home

cmdtool.exe

Yang Ping

Publisher:
Yang Ping  (signed and verified)

MD5:
13dad68d1e23471819f1d06d626c5c23

SHA-1:
cb8d5fc399982c052a9efea652089ebca339bd78

SHA-256:
48bf4360b897a6756e033af8e93f5d3110838a4ed2aa5d31026b71bc68a9cbd9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:26:02 AM UTC  (today)

File size:
550.6 KB (563,864 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\shadow defender\cmdtool.exe

Digital Signature
Signed by:
Yang Ping

Authority:
WoSign CA Limited

Valid from:
4/8/2016 9:04:32 AM

Valid to:
6/8/2017 9:04:32 AM

Subject:
CN=Yang Ping, L=Chongqing, S=Chongqing, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
5E4DC82C530C9D86101BAD3939FCED12

File PE Metadata
Compilation timestamp:
10/15/2016 7:54:33 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
14.0

CTPH (ssdeep):
12288:lfOo6QIJD3+iHduQPR061eShos9xA6JI/j7dLo:l2LQ0D3+yduOxhxAV/tLo

Entry address:
0x1B911

Entry point:
E8, E0, 09, 00, 00, E9, 87, FE, FF, FF, FF, 25, 24, F5, 43, 00, 6A, 0C, 68, 80, DA, 44, 00, E8, F3, 01, 00, 00, C6, 45, E7, 00, 8B, 5D, 0C, 8B, C3, 8B, 7D, 10, 0F, AF, C7, 8B, 75, 08, 03, F0, 89, 75, 08, 83, 65, FC, 00, 8B, C7, 4F, 89, 7D, 10, 85, C0, 74, 14, 2B, F3, 89, 75, 08, 8B, 4D, 14, E8, BC, FF, FF, FF, 8B, CE, FF, 55, 14, EB, E2, B0, 01, 88, 45, E7, C7, 45, FC, FE, FF, FF, FF, E8, 14, 00, 00, 00, E8, EA, 01, 00, 00, C2, 10, 00, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8A, 45, E7, 84, C0, 75, 0B, FF, 75...
 
[+]

Entropy:
6.3466

Code size:
246 KB (251,904 bytes)

Scan cmdtool.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.