home

rich4.exe

成都海宇通电气自动化工程有限公司

Publisher:
成都海宇通电气自动化工程有限公司  (signed and verified)

MD5:
4a1ee782a0da9f8faecf64ada074f554

SHA-1:
c7fb07cb7170c95a5bf5c9da202599107a9dba56

SHA-256:
76b610981b5e0f275a6212834f207813a4ddebe85dd489f0c8f35eb9528d564b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:47:24 PM UTC  (today)

File size:
591.6 KB (605,760 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
成都海宇通电气自动化工程有限公司

Authority:
WoSign eCommerce Services Limited

Valid from:
2/21/2012 11:30:54 AM

Valid to:
2/21/2013 5:48:34 PM

Subject:
E=liwenming@169x.cn, CN=成都海宇通电气自动化工程有限公司, O=成都海宇通电气自动化工程有限公司, L=都江堰市, S=四川省, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
18A1A0B0F0B093

File PE Metadata
Compilation timestamp:
11/28/1999 2:35:10 PM

OS version:
1.11

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.18

Entry address:
0x5709C

Entry point:
E9, 4C, 1C, 00, 00, 03, 10, 40, 00, 57, 41, 54, 43, 4F, 4D, 20, 43, 2F, 43, 2B, 2B, 33, 32, 20, 52, 75, 6E, 2D, 54, 69, 6D, 65, 20, 73, 79, 73, 74, 65, 6D, 2E, 20, 28, 63, 29, 20, 43, 6F, 70, 79, 72, 69, 67, 68, 74, 20, 62, 79, 20, 57, 41, 54, 43, 4F, 4D, 20, 49, 6E, 74, 65, 72, 6E, 61, 74, 69, 6F, 6E, 61, 6C, 20, 43, 6F, 72, 70, 2E, 20, 31, 39, 38, 38, 2D, 31, 39, 39, 35, 2E, 20, 41, 6C, 6C, 20, 72, 69, 67, 68, 74, 73, 20, 72, 65, 73, 65, 72, 76, 65, 64, 2E, 53, 83, EC, 04, 8D, 44, 24, 14, 89, 04, 24, 89...
 
[+]

Entropy:
6.7702

Packer / compiler:
Watcom C/C++

Code size:
385 KB (394,240 bytes)

Scan rich4.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.