home

excel-recovery-tool-demo.exe

Kernel For Excel Demo

Nucleus Data Recovery.Com Pvt Ltd

This is a self-extracting archive and installer. The file has been seen being downloaded from www.downloadpresentcity.com and multiple other hosts.
Publisher:
Nucleus Data Recovery.Com Pvt Ltd

Product:
Kernel For Excel Demo

Description:
Kernel For Excel Demo Setup

Version:
10.10.01

MD5:
c9475029086b0b3912e2f7085a393a43

SHA-1:
a0d6d03dc854a5668df59951b65ef44c2d4405d8

SHA-256:
e60177ff4ef1331e4764824948259fc13d32198e3e897dc2882a504facc02ec6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 12:37:39 PM UTC  (today)

File size:
2.3 MB (2,419,329 bytes)

Product version:
10.10.01

Copyright:
Copyright (C) 2010 Nucleus Data Recovery.Com Pvt Ltd

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\{random}\excel-recovery-tool-demo.exe

File PE Metadata
Compilation timestamp:
8/15/2009 3:29:32 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:Q42bTDR3c2w5HZesLXvI1ddQwqCj92+fJ8m577uv54OEoPR1nrB/K:U7RMNWR9B2JkuxD/nrB/K

Entry address:
0x163C4

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, A4, 52, 41, 00, E8, F0, 02, FF, FF, 33, C0, 55, 68, 89, 6A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 45, 6A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 18, AB, 41, 00, E8, F6, EC, FF, FF, E8, 01, E8, FF, FF, 8D, 55, EC, 33, C0, E8, 83, 86, FF, FF, 8B, 55, EC, B8, 74, D6, 41, 00, E8, BE, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 74, D6, 41, 00, B2, 01...
 
[+]

Entropy:
7.9692

Developed / compiled with:
Microsoft Visual C++

Code size:
84 KB (86,016 bytes)

The file excel-recovery-tool-demo.exe has been seen being distributed by the following 12 URLs.

http://www.downloadpresentcity.com/T_Iij0SZCCHRhz_kuMFb9o6njUEgUvg2tGo8RTsFtvMlIvWFuwghUM52uMcstA3e4uF5zeVZeweepWuT5C9wOb4cV3jNtXFZFU8BqmRsbhRsYP WxAjFIrdlUA81mIEq_jYfmxsh4CZYv3aKM9Z0_GaPI9AnPOUrXKpsecYIgWjIKlZ9QaU=-GyEDAGTITXIceCF46 RwX0QsEJjIAXtbDDGfxN4bB56sMfKzCMw9O6diKK_0HA6858KINQ27kjhOiEQ5WALwgTX 1QDNxSkPtBGqM8JssKSno5cM38IAHdagHGeUZyLUy0M0zI4v918eEuzetO24dtHceE2ESpIWte73 hFI1z9CJDqbb1y68IPeGMzNC7AO1rwIxrpYgc_P44 Hw98rR7Cf7x efOjYBUwwvZUAXNENtlU7rLbcjP6VZpAYA5q6x6wvNbmuOaCFWbeZQ9X2BhaPpb08IXCsLD5JInqh8BzN_eNCoHBiVv 81PSbY4tXmwCgXmvhM300L7GOzOms931tbHU599hNidrwnHGvhpM4KwzOobl5hrFvHw _ni_Ite_qVrKzY2i1VeHbU1Ii1TTyCZocL8jG2luqAl67qEsgIJvcHQ1SzOzTXMvqu7FEQaGMhGTIPHDVBe8ud3cUhozPOvb3vhE7aODz9VQwQZ3i 67e6B 2B9tTgxrZgkTCviorvnsY2aalS21ij2V MeWlQZOcWo1fU5HdKOWwOvljVIu6Lab5syhH0p6IQx7VAtRxR Xi5q0 UPgDvicl1jbiloc59ulQ7H2569vfam1H 2gOGthXeviijoGaeg5MC0YnvGwtyUD31HxjTeUg_f8boG1MJ4wgokQIwQlUqSI WOgCh0zjbRrqBsOy_wsve_4lP4uetA4XR3 k3 pNM06xR_KvWbp4V0vdQixW3t3BDA_RJ7N3FB7TZvlAj_quQL7B8uTVQxqYyMK

http://software.thaiware.com/download_url.php?id=10125

http://www.downloadpresentcity.com/xPglixWSE35Hs0ggTx W xO9VD6CkVpGuMnEPDlrzK29XqzY9EluubL4CZgZ8iIxRDf3c AG3qP JOwNIO J51A1ykOV_Me6XnaffERdgygX5aMUmy8ATMRm4gSbNGbAolJ1ABpfGAxDkFmhNeOYu_Ezf5UuFTh1m a Yv4aCDYyATkOFbI=-Gx0DAGS ttEfD2wQuT pGKm48HAIiZJUmMgBe1sMMZ_E3hsHnqwx8rMIzO15TOVQncUx7HivFTdyoiJx33bko2zNkOIu1Q_ak6UOc_1qqEZvBo 32pdihbAhEMjj2IJKUxGFZnjV5E1rZHJAEHo3bAGGUh6R9Cy39OUB3U88J0RtK6jyoBUDv2JRC93VGV_ms0LMt2rLkDCherkAEQAib5QaVP3SBvVLNW7kasLtPbxaLs_hXWFknev1mvb5 wrrXimv9yEoQoYrU HoOyjOm N3TAycVpWnuIgxr3o6xGvEagqRt7fUUXe fKlFj b43thn_nQ2hd4EUOt30LwnFbRklkjf5qvH72GqeveulVxlICa4wTEI2vmy7AjUnkWcxwNnmZ3cTNcm ykJayKFJ39CBPWyfQmrUrKOlsDEDaBv_5j2kVcRoRBF4WOznOTfWtDGj 8uzaC85YG316CYNzcqlHyE8DDN2 LWl_XtyOQootxvgMtKck98soYnLx_oFYFnvswe8rem4CgufTKnO6wnj082AdCu2zEcKiXQf4jZ547ODZBjakKVQua4fXjvURBXN7jQjzQYldc4M2j8tpCvWXPtlUhhgM4SM_my7S3qu9mkqtoClBSPeiYxAB4qmu8r EyI0ngaI2HkE9N5zWYVW7WE883brBXmF7Dll1VSa6aFJox6FaEE1n7QURrRg4a2LaP3FE99h2I c WnigGel4OSs 61LYiIwRJDVe2gSfOm5 0pxoVMN7I0ZvibOgeRE97efeA5egg0

http://software.thaiware.com/download_url.php?id=7756

http://www.pst-recovery.net/.../microsoftexcelrepair.exe

http://www.diskdatarecovery.net/.../excelrecovery.exe

http://www.nucleustechnologies.com/.../dl.php?id=6

http://www.nucleustechnologies.com/.../Nucleus-Kernel-Excel.exe

http://www.excelfilerepair.com/.../Nucleus-Kernel-Excel.exe

http://www.kerneldatarecovery.com/.../Nucleus-Kernel-Excel.exe

http://www.kerneldatarecovery.com/.../dl.php?id=6

http://www.excelfilerepair.org/.../excel-file-repair.exe

Scan excel-recovery-tool-demo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.