home

win7fangzhen.exe

Win7界面仿真器

Personal Email

Publisher:
洪亮软件  (signed by Personal Email)

Product:
Win7界面仿真器

Version:
1.0.0.0

MD5:
d692f0f7210892dffa0aae8a1aaa7174

SHA-1:
dffafaef54b9d5396b3c1ede3baa1f4a994ac2be

SHA-256:
87bcc3caffc3a625c4cffdb3a0f2b5fb92831e5f5c539f8f71cea48f3dcf08c0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 2:46:44 PM UTC  (today)

File size:
6.3 MB (6,585,016 bytes)

Product version:
1.0.0.0

Copyright:
版权所有 2007-2009 洪亮软件

Trademarks:
洪亮软件

Original file name:
ThemeChanger.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\win7fangzhen.exe

Digital Signature
Signed by:
Personal Email

Authority:
Unizeto Technologies S.A.

Valid from:
10/23/2009 6:51:45 AM

Valid to:
10/24/2010 6:51:45 AM

Subject:
E=admin@holersoft.com, CN=holersoft.com, OU=Unizeto (r) Personal Certificates, O=Personal Email, C=CN

Issuer:
CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
06CC70

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:kD09BPNA8mPVx/Fu2egvN4rtsD5PtSmNdkGPWVh:kD07Vun/Fu2egvN2CVVSmHtk

Entry address:
0x1000

Entry point:
68, 01, C0, AD, 00, E8, 01, 00, 00, 00, C3, C3, 25, 4D, 73, 22, C8, 4E, 36, A6, 53, CD, 8C, E3, 70, D9, 6E, C1, 11, E6, ED, 3A, 0A, FC, C0, ED, 17, 16, 5C, FC, 83, D0, D7, 1F, 07, 4E, EE, FB, C4, F8, 38, 4B, 72, 8A, D9, 7C, 06, C2, 3A, B0, 3F, A9, 33, C3, 41, 20, FC, 1D, 73, 2B, BA, FC, F0, 1F, DC, 7C, 43, CF, B7, 0C, 8E, 5D, 98, BC, 6D, DA, D6, EE, 49, C1, B5, F4, D8, E7, 0E, 01, C8, A4, BC, 64, 21, 6B, 93, 60, C5, 53, 69, 4C, B3, 8F, 80, 38, A5, E8, 1C, 4C, 9D, F8, AC, 64, 76, 24, 1C, DC, 3F, DA, C9, F2...
 
[+]

Entropy:
7.9911

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
833.5 KB (853,504 bytes)

Scan win7fangzhen.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.