home

ZhiHui.exe

爱情智慧

Beijing Qichuang times Technology Co., Ltd.

Publisher:
aiqingzhihui  (signed by Beijing Qichuang times Technology Co., Ltd.)

Product:
爱情智慧

Version:
1.00

MD5:
b5223eb4a71474d882176e96e2aff430

SHA-1:
cfa00757da4ebe29b30faf6b09c41fd32dab662b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 11:35:16 PM UTC  (a few moments ago)

File size:
276.8 KB (283,432 bytes)

Product version:
1.00

Original file name:
ZhiHui.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (PRC)

Common path:
C:\Program Files\aiqingzhihui\zhihui.exe

Digital Signature
Signed by:
Beijing Qichuang times Technology Co., Ltd.

Authority:
WoSign eCommerce Services Limited

Valid from:
7/1/2013 4:51:44 PM

Valid to:
7/5/2016 1:36:13 AM

Subject:
E=yuyuyouling@163.com, CN="Beijing Qichuang times Technology Co., Ltd.", O="Beijing Qichuang times Technology Co., Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
0A35C508603BC2

File PE Metadata
Compilation timestamp:
9/2/2013 2:34:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:Orry8tgXRx8cJkQtHyOw8m87TDCPBBqY0Ek+N4GXssTrNgkvYZ8O:OriXRmcJ19wKh/WN4GXsSyUYZ8O

Entry address:
0x129C

Entry point:
68, 40, 6C, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 6F, 24, 07, 45, E2, 4A, 4B, 43, 8A, 5D, F5, 61, F5, D2, 1E, 06, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, FD, C2, 77, FD, F9, 49, B0, AE, C7, E9, D6, C7, BB, DB, 00, FF, 69, 59, F8, CA, 31, CD, 00, 00, 00, 00, FF, CC, 31, 00, 1D, 31, 66, 34, 7E, B7, 3E, CF, 4B, B2, E7, C3, 21, A9, 1B, 02, 79, E6, 0D, F3, 58, 3A, 47, D9, 43, 9E, 38, 57, 97, AF, 3D, 52, DD, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
6.0918

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
200 KB (204,800 bytes)

Scan ZhiHui.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.