home

ray_v1.0.0.2.exe

RayDld

Hefei Infinity Technology Co., Ltd.

The application ray_v1.0.0.2.exe by Hefei Infinity Technology Co. has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Ray  (signed by Hefei Infinity Technology Co., Ltd.)

Product:
RayDld

Description:
Ray

Version:
1.0.0.2

MD5:
bffe9ebebe67f03cb647b81cfe73b5d1

SHA-1:
737f88b9bf5ec78a9418c9aec486ef00a6c3bbd1

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/15/2025 7:58:59 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ELEX.HefeiInf (M)
16.6.5.9

File size:
846.2 KB (866,535 bytes)

Copyright:
Copyroght (c) 2011-2014 Ray system

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\ray_v1.0.0.2.exe

Digital Signature
Signed by:
Hefei Infinity Technology Co., Ltd.

Authority:
thawte, Inc.

Valid from:
9/28/2015 5:00:00 PM

Valid to:
8/31/2016 4:59:59 PM

Subject:
CN="Hefei Infinity Technology Co., Ltd.", O="Hefei Infinity Technology Co., Ltd.", L=Hefei, S=Anhui, C=CN

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
300B8DF52728E5C080604873046BBC0F

File PE Metadata
Compilation timestamp:
3/21/2010 5:59:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:OyDHdyohtZQydLs3fVfP0tjGEpsUizTX+:JdNhHQsLWdktjGEpspvO

Entry address:
0x114A

Entry point:
BB, 59, A1, AC, DA, 93, E9, 20, 01, 00, 00, 65, 0B, 6E, 6A, 16, 9A, 6E, 6A, 66, C3, F8, EE, EE, 6E, EE, EE, 5A, EE, EE, EE, 4D, 1F, 24, 1F, 1E, 1F, 27, 25, 24, EE, EE, EE, 62, 4F, 68, 53, 50, 4F, 5B, 4F, 1C, 52, 5A, 5A, EE, EE, EE, EE, 4A, EE, EE, EE, 34, 60, 53, 53, 3A, 57, 50, 60, 4F, 60, 67, EE, 31, 60, 53, 4F, 62, 53, 32, 57, 60, 53, 51, 62, 5D, 60, 67, 2F, EE, EE, EE, EE, 35, 53, 62, 45, 57, 5C, 52, 5D, 65, 61, 32, 57, 60, 53, 51, 62, 5D, 60, 67, 2F, EE, EE, EE, EE, 35, 53, 62, 3B, 5D, 52, 63, 5A, 53...
 
[+]

Entropy:
7.8165  (probably packed)

Code size:
62 KB (63,488 bytes)

Remove ray_v1.0.0.2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.