home

wyyxkfb.exe

Chenzhou Qixiao Network Technology Co.,Ltd.

The executable wyyxkfb.exe has been detected as malware by 7 anti-virus scanners.
Publisher:
Chenzhou Qixiao Network Technology Co.,Ltd.  (signed and verified)

MD5:
b10a961ccaa4be19ab2bb6b8c7d2d26f

SHA-1:
d5f3cdb5fa1d8e14061e6a4d4850ca1414bff9a9

SHA-256:
a15fed8c0cdc2764d8d2a26e129eee49f23ce9d40fca025b14508a0a87619274

Scanner detections:
7 / 68

Status:
Malware

Analysis date:
4/26/2024 7:27:30 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.PWS.LDPinch
7.1.1

Avira AntiVirus
TR/ATRAPS.Gen2
7.11.169.68

Dr.Web
Trojan.PWS.LDPinch.12210
9.0.1.0269

IKARUS anti.virus
Trojan.ATRAPS
t3scan.1.7.5.0

McAfee
Artemis!B10A961CCAA4
5600.6996

NANO AntiVirus
Trojan.Win32.LDPinch.cvaxgt
0.28.2.61861

Trend Micro House Call
Suspicious_GEN.F47V0704
7.2.269

File size:
125.4 KB (128,376 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\juxia\wyyxkfb.exe

Digital Signature
Signed by:
Chenzhou Qixiao Network Technology Co.,Ltd.

Authority:
WoSign eCommerce Services Limited

Valid from:
11/30/2012 10:54:33 AM

Valid to:
12/4/2015 4:07:38 AM

Subject:
E=rian35648@163.com, CN="Chenzhou Qixiao Network Technology Co.,Ltd.", O="Chenzhou Qixiao Network Technology Co.,Ltd.", L=Chenzhou, S=Hunan, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
016EAB732789E1

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3072:TPA7xPA7fhJ3ou9D2T3+OPwmaG1ppxTy6X:+2jNabKSpl

Entry address:
0x124A8

Entry point:
55, 8B, EC, B9, 29, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, 56, B8, 08, 24, 41, 00, E8, 21, 2E, FF, FF, 33, C0, 55, 68, 7A, 27, 41, 00, 64, FF, 30, 64, 89, 20, 6A, 00, E8, 98, EC, FF, FF, B8, 04, 01, 00, 00, E8, 32, 3D, FF, FF, A3, 74, 48, 41, 00, B8, 04, 01, 00, 00, E8, 23, 3D, FF, FF, A3, 78, 48, 41, 00, 33, C0, 55, 68, 30, 27, 41, 00, 64, FF, 30, 64, 89, 20, 68, 7C, 48, 41, 00, 6A, 1A, 6A, 00, E8, E2, FC, FF, FF, A1, 78, 48, 41, 00, 50, A1, 7C, 48, 41, 00, 50, E8, C9, FC, FF, FF, 8D, 55, EC, A1, 78...
 
[+]

Entropy:
6.1178

Developed / compiled with:
Microsoft Visual C++

Code size:
70.5 KB (72,192 bytes)

Remove wyyxkfb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.