home

sos.exe

SOSLoader

Thomson Reuters

Publisher:
Thomson Reuters  (signed and verified)

Product:
SOSLoader

Description:
Loader

Version:
1.0

MD5:
a69ebe01cb34ad2b691861f56c79cd1f

SHA-1:
d69f621ab0c868f788f6738696771a7baa0bab4d

SHA-256:
8a36a28cd1ec2182ffcd0e16a945b2d312aa4b6b6fcc27fe6cbb039de0906838

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 9:46:22 AM UTC  (today)

File size:
839.9 KB (860,104 bytes)

Product version:
1.1

Copyright:
Thomson Reuters

Original file name:
SOSLoader.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Thomson Reuters

Authority:
Symantec Corporation

Valid from:
8/2/2015 7:00:00 PM

Valid to:
8/3/2017 6:59:59 PM

Subject:
CN=Thomson Reuters, OU=Legal, O=Thomson Reuters, L=Eagan, S=Minnesota, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2EF5B4D2D26A8A9281CA351660A566C8

File PE Metadata
Compilation timestamp:
10/4/2016 9:56:59 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
12288:Djrqb1LaI+eG+QwyocW0J2hRnuBOm4GdQH0nWNm:3aLaI+9OcW0J2hYXHU0WQ

Entry address:
0x192A4

Entry point:
DB, E3, 31, C0, BB, 68, 32, 43, 00, 89, C1, E8, 7C, 84, FE, FF, 09, C0, 74, 14, B8, 4C, 7C, 42, 00, E8, 76, 84, FE, FF, E8, 11, 84, FE, FF, B8, 00, 00, 00, 00, E8, 1F, 84, FE, FF, 90, 90, 90, 83, EC, 2C, 56, 57, B8, 2C, 38, 45, 00, E8, 25, 1B, 00, 00, 89, C3, B8, 6C, 37, 45, 00, E8, 19, 1B, 00, 00, 89, 44, 24, 30, B8, D0, 36, 45, 00, E8, 0B, 1B, 00, 00, 89, 44, 24, 2C, B8, 5C, 36, 45, 00, E8, FD, 1A, 00, 00, 89, 44, 24, 28, B8, 9C, 35, 45, 00, E8, EF, 1A, 00, 00, 89, 44, 24, 24, B8, 50, 35, 45, 00, E8, E1...
 
[+]

Entropy:
6.0609

Code size:
169.5 KB (173,568 bytes)

Scan sos.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.