home

WKNH.exe

悟空闹海

SHANGHAI NINE STEP OF ENTERPRISE REGISTRATION AGENCY CO.,LTD.

Publisher:
SHANGHAI NINE STEP OF ENTERPRISE REGISTRATION AGENCY CO.,LTD.  (signed and verified)

Product:
悟空闹海

Version:
6, 6, 0, 3

MD5:
28758b48294d971dd905a2a49d6665aa

SHA-1:
e0aa039c044d86c5958798f6a89f924e21119d45

SHA-256:
26a6ce0306ea41f778c3f8422052271a196412d2d751b78ec72ef6492f456f40

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/15/2025 4:41:24 AM UTC  (today)

File size:
1.4 MB (1,423,400 bytes)

Product version:
6, 6, 0, 3

Original file name:
WKNH.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\game4056\wknh.exe

Digital Signature
Signed by:
SHANGHAI NINE STEP OF ENTERPRISE REGISTRATION AGENCY CO.,LTD.

Authority:
WoSign CA Limited

Valid from:
12/26/2014 3:27:56 PM

Valid to:
1/26/2017 3:27:56 PM

Subject:
CN="SHANGHAI NINE STEP OF ENTERPRISE REGISTRATION AGENCY CO.,LTD.", E=zhuye960@163.com, O="SHANGHAI NINE STEP OF ENTERPRISE REGISTRATION AGENCY CO.,LTD.", L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
48E3965129010C90176ABA1BECDA4B73

File PE Metadata
Compilation timestamp:
3/1/2015 11:04:48 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:k65LlpKQgOD5Xi7EbE+E1vHKwBCfQNpQSM+58vH8+KDB9aYLwtz7z7YwzlSPRrdn:YODr7EtHKwBCoNpQSMo8vH8hDB9DLwtq

Entry address:
0x127AC5

Entry point:
E8, F4, 09, 00, 00, E9, D7, FC, FF, FF, CC, FF, 25, DC, 22, 53, 00, FF, 25, E0, 22, 53, 00, FF, 25, E4, 22, 53, 00, FF, 25, E8, 22, 53, 00, FF, 25, EC, 22, 53, 00, FF, 25, F0, 22, 53, 00, FF, 25, F4, 22, 53, 00, FF, 25, F8, 22, 53, 00, FF, 25, FC, 22, 53, 00, FF, 25, 00, 23, 53, 00, FF, 25, 04, 23, 53, 00, FF, 25, 08, 23, 53, 00, FF, 25, 0C, 23, 53, 00, FF, 25, 10, 23, 53, 00, FF, 25, 14, 23, 53, 00, FF, 25, 18, 23, 53, 00, FF, 25, 1C, 23, 53, 00, FF, 25, 20, 23, 53, 00, FF, 25, 24, 23, 53, 00, FF, 25, 28...
 
[+]

Entropy:
6.4557

Code size:
1.2 MB (1,248,768 bytes)

Scan WKNH.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.