» ordersoft.exe
Overview
Analysis
File Details

ordersoft.exe

OrderSoft

Tomasz Szczepaniak

File name:

ordersoft.exe

Publisher:

MidiSoft.pl (signed by Tomasz Szczepaniak)

Product:

OrderSoft

Description:

OrderSoft - tool to create order

Version:

1.1.1.17

MD5:

981d890dda397e679b0b525a7f4908a8

SHA-1:

396c2eddd4fd7abba2784d543052db2853b129e2

SHA-256:

8f5d0141e53add7bd1ac2ad3b4e0d6839d2f51737d5b42300b2daae539061791

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

11/27/2024 11:28:21 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Bkav FE

HW32.Packed

1.3.0.6379

Qihoo 360 Security

HEUR/QVM16.0.Malware.Gen

1.0.0.1015

File size:

1 MB (1,082,512 bytes)

Product version:

1.1.1

Trademarks:

Original file name:

ordersoft.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\ordersoft \ordersoft.exe

Digital Signature

Signed by:

Tomasz Szczepaniak

Authority:

MidiSoft Root CA

Valid from:

11/27/2014 9:16:00 PM

Valid to:

11/27/2015 9:16:00 PM

Subject:

E=midisoft@interia.pl, CN=Tomasz Szczepaniak, OU=http://www.midisoft.pl, C=PL

Issuer:

CN=MidiSoft Root CA, OU=http://www.midisoft.pl, C=PL

Serial number:

02145765412006

File PE Metadata

Compilation timestamp:

6/19/1992 11:22:17 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:QlOZy0gQEBtz42J1MQqRMwDwoGv9YAabhLmY1JeQNPpcZj:903zrJ1MQExIYHbdm0JFNpc

Entry address:

0x23F477

Entry point:

68, 54, DF, B4, F1, 9C, 89, 74, 24, 04, E9, 81, 15, FF, FF, F3, EE, 82, C2, A0, 48, 0A, 16, 2C, 1F, 65, 6A, 5D, 24, 39, 10, 54, 29, 7F, 58, 0C, 31, 36, 1D, 00, FF, A5, 7A, AF, 7A, 8D, 5C, 20, F9, D8, 4F, 9D, 6B, E0, 05, D0, 0B, 11, C0, C7, 9E, 81, 58, 32, 03, 9E, 06, 63, 7B, 26, 39, 38, 7C, EB, 57, 32, F5, 82, 81, AA, 0C, BB, 83, 8E, AD, 12, FA, 0F, 93, D8, 94, 96, 7A, 8C, 60, CB, 77, 14, B7, 5E, 49, F9, 00, 2B, 78, B8, B7, 4A, 60, 7F, 77, 9D, 3F, 25, 14, CF, E5, 04, 6D, 77, 22, 89, 93, 5E, CD, CE, 3B, 44... 
[+]

Entropy:

7.9854 (probably packed)

Code size:

467.5 KB (478,720 bytes)

Scan ordersoft.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.