home

aiyingyong_pc_v4.6.exe

爱应用PC版

北京新锋艾普网络科技有限公司

This is a setup program which is used to install the application. The file has been seen being downloaded from fileshub.in and multiple other hosts.
Publisher:
xapcn.com  (signed by 北京新锋艾普网络科技有限公司)

Product:
爱应用PC版

Version:
4.6.0.0

MD5:
e0359e899ac41b18cf308eabf834d252

SHA-1:
37d461108700001d4e700ed613c0b77b166d4c47

SHA-256:
c575de418612942271ac5b14c0a246a67a79a688ef672771acf6d6349ea8603f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/2/2024 7:27:21 PM UTC  (today)

File size:
12.2 MB (12,743,456 bytes)

Product version:
4.6.0.0

Copyright:
xapcn.com

Original file name:
AiYingYong.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\users\{user}\downloads\programs\aiyingyong_pc_v4.6.exe

Digital Signature
Signed by:
北京新锋艾普网络科技有限公司

Authority:
WoSign CA Limited

Valid from:
8/13/2014 11:31:44 AM

Valid to:
10/13/2015 11:31:44 AM

Subject:
CN=北京新锋艾普网络科技有限公司, E=mujianxin@xapcn.com, O=北京新锋艾普网络科技有限公司, L=北京市, S=北京市, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
234F65F880F7DD553F49D36D18A06645

File PE Metadata
Compilation timestamp:
9/21/2014 11:04:02 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
393216:KSBvUyIxcILDaLibmTIX24m+Vjj8Guy8JBI/9:KSBBLMp24msjDuy8JBO9

Entry address:
0x106875

Entry point:
E8, EE, 84, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 50, 96, 57, 00, 75, 02, F3, C3, E9, 75, 85, 00, 00, 8B, FF, 51, C7, 01, 2C, 2D, 55, 00, E8, 6D, 86, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, 2F, AF, F0, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, AC, 86, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, 60, D2, 52, 00, 57, FF, 35, 08, 25, 58, 00, FF...
 
[+]

Entropy:
7.9179  (probably packed)

Code size:
1.2 MB (1,226,752 bytes)

The file aiyingyong_pc_v4.6.exe has been seen being distributed by the following 17 URLs.

http://fileshub.in/2T5?pt=3Tuap6RsN5O9yZKo6CWlTQuOaRGVoSKftSdlMuwSW1U=

http://fileshub.in/5v6?pt=2

http://fileshub.in/5v6?pt=eguXBkgjStMsWPd86TktTOXti6SBdmz9EkDXPS07u44=

http://fileshub.in/.../QRh gmIHf71314DpklkFE oFbDY=

http://download.xapcn.com/soft/.../aiyingyong_pc_v4.2.exe

http://fileshub.in/2T5?pt=1bVPSsVDvfxjdx8Sm90AUuzwSphoLz9J1LvDZFpwqUs=

https://www.dropbox.com/s/.../aiyingyong_pc_v4.4 (1).exe

http://.../download/?page=download&server=7&f=1089641&p=&rf=http://.../index.php?page=error&server=7&f=1089641&p=&rf=&key=193a2f3c0289099bb0966a787221208b&ref=1448573682&text=Download key is incorrect&key=a352e3bb3f92764d1f2189099fd09634&ref=1449639083

http://d.51wp.com/XstwH3

https://cloclo26.datacloudmail.ru/weblink/get/.../aiyingyong_pc_v4.2.exe

https://cloclo27.cldmail.ru/LSTrSUp29JEU1sYhsXC/G/.../aiyingyong_pc_v4.2.exe

http://fileshub.in/5v6?pt=OzHfByAmIgzCJ 2c7 MIDp72F9Cw0JSI4d8CvpMOHcQ=

http://.../download/?page=download&server=7&f=1089641&p=&rf=http://.../index.php?page=error&server=7&f=1089641&p=&rf=&key=193a2f3c0289099bb0966a787221208b&ref=1448573682&text=Download key is incorrect&key=91202f3fe11da4c97ee6536d1b5326b7&ref=1454869064

https://mega.nz/temporary/.../Tcs3zbwA

http://fileshub.in/5v6?d=1

https://mega.nz/persistent/.../Tcs3zbwA

https://www.dropbox.com/s/.../aiyingyong_pc_v4.6_2.exe

Scan aiyingyong_pc_v4.6.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.