home

tewlanrt.exe

SHENZHEN JIXIANG TENDA TECHNOLOGY CO.,LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TeWlanRt’.
Publisher:
SHENZHEN JIXIANG TENDA TECHNOLOGY CO.,LTD  (signed and verified)

Version:
0.12.0.14

MD5:
0a1dd2b18672e7366c6fc3832fa2087c

SHA-1:
0f941b26ee36fd9184072399f523b4bebfd2942f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 2:54:25 PM UTC  (today)

File size:
2 MB (2,044,760 bytes)

Product version:
0.12.0.14

Original file name:
Application.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\tenda\tewlanrt\tewlanrt.exe

Digital Signature
Signed by:
SHENZHEN JIXIANG TENDA TECHNOLOGY CO.,LTD

Authority:
VeriSign, Inc.

Valid from:
10/22/2013 8:00:00 AM

Valid to:
11/21/2016 7:59:59 AM

Subject:
CN="SHENZHEN JIXIANG TENDA TECHNOLOGY CO.,LTD", OU=R&D CENTER, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="SHENZHEN JIXIANG TENDA TECHNOLOGY CO.,LTD", L=SHENZHEN, S=GUANGDONG, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4C20F6F9D5B15F4A5497C7438C7EDF3F

File PE Metadata
Compilation timestamp:
5/25/2016 5:34:32 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x13BFB0

Entry point:
E8, FB, 7B, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, B0, 15, 5C, 00, 75, 02, F3, C3, E9, 7D, 7C, 00, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 14, 75, 20, E8, 3D, 28, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, A7, 11, 00, 00, 83, C4, 14, 83, C8, FF, E9, C5, 00, 00, 00, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 3B, FB, 74, 24, 3B, F3, 75, 20, E8, 0D, 28, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 77, 11, 00, 00, 83, C4, 14, 83, C8, FF, E9, 93, 00, 00, 00, C7, 45, EC, 42, 00, 00, 00...
 
[+]

Entropy:
6.4704

Code size:
1.4 MB (1,482,752 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TeWlanRt

Command:
"C:\Program Files1\tenda\tewlanrt\tewlanrt.exe" hide


Scan tewlanrt.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.