home

picker.exe

Software

Fuzhou TianxiaChuangshi Digital Co.,Ltd.

Publisher:
兄弟软件  (signed by Fuzhou TianxiaChuangshi Digital Co.,Ltd.)

Product:
Software

Description:
按键抓抓工具

Version:
2, 1, 0, 5695

MD5:
67070807f94b549b171f6339284d4871

SHA-1:
ba927c9ec0988272dc28a5435bbde6aecde81135

SHA-256:
4d012b3afeca70ad1cd90419b03ebf8af8e25fee57f51dd324ec23885cd08a0d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 1:46:15 PM UTC  (today)

File size:
1 MB (1,078,816 bytes)

Product version:
2, 1, 0, 5695

Copyright:
Copyright (C) 2001 - 2009

Trademarks:
Software

Original file name:
Software

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Fuzhou TianxiaChuangshi Digital Co.,Ltd.

Authority:
WoSign, Inc.

Valid from:
1/13/2010 8:00:00 AM

Valid to:
1/14/2011 7:59:59 AM

Subject:
CN="Fuzhou TianxiaChuangshi Digital Co.,Ltd.", OU=Class 3 - for Microsoft Authenticode Signing, O="Fuzhou TianxiaChuangshi Digital Co.,Ltd.", L=Fuzhou, S=Fujian, C=CN

Issuer:
CN=WoSign Code Signing Authority, O="WoSign, Inc.", C=US

Serial number:
03B3E80789FEE6ABE93DD972817E53F8

File PE Metadata
Compilation timestamp:
2/2/2010 5:46:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:IzZ37PR+plG4YpEt3UFpB5n09BhQuidYQEtoGUAMzS3WPXx:It3V0lG4Y0jidYQEtoGUAMzS3WPh

Entry address:
0x15D62

Entry point:
55, 8B, EC, 6A, FF, 68, A8, 2A, 48, 00, 68, C6, 5E, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 58, 0A, 48, 00, 59, 83, 0D, E4, 2F, 50, 00, FF, 83, 0D, E8, 2F, 50, 00, FF, FF, 15, 5C, 0A, 48, 00, 8B, 0D, E0, 83, 4F, 00, 89, 08, FF, 15, 60, 0A, 48, 00, 8B, 0D, DC, 83, 4F, 00, 89, 08, A1, 64, 0A, 48, 00, 8B, 00, A3, E0, 2F, 50, 00, E8, 22, 01, 00, 00, 39, 1D, C0, C4, 4E, 00, 75, 0C, 68, F0, 5E, 41, 00, FF, 15, 68, 0A...
 
[+]

Entropy:
6.3449

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
508 KB (520,192 bytes)

Scan picker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.