» sw.exe
Overview
Analysis
File Details

sw.exe

SmartWhois

TamoSoft Ltd

File name:

sw.exe

Publisher:

TamoSoft (signed by TamoSoft Ltd)

Product:

SmartWhois

Version:

5.0.0.245

MD5:

1afd3ef307d4e7e0d37bfc4b914dfe73

SHA-1:

d6fa900bd74ec98580770a6f0b4c6972c11ba839

SHA-256:

7c284ae08acac3820fa43566b68eb60ea1b12a07d1497fdc4632d078cd53a4c1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 7:57:00 AM UTC (today)

File size:

3.7 MB (3,924,352 bytes)

Product version:

5.0

Trademarks:

SmartWhois is a registered trademark of TamoSoft

Original file name:

sw.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\smartwhois\sw.exe

Digital Signature

Signed by:

TamoSoft Ltd

Authority:

VeriSign, Inc.

Valid from:

9/24/2009 1:00:00 AM

Valid to:

10/23/2012 12:59:59 AM

Subject:

CN=TamoSoft Ltd, OU=Application Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TamoSoft Ltd, L=Christchurch, S=South Island, C=NZ

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4827C0A6BABC55629B62B5A3A62BD9BA

File PE Metadata

Compilation timestamp:

1/25/2010 1:32:12 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:Lcz0qB2KncMd5mUqluBo4budLM7F2xHQ:IAgcoqluS4budLMI

Entry address:

0x9A432F

Entry point:

E8, 2C, D9, E2, FF, F6, C6, A0, 9C, 2B, 4A, 10, 85, CC, F8, 3B, 4A, 14, C6, 04, 24, 00, C6, 04, 24, 77, E8, 94, 9D, C5, FF, FB, 43, 52, 0E, F0, D1, CF, 84, 85, B2, B8, 98, 48, 8A, D9, 99, AB, EA, 6A, CA, 5A, 8A, 98, 45, E5, DC, FB, 94, 96, 23, 81, F3, 93, 1B, 25, C8, 5F, 4C, F8, 93, 77, CE, 4B, CB, 47, DE, 1D, 0B, CC, D4, F0, AD, FC, 1E, 07, 37, 5E, 6C, A8, FA, 9F, 66, ED, 2C, FB, 50, C2, C8, CC, 4E, 8F, 0B, 0A, 85, 1F, 10, A7, 96, 1D, 71, B1, 38, B4, 70, 37, 05, C6, 82, B2, 5F, 6B, 56, 02, 65, A5, 68, 05... 
[+]

Entropy:

7.9408 (probably packed)

Code size:

9.7 MB (10,120,704 bytes)

Scan sw.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.