home

sogou_pinyin_7.9.0.7343.exe

搜狗拼音输入法

Sogou.com

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from cdn2.ime.sogou.com and multiple other hosts.
Publisher:
Sogou.com Inc.  (signed by Sogou.com)

Product:
搜狗拼音输入法

Description:
搜狗拼音输入法 安装程序

Version:
7.9.0.7343

MD5:
6c19051f7e13fdd9087a948b10759b5b

SHA-1:
80079f1dc9b27ae43eefed4966608eef94bb243f

SHA-256:
c008ba9b7507e00a9744d6a2f7f90931f38a766e6d099bbc0b52b44767e0072a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 11:40:37 PM UTC  (a few moments ago)

File size:
35.4 MB (37,116,640 bytes)

Product version:
7.9.0.7343

Copyright:
© 2015 Sogou.com Inc. All rights reserved.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\appdata\local\temp\sogou_pinyin_7.9.0.7343.exe

Digital Signature
Signed by:
Sogou.com

Authority:
Symantec Corporation

Valid from:
9/30/2015 2:00:00 AM

Valid to:
9/29/2018 1:59:59 AM

Subject:
CN=Sogou.com, OU=Desktop, O=Sogou.com, L=Beijing, S=Beijing, C=CN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
7DC702075FCCDB9E63385FF51314C4CE

File PE Metadata
Compilation timestamp:
4/10/2010 2:19:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:PRe/4sTp1jEdijvUgnE8Trl3jip1O1iRX6cHrzQly44XwPYwpq:PRe/1d3TDT53jQ1m0qcHvMy3wPYh

Entry address:
0x354B

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 84, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, 06, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 04, 86, 40, 00, 68, A0, 85, 46, 00, E8, 35, 26, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Entropy:
7.9997

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file sogou_pinyin_7.9.0.7343.exe has been seen being distributed by the following 44 URLs.

http://cdn2.ime.sogou.com/a298f2aebaac2817726c2de6ed7fba54/569211bf/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/5b85de74233a1945b6fdcee3a3d27101/5695abde/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/cd34213c4df67cd400751931d52838d0/569ec100/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/15f112837c84db5b7c424fcd619cd916/569f48b4/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/7574b3886383e8d344d8e4d1b5aeb2d1/5690ed80/dl/index/.../sogou_pinyin_79a.exe

http://dlc2.pconline.com.cn/filedown_37742_7023556/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/178e98fd414938130885e91a654517b3/569e41c6/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/f31e5398ca3c1202a81f22cec18bc4ea/56926515/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/302a907c6f7351bddff41bf03c9ab4a6/569f6c84/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/62722173bf8f3f0cc956e4cb80f00e59/5698e1fa/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/92031434f37c9c841b5a6a4007fe0472/5690170c/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/c05434c52a4233b23c01afd4a6f58919/568e9bfc/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/5271c24e383b43fcb66ee576de2927c2/56a6c843/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/76fccf7db70e056dafdd04e72ebfa575/56972379/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/7daf58817f317460ab44cad5ae3a03ab/56970a7d/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/b5c2662633a720ef9bdf765a625e2283/5699f6d8/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/26fa269dda2443a6ae8b35d0f956bc2f/568f05b7/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/8058a2fb47a694ce96c8bfa3a03a3ca6/569a48ef/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/f700428ebf0040a17bea94aca462adb4/569e5f31/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/04e9532bd422c0960cfe7b3ecd5fd1c9/56a6a08d/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/d21bf06f851238053eec32ec427d2a47/5696fc1c/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/0b9e921b22c10e4973e321090c8b81e0/569f61ce/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/9c8db323e55c4d79f1849d41d74b43c2/56a2c80d/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/033146548e9d1a50281ecfe3c36ba79b/56a3713c/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/fff0551eb86335cf3f67942f0f7e15f7/569d21e6/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/5a83bdc989a823013a4e90bcf54f2038/5695089a/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/b32aec90293eb8f3909bedb4c1213a4e/568e3b9d/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/b91f885dcf1ea11570a3cbda4f8013e3/56a6bb28/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/531c6b9f23d6195b9f3b5384f2e9c6de/56a5740c/dl/index/.../sogou_pinyin_79a.exe

http://cdn2.ime.sogou.com/b6795fa772bb5d305cfba1ffbe20a4da/569e940b/dl/index/.../sogou_pinyin_79a.exe

Latest 30 of 44 download URLs

Scan sogou_pinyin_7.9.0.7343.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.