home

semini_share.bin

搜狗高速浏览器

Sogou.com

Publisher:
Sogou.com  (signed and verified)

Product:
搜狗高速浏览器

Description:
搜狗高速浏览器安装程序

Version:
5.1.7.15323

MD5:
1cb78df46ab2bf13a864b63dd3978edb

SHA-1:
3444c8a72015188b3847f9210c755971c4c82fca

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:15:06 PM UTC  (today)

File size:
33.3 MB (34,865,328 bytes)

Product version:
5.1.7.15323

Copyright:
(C)2014 Sogou.com Inc. All rights reserved.

Original file name:
搜狗高速浏览器安装程序

Common path:
C:\Documents and Settings\{user}\Local settings\temp\semini_share.bin

Digital Signature
Signed by:
Sogou.com

Authority:
VeriSign, Inc.

Valid from:
6/25/2012 8:00:00 AM

Valid to:
8/25/2015 7:59:59 AM

Subject:
CN=Sogou.com, OU=Desktop, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Sogou.com, L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
59B95D558C2DCC523572E3F8F9A5F79D

File PE Metadata
Compilation timestamp:
12/9/2014 11:43:33 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
786432:9BfyHxed27W82yiq1tWGIaILoSyHV6jlUePic/N+99RyXd:91yHM8fiq1tnIa4oSyalXjN8yXd

Entry address:
0x45679

Entry point:
E8, 03, A5, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 8D, 45, 10, 50, 6A, 00, FF, 75, 0C, FF, 75, 08, 68, E5, FD, 44, 00, E8, 05, 00, 00, 00, 83, C4, 14, 5D, C3, 55, 8B, EC, 83, EC, 20, 83, 65, E0, 00, 33, C0, 56, 8B, 75, 0C, 57, 8D, 7D, E4, 6A, 07, 59, F3, AB, 85, F6, 75, 15, E8, FA, 41, 00, 00, C7, 00, 16, 00, 00, 00, E8, 4F, 27, 00, 00, 83, C8, FF, EB, 41, 39, 45, 10, 74, E6, 56, E8, A3, E5, FF, FF, C7, 45, EC, 49, 00, 00, 00, 89, 75, E8, 89, 75, E0, 59, 3D, FF, FF, FF, 3F, 76, 09, C7, 45, E4, FF, FF, FF...
 
[+]

Entropy:
7.9984  (probably packed)

Code size:
396 KB (405,504 bytes)

The file semini_share.bin has been seen being distributed by the following 50 URLs.

http://202.114.96.204/cache/6/01/sogou.com/.../sogou_explorer_5.1.7.15323_4492.exe

http://10.212.200.15/2Q2W96952DA97541E4417B9CEFC42420B4D76B0CBA47_unknown_9C2DC8E6FDB48494AD28AB005FA42B905141832C_2/.../sogou_explorer_5.1.7.15323_4492.exe

http://202.194.1.98/cache/6/01/sogou.com/.../sogou_explorer_5.1.7.15323_4492.exe

http://111.63.135.43/files/1139000031C314E4/.../sogou_explorer_5.1.7.15323_4492.exe

http://122.72.24.113:9090/data6/4/6/64/e/f3e6b961745491953204453b359e6464/.../sogou_explorer_5.1.7.15323_4492.exe

http://86.86.101.47/smarticloud-webcache-storages1/.../sogou_explorer_5.1.7.15323_4492.exe

http://218.201.21.161:801/cache/.../sogou_explorer_5.1.7.15323_4492.exe

http://111.23.10.45/cache/.../sogou_explorer_5.1.7.15323_4492.exe

http://210.27.82.5/files/9139000000406769/.../sogou_explorer_5.1.7.15323_4492.exe

http://120.198.248.43/cache/.../sogou_explorer_5.1.7.15323_4492.exe

http://113.171.224.242/.../sogou_explorer_5.1.7.15323_4492.exe

http://218.202.115.237/1Q2W3E4R5T6Y7U8I9O0P1Z2X3C4V5B/.../sogou_explorer_5.1.7.15323_4492.exe

http://111.1.51.72/hotfiles/2139000005372C3E/112.17.13.235/files/3139000005372C3E/.../sogou_explorer_5.1.7.15323_4492.exe

http://41.223.201.246:801/.../sogou_explorer_5.1.7.15323_4492.exe

http://10.203.25.33/cache/5/01/sogou.com/.../sogou_explorer_5.1.7.15323_4492.exe

http://202.171.252.13:9999/.../sogou_explorer_5.1.7.15323_4492.exe

http://211.83.176.43:8081/7ad2cf2f-bedf-4162-8f5a-55f41a6d512e/3999/1a/da/1ada9f4e-d72a-4734-8fe1-761618ec95ac/kfid/.../sogou_explorer_5.1.7.15323_4492.exe

http://202.171.252.17:9999/.../sogou_explorer_5.1.7.15323_4492.exe

http://10.96.252.4:8084/J/1CB51F17C3613A04ACFD296B64DC03F0BAE30733/2D8ABE2564F00D36C315F24B8A5BCD90EB56AF67/txkj_url/.../sogou_explorer_5.1.7.15323_4492.exe

http://45.64.22.87/.../sogou_explorer_5.1.7.15323_4492.exe

http://202.73.37.148/.../sogou_explorer_5.1.7.15323_4492.exe

http://120.221.32.87:6510/.../sogou_explorer_5.1.7.15323_4492.exe

http://112.17.14.23/cache/.../sogou_explorer_5.1.7.15323_4492.exe

http://202.113.18.202/cache/11/01/sogou.com/.../sogou_explorer_5.1.7.15323_4492.exe

http://117.135.250.71/.../sogou_explorer_5.1.7.15323_4492.exe

http://10.255.250.8/files/8139000000000340/.../sogou_explorer_5.1.7.15323_4492.exe

http://43.255.113.227/.../sogou_explorer_5.1.7.15323_4492.exe

http://218.189.123.39/.../sogou_explorer_5.1.7.15323_4492.exe

http://39.130.192.179:6510/.../sogou_explorer_5.1.7.15323_4492.exe

http://117.190.191.170/cache/.../sogou_explorer_5.1.7.15323_4492.exe

Latest 30 of 52 download URLs

Scan semini_share.bin - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.