home

SothinkProcess.exe

{B166CCA7-3C5E-4e11-9D4F-582FB510777A}CompanyName#####################################################################################################

Zhang Qingming

Publisher:
Sothink Software.  (signed by Zhang Qingming)

Product:
{B166CCA7-3C5E-4e11-9D4F-582FB510777A}CompanyName#####################################################################################################

Description:
Sothink Media Toolkit

Version:
1, 0, 0, 1

MD5:
3f510261d7a4eda24d0ed775f362d277

SHA-1:
38c645e5bd5903dd16640c4af3fefd6afbaebdb0

SHA-256:
3098f0b1d4169096866e308802020284f9597f37a671993c69d7320849073eb6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 7:12:52 AM UTC  (today)

File size:
7.1 MB (7,463,992 bytes)

Product version:
1, 0, 0, 1

Copyright:
{B166CCA7-3C5E-4e11-9D4F-582FB510777A}CompanyName#####################################################################################################

Original file name:
SothinkProcess.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\sothink blu-ray copy giveaway version\sothinkprocess.exe

Digital Signature
Signed by:
Zhang Qingming

Authority:
WoSign CA Limited

Valid from:
5/3/2016 6:45:10 PM

Valid to:
7/3/2018 6:45:10 PM

Subject:
CN=Zhang Qingming, L=Xin'an, S=Henan, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:
59175614D1A425E2DC449E8E51002AA9

File PE Metadata
Compilation timestamp:
7/20/2016 9:28:16 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
196608:PJBAY2zJkZMFuUh2j/a7d3oK1P/3DiGzM87Qusz+bM/wN41B:BBAYKkZ2h2Ded3oK1P/Dir80L+4/wN47

Entry address:
0x1000

Entry point:
68, 01, 50, 4A, 01, E8, 01, 00, 00, 00, C3, C3, 12, 45, 77, AD, 58, DB, 5A, F2, 06, A0, 02, DE, EA, 8D, E7, 99, 27, D0, 4B, B3, F2, 6B, DC, E0, E2, 8A, 94, F5, 7B, A1, 71, 2A, 5D, 5C, D7, DE, DE, 4F, 29, 0D, 20, 7D, 26, 41, DD, EB, 5E, 18, F6, D3, 73, 42, 1A, 7F, 95, FC, A8, 87, 7A, 1B, 8F, EE, 89, 69, EB, 63, C1, 61, 44, AA, F4, B1, EE, 16, FD, B6, 52, 4E, 31, 87, 20, 1F, E9, 51, 36, 66, 4A, CC, 7F, 70, AE, 5E, 0F, 07, 80, 65, 77, 00, 7F, 8F, 86, 61, 29, 8F, BE, F7, 17, 91, 4B, 04, CC, C0, D6, 8C, 90, 3E...
 
[+]

Entropy:
7.9133

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
7.1 MB (7,454,208 bytes)

Scan SothinkProcess.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.