home

liveud.exe

XLWallPaperAutoUpdate Module

ShenZhen Xunlei Networking Technologies Ltd.

Publisher:
ShenZhen Xunlei Networking Technologies Ltd.  (signed and verified)

Product:
XLWallPaperAutoUpdate Module

Version:
1, 0, 0, 1

MD5:
6876e546ad9cfa41681e98aed716ee54

SHA-1:
47230e1ececf091357b3101b53a3050343f416aa

SHA-256:
a09957c7bf3cde4855392a99ec604a18aadc1d16a1c2b4a574797236448610d8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 6:37:18 AM UTC  (today)

File size:
352.7 KB (361,120 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright 2013

Original file name:
XLWallPaperAutoUpdate.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\wallpaper\program\liveud.exe

Digital Signature
Signed by:
ShenZhen Xunlei Networking Technologies Ltd.

Authority:
GlobalSign nv-sa

Valid from:
9/17/2013 9:17:13 AM

Valid to:
9/18/2014 9:17:13 AM

Subject:
CN=ShenZhen Xunlei Networking Technologies Ltd., OU=operate dept, O=ShenZhen Xunlei Networking Technologies Ltd., L=ShenZhen, S=GuangDong, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121BA687C67443A0E0804296CB39A71C2EC

File PE Metadata
Compilation timestamp:
5/16/2014 8:28:38 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:iZgyFHoVW3qPMTzAhBHtcWx9ANc3HtDqlwRY8iRWb1pnmsNZ0RmDM9AyzgOEOQ/V:iZZIqzAhBHtcQLhuY1lqhVgOEV/6eXV

Entry address:
0x18984

Entry point:
E8, 55, 07, 00, 00, E9, D8, FC, FF, FF, FF, 25, 68, C3, 41, 00, FF, 25, 6C, C3, 41, 00, FF, 25, 70, C3, 41, 00, FF, 25, 74, C3, 41, 00, FF, 25, 78, C3, 41, 00, FF, 25, 7C, C3, 41, 00, FF, 25, 80, C3, 41, 00, FF, 25, 84, C3, 41, 00, FF, 25, 88, C3, 41, 00, FF, 25, 8C, C3, 41, 00, FF, 25, 90, C3, 41, 00, FF, 25, 94, C3, 41, 00, FF, 25, 98, C3, 41, 00, 8B, 00, 81, 38, 63, 73, 6D, E0, 74, 03, 33, C0, C3, E9, 86, 07, 00, 00, 6A, 14, 68, 60, 17, 42, 00, E8, CA, 02, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B...
 
[+]

Entropy:
5.2672

Code size:
105 KB (107,520 bytes)

Scan liveud.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.