× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 2d8e2fb4f61852d137543e788482c5da4d478e9b3238669e3c5a197f60e34b70
File name: SmartFTP.msi
Detection ratio: 1 / 56
Analysis date: 2017-03-14 18:42:39 UTC ( 2 years, 1 month ago )
Antivirus Result Update
Ikarus Trojan.Win32.HackTool 20170314
Ad-Aware 20170314
AegisLab 20170314
AhnLab-V3 20170314
Alibaba 20170228
ALYac 20170314
Antiy-AVL 20170314
Arcabit 20170314
Avast 20170314
AVG 20170314
Avira (no cloud) 20170314
AVware 20170314
Baidu 20170314
BitDefender 20170314
Bkav 20170313
CAT-QuickHeal 20170314
ClamAV 20170314
CMC 20170314
Comodo 20170314
CrowdStrike Falcon (ML) 20170130
Cyren 20170314
DrWeb 20170314
Emsisoft 20170314
Endgame 20170222
ESET-NOD32 20170314
F-Prot 20170314
F-Secure 20170314
Fortinet 20170314
GData 20170314
Sophos ML 20170203
Jiangmin 20170314
K7AntiVirus 20170314
K7GW 20170314
Kaspersky 20170314
Kingsoft 20170314
Malwarebytes 20170314
McAfee 20170314
McAfee-GW-Edition 20170314
Microsoft 20170314
eScan 20170314
NANO-Antivirus 20170314
nProtect 20170314
Palo Alto Networks (Known Signatures) 20170314
Panda 20170313
Qihoo-360 20170314
Rising 20170314
Sophos AV 20170314
SUPERAntiSpyware 20170314
Symantec 20170314
Tencent 20170314
TheHacker 20170311
TotalDefense 20170314
TrendMicro 20170314
Trustlook 20170314
VBA32 20170314
VIPRE 20170314
ViRobot 20170314
Webroot 20170314
WhiteArmor 20170303
Yandex 20170312
Zillya 20170314
ZoneAlarm by Check Point 20170314
Zoner 20170314
The file being studied is a Windows Installer file! These types of files are software components used for the installation, maintenance, and removal of software on modern Microsoft Windows systems.
Authenticode signature block
Signature verification Signed file, verified signature
Signing date 7:25 PM 3/14/2017
Signers
[+] SmartSoft Ltd
Status Valid
Valid from 1:00 AM 4/9/2014
Valid to 1:00 PM 6/12/2017
Valid usage Code Signing
Algorithm sha256RSA
Thumbrint D8EA82EFA8790564D7AC0712B9A7A9827CE9BB59
Serial number 0C BA E4 28 FA 2A 23 63 B1 69 AF EC 43 31 E4 E2
[+] DigiCert SHA2 Assured ID Code Signing CA
Status Valid
Valid from 1:00 PM 10/22/2013
Valid to 1:00 PM 10/22/2028
Valid usage Code Signing
Algorithm sha256RSA
Thumbrint 92C1588E85AF2201CE7915E8538B492F605B80C6
Serial number 04 09 18 1B 5F D5 BB 66 75 53 43 B5 6F 95 50 08
[+] DigiCert
Status Valid
Valid from 1:00 AM 11/10/2006
Valid to 1:00 AM 11/10/2031
Valid usage Server Auth, Client Auth, Email Protection, Code Signing, Timestamp Signing
Algorithm sha1RSA
Thumbrint 0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
Serial number 0C E7 E0 E5 17 D8 46 FE 8F E5 60 FC 1B F0 30 39
Counter signers
[+] COMODO SHA-256 Time Stamping Signer
Status Valid
Valid from 1:00 AM 12/31/2015
Valid to 7:40 PM 7/9/2019
Valid usage Timestamp Signing
Algorithm sha256RSA
Thumbrint 36527D4FA26A68F9EB4596F1D99ABB2C0EA76DFA
Serial number 4E B0 87 8F CC 24 35 36 B2 D8 C9 F7 BF 39 55 77
[+] USERTrust (Code Signing)
Status Valid
Valid from 7:31 PM 7/9/1999
Valid to 7:40 PM 7/9/2019
Valid usage EFS, Timestamp Signing, Code Signing
Algorithm sha1RSA
Thumbrint E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
Serial number 44 BE 0C 8B 50 00 24 B4 11 D3 36 2D E0 B3 5F 1B
OLE structured storage summary
creation_datetime
2017-03-14 19:25:36
author
SmartSoft Ltd.
title
Installation Database
page_count
500
last_saved
2017-03-14 19:25:36
word_count
2
application_name
WiX Toolset (4.0.0.4506)
comments
This installer database contains the logic and data required to install the SmartFTP Client.
revision_number
{2D8C81B0-0BF2-48A2-8820-C74B1CF42481}
keywords
Install,MSI
security
2
subject
SmartFTP Client
code_page
Latin I
template
Intel;1033
OLE Streams
name
Root Entry
clsid
000c1084-0000-0000-c000-000000000046
type_literal
root
clsid_literal
on
sid
0
size
12096
type_literal
stream
size
5593
name
\x05DigitalSignature
sid
58
type_literal
stream
size
32
name
\x05MsiDigitalSignatureEx
sid
57
type_literal
stream
size
532
name
\x05SummaryInformation
sid
2
type_literal
stream
size
12650371
name
\u4127\u4137\u4781\u4126\u4825
sid
51
type_literal
stream
size
77965
name
\u4192\u4472\u3cbe\u44a6\u47f1\u441c\u4564\u3bf7\u3e5d\u423e\u423b
sid
23
type_literal
stream
size
14336
name
\u430b\u4131\u4735\u3f3e\u3f4f\u3b19\u45b8\u44b7\u3ab0\u45e6\u44ac\u3b71\u3d55
sid
6
type_literal
stream
size
87054
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u3aff\u44f0\u3aff\u4464\u4231\u4835
sid
9
type_literal
stream
size
