home

X-Ray.exe

X-Ray

RAYMONDCC TECH

Publisher:
RAYMONDCC TECH  (signed and verified)

Product:
X-Ray

Version:
2.0.0.0

MD5:
150c0c5469b90103c2857021681a65fc

SHA-1:
0c9c7aee9d2910ff9ceb902a4454da0350d3f660

SHA-256:
560edeeafb8a708acde71139d5dd15267be7d1295224710fbcd4ab5615b453fb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 9:47:51 AM UTC  (today)

File size:
2.8 MB (2,921,096 bytes)

Product version:
2.0.0.0

Original file name:
X-Ray.exe

File type:
Executable application (Win32 EXE)

Language:
Turkish (Turkey)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\x-ray.exe

Digital Signature
Signed by:
RAYMONDCC TECH

Authority:
COMODO CA Limited

Valid from:
12/15/2011 2:00:00 AM

Valid to:
12/15/2016 1:59:59 AM

Subject:
CN=RAYMONDCC TECH, O=RAYMONDCC TECH, STREET=5 TINGKAT 7 BLOK 18, STREET=HALAMAN TEMBAGA, L=GEORGETOWN, S=PULAU PINANG, PostalCode=11600, C=MY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
486C353F4CC198096BEBB9CA37B5ACBF

File PE Metadata
Compilation timestamp:
10/16/2012 4:37:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:LCtx5hDwIFDDIDKODDDDvvyhDe2Dd1+fmDjvvOD4JDQSN00/zD39O8HrnBwFUDit:2zwIFDDIDKODDDDvvyhDe2Dd1+fmDjvC

Entry address:
0x2ABE8E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.7 MB (2,793,472 bytes)

Scan X-Ray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.