» sothink dvd copy giveaway version.exe
Overview
Analysis
File Details

sothink dvd copy giveaway version.exe

Sothink Media Toolkit

Zhang Qingming

File name:

Publisher:

Sothink Software. (signed by Zhang Qingming)

Product:

Sothink Media Toolkit

Version:

1.0.0.2

MD5:

262192e9af325f8e7f6098a1e6787208

SHA-1:

29fb7ed72b5f3484a0e631fa6f7943c0e6f4a2c9

SHA-256:

31841e5bec932f5c0dc6ec655c0722d2a620e7305962e15ccfcaad3b16057874

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/27/2024 7:12:59 AM UTC (today)

File size:

11.9 MB (12,522,040 bytes)

Product version:

1.0.0.2

Original file name:

Sothink.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\sothink dvd copy giveaway version\sothink dvd copy giveaway version.exe

Digital Signature

Signed by:

Zhang Qingming

Authority:

WoSign CA Limited

Valid from:

5/4/2016 3:45:10 AM

Valid to:

7/4/2018 3:45:10 AM

Subject:

CN=Zhang Qingming, L=Xin'an, S=Henan, C=CN

Issuer:

CN=WoSign Class 2 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:

59175614D1A425E2DC449E8E51002AA9

File PE Metadata

Compilation timestamp:

7/6/2016 10:47:52 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

196608:12w+g0MYR71+mIgoGh6b0tct+kMIxVxFbCPiQ3UMi+0MFF+WX8e0FwFrKZx7F:DQM470Q364tct+kB/xF2pUMi+WWXMwg

Entry address:

0x1000

Entry point:

68, 01, B0, 46, 03, E8, 01, 00, 00, 00, C3, C3, 5F, F0, 64, 27, AF, 3B, 11, FF, 43, E2, 43, F3, AA, 9C, 35, FD, B4, 73, 25, E1, 33, 23, B3, C3, 1E, 7F, 5D, 39, 27, 96, 7B, B1, EF, F2, C4, 10, E4, 82, 4E, 05, 73, 93, E6, 82, 75, 09, 23, A7, 3B, 71, A4, 6C, 8A, BB, 2A, 83, A4, 1B, 12, FD, F2, DB, 0A, A0, 3E, A4, 17, FC, 4D, FA, 28, 23, 4C, EF, FD, 37, DF, C3, B3, 30, A4, 5F, 5D, 37, B6, 9E, E3, 56, 00, C5, D7, FD, A6, FF, FB, 61, 14, EF, 19, 1C, 11, 46, 36, EE, C6, 21, F0, 46, 5E, C6, AB, C6, AD, 44, 9E, 1A... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

26.8 MB (28,059,648 bytes)

Scan sothink dvd copy giveaway version.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.