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6A2E339A4DDE0EA8DAA823A4BA7E3297

File PE Metadata
Compilation timestamp:
10/31/2013 6:30:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:8Hx+cQJqycDmWoQh/mxfWBG6DfNnY0zbz7ybNq67dNO5Vi:8R53DN/mtN6LC0HzOI6Noi

Entry address:
0xAFBD87

Entry point:
E9, 18, EC, 95, 00, A8, 60, 20, BD, 27, B0, 76, 44, C2, 88, 91, FE, 95, 80, D9, F2, 27, B0, 57, 62, F0, 79, 73, C0, A8, 80, CA, BC, 27, B0, 7C, A4, 58, A6, 09, A6, A8, E0, E9, B5, 27, B0, 5C, BD, 6B, D3, BD, 34, 95, C0, 9B, F6, 27, B0, 76, 43, 66, 5F, A8, 75, 95, 40, 8A, F6, 27, B0, 76, 43, 7C, 9B, 23, 6D, A7, 00, 2D, 52, 27, B0, 4F, BA, 5B, BF, 34, 36, A8, 20, 64, BD, 27, B0, 7B, D9, CA, DA, 49, A0, 94, C0, FF, 79, 27, B0, 2A, 0A, 86, 5C, 16, 17, A8, E0, BF, BD, 27, B0, 76, 16, 36, 9D, 53, 96, A7, 40, E7...
 
[+]

Entropy:
7.8406

Packer / compiler:
Xtreme-Protector v1.05

Code size:
1.3 MB (1,368,064 bytes)

Scan netkeeper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.