» shanxun.EXE
Overview
Analysis
File Details

shanxun.EXE

shanxun 界面程序

杭州雷龙网络技术有限公司

File name:

shanxun.EXE

Publisher:

LEILONG (signed by 杭州雷龙网络技术有限公司)

Product:

shanxun 界面程序

Version:

1, 2, 20, 32

MD5:

cd4ca63d8a598eb0a02d6654f36c4656

SHA-1:

8921ac6adfca754c93cf115dbad5a942734ae18a

SHA-256:

0e4faf4dcea1bf4505eb3c23f55ce1e0256ceb1fd162d86bf8b1923692b333df

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/2/2026 10:15:15 AM UTC (today)

File size:

958.3 KB (981,296 bytes)

Product version:

1, 2, 20, 32

Original file name:

shanxun.EXE

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

杭州雷龙网络技术有限公司

Authority:

VeriSign, Inc.

Valid from:

3/9/2015 8:00:00 AM

Valid to:

5/8/2016 7:59:59 AM

Subject:

CN=杭州雷龙网络技术有限公司, OU=技术部, O=杭州雷龙网络技术有限公司, L=杭州, S=浙江, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

1EDCDCEC66FFDF521191D6395C95FA7A

File PE Metadata

Compilation timestamp:

10/22/2015 10:53:35 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

24576:ZPxaLz0BfEm2BSaVlaDC0gz/+MXeOm8Nh99u999UK0hEf9dlz:ZPmYEnBSaVycz+MXvm8N8z

Entry address:

0x1645F0

Entry point:

E9, AE, 90, 0C, 00, D4, F3, 63, BD, 31, 0B, EC, B8, C0, AE, 8C, DC, 22, 98, 89, 49, 04, 07, 7B, C5, 39, 33, BF, 81, D8, 33, A3, 9D, D1, 6B, D3, 4D, BE, 6C, E2, 4E, FC, 40, AA, 58, 7F, D3, CE, D0, 47, 39, BE, B5, F4, 5B, 4F, 9B, 95, 6F, ED, 9C, 32, 06, 4E, 53, 70, 97, 2E, A4, 16, 1A, 17, 0E, 08, 36, E3, 9D, E9, A8, 85, 0C, 76, B4, E5, 51, E5, A2, B3, 4B, D5, F4, 0D, 81, AC, 48, 4D, 09, FB, D8, 32, 36, 03, 13, D0, 8F, 78, 1A, A0, 2E, 12, 13, 57, 51, C2, 28, 7D, 42, A8, B1, C9, 9E, F4, FC, 5D, 56, AC, DE, 07... 
[+]

Entropy:

7.8902

Packer / compiler:

Xtreme-Protector v1.05

Code size:

868 KB (888,832 bytes)

Scan shanxun.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.