» shanxun.EXE
Overview
Analysis
File Details

shanxun.EXE

shanxun 界面程序

杭州雷龙网络技术有限公司

File name:

shanxun.EXE

Publisher:

LEILONG (signed by 杭州雷龙网络技术有限公司)

Product:

shanxun 界面程序

Version:

1, 2, 17, 26

MD5:

9a7ff59c0161d70cdf1b02e961979a08

SHA-1:

c76ace0cd6d414ed23019a0d837e122b5a24a3d6

SHA-256:

633a7c7e20202c558b49ee2a8aaf245bbf71d1b8b262de84dbc743bf42faaac7

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/2/2026 10:15:16 AM UTC (today)

File size:

982.3 KB (1,005,872 bytes)

Product version:

1, 2, 17, 26

Original file name:

shanxun.EXE

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

杭州雷龙网络技术有限公司

Authority:

VeriSign, Inc.

Valid from:

3/9/2015 8:00:00 AM

Valid to:

5/8/2016 7:59:59 AM

Subject:

CN=杭州雷龙网络技术有限公司, OU=技术部, O=杭州雷龙网络技术有限公司, L=杭州, S=浙江, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

1EDCDCEC66FFDF521191D6395C95FA7A

File PE Metadata

Compilation timestamp:

4/17/2015 11:27:47 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

24576:2FdT9REIkL+8q1a/4zIBFFt9Wel5nhk1e6YUTnn7mCw:2rT9Ryi8D4zOF39Wel81HTfw

Entry address:

0x221203

Entry point:

E8, 36, B9, F4, FF, 6A, 73, 6F, 6E, 63, 70, 70, 5F, 6D, 64, 2E, 64, 6C, 6C, 00, 0B, 45, 71, F2, 06, 4E, 1B, 5D, AC, BA, A0, 39, 76, 93, 2C, 6A, 08, 81, 42, 7C, 57, C1, FA, 7F, A4, B1, 26, 38, 83, D5, 26, 4B, 74, A1, D1, B5, F7, 40, 60, 80, 7C, E7, D4, 32, B5, B3, C1, 26, B3, 06, F0, 69, 89, EC, B1, ED, 35, 3E, BF, A2, 5A, B3, 6A, 44, EA, 7D, 8E, 22, 46, 59, 21, FD, 14, CB, 4F, E4, 02, AE, 26, BB, 2B, EA, 8F, DA, F1, 28, D0, AC, AA, F6, 12, 9B, 87, 4C, 59, B7, 85, 33, 8D, 76, 88, 81, FA, B7, 42, 50, FC, A3... 
[+]

Entropy:

7.9098 (probably packed)

Code size:

868 KB (888,832 bytes)

Scan shanxun.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.