home

SothinkProcess.exe

{B166CCA7-3C5E-4e11-9D4F-582FB510777A}CompanyName#####################################################################################################

Zhang Qingming

Publisher:
Sothink Software.  (signed by Zhang Qingming)

Product:
{B166CCA7-3C5E-4e11-9D4F-582FB510777A}CompanyName#####################################################################################################

Description:
Sothink Media Toolkit

Version:
1, 0, 0, 1

MD5:
6ab6f740ca7bdeb9c951f645961cf11d

SHA-1:
3a0bc0dc9fa33a60df833a14f0b71f8c7b83a571

SHA-256:
7d6889e3e7b5802c3dc3614141928299ec0e0e7cfb10ebcb5ea83b2f5b3daa84

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 6:45:40 AM UTC  (today)

File size:
7.1 MB (7,463,992 bytes)

Product version:
1, 0, 0, 1

Copyright:
{B166CCA7-3C5E-4e11-9D4F-582FB510777A}CompanyName#####################################################################################################

Original file name:
SothinkProcess.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\sothink dvd copy giveaway version\sothinkprocess.exe

Digital Signature
Signed by:
Zhang Qingming

Authority:
WoSign CA Limited

Valid from:
5/4/2016 3:45:10 AM

Valid to:
7/4/2018 3:45:10 AM

Subject:
CN=Zhang Qingming, L=Xin'an, S=Henan, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:
59175614D1A425E2DC449E8E51002AA9

File PE Metadata
Compilation timestamp:
7/6/2016 10:41:39 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
196608:BbRb0yAo331ZUkIgoTzM87Qusz+bMTw6/u80:BV0m3lZBv80L+4TwOJ0

Entry address:
0x1000

Entry point:
68, 01, 50, 4A, 01, E8, 01, 00, 00, 00, C3, C3, 12, 45, 77, AD, 58, DB, 5A, F2, 06, A0, 02, DE, EA, 8D, E7, 99, 27, D0, 4B, B3, F2, 6B, DC, E0, E2, 8A, 94, F5, 7B, A1, 71, 2A, 5D, 5C, D7, DE, DE, 4F, 29, 0D, 20, 7D, 26, 41, DD, EB, 5E, 18, F6, D3, 73, 42, 1A, 7F, 95, FC, A8, 87, 7A, 1B, 8F, EE, 89, 69, EB, 63, C1, 61, 44, AA, F4, B1, EE, 16, FD, B6, 52, 4E, 31, 87, 20, 1F, E9, 51, 36, 66, 4A, CC, 7F, 70, AE, 5E, 0F, 07, 80, 65, 77, 00, 7F, 8F, 86, 61, 29, 8F, BE, F7, 17, 91, 4B, 04, CC, C0, D6, 8C, 90, 3E...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
7.1 MB (7,454,208 bytes)

Scan SothinkProcess.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.