home

coffeezip.exe

Mediawave Corporation

Publisher:
Mediawave Corporation  (signed and verified)

Version:
1.0.0.0

MD5:
66c8113e0731887e9f3bcb5f5b9650b5

SHA-1:
fd93c17a333404b8a001a8a503fdcb5a5c6c5662

SHA-256:
408409bfb14c4a7804b176544d51fce9b349500139b53b44ed63f1b5c5be3ff2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:58:40 PM UTC  (today)

File size:
3.6 MB (3,766,920 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\coffeezip\coffeezip.exe

Digital Signature
Signed by:
Mediawave Corporation

Authority:
Thawte, Inc.

Valid from:
7/31/2012 7:00:00 AM

Valid to:
8/1/2013 6:59:59 AM

Subject:
CN=Mediawave Corporation, O=Mediawave Corporation, L=Seongnam-si, S=Gyeonggi-do, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
082601D68DB641607D2AF72559E172B4

File PE Metadata
Compilation timestamp:
12/19/2012 11:05:49 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:smRPQW3eRXj5mSLrE9CHNyuVeDws46tokJIWfPKdTbLEiwFljxEg:smRIWcft9VevtFJIWfPKxr/g

Entry address:
0x2FD434

Entry point:
55, 8B, EC, 83, C4, F0, B8, 04, 0A, 6F, 00, E8, E8, DE, D0, FF, A1, 38, A6, 70, 00, BA, D4, D4, 6F, 00, E8, B5, 9E, D0, FF, A1, B8, A1, 70, 00, C6, 00, 01, A1, E0, A4, 70, 00, 8B, 00, E8, 21, 58, E8, FF, A1, E0, A4, 70, 00, 8B, 00, B2, 01, E8, 33, 75, E8, FF, B1, 01, BA, F4, D4, 6F, 00, A1, A0, 5E, 53, 00, E8, 2E, A5, E4, FF, 8B, 0D, 88, A2, 70, 00, A1, E0, A4, 70, 00, 8B, 00, 8B, 15, 64, 14, 6A, 00, E8, 02, 58, E8, FF, 8B, 0D, 80, 9E, 70, 00, A1, E0, A4, 70, 00, 8B, 00, 8B, 15, DC, EA, 67, 00, E8, EA, 57...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
3 MB (3,129,856 bytes)

The file coffeezip.exe has been discovered within the following program.

CoffeeZip version 1.0.0.0  by ohsoft.net
ohsoft.net
About 6% of users remove it
 
Powered by Should I Remove It?

Scan coffeezip.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.