home

XQARENA.EXE

XiangQi Arena

Shanghai Xianqu Info-Tech Co., Ltd.

Publisher:
www.xqbase.com  (signed by Shanghai Xianqu Info-Tech Co., Ltd.)

Product:
XiangQi Arena

Version:
5.40

MD5:
c944d5b88224ffe207c0012a2f24189d

SHA-1:
ec3a78486fa3040a6a16565e855caf62e31056e6

SHA-256:
9661cdbaa9f1967543a16bd0b3b7a47f2154825a31a858dea5a4026d258139b2

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/27/2024 5:17:43 PM UTC  (today)

Scan engine
Detection
Engine version

Norman
Obfuscated.P!genr
11.20141031

Vba32 AntiVirus
BScope.Trojan.Diple
3.12.24.3

File size:
1.2 MB (1,220,816 bytes)

Product version:
5.40

Copyright:
XiangQi Arena 5.4, (C) 2004-2013 www.xqbase.com

Trademarks:
www.xqbase.com

Original file name:
XQARENA.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\xqwizard\xqarena.exe

Digital Signature
Signed by:
Shanghai Xianqu Info-Tech Co., Ltd.

Authority:
COMODO CA Limited

Valid from:
12/17/2013 8:00:00 AM

Valid to:
12/18/2014 7:59:59 AM

Subject:
CN="Shanghai Xianqu Info-Tech Co., Ltd.", O="Shanghai Xianqu Info-Tech Co., Ltd.", STREET="Room 107, Building 1, Sub-Lane 88,", STREET="Lane 3509, South Hongmei Road", L=Minhang, S=Shanghai, PostalCode=201108, C=CN

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00AB1111E985161DDC34C713C99C026C1D

File PE Metadata
Compilation timestamp:
12/17/2013 11:33:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:uzWGJUuoJ+fsfjSxtT8akA+w7Ze5unlnCsEH3a+S2eL9:AlfB7T8sl7A5unlDKu9

Entry address:
0x2CA0

Entry point:
68, C8, 2D, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 33, C9, C5, F0, DF, EA, 94, 46, B8, 4F, 3F, F4, B0, A3, 16, BC, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 05, 08, 07, 07, 07, 09, 70, 72, 6A, 58, 51, 41, 72, 65, 6E, 61, 00, 12, 13, 0F, 14, 1D, 00, 00, 00, 00, 01, 00, 04, 00, 00, D0, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, 14, D1, 40, 00, D0, 40, 51, 00, 00, 00, 00, 00, D0, A1, 1C, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.3720

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
1.1 MB (1,126,400 bytes)

Scan XQARENA.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.