home

exambible.exe

Liuzhou Yingteng Software Co.,Ltd.

Publisher:
Liuzhou Yingteng Software Co.,Ltd.  (signed and verified)

Version:
5.2.0.13

MD5:
1dd59835704417d5b442f61256c51817

SHA-1:
4630041dbbc19e8020e37b2d98f7938d02c74329

SHA-256:
a91c7486147e631453c06100452ec252fc6cefcb1e35ca2b53a5207b852e5496

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 12:42:56 AM UTC  (today)

File size:
4 MB (4,174,888 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Liuzhou Yingteng Software Co.,Ltd.

Authority:
VeriSign, Inc.

Valid from:
10/23/2013 8:00:00 AM

Valid to:
10/24/2014 7:59:59 AM

Subject:
CN="Liuzhou Yingteng Software Co.,Ltd.", OU=IT dept., OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Liuzhou Yingteng Software Co.,Ltd.", L=Liuzhou, S=Guangxi, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
016E5FD47112E6365C0BD998A765D8F1

File PE Metadata
Compilation timestamp:
9/2/2014 11:40:05 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:2Vrwmsj7htmLjRoT4DgRtmx6yvAcbp8XwPQhT5rFzw:2R0j7hq9oexLoSyX1B5rC

Entry address:
0x8462AD

Entry point:
E8, 1D, 00, 00, 00, 53, 61, 66, 65, 6E, 67, 69, 6E, 65, 20, 50, 72, 6F, 74, 65, 63, 74, 6F, 72, 20, 76, 32, 2E, 32, 2E, 38, 2E, 30, 00, 9C, 60, EB, 92, D3, C9, 8D, 0C, 85, 00, 00, 00, 00, 8D, 2C, 85, 00, 00, 00, 00, FD, 0F, 31, 86, 2C, 24, EB, 20, BC, 35, A5, CC, 3F, BA, A4, D7, 3E, 09, A8, CB, 49, 6D, 61, 67, 65, 4C, 69, 73, 74, 5F, 44, 72, 61, 67, 45, 6E, 74, 65, 72, 00, 8D, 64, 24, 19, D2, C9, 8B, D3, 66, 87, 5C, 24, 01, 8B, FC, 66, 0F, AB, ED, E9, 4D, 04, 00, 00, 62, 9D, EC, FF, C6, 53, 61, 66, 65, 41...
 
[+]

Entropy:
7.9852  (probably packed)

Scan exambible.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.