» exambible.exe
Overview
Analysis
File Details

exambible.exe

Liuzhou Yingteng Software Co.,Ltd.

File name:

exambible.exe

Publisher:

Liuzhou Yingteng Software Co.,Ltd. (signed and verified)

Version:

5.2.0.50

MD5:

7b2a19daafa1c523ea94de81235d145d

SHA-1:

f19756e7d653da801039ba54e6c25c4126f71af0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/15/2025 8:23:16 AM UTC (today)

File size:

5.7 MB (5,932,720 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

Liuzhou Yingteng Software Co.,Ltd.

Authority:

Symantec Corporation

Valid from:

11/16/2015 8:00:00 AM

Valid to:

12/16/2016 7:59:59 AM

Subject:

CN="Liuzhou Yingteng Software Co.,Ltd.", OU=IT dept., O="Liuzhou Yingteng Software Co.,Ltd.", L=Liuzhou, S=Guangxi, C=CN

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

62B09DA8C51ADBA10F4403DBD4F522E2

File PE Metadata

Compilation timestamp:

7/8/2016 4:03:34 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:fthsJA7JRPOHSQUqWG2ABg0lpjcJt6SwElcmKfRiVxuEw88sZrzPBMnRFs63xM95:ftaK78SQUqRhBwFNMnRCsS5

Entry address:

0x439A40

Entry point:

55, 8B, EC, B9, 05, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, B8, 84, 71, 83, 00, E8, B6, E8, BC, FF, 8B, 1D, C0, 8B, 86, 00, 33, C0, 55, 68, B1, 9B, 83, 00, 64, FF, 30, 64, 89, 20, 8D, 55, E8, 8B, 03, E8, D4, 43, CA, FF, 8B, 45, E8, 8D, 55, EC, E8, 21, 26, BD, FF, 8D, 45, EC, BA, C8, 9B, 83, 00, E8, A8, C2, BC, FF, 8B, 45, EC, E8, 74, 22, BD, FF, 84, C0, 74, 71, 8D, 55, E0, 8B, 03, E8, A6, 43, CA, FF, 8B, 45, E0, 8D, 55, E4, E8, F3, 25, BD, FF, 8D, 45, E4, BA, E0, 9B, 83, 00, E8, 7A, C2, BC, FF, 8B, 45... 
[+]

Entropy:

6.7593

Developed / compiled with:

Microsoft Visual C++

Code size:

4.2 MB (4,426,752 bytes)

Scan exambible.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.