home

12306.exe

成都海宇通电气自动化工程有限公司

Publisher:
成都海宇通电气自动化工程有限公司  (signed and verified)

MD5:
a842ede0994b232d3ca3ac9ae87d88ca

SHA-1:
ae9edacab28b239b19b20d32010f1dc28e5e1292

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:21:58 PM UTC  (today)

File size:
499.1 KB (511,096 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\12306火车票订购工具\12306.exe

Digital Signature
Signed by:
成都海宇通电气自动化工程有限公司

Authority:
WoSign eCommerce Services Limited

Valid from:
1/8/2013 5:46:36 AM

Valid to:
3/12/2014 3:03:59 AM

Subject:
E=haiyutong@foxmail.com, CN=成都海宇通电气自动化工程有限公司, O=成都海宇通电气自动化工程有限公司, L=都江堰市, S=四川省, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
11CF45C7EC8A41

File PE Metadata
Compilation timestamp:
5/21/2007 5:09:01 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
6144:t2SLTbTi75fJyCmOYy20UK/HpATS43i4mpjTJrRjIfVRY/+ZimmPEPFSTXq8GhKH:t2S/ifyCmMf/JATS4SJJrRjm5eGvaCX0

Entry address:
0x1240

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.7369

Code size:
401.5 KB (411,172 bytes)

Scan 12306.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.