home

signplugin_MOIT-Card_v2.exe

MOIT SignPlugin

MINH THONG CARD SOLUTIONS CO LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘signplugin_MOIT-Card_v2’.
Publisher:
TOMICA  (signed by MINH THONG CARD SOLUTIONS CO LTD)

Product:
MOIT SignPlugin

Description:
MOIT SignPlugin v2

Version:
1.0.2.0

MD5:
dc3558fb6bfa26e5a61238ac1512d2ca

SHA-1:
c1530013502df45d4331d4731a70c7da9b95e452

SHA-256:
6262b299d364636caac25941de60d28a951d823a1c94bfde201b5d0b2cd9c8a4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 8:50:21 AM UTC  (today)

File size:
1.5 MB (1,620,472 bytes)

Product version:
1.0.2.0

Copyright:
CopyRight (c) 2016 TOMICA.

Original file name:
signplugin_MOIT-Card_v2.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ministry of industry and trade\moit card manager\signplugin_moit-card_v2.exe

Digital Signature
Signed by:
MINH THONG CARD SOLUTIONS CO LTD

Authority:
DigiCert Inc

Valid from:
7/26/2016 7:00:00 AM

Valid to:
7/30/2019 7:00:00 PM

Subject:
CN=MINH THONG CARD SOLUTIONS CO LTD, O=MINH THONG CARD SOLUTIONS CO LTD, L=Ho Chi Minh, S=Ho Chi Minh, C=VN

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
062EC4D3B740656861747817E580B3FF

File PE Metadata
Compilation timestamp:
9/12/2016 11:02:06 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:w5sj8Xkc1RHdCijlDgxMDxaOuFAzpVZAHfiGahRVw:pCZvHdBjlmaaZCt2qGaK

Entry address:
0x37ED0

Entry point:
E8, FA, 97, 00, 00, E9, 95, FE, FF, FF, 6A, 68, 68, 38, DD, 56, 00, E8, 5A, A0, 00, 00, 8B, 7D, 08, 89, 7D, 94, 8B, 75, 0C, 33, DB, 89, 5D, 9C, 33, C0, 3B, F3, 0F, 95, C0, 3B, C3, 75, 1F, E8, 3B, 22, 00, 00, 89, 18, E8, 21, 22, 00, 00, C7, 00, 16, 00, 00, 00, E8, 14, A0, 00, 00, 83, C8, FF, E9, 9C, 00, 00, 00, 6A, 30, 53, 56, E8, 49, 0D, 00, 00, 83, C4, 0C, 83, FF, FE, 75, 14, E8, 0B, 22, 00, 00, 89, 18, E8, F1, 21, 00, 00, C7, 00, 09, 00, 00, 00, EB, D3, 3B, FB, 7C, 08, 3B, 3D, 70, 79, 58, 00, 72, 14, E8...
 
[+]

Code size:
1.2 MB (1,234,944 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
signplugin_MOIT-Card_v2

Command:
C:\Program Files\ministry of industry and trade\moit card manager\signplugin_moit-card_v2.exe


Scan signplugin_MOIT-Card_v2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.