home

signplugin_MOIT-Card_v2.exe

MOIT SignPlugin

MINH THONG CARD SOLUTIONS CO LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘signplugin_MOIT-Card_v2’.
Publisher:
TOMICA  (signed by MINH THONG CARD SOLUTIONS CO LTD)

Product:
MOIT SignPlugin

Description:
MOIT SignPlugin v2

Version:
1.0.2.0

MD5:
7aa9bdffc7bee4d5b600356890f603be

SHA-1:
d0d5d13034cf8b9253da46e812645e95f2df4640

SHA-256:
aed4b7b419f9c9ff5e31440c49786a61ad89904dff86ecdab92f66326d8cab28

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 8:59:36 AM UTC  (today)

File size:
1.5 MB (1,594,360 bytes)

Product version:
1.0.2.0

Copyright:
CopyRight (c) 2016 TOMICA.

Original file name:
signplugin_MOIT-Card_v2.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ministry of industry and trade\moit card manager\signplugin_moit-card_v2.exe

Digital Signature
Signed by:
MINH THONG CARD SOLUTIONS CO LTD

Authority:
DigiCert Inc

Valid from:
7/26/2016 7:00:00 AM

Valid to:
7/30/2019 7:00:00 PM

Subject:
CN=MINH THONG CARD SOLUTIONS CO LTD, O=MINH THONG CARD SOLUTIONS CO LTD, L=Ho Chi Minh, S=Ho Chi Minh, C=VN

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
062EC4D3B740656861747817E580B3FF

File PE Metadata
Compilation timestamp:
8/30/2016 10:08:47 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:xt5f/xq/U7ZRaZQzoRHJheqxceaBGazAduER4OaJ94u3rO3H:FUslRaOzUJ9cZERvm3rO3H

Entry address:
0x37760

Entry point:
E8, BA, 97, 00, 00, E9, 95, FE, FF, FF, 6A, 68, 68, 00, 7E, 56, 00, E8, 1A, A0, 00, 00, 8B, 7D, 08, 89, 7D, 94, 8B, 75, 0C, 33, DB, 89, 5D, 9C, 33, C0, 3B, F3, 0F, 95, C0, 3B, C3, 75, 1F, E8, 3B, 22, 00, 00, 89, 18, E8, 21, 22, 00, 00, C7, 00, 16, 00, 00, 00, E8, D4, 9F, 00, 00, 83, C8, FF, E9, 9C, 00, 00, 00, 6A, 30, 53, 56, E8, 49, 0D, 00, 00, 83, C4, 0C, 83, FF, FE, 75, 14, E8, 0B, 22, 00, 00, 89, 18, E8, F1, 21, 00, 00, C7, 00, 09, 00, 00, 00, EB, D3, 3B, FB, 7C, 08, 3B, 3D, E8, 04, 58, 00, 72, 14, E8...
 
[+]

Entropy:
6.4613

Code size:
1.2 MB (1,215,488 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
signplugin_MOIT-Card_v2

Command:
C:\Program Files\ministry of industry and trade\moit card manager\signplugin_moit-card_v2.exe


Scan signplugin_MOIT-Card_v2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.