home

zhihui1.6.exe

爱情智慧

Beijing Qichuang times Technology Co., Ltd.

Publisher:
aiqingzhihui  (signed by Beijing Qichuang times Technology Co., Ltd.)

Product:
爱情智慧

Version:
1.00

MD5:
9d1d5f52f7db2abb404f4c2b8ababcca

SHA-1:
b17e271f4fce0e2a918426f96e08774ea16a1587

SHA-256:
b078d27f8a2ca4dd7ec125cee2bccdbdd9b67dde09cd69c3b4350dd1434468a2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:56:09 PM UTC  (today)

File size:
256.8 KB (262,952 bytes)

Product version:
1.00

Original file name:
ZhiHui06111.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\aqzh1.6\zhihui1.6.exe

Digital Signature
Signed by:
Beijing Qichuang times Technology Co., Ltd.

Authority:
WoSign eCommerce Services Limited

Valid from:
7/1/2013 5:51:44 PM

Valid to:
7/5/2016 2:36:13 AM

Subject:
E=yuyuyouling@163.com, CN="Beijing Qichuang times Technology Co., Ltd.", O="Beijing Qichuang times Technology Co., Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
0A35C508603BC2

File PE Metadata
Compilation timestamp:
11/26/2013 12:21:04 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:cSrAf1sLGFYyPMwjIHyew8m87TDCD0iJSUE6dWzVXDMqS5IrJ:cSkfmL4Y2TCFwKa33pd+N

Entry address:
0x1274

Entry point:
68, 74, CE, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 05, 00, 94, A3, 50, 61, 49, 45, B6, 3E, B6, A3, 15, 31, FD, 1A, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, A8, 25, 00, 00, AE, 05, B0, AE, C7, E9, D6, C7, BB, DB, 00, 00, A8, 10, 00, 00, 56, 2B, 00, 00, 00, 00, FF, CC, 31, 00, 2D, D9, 68, 63, 62, 71, F2, 5B, 45, BF, 2A, A0, 40, A2, A1, 44, 22, 52, 36, 60, 0C, 81, 02, 3D, 45, BE, 41, A7, 3E, D2, 6D, 2B, BC, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
6.0540

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
224 KB (229,376 bytes)

Scan zhihui1.6.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.