home

321softflashmemoryrecovery.exe

321Soft Flash Memory Recovery

LC Technology International, Inc

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
LC Technology International, Inc.   (signed by LC Technology International, Inc)

Product:
321Soft Flash Memory Recovery

Description:
321Soft Flash Memory Recovery Setup

MD5:
f2488af13ae25234fe4b4c9282aa685a

SHA-1:
9d071f42842a206c65088f6f2239ab0e7b82f1ad

SHA-256:
267208403f772437ef613ba159f68cc698aefc046b77a374414dce38ca714074

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 10:59:14 AM UTC  (today)

File size:
7.3 MB (7,631,464 bytes)

Product version:
5.5

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Digital Signature
Signed by:
LC Technology International, Inc

Authority:
The USERTRUST Network

Valid from:
10/5/2010 1:00:00 AM

Valid to:
10/5/2012 12:59:59 AM

Subject:
CN="LC Technology International, Inc", O="LC Technology International, Inc", STREET=29750 US 19 Hwy N, STREET=Suite 310, L=Clearwater, S=FL, PostalCode=33761, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
6B0299CF20242EB41283AAD7A1184B3E

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:Oa8cvjZJZ8nwc64SMti9YibZEoeC7hVHaF:1jCnwd4ttarZEofVY

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9995

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file 321softflashmemoryrecovery.exe has been seen being distributed by the following 9 URLs.

https://dw.uptodown.com/dwn/o0QG5uRQNJKSc8H7wDG_4Le-nPyqQ3NNtw_eSkwbj1t1KHW6wiYSQmU5sf9DsYH2LVrM04xP7TkCVtgjrE2MZadhkgStAaRGCGhO37glkzVJSdAgcpm4Lu8DrkLBoXUP/sOyVBNrVB1ULDedJedNH27ES5Lj9TU8t7t6gN0Y5MR7OXQt-dbLZmySn8XqRDh2OxHbOmsIV8ZAr37Qo_Zrcxf5IBi6n0d4tpbAYYhgcXIMKcFVW3gicpj5wqHE42Iy0/mcIVBXcrzYCVkS3ghP7WBgzcvl4JR6fTq1bovIxZmyxuTZAujpaualUoqVR0ekCqOhdOE8zcKSoH2ukFEXl0aoUchlhZPVx9NoYAnRgwwo5SJT1k3KtEu4wsdxiFJuB_/.../

http://dw.uptodown.com/dwn/hnkHLUq_GAyZOfb0fV0UNBu1HD-BYB4KSLvfPtUnWklXMvTRnR2i-KpqWHTm6OZhvc0G64NjIO7TJaoipH_gE1-hz5h1c20NC4MisuCjHvcJbgMoEdYK1KtlkmC_qAWk/KmKApjAxlIngZPinv5cwJP2Z8rMO7UNjlr3tt6AX5A1j-2Ajde546Jr98dmhQiSoN4dneZQdIYwYTtSMWvb60sYAuMOgZWwJXdgHpl2gYJ2nwJLmK9Bt8xL2-dXcQX9z/dWl9TZfjkQKlSSezpYQaU2eH8nXCewGNdbry4NcIJ8fuFQ6RTnjUNHwV-NSTioAzdITkRDD5P_xoCsvCNAAe0ma_7F9rjfS5fLwuRVGeoc_gJhtikYfJ21RiNl8cIpBy/.../

http://dw.uptodown.com/dwn/BuPgguOndoh_lP3SDFmwDybnG-NuP2Y6APy3HKDrMLda-kTyimeykovf532vAadXTPHTmDte4E98Uzcpgyov30huQnA-10THJUWO96_y95yPzR5wQmtfF5UJVeNbDNqc/4lq9ky6uSD-ym_Z4TA5h96suaUP2tYjg0ks18EKaDseRstbPkiZOBFEqJXbDDw32SkyyORwcy6-1h_LDS8-6IL8L8zgmi-ybg048gQ8vOt2u5CZz7n7zZr_Cnw1aaLvA/PzIHYR1iF96ZpOxmI4rjLiMwiHYQQx-QGIIvXVqxwzcHx7Q4Ez98-blxt-J4yUuRHsCtveJWolYGoB5iwk0kGExQomR6iwZcDQM4avdDmNX1yMerAKzWI6jU65AqsJX-/.../

https://dw.uptodown.com/dwn/ZudNb0_gH5OCXA1KZg_whwINM5v8-HjTtDz40e8UiBExjMdsoKDkuYOgFrpd8T_oKPelbcBgW6lfj0jHdcceLV9TYNPgGwpsiNdI0Z9qzvehzVVrH78e-v291BXZVbO1/nuq5cU7oHSnzNAnhOZp0NoGzG__fygeFQy_5k1dW4KuiMw9_S-qi8W94Krf0EmTBtx5rsEPl7qLuPWTrdVOBvFvr_1f0Fb_19ib1Yam7yWyvfPXmBslxDj0uME_gO0cI/xSMt4hom7MgAtPx88J_wQRFN40sIbkASMWdPph8iAnBGj2VjUQDlhqC1j3UqJO2Agw1QlGsz8jrCbp7OWIp2TIopMTsj-EfGZBxutI-nZ9YamhF9rfegJUmc6PlUkJiA/.../

https://dw.uptodown.com/dwn/r1AoyGjX0tIVRvgSyVHTIckz5l2ab7JW7qNtNwbr2OG96rRNHwzcadvvOqNTzA_DlG7MGapz5nX3iSIINGhFjDH-5LMRikX4nTJCRz3mmHfQvvfNMMOsP7kpkq2QY4fw/7mukcFnC2Gm_bOHOrHY9uVZsbRrPvQmRl_vJu1JCE_Rqyd9-Q25OlszBRlIhmTkb7Th4xwVLgfe5nw0p1x1ZPUl-adZnO3kN5OxHkVpNowByy41FJyWOtvLTBfERY_hg/rUPdPwzeXEy7oJ3psYUmh239LIcl6wMcOwmwtLtSyhiVLbTyDp1IjE05IJHOGbcnRqsjp6FVmOC4VbTIAQuEEWlhh3y7D5SrSH-CCrRcaBXwftfKHFk8xBoSPe5_mCt7/.../

http://files.downloadnow.com/s/software/12/32/17/.../321softFlashMemoryRecovery.exe

http://portalprogramas-download.com/d/.../flash-memory-recovery

http://cdn.portalprogramas-download.com/d/.../flash-memory-recovery

http://www.321soft.com/.../321softFlashMemoryRecovery.exe

Scan 321softflashmemoryrecovery.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.