home

screener_plugin.exe

Screener

Beijing Shengjing Wanwei Technology Co.,Ltd

Publisher:
Phoenix Studio  (signed by Beijing Shengjing Wanwei Technology Co.,Ltd)

Product:
Screener

Version:
1, 0, 0, 2

MD5:
58109f3dca743f8c47c43ca0687fa2f0

SHA-1:
b178e5cd8f771d52f9ffeec61f767a658011db99

SHA-256:
196023ec0f639d26a4020ff547887680539809ed429396f19a1745a21aa752b8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 3:05:42 AM UTC  (today)

File size:
101.6 KB (104,016 bytes)

Product version:
1, 0, 0, 2

Copyright:
Copyright 2008

Original file name:
screener.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\screener_plugin.exe

Digital Signature
Signed by:
Beijing Shengjing Wanwei Technology Co.,Ltd

Authority:
WoSign, Inc.

Valid from:
7/11/2008 6:00:00 AM

Valid to:
7/12/2009 5:59:59 AM

Subject:
CN=PhoenixStudio.org, OU=Class 3 - for Microsoft Authenticode Signing, O="Beijing Shengjing Wanwei Technology Co.,Ltd", L=Beijing, S=Beijing, C=CN

Issuer:
CN=WoSign Code Signing Authority, O="WoSign, Inc.", C=US

Serial number:
5CD0CE76AD95EE777941CB5B5EC2A8C9

File PE Metadata
Compilation timestamp:
9/3/2008 12:15:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:Qbnp2KE8oPsgN8fitpirBPZxMLleMz4LCS:Qp2v2jitpirFsGL

Entry address:
0x6268

Entry point:
55, 8B, EC, 6A, FF, 68, 60, D4, 40, 00, 68, 9C, A5, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, FC, D0, 40, 00, 33, D2, 8A, D4, 89, 15, 8C, 29, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 88, 29, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 84, 29, 41, 00, C1, E8, 10, A3, 80, 29, 41, 00, 33, F6, 56, E8, B3, 15, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 59, 2D, 00, 00, FF, 15, 00, D1, 40, 00, A3, 9C, 3F, 41, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
48 KB (49,152 bytes)

Scan screener_plugin.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.