home

Dr.EXE

Dr 应用程序

Wuhan Aiwen Technology Company Limtied

Publisher:
Wuhan Aiwen Technology Company Limtied  (signed and verified)

Product:
Dr 应用程序

Description:
Dr Microsoft 基础类应用程序

Version:
1, 0, 0, 1

MD5:
344e7c1363fdfe4adbebc3c1ca32e7b5

SHA-1:
9074c99915f8ebc1fed5c9cebbf18ab3296c40e2

SHA-256:
814f4cb9cc0e557fd427d8e4bc29dc25aed291d136b0a863e91b31e1748df482

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 6:41:58 PM UTC  (today)

File size:
37.7 KB (38,568 bytes)

Product version:
1, 0, 0, 1

Copyright:
版权所有 (C) 2010

Original file name:
Dr.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\imapbox\imagebox\dr.exe

Digital Signature
Signed by:
Wuhan Aiwen Technology Company Limtied

Authority:
GlobalSign nv-sa

Valid from:
6/21/2013 5:23:32 PM

Valid to:
6/22/2015 5:23:32 PM

Subject:
CN=Wuhan Aiwen Technology Company Limtied, OU=Marketing, O=Wuhan Aiwen Technology Company Limtied, L=Wuhan, S=Hubei, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112101D2E366E87C8D50E18491F2321F4D8A

File PE Metadata
Compilation timestamp:
9/13/2014 2:53:37 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:IgNpp11QmvzZ0/vTV5g3gKUb8jsM68eV5X/2n2KtPL05Vt:IQV1QmvzZ0/R5gwdlMOX/22Lzt

Entry address:
0x1500

Entry point:
55, 8B, EC, 6A, FF, 68, 20, 22, 40, 00, 68, 86, 16, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 0C, 21, 40, 00, 59, 83, 0D, 5C, 31, 40, 00, FF, 83, 0D, 60, 31, 40, 00, FF, FF, 15, 08, 21, 40, 00, 8B, 0D, 50, 31, 40, 00, 89, 08, FF, 15, 04, 21, 40, 00, 8B, 0D, 4C, 31, 40, 00, 89, 08, A1, 00, 21, 40, 00, 8B, 00, A3, 58, 31, 40, 00, E8, 16, 01, 00, 00, 39, 1D, 70, 30, 40, 00, 75, 0C, 68, 82, 16, 40, 00, FF, 15, FC, 20...
 
[+]

Entropy:
4.5945

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
4 KB (4,096 bytes)

Scan Dr.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.