home

softi_diag.exe

Ralph Richardson

Publisher:
Ralph Richardson  (signed and verified)

MD5:
61f0b9c6c94f1f8518c78d1d4fd60ae9

SHA-1:
9a54e8d7d55a2d3f9e177330a26c0fab05ace088

SHA-256:
20fb1356e55d2f4267650edb69ec5fefa6af8ee138b8d0171910bf61f86ded28

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/27/2024 3:42:36 AM UTC  (today)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Android.Adware.Dowgin.AM
8.15.06.25.05

Trend Micro House Call
TROJ_GEN.F47V1104
7.2.176

File size:
465.4 KB (476,520 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\scanwiz\scanner diagnostic reporting tool\softi_diag.exe

Digital Signature
Signed by:
Ralph Richardson

Authority:
StartCom Ltd.

Valid from:
8/13/2012 11:18:52 PM

Valid to:
8/15/2014 7:22:36 AM

Subject:
E=ralph@softi.co.uk, CN=Ralph Richardson, L=Hornsea, S=East Riding of Yorkshire, C=GB, Description=i8e5Ih9bQ0mgWF2i

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
06F3

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:YdZfFQmhkb31Eoq/TWayALWJtoatqMDcre4Oz2cV2oJ5nGYYNKTa8oFFqRKnM49e:ehFnhkqxxnMLTNJ5HTxKCKnM49I1T

Entry address:
0x5D160

Entry point:
55, 8B, EC, 83, C4, F0, B8, 50, CF, 45, 00, E8, E4, 8F, FA, FF, A1, B4, F0, 45, 00, 8B, 00, E8, B8, 88, FF, FF, 8B, 0D, 9C, F1, 45, 00, A1, B4, F0, 45, 00, 8B, 00, 8B, 15, 2C, A7, 45, 00, E8, B8, 88, FF, FF, A1, B4, F0, 45, 00, 8B, 00, E8, 2C, 89, FF, FF, E8, D7, 6F, FA, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.5805

Developed / compiled with:
Microsoft Visual C++

Code size:
368.5 KB (377,344 bytes)

Scan softi_diag.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.