TheWorld.exe

TheWorld

北京世界星辉科技有限责任公司

Publisher:
TheWorld.CN  (signed by 北京世界星辉科技有限责任公司)

Product:
TheWorld

Version:
6.2.0.124

MD5:
3fff10a5644b109d3e082df061f606c5

SHA-1:
c5589231627a347e8585bd572bbde7b5db6b0b56

SHA-256:
f58f7e6ce366ea1e2dc1a5d97f2bac6402093ec1c2e2dd53b20715e276aa588f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 1:40:08 AM UTC  (today)

File size:
666.6 KB (682,648 bytes)

Product version:
6.2.0.124

Copyright:
Copyright@2004-2013 The TheWorld.CN Authors. All rights reserved.

Original file name:
TheWorld.exe

File type:
Executable application (Win32 EXE)

Digital Signature
Authority:
WoSign eCommerce Services Limited

Valid from:
7/1/2013 6:20:05 PM

Valid to:
10/4/2016 5:41:28 PM

Subject:
E=support@theworld.cn, CN=北京世界星辉科技有限责任公司, O=北京世界星辉科技有限责任公司, L=北京市, S=北京市, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
12511C863BFA13

File PE Metadata
Compilation timestamp:
11/20/2013 11:23:22 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:Z/Xj3U4ndZraAXVeUZl08mailrbipU8mspfcxVadPSDb3z2D2cKu8SzOiUydJGLx:Jj3Uk9ZeEmailrbipnkadMbqDNKu8Xig

Entry address:
0x3FECB

Entry point:
E8, 2C, 5F, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, E8, 2C, 48, 00, 89, 0D, E4, 2C, 48, 00, 89, 15, E0, 2C, 48, 00, 89, 1D, DC, 2C, 48, 00, 89, 35, D8, 2C, 48, 00, 89, 3D, D4, 2C, 48, 00, 66, 8C, 15, 00, 2D, 48, 00, 66, 8C, 0D, F4, 2C, 48, 00, 66, 8C, 1D, D0, 2C, 48, 00, 66, 8C, 05, CC, 2C, 48, 00, 66, 8C, 25, C8, 2C, 48, 00, 66, 8C, 2D, C4, 2C, 48, 00, 9C, 8F, 05, F8, 2C, 48, 00, 8B, 45, 00, A3, EC, 2C, 48, 00, 8B, 45, 04, A3, F0, 2C, 48, 00, 8D, 45, 08, A3, FC, 2C, 48...
 
[+]

Entropy:
6.4600

Code size:
368 KB (376,832 bytes)

6 Shell Open Commands
Open type:
ftp

Command:
"C:\世界之窗\theworld6\application\theworld.exe" -- "%1"

Open type:
http

Command:
"C:\Program Files\theworld6\application\theworld.exe" -- "%1"

Open type:
https

Command:
"C:\Program Files\theworld6\application\theworld.exe" -- "%1"

Open type:
mailto

Command:
"C:\Program Files\theworld6\application\theworld.exe" -- "%1"

Open type:
news

Command:
"C:\Program Files\theworld6\application\theworld.exe" -- "%1"

Open type:
nntp

Command:
"C:\Program Files\theworld6\application\theworld.exe" -- "%1"


Scan TheWorld.exe - Powered by Reason Core Security