qmsvr.exe

全民助手

北京趣玩互动信息技术有限公司

Publisher:
Beijing Funplay Interactive Information Technology Co., Ltd.  (signed by 北京趣玩互动信息技术有限公司)

Product:
全民助手

Description:
服务程序

Version:
2.1.0.1117

MD5:
06a71e85069e1ab1da6da8ef5f86e4d6

SHA-1:
38e4001043103745216d4ec46937e797f8c8bed0

SHA-256:
bd4871085b9f0ec87f27f66c5d889209b829b2372f5e4dbe56d318ade696d300

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 11:02:23 AM UTC  (today)

File size:
227 KB (232,480 bytes)

Product version:
2.1.0.1117

Copyright:
Copyright (C) 2016

Original file name:
QMSvr

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\qmgame\qmsvr.exe

Digital Signature
Authority:
WoSign CA Limited

Valid from:
5/15/2015 8:15:25 AM

Valid to:
5/15/2016 9:02:12 AM

Subject:
CN=北京趣玩互动信息技术有限公司, O=北京趣玩互动信息技术有限公司, L=北京市, S=北京市, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
4C4A80BD7F899D17D50491F2878A5D38

File PE Metadata
Compilation timestamp:
2/26/2016 12:00:37 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
3072:+Emo0tPf2c11cnsHdGdsvAch0orPpYHDFUnW3DyW9KwP0YE7xbMhgu1dBPwVaxbK:+Efc116s9Gd/I0FHD0W3OIIqv4Vg4

Entry address:
0xE0E0

Entry point:
E8, 18, 06, 00, 00, E9, 80, FE, FF, FF, FF, 25, D0, 72, 42, 00, 8B, 4D, F4, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, F2, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, BC, 51, 43, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, F2, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, BC, 51, 43, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45...
 
[+]

Entropy:
6.5095

Code size:
149.5 KB (153,088 bytes)

Scan qmsvr.exe - Powered by Reason Core Security