home

กู้ไฟล์ซ่อน.exe

กู้ไฟล์ซ่อน

กันยาละมุลภัณฑ์

Publisher:
กันยาละมุลภัณฑ์

Product:
กู้ไฟล์ซ่อน

Description:
คัดลอกไปใช้ได้โดยไม่ต้องติดตั้ง

Version:
1.00

MD5:
a3df03b8ceba40d8b8666d2ef38e479c

SHA-1:
fa20310adac9593d30c03a9fc2ee011d5c4b7956

SHA-256:
bd263206d5f75674830f561a6108b5fc2545cbda3e634e9e02ef41eaa84d0785

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 6:54:43 AM UTC  (today)

File size:
172 KB (176,128 bytes)

Product version:
1.00

Copyright:
ปฐมเชทย์ บุญลือลักษณ์

Trademarks:
กันยาละมุลภัณฑ์

Original file name:
กู้ไฟล์ซ่อน.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\???????????.exe

File PE Metadata
Compilation timestamp:
12/10/2012 9:59:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:/3rw1qR/epyGbOnojt+aDSsyve+MM3X/IMhbTTTAbTTT/4:DLtewPolSlvPzQ6TTTQTTTA

Entry address:
0x1450

Entry point:
68, 7C, 2A, 42, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 6C, 1A, AB, F4, 1E, 01, C7, 42, 9A, 72, 2B, 88, 85, C1, 33, CE, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 16, 28, 8F, 49, 57, FF, 46, 69, 78, 46, 6C, 6F, 64, 65, 72, 00, FF, AC, 78, 82, 6F, 16, 00, 00, 00, 00, FF, CC, 31, 00, 10, 0C, 8C, 3B, C0, D7, 54, D4, 46, 85, 72, 36, 39, 53, 78, 0C, 97, 8B, BB, CD, F8, 02, 77, D8, 45, 98, 05, 37, DF, 53, 99, 46, 08, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
3.4815

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
156 KB (159,744 bytes)

The file กู้ไฟล์ซ่อน.exe has been seen being distributed by the following 3 URLs.

https://docs.google.com/uc?id=0B-cFX3VEaKJreklFR3VqZmVhcG8&export=download

https://docs.google.com/uc?authuser=0&id=0B-cFX3VEaKJreklFR3VqZmVhcG8&export=download

https://doc-08-9o-docs.googleusercontent.com/docs/securesc/226qseagefl181fr4t5udu0chrq396n7/lutte1nb8subbanp8u6tm9ju4msto1i9/1452477600000/05621908555787370578/.../0B-cFX3VEaKJreklFR3VqZmVhcG8?e=download&nonce=36c0jh4c4fk8g&user=07588771346496320112&hash=sckr56r2uod946inud96k0u84c8b9ktq

Scan กู้ไฟล์ซ่อน.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.