home

tewlanrt.exe

SHENZHEN JIXIANG TENDA TECHNOLOGY CO.,LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TeWlanRt’.
Publisher:
SHENZHEN JIXIANG TENDA TECHNOLOGY CO.,LTD  (signed and verified)

Version:
0.12.0.13

MD5:
fdbe3f84386250aef9d9c4cec09554c3

SHA-1:
5d2357044f47328169782e6ba3fe898f33319e6f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 7:33:54 PM UTC  (today)

File size:
1.9 MB (2,043,736 bytes)

Product version:
0.12.0.13

Original file name:
Application.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\tenda\tewlanrt\tewlanrt.exe

Digital Signature
Signed by:
SHENZHEN JIXIANG TENDA TECHNOLOGY CO.,LTD

Authority:
VeriSign, Inc.

Valid from:
10/22/2013 2:00:00 AM

Valid to:
11/21/2016 1:59:59 AM

Subject:
CN="SHENZHEN JIXIANG TENDA TECHNOLOGY CO.,LTD", OU=R&D CENTER, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="SHENZHEN JIXIANG TENDA TECHNOLOGY CO.,LTD", L=SHENZHEN, S=GUANGDONG, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4C20F6F9D5B15F4A5497C7438C7EDF3F

File PE Metadata
Compilation timestamp:
3/24/2016 1:34:49 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:tnhh1+LuolOcPPaMKVSZg0ovQhS0pb1XhK8/fwy30QCrJ:nKrdqMGSZg0ovQo0vXhN/fje

Entry address:
0x13BC7F

Entry point:
E8, FD, 7B, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, B0, 15, 5C, 00, 75, 02, F3, C3, E9, 7F, 7C, 00, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 14, 75, 20, E8, 3E, 28, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, A8, 11, 00, 00, 83, C4, 14, 83, C8, FF, E9, C5, 00, 00, 00, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 3B, FB, 74, 24, 3B, F3, 75, 20, E8, 0E, 28, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 78, 11, 00, 00, 83, C4, 14, 83, C8, FF, E9, 93, 00, 00, 00, C7, 45, EC, 42, 00, 00, 00...
 
[+]

Entropy:
6.4669

Code size:
1.4 MB (1,481,728 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TeWlanRt

Command:
C:\Program Files1\tenda\tewlanrt\tewlanrt.exe


Scan tewlanrt.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.