home

downlink.exe

旋风影音 页面影片分析器

睢宁华多网络科技有限公司

Publisher:
www.xuanfeng.com  (signed by 睢宁华多网络科技有限公司)

Product:
旋风影音 页面影片分析器

Description:
旋风影音

Version:
1.0.0.0

MD5:
c7e09c5fb5856611aca7ad302dcf2437

SHA-1:
ced3f2e8d1aec13e1b288f0d21e47a7ac3ebe927

Scanner detections:
5 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/22/2025 9:18:29 PM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
TrojWare.Win32.FlyStudio.NMY0
20070

ESET NOD32
Win32/Packed.FlyStudio (variant)
10.10719

Norman
FlyAgent.CX
11.20160516

Qihoo 360 Security
Trojan.Generic
1.0.0.1015

Trend Micro House Call
Suspicious_GEN.F47V0808
7.2.137

File size:
877.8 KB (898,872 bytes)

Product version:
1.0.0.0

Copyright:
www.xuanfeng.com 版权所有

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
睢宁华多网络科技有限公司

Authority:
WoSign CA Limited

Valid from:
4/2/2014 1:50:33 PM

Valid to:
4/3/2015 1:50:33 PM

Subject:
CN=睢宁华多网络科技有限公司, E=xuanfengcom@hotmail.com, O=睢宁华多网络科技有限公司, L=徐州市, S=江苏省, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
14D4BFE554ED0607FECDC83BC1BF5495

File PE Metadata
Compilation timestamp:
12/25/1972 1:33:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:UQY47W42SU2hHgdF17zFwJHILqIOWpyYY4I280cTMu:UI7W1pJYowW4YYxgo

Entry address:
0xBCBD3

Entry point:
E8, 00, 00, 00, 00, 60, E8, 4F, 00, 00, 00, 2E, 50, D6, 44, C0, CB, A6, 4F, AB, 88, FC, C3, 69, BE, 06, 8A, 42, CD, 8E, F6, 24, 82, 74, 70, A8, 1A, CE, B5, DC, 61, 4C, 81, D5, A9, 7F, F3, C1, 97, 34, E7, 4A, 41, F0, 08, CA, 74, 10, 54, CF, 8F, 8A, F8, 57, 5D, 21, E4, CF, 8F, 8A, F8, 57, 5D, 21, E4, E9, 2A, 6E, 00, 00, E9, 3E, 6E, 00, 00, E9, 39, 6E, 00, 00, E8, 6E, FB, FF, FF, CE, 01, 01, 00, 6B, 9A, 00, 00, 8F, F0, 43, EC, F9, 8D, 01, B2, DB, E1, 54, 1B, DD, AC, F1, F2, D3, 59, F0, C7, 9A, F6, C9, 92, 53...
 
[+]

Entropy:
7.9621

Packer / compiler:
MoleBox v2.0

Scan downlink.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.