home

mx.exe

G妹墨香

優勢領航科技有限公司

Publisher:
優勢領航科技有限公司  (signed and verified)

Product:
G妹墨香

Version:
2, 0, 0, 0

MD5:
411ae8371a6b6f276cac64b7075f8a0d

SHA-1:
9a8f73afb335dc038427775fbc659fd8410f308d

SHA-256:
56f0a20d7bd9275eb5378909d580999912dc7d73a42d58a849efc7ed916098e4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 9:48:18 PM UTC  (today)

File size:
1.8 MB (1,882,592 bytes)

Product version:
2, 0, 0, 0

Copyright:
Copyright (C) 2013-2014

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\gm\mx\mx.exe

Digital Signature
Signed by:
優勢領航科技有限公司

Authority:
WoSign CA Limited

Valid from:
9/10/2015 4:31:21 PM

Valid to:
11/10/2018 4:31:21 PM

Subject:
CN=優勢領航科技有限公司, O=優勢領航科技有限公司, L=台湾省, S=台湾省, C=CN

Issuer:
CN=CA 沃通 OV 代码签名证书 G2, O=WoSign CA Limited, C=CN

Serial number:
5D385CDF1233920872F650A7F6CEB9C9

File PE Metadata
Compilation timestamp:
2/9/2017 4:36:14 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x34CC6

Entry point:
E8, 5E, DC, 00, 00, E9, 79, FE, FF, FF, 68, 30, 4D, 43, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, A0, E1, 45, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, CC, CC, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 83, EC, 18, 53, 8B, 5D, 0C, 56, 8B, 73, 08, 33, 35, A0, E1, 45, 00...
 
[+]

Entropy:
7.7569  (probably packed)

Code size:
311 KB (318,464 bytes)

Scan mx.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.