home

ws_a_test_br_201382102320.exe

Taiwan Shui Mu Chih Ching Technology Limited

The application ws_a_test_br_201382102320.exe by Taiwan Shui Mu Chih Ching Technology Limited has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
SoftStud  (signed by Taiwan Shui Mu Chih Ching Technology Limited)

Description:
SoftStud

Version:
1.0.4.1953

MD5:
a49d412cb266eb66bb514d19164b2e6a

SHA-1:
d5ee52049fc27b46ea0476ad0a4005d33cfe4d1b

SHA-256:
0e209a2737078dc019fe5923c96bb1b19be2b5e396f772ba653c9d8c59fbe512

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/23/2024 5:36:27 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Thinknice (M)
16.12.15.3

File size:
825.2 KB (844,968 bytes)

Product version:
1.0.4.1953

Copyright:
Copyright (C) 2012

Original file name:
SoftStud.exe

File type:
Executable application (Win32 EXE)

Language:
English

Common path:
C:\users\{user}\deskplus\ws_a_test_br_201382102320.exe

Digital Signature
Signed by:
Taiwan Shui Mu Chih Ching Technology Limited

Authority:
GlobalSign nv-sa

Valid from:
3/13/2013 9:15:13 AM

Valid to:
3/14/2014 9:15:13 AM

Subject:
CN=Taiwan Shui Mu Chih Ching Technology Limited, O=Taiwan Shui Mu Chih Ching Technology Limited, L=新北, S=台湾, C=TW

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121243D90C81CD8FEC70E99813154FB6459

File PE Metadata
Compilation timestamp:
9/22/2013 9:18:15 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

Entry address:
0x685C7

Entry point:
E8, A1, F3, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 53, 8B, 5D, 10, 8B, C3, 56, 83, E8, 00, 0F, 84, DC, 16, 00, 00, 48, 0F, 84, C4, 16, 00, 00, 48, 0F, 84, 8E, 16, 00, 00, 48, 0F, 84, 3D, 16, 00, 00, 8B, 55, 0C, 48, 0F, 84, AB, 15, 00, 00, 8B, 75, 08, 57, 83, FB, 20, 0F, 82, A1, 04, 00, 00, 8B, 06, 3B, 02, 0F, 84, 80, 00, 00, 00, 0F, B6, F8, 0F, B6, 02, 2B, F8, 74, 16, 33, C9, 85, FF, 0F, 9F, C1, 8D, 0C, 4D, FF, FF, FF, FF, 85, C9, 0F, 85, 9B, 08, 00, 00, 0F, B6, 7E, 01, 0F, B6, 42, 01, 2B, F8, 74, 16, 33...
 
[+]

Entropy:
6.7414

Code size:
526.5 KB (539,136 bytes)

Remove ws_a_test_br_201382102320.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.