home

xmactiveconsole.exe

Beijing TorrentSoft Co.,ltd.

Publisher:
Beijing TorrentSoft Co.,ltd.  (signed and verified)

MD5:
cbf85a608ab0aa7440432a3b09e75339

SHA-1:
ba6ac4a1ba3afe5e6fa6f3054dacd5c5ee5bf0dc

SHA-256:
970bdd91e46747a39c98bb8087d3c06c32d2bd897e9e2649652cf63f4412f5dd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 3:46:43 PM UTC  (today)

File size:
313.8 KB (321,344 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\x-mirage\xmactiveconsole.exe

Digital Signature
Signed by:
Beijing TorrentSoft Co.,ltd.

Authority:
Thawte, Inc.

Valid from:
5/29/2014 2:00:00 AM

Valid to:
5/30/2015 1:59:59 AM

Subject:
CN="Beijing TorrentSoft Co.,ltd.", O="Beijing TorrentSoft Co.,ltd.", L=Beijing, S=Bingjing, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7F6DFCCD540557C1E3490344FF00D5D5

File PE Metadata
Compilation timestamp:
4/13/2015 11:33:42 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
6144:AK95/iU3MmD9IIihRzvPM//kDD+tPmY1I0BU2yEhYTQZh+lvr6ezyXRK:DiIQzOM+j9BUkYUWv+esRK

Entry address:
0xBB001

Entry point:
60, E8, 03, 00, 00, 00, E9, EB, 04, 5D, 45, 55, C3, E8, 01, 00, 00, 00, EB, 5D, BB, ED, FF, FF, FF, 03, DD, 81, EB, 00, B0, 0B, 00, 83, BD, 88, 04, 00, 00, 00, 89, 9D, 88, 04, 00, 00, 0F, 85, CB, 03, 00, 00, 8D, 85, 94, 04, 00, 00, 50, FF, 95, A9, 0F, 00, 00, 89, 85, 8C, 04, 00, 00, 8B, F0, 8D, 7D, 51, 57, 56, FF, 95, A5, 0F, 00, 00, AB, B0, 00, AE, 75, FD, 38, 07, 75, EE, 8D, 45, 7A, FF, E0, 56, 69, 72, 74, 75, 61, 6C, 41, 6C, 6C, 6F, 63, 00, 56, 69, 72, 74, 75, 61, 6C, 46, 72, 65, 65, 00, 56, 69, 72, 74...
 
[+]

Entropy:
7.9873

Packer / compiler:
ASPack v2.12

Code size:
509.5 KB (521,728 bytes)

Scan xmactiveconsole.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.