79246
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u3aff\u44f0\u3b7f\u412c\u44af\u482a
sid
10
type_literal
stream
size
318
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u3aff\u44f0\u3dff\u46a8
sid
13
type_literal
stream
size
318
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u3aff\u44f0\u3fbf\u4833
sid
14
type_literal
stream
size
766
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u3cbf\u44a6\u3bbf\u41bb\u412f\u4830
sid
11
type_literal
stream
size
1078
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u3cbf\u44a6\u3cbf\u4271\u4832
sid
12
type_literal
stream
size
104960
name
\u430b\u4131\u4735\u403e\u46ec\u3c9e\u4320\u41bb\u4824
sid
8
type_literal
stream
size
119808
name
\u430b\u4131\u4735\u403e\u46ec\u430f\u4235\u413a\u43ef\u3a8c
sid
7
type_literal
stream
size
1680
name
\u4840\u3b3f\u43f2\u4438\u45b1
sid
54
type_literal
stream
size
204
name
\u4840\u3c9e\u421d\u45fb
sid
43
type_literal
stream
size
112468
name
\u4840\u3f3f\u4577\u446c\u3b6a\u45e4\u4824
sid
56
type_literal
stream
size
12192
name
\u4840\u3f3f\u4577\u446c\u3e6a\u44b2\u482f
sid
55
type_literal
stream
size
82
name
\u4840\u3f7f\u4164\u422f\u4836
sid
53
type_literal
stream
size
5088
name
\u4840\u3fff\u43e4\u41ec\u45e4\u44ac\u4831
sid
52
type_literal
stream
size
12
name
\u4840\u4115\u4478\u42e6\u448c\u41f1\u45ec\u44ac\u4831
sid
24
type_literal
stream
size
36
name
\u4840\u411b\u4327\u3af2\u45f8\u44b7\u4831
sid
40
type_literal
stream
size
36
name
\u4840\u418a\u4337\u4472\u421d\u45fb
sid
33
type_literal
stream
size
4
name
\u4840\u4192\u4472
sid
22
type_literal
stream
size
54
name
\u4840\u41ca\u4330\u3bb1\u423b\u4626\u4237\u421c\u4634\u4468\u4226
sid
46
type_literal
stream
size
48
name
\u4840\u41ca\u4330\u3fb1\u3f12\u4528\u4238\u41b1\u4828
sid
45
type_literal
stream
size
48
name
\u4840\u41ca\u45f9\u46ce\u41a8\u45f8\u3f28\u4528\u4238\u41b1\u4828
sid
47
type_literal
stream
size
172
name
\u4840\u420f\u45e4\u4578\u3b28\u4432\u44b3\u4231\u45f1\u4836
sid
1
type_literal
stream
size
32
name
\u4840\u420f\u45e4\u4578\u4828
sid
20
type_literal
stream
size
14
name
\u4840\u4216\u4327\u4824
sid
25
type_literal
stream
size
11412
name
\u4840\u421b\u432a\u45f6\u4735
sid
27
type_literal
stream
size
20
name
\u4840\u421b\u44b0\u4239\u430f\u422f
sid
30
type_literal
stream
size
36
name
\u4840\u421d\u45fb\u45dc\u43fc\u4828
sid
36
type_literal
stream
size
4
name
\u4840\u42cc\u41a8\u3aee\u46f2
sid
42
type_literal
stream
size
64
name
\u4840\u42dc\u4572\u41b7\u45f8
sid
31
type_literal
stream
size
36
name
\u4840\u430b\u4131\u4735
sid
5
type_literal
stream
size
54
name
\u4840\u430d\u4235\u45e6\u4572\u483c
sid
18
type_literal
stream
size
418
name
\u4840\u430d\u43e4\u42b2
sid
38
type_literal
stream
size
960
name
\u4840\u430f\u422f
sid
21
type_literal
stream
size
26
name
\u4840\u431c\u446a\u45e4\u4578\u4828
sid
3
type_literal
stream
size
24
name
\u4840\u4320\u3bfb\u456c\u46a8\u43e4\u3baf\u41bb\u44e8\u4337\u4472
sid
32
type_literal
stream
size
222
name
\u4840\u4452\u45f6\u43e4\u3baf\u423b\u4626\u4237\u421c\u4634\u4468\u4226
sid
49
type_literal
stream
size
138
name
\u4840\u4452\u45f6\u43e4\u3faf\u3f12\u4528\u4238\u41b1\u4828
sid
48
type_literal
stream
size
516
name
\u4840\u448c\u44f0\u4472\u4468\u4837
sid
16
type_literal
stream
size
6
name
\u4840\u448c\u44f0\u4495\u4126\u44b7\u4835
sid
15
type_literal
stream
size
488
name
\u4840\u448c\u45f1\u44b5\u3b2f\u4472\u4327\u4337\u4472
sid
41
type_literal
stream
size
1440
name
\u4840\u448c\u45f1\u44b5\u3baf\u4239\u45f1
sid
35
type_literal
stream
size
4862
name
\u4840\u448c\u45f1\u44b5\u482f
sid
37
type_literal
stream
size
8
name
\u4840\u449c\u45e9\u413a\u4235\u41d2\u4468\u4337\u4329\u4126\u4337\u4472\u411d\u482a
sid
44
type_literal
stream
size
8
name
\u4840\u44ca\u3f33\u4128\u41b5\u482b
sid
4
type_literal
stream
size
64
name
\u4840\u44de\u456a\u41e4\u4828
sid
28
type_literal
stream
size
24
name
\u4840\u454d\u4495\u4126\u44b7\u4835
sid
19
type_literal
stream
size
4
name
\u4840\u454e\u44b5\u4835
sid
34
type_literal
stream
size
124
name
\u4840\u4559\u44f2\u4568\u4737
sid
26
type_literal
stream
size
240
name
\u4840\u4596\u3bec\u43ec\u3c68\u45a4\u482b
sid
50
type_literal
stream
size
16
name
\u4840\u4596\u3f2c\u44ab\u45f5\u4626\u3e77\u44b5\u4233\u45f5\u483c
sid
29
type_literal
stream
size
252
name
\u4840\u460c\u45f6\u4432\u418a\u4337\u4472
sid
17
type_literal
stream
size
40
name
\u4840\u464e\u4468\u3db7\u44e4\u4333\u42b1
sid
39
ExifTool file metadata
MIMEType
image/vnd.fpx

