home

App.dll

AppCore

Zhenjiang Xinqu Guangcaixingchen Information Technology Co., Ltd

Publisher:
Zhenjiang Nuoya Network Technology Co., Ltd.  (signed by Zhenjiang Xinqu Guangcaixingchen Information Technology Co., Ltd)

Product:
AppCore

Version:
1.00

MD5:
66db77dfdc7eb2f065b0da3498f07990

SHA-1:
5d34f586b8d8adc5bbcafdebc6622776c529359b

SHA-256:
422f10284516ab34e29074d6587140d060124c995ea5164065e6bc6e3c473f93

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/10/2025 7:22:03 AM UTC  (today)

File size:
187.9 KB (192,360 bytes)

Product version:
1.00

Original file name:
App.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Chinese (Simplified, PRC)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\app.dll

Digital Signature
Signed by:
Zhenjiang Xinqu Guangcaixingchen Information Technology Co., Ltd

Authority:
WoSign eCommerce Services Limited

Valid from:
10/12/2013 10:47:14 AM

Valid to:
10/14/2014 5:59:22 AM

Subject:
E=masterwannen@sina.com, CN="Zhenjiang Xinqu Guangcaixingchen Information Technology Co., Ltd", O="Zhenjiang Xinqu Guangcaixingchen Information Technology Co., Ltd", L=Zhenjiang, S=Jiangsu, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
11FE5B39872580

Registration
CLSID:
{22C4C439-88C1-4AE5-84C0-7EC6BEB53530}

ProgID:
AppCore.App

COM registered:
Yes

File PE Metadata
Compilation timestamp:
10/24/2013 5:46:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:BEjSlgpqcBS0SKLo2/+XdAVpdaV8pD8l5p+V:BqpBS0XL0tc+V8pj

Entry address:
0x1EA0

Entry point:
5A, 68, 68, A3, 02, 11, 68, 6C, A3, 02, 11, 52, E9, E9, FF, FF, FF, 00, 00, 00, 40, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, EA, AF, D0, D3, 58, 98, AF, 45, 93, 6C, D4, 45, 80, BB, 9A, B2, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, C0, B3, EB, 04, 41, 70, 70, 43, 6F, 72, 65, 00, 00, 08, 41, 00, 20, 08, 41, 00, A0, 00, 00, 00, 88, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 0A, 00, 00, 00, 39, C4, C4, 22, C1, 88, E5, 4A, 84, C0, 7E, C6, BE, B5, 35, 30, 01, 00, 00, 00, 90, 00, 00, 00...
 
[+]

Entropy:
6.0368

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
156 KB (159,744 bytes)

Automation Object
CLSID:
{22C4C439-88C1-4AE5-84C0-7EC6BEB53530}

CLSID name:
AppCore.App


Scan App.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.