» soda_3d_7_installer.exe
Overview
Analysis
File Details
Behaviors (1)
Downloads (2)

soda_3d_7_installer.exe

Soda PDF 3D Reader Installer

LULU SOFTWARE LIMITED

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program Soda PDF 3D Reader by LULU Software Limited. The file has been seen being downloaded from download3d.sodapdf.com and multiple other hosts.

File name:

Publisher:

LULU SOFTWARE LIMITED (signed and verified)

Product:

Soda PDF 3D Reader Installer

Version:

7.0.8.21598

MD5:

7d65220462c3386054ad48eb15d75f5b

SHA-1:

b187957423519b7254cfb85fc4ba1c3f9ba9bc1d

SHA-256:

9e801930c5e86cf6bbbef5c45c1ecd6bd10fcdb32ae6319695ef9becceaf52c9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/30/2024 3:59:14 AM UTC (today)

File size:

5.6 MB (5,923,416 bytes)

Product version:

7.0.8.21598

Original file name:

PDF Installer.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\soda_3d_7_installer.exe

Digital Signature

Signed by:

LULU SOFTWARE LIMITED

Authority:

VeriSign, Inc.

Valid from:

10/19/2014 8:00:00 PM

Valid to:

1/18/2017 6:59:59 PM

Subject:

CN=LULU SOFTWARE LIMITED, O=LULU SOFTWARE LIMITED, L=Ta'Xbiex, S=XBX, C=MT

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0768200E7F5A53461703AE577D989C30

File PE Metadata

Compilation timestamp:

1/22/2015 9:35:16 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

98304:SBa+YGxCyQ0X4uw2I5JfBTmNMwnKjVOs7qbsSL2zZ5liEgDRZgg/WMvInUJ9IrMB:FGgyQ0X432I5JBiyTf7q4SoZ4//Ws4gT

Entry address:

0xA9E220

Entry point:

60, BE, 00, 40, 90, 00, 8D, BE, 00, D0, AF, FF, C7, 87, C0, F6, 50, 00, D1, 63, 3C, 73, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB... 
[+]

Entropy:

7.7851

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:

5.6 MB (5,877,760 bytes)

Program Uninstaller

Program name:

Soda PDF 3D Reader

Display publisher:

LULU Software Limited

Display version:

7.0.8.21598

Uninstall string:

C:\ProgramData\Soda PDF 3D Reader\Installation\Soda_PDF_3D_Reader_Installer.exe /uninstall

The file soda_3d_7_installer.exe has been seen being distributed by the following 2 URLs.

http://download3d.sodapdf.com/download.ashx?productcode=sodapdf3D$params=uid=1001962&cmp=shell&mkey1=reader&mkey2=sodapdf.com/file-extension-cbr-cbz&key1=default&key2=default&keyb=default&partner=file_x_cbr_cbz_en$dwld=http://download3d.sodapdf.com/.../

http://sodapdf.com/.../download.aspx

Scan soda_3d_7_installer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.