home

SothinkProcess.exe

{B166CCA7-3C5E-4e11-9D4F-582FB510777A}CompanyName#####################################################################################################

Zhang Qingming

Publisher:
Sothink Software.  (signed by Zhang Qingming)

Product:
{B166CCA7-3C5E-4e11-9D4F-582FB510777A}CompanyName#####################################################################################################

Description:
Sothink Media Toolkit

Version:
1, 0, 0, 1

MD5:
c5333ea328d6d422ba9d5c12c934279a

SHA-1:
25a0979fd41d0a1f3dd413053dbc978a34a68baf

SHA-256:
138b6641b5d12eb612f5186140f4ba233333ec6c5b4ca7675715781dead65627

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 6:20:00 AM UTC  (today)

File size:
7.1 MB (7,451,192 bytes)

Product version:
1, 0, 0, 1

Copyright:
{B166CCA7-3C5E-4e11-9D4F-582FB510777A}CompanyName#####################################################################################################

Original file name:
SothinkProcess.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\sothink media toolkit\sothinkprocess.exe

Digital Signature
Signed by:
Zhang Qingming

Authority:
WoSign CA Limited

Valid from:
5/3/2016 9:45:10 PM

Valid to:
7/3/2018 9:45:10 PM

Subject:
CN=Zhang Qingming, L=Xin'an, S=Henan, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:
59175614D1A425E2DC449E8E51002AA9

File PE Metadata
Compilation timestamp:
8/19/2016 5:18:07 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
196608:rJy43RWJ3/WIXhz52z0zfAKS62ILvRNZaqwc2Z:1X3RWJ3/WEn2z0zfyB6hwzZ

Entry address:
0x1000

Entry point:
68, 01, 60, 4A, 01, E8, 01, 00, 00, 00, C3, C3, 20, 66, 72, EF, 21, 25, 6A, 4D, B6, 5D, 6F, 07, 2C, 26, D5, 11, 85, A2, 30, F3, 04, 06, 67, 79, CE, C1, F7, 8E, F2, 07, 87, 29, 64, 02, 55, 4D, 38, D4, 2E, 89, D2, F4, 86, EC, 64, BD, 99, D9, 9E, 0F, 5B, E0, 8C, 2F, A3, F2, 9B, 84, 7C, 00, F1, C6, 7A, EB, 59, E1, B0, 92, 3D, 58, 11, 3F, A2, 4A, 6B, CC, 89, 1B, 55, 19, 92, 91, 03, E8, 7A, A3, E5, 58, 65, B6, 41, 48, CC, 0F, F3, 52, E5, B9, 07, FC, 52, 3B, 0C, CA, 64, 67, EC, CB, E7, 1E, 25, E4, D2, 4A, 2F, B8...
 
[+]

Entropy:
7.9130

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
7.1 MB (7,457,280 bytes)

Scan SothinkProcess.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.