home

mt_dx.exe

北京乐动卓越科技有限公司

Publisher:
北京乐动卓越科技有限公司  (signed and verified)

MD5:
c15fb9e0dcef230f15b9e4ba310dc4ef

SHA-1:
707b4d3070f6b82a565609e9910f9a03a47611d1

SHA-256:
589fd6cc3adfd90becca7d75bee762d9261f2d35980c4bc99dd100bcce420fea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 12:40:33 PM UTC  (today)

File size:
4.4 MB (4,564,264 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\我叫哀木涕\mt_dx.exe

Digital Signature
Signed by:
北京乐动卓越科技有限公司

Authority:
VeriSign, Inc.

Valid from:
12/10/2013 8:00:00 AM

Valid to:
12/11/2014 7:59:59 AM

Subject:
CN=北京乐动卓越科技有限公司, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=北京乐动卓越科技有限公司, L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
770AB839876D82785D128C2BED2A8C4C

File PE Metadata
Compilation timestamp:
4/22/2014 4:29:56 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:TR8ctpa2B3SQNPsdKSRD0HJ1qYYlzHIxHQ6yjYFy:Tqqpa2tSQVs0yK2dHIByMy

Entry address:
0x1013900

Entry point:
FF, 15, 53, 2C, 86, 01, 0F, 89, 9D, FD, FF, FF, 78, 15, 01, E5, 49, 9C, 3C, 64, 67, 6F, D1, 0F, 1B, D0, 8D, 64, 24, 02, E8, 46, FD, FF, FF, C1, E8, 1F, 0F, 87, 12, EE, 44, 00, 0F, 86, 0C, EE, 44, 00, 92, 63, 7E, A4, 0D, EF, E3, B9, 5A, F0, 27, 85, D3, AF, 63, 74, E8, 5E, FD, FF, FF, 0F, 82, 82, FD, FF, FF, C3, 00, 00, 00, 00, 00, 00, 5E, BD, 11, C4, 64, 05, 66, 51, 66, FF, 74, 24, 01, 7F, 0B, EB, 09, 1F, FD, 51, 84, 24, 4D, 50, 57, A4, 66, 8F, 04, 24, 79, 50, 78, 4E, A6, 45, E9, 3C, 9C, CD, C3, 9C, F5, 88...
 
[+]

Entropy:
7.8940  (probably packed)

Code size:
2 MB (2,138,624 bytes)

Scan mt_dx.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.