home

zimageeditor.exe

北京耘升天下科技有限公司

Publisher:
北京耘升天下科技有限公司  (signed and verified)

MD5:
3be9c1fb31f8c9a386f2182eb5e1054f

SHA-1:
40a18962811f525bcd5074ca7213dd6345059d0a

SHA-256:
5b4488a83d4dbd357c31467f1cb5f7090673d551a0cc769c4012f76f5c886a44

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:17:55 PM UTC  (today)

File size:
1.6 MB (1,682,944 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\zhuods\tools\zimageeditor\zimageeditor.exe

Digital Signature
Signed by:
北京耘升天下科技有限公司

Authority:
Thawte, Inc.

Valid from:
12/31/2013 6:30:00 AM

Valid to:
4/2/2015 6:29:59 AM

Subject:
CN=北京耘升天下科技有限公司, OU=IT, O=北京耘升天下科技有限公司, L=Beijing, S=Beijing, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
590F491E02EBFD32ADBC3B51A5A8E94A

File PE Metadata
Compilation timestamp:
3/4/2014 8:19:43 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:hhzqpTRoVhYyVpdAgfOLF4WlTSp5z462TZroT1:qm/A+MF4WRUG6+0

Entry address:
0x111C53

Entry point:
E8, FC, BB, 00, 00, E9, 89, FE, FF, FF, B8, 99, E3, 51, 00, A3, 10, 69, 58, 00, C7, 05, 14, 69, 58, 00, 8F, DA, 51, 00, C7, 05, 18, 69, 58, 00, 43, DA, 51, 00, C7, 05, 1C, 69, 58, 00, 7C, DA, 51, 00, C7, 05, 20, 69, 58, 00, E5, D9, 51, 00, A3, 24, 69, 58, 00, C7, 05, 28, 69, 58, 00, 11, E3, 51, 00, C7, 05, 2C, 69, 58, 00, 01, DA, 51, 00, C7, 05, 30, 69, 58, 00, 63, D9, 51, 00, C7, 05, 34, 69, 58, 00, EF, D8, 51, 00, C3, 8B, FF, 55, 8B, EC, E8, 96, FF, FF, FF, 83, 7D, 08, 00, 74, 05, E8, 0D, C7, 00, 00, DB...
 
[+]

Entropy:
6.5895

Code size:
1.2 MB (1,254,400 bytes)

Scan zimageeditor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.