» 5e271ede-7f5d-fd18-4d9c-8b29b3a37999_1d1e662e9ec486a
Overview
Analysis
File Details

5e271ede-7f5d-fd18-4d9c-8b29b3a37999_1d1e662e9ec486a

Sichuan Hengxintong Software Co. Ltd.

File name:

Publisher:

Sichuan Hengxintong Software Co. Ltd. (signed and verified)

MD5:

d59ccc9346bd9e916641e5abc15993fd

SHA-1:

325d9af921322b89bfa9cfc3bef9b28892cfb52e

SHA-256:

6b732cb717612758afebdfe717c90f385f87f4f7d74ef3bd7931b3efc6f27c8b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 12:06:27 PM UTC (today)

File size:

2.9 MB (3,090,656 bytes)

Common path:

C:\ProgramData\microsoft\windows defender\scans\filesstash\5e271ede-7f5d-fd18-4d9c-8b29b3a37999_1d1e662e9ec486a

Digital Signature

Signed by:

Sichuan Hengxintong Software Co. Ltd.

Authority:

VeriSign, Inc.

Valid from:

8/21/2015 5:30:00 AM

Valid to:

6/6/2016 5:29:59 AM

Subject:

CN=Sichuan Hengxintong Software Co. Ltd., O=Sichuan Hengxintong Software Co. Ltd., L=Dazhou Sichuan, S=China, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0C979296E6798FEBB80BED5B9A621503

File PE Metadata

Compilation timestamp:

4/8/2016 3:01:57 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:d+5dHtgpn3OxjHC2l8U7WufjwLTyBql3C34:e83Oxji2l8U7WubwLTyBql37

Entry address:

0x823E1

Entropy:

4.6324

Code size:

572.5 KB (586,240 bytes)

Scan 5e271ede-7f5d-fd18-4d9c-8b29b3a37999_1d1e662e9ec486a - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.