home

XQSCHOOL.EXE

XiangQi School of Witchcraft and Wizardry II

www.elephantbase.net

Publisher:
www.xqbase.com  (signed by www.elephantbase.net)

Product:
XiangQi School of Witchcraft and Wizardry II

Version:
5.00

MD5:
0643f3f3b9c579e27d942d0542555e66

SHA-1:
32acd2301538280a03e56e5a35a69cbf7e4f2b69

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/5/2024 11:24:50 AM UTC  (today)

File size:
830.3 KB (850,232 bytes)

Product version:
5.00

Copyright:
XiangQi School of Witchcraft and Wizardry II 5.0, (C) 2004-2011 www.xqbase.com

Trademarks:
www.xqbase.com

Original file name:
XQSCHOOL.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\xqwizard\xqschool.exe

Digital Signature
Signed by:
www.elephantbase.net

Authority:
www.elephantbase.net

Valid from:
10/1/2006 12:00:00 AM

Valid to:
10/1/2016 12:00:00 AM

Subject:
CN=《象棋巫师》开发团队, E=webmaster@elephantbase.net, O=www.elephantbase.net, C=CN

Issuer:
CN=《象棋百科全书》软件中心, O=www.elephantbase.net, C=CN

Serial number:
4FB456E85D10EA66D51DC63A6D76AFD2

File PE Metadata
Compilation timestamp:
11/9/2011 10:13:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:8YLuzneltBuq+SqwniNAzgtltYqMRbCHPGdmyA46oidzBqBdaVTI5jiC4DJ:KnelTqSqsBSnY9RbCHIVWoTdaC5GRDJ

Entry address:
0x2478

Entry point:
68, E4, 25, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, B6, D8, 72, 4F, F9, A8, 82, 43, 94, 81, 18, 01, DD, 59, BE, 91, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 88, D0, FC, 00, 70, 72, 6A, 58, 51, 53, 63, 68, 6F, 6F, 6C, 00, B4, 97, FD, 00, 00, 00, 00, 00, 01, 00, 0D, 00, 9C, 91, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, 60, 94, 40, 00, 50, 23, 4D, 00, 01, 00, 00, 00, 00, 25, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.2517

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
800 KB (819,200 bytes)

Scan XQSCHOOL.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.