ModifyDate
2017:03:14 18:25:36

Template
Intel;1033

Title
Installation Database

FileType
FPX

Author
SmartSoft Ltd.

Comments
This installer database contains the logic and data required to install the SmartFTP Client.

CodePage
Windows Latin 1 (Western European)

FileTypeExtension
fpx

Words
2

Keywords
Install,MSI

CreateDate
2017:03:14 18:25:36

Security
Read-only recommended

Software
WiX Toolset (4.0.0.4506)

Pages
500

RevisionNumber
{2D8C81B0-0BF2-48A2-8820-C74B1CF42481}

Subject
SmartFTP Client

File identification
MD5 8ecd599ea1cafc33f1a0e6b1dc73df73
SHA1 4fe3c957ab707314aeb4c6f4eb06f39b6812ee20
SHA256 2d8e2fb4f61852d137543e788482c5da4d478e9b3238669e3c5a197f60e34b70
ssdeep
393216:ezMBdLzufHnPOD2dU4kK+TRb9ZikTasX09:skufmD2L+FbukHk9

File size 12.7 MB ( 13361152 bytes )
File type Windows Installer
Magic literal
CDF V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Title: Installation Database, Subject: SmartFTP Client, Author: SmartSoft Ltd., Keywords: Install,MSI, Comments: This installer database contains the logic and data required to install the SmartFTP Client., Template: Intel

TrID Microsoft Windows Installer (98.5%)
Generic OLE2 / Multistream Compound File (1.4%)
Tags
msi signed

VirusTotal metadata
First submission 2017-03-14 18:42:39 UTC ( 2 years, 1 month ago )
Last submission 2017-03-14 18:42:39 UTC ( 2 years, 1 month ago )
File names SmartFTP.msi
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!