home

iweather.exe

Shanghai Digital Century Network Co.,Ltd.

Publisher:
小熊天气  (signed by Shanghai Digital Century Network Co.,Ltd.)

Product:
小熊天气

Version:
1.0.0.0

MD5:
a582397c9d32c3598c916325ef9b38cd

SHA-1:
5f1846d4ba2eba3ece4843939ba955e5f01a8ac8

SHA-256:
f253b24e7c4fd42f91c2c86674a4152a79da91b1363d7891cdb2d3e827c2ee3b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:56:04 PM UTC  (today)

File size:
987.5 KB (1,011,192 bytes)

Product version:
1.0.0.0

Copyright:
小熊天气

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Shanghai Digital Century Network Co.,Ltd.

Authority:
VeriSign, Inc.

Valid from:
6/14/2013 8:00:00 AM

Valid to:
6/15/2014 7:59:59 AM

Subject:
CN="Shanghai Digital Century Network Co.,Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Shanghai Digital Century Network Co.,Ltd.", L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7A9614A6E69B814BF05CB1C6A3F266EE

File PE Metadata
Compilation timestamp:
2/13/2014 6:24:15 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:taQY4OQ12vmM/JMi95XuNuKlw7lAqQjZzo8DKU:PYTQT9i95CRliTQFb

Entry address:
0x8AB30

Entry point:
B8, 08, 30, 6E, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, AE, 15, AF, 24, F3, A6, 11, A6, 20, 6F, 91, 8E, 8F, 70, 64, 83, FD, 46, F9, C7, 5D, 61, 29, AE, 05, FC, 3D, 1D, D3, FD, BF, D4, 7B, 96, 2C, 50, C1, 0C, 64, 4A, 1E, 82, A3, CF, 90, 5C, 88, E7, 95, 34, AB, 04, 41, BE, A5, 92, C0, 7C, AC, 80, 02, CD, A0, 2C, 71, 99, BD, 9B, A9, D2, B3, 3A, A3, E1, BC, D6, DF, 98, 89, E1, 1E, 4C, 7F, BD, D6, F1, 8B, D4, AA, 4F, 7A, 30, FB...
 
[+]

Entropy:
7.9527

Packer / compiler:
PECompact v2

Code size:
729.5 KB (747,008 bytes)

Scan iweather.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.