home

fixattrb.exe

Bkav Antivirus Software

Bkav Corporation

Publisher:
Bkav Corporation  (signed and verified)

Product:
Bkav Antivirus Software

Description:
Bkav show hidden files

Version:
3, 0, 0, 1

MD5:
c556e2e435b43bb294113a5307fb85df

SHA-1:
a182f5a759c0592174d008acd5a3ce4fb534f15e

SHA-256:
9d305f901b43021d987c0cde316edb46a902da351da338fe6facbf3cc4285ed1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:31:21 AM UTC  (today)

File size:
306.8 KB (314,176 bytes)

Product version:
3, 0, 0, 1

Copyright:
© Bkav Corporation. All rights reserved.

Original file name:
ShowHiddenFiles.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\fixattrb.exe

Digital Signature
Signed by:
Bkav Corporation

Authority:
VeriSign, Inc.

Valid from:
11/7/2010 7:00:00 AM

Valid to:
11/12/2013 6:59:59 AM

Subject:
CN=Bkav Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Bkav Corporation, L=Hanoi, S=Hanoi, C=VN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1E7D1096FD16DE25F8EE3BC7C06D7D56

File PE Metadata
Compilation timestamp:
11/29/2010 2:28:54 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:zq/zGAFvCwciJLyLWyO3SaQSXIz+JoG1LNF4+ZI9ZPHM4F1NP:zu5JLyL54g+JoG1xF4+QNs4d

Entry address:
0x1F743

Entry point:
E8, 55, 55, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, 08, 37, 44, 00, 75, 02, F3, C3, E9, D7, 55, 00, 00, 8B, FF, 51, C7, 01, 1C, 85, 43, 00, E8, CF, 56, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, E6, 35, FE, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 0E, 57, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00...
 
[+]

Entropy:
6.2460

Code size:
202 KB (206,848 bytes)

The file fixattrb.exe has been seen being distributed by the following 30 URLs.

http://113.171.224.169/.../FixAttrb.exe

https://dl-mail.ymail.com/ws/download/mailboxes/@.id==VjJ-gFqAnuMoY63S364qSHWHX1-vx05fA-ODQb8L-3UJmNZePJDSsSMseqCAk-NnGRsTGl2LEeEb8L4Fd0GBJs5fOA/messages/@.id==AMJ2imIAAmDXVyFz9gRNkMjZqU8/content/parts/@.id==2/raw?appid=YahooMailNeo&token=zitEzqOML3j84e6ealFTT5U7-km5qEQF52lp7AcCuBa-dv6InNQXopIRbTe44RBB69mWbu-Rs21TxyHjD8twIw&error=https://us-mg5.mail.yahoo.com/.../iframemsg?id=b0c48e3a-3f05-2332-aa46-49fe564c9fa5&ymreqid=619651d9-276c-643f-0138-c00023010000

http://download021.fshare.vn/dl/.../FixAttrb.exe

https://doc-0g-6c-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/uuf6vm39mr2kku5j22d8rh03q0td2lrp/1478527200000/12375674153784806647/.../0BwxKwqLyP8DWSW0yOEJ2bVVlT1k?e=download

http://113.171.224.243/.../FixAttrb.exe

https://docs.google.com/uc?id=0BwxKwqLyP8DWSW0yOEJ2bVVlT1k&export=download

http://f30.y8top.net/2107tmp/cf/soft/2014/5/ba/.../fixattrb-bkav_3001.exe

http://bb.com.vn/.../FixAttrb1.exe

https://doc-08-5k-docs.googleusercontent.com/docs/securesc/11ttpvmlgu3s2msqtb73pk2f65t5id61/a4u3agl8tisu25e1r7725fb6sjk1l43i/1475546400000/.../05500932016517092771/0B4cYz5AlxZZaWWxsNDM2SzJwWEU?e=download

http://f30.softwaretop.net/2107tmp/cf/soft/2014/5/ba/.../fixattrb-bkav_3001.exe

http://bk.bb.com.vn/download-virus/.../FixAttrb.exe

http://f51.y8top.net/2107tmp/cf/soft/2014/5/ba/.../fixattrb-bkav_3001.exe

http://f51.x8top.net/2107tmp/cf/soft/2014/5/ba/.../fixattrb-bkav_3001.exe

http://c236.y8top.net/2107tmp/cf/soft/2014/5/ba/.../fixattrb-bkav_3001.exe

http://f30.x8top.net/2107tmp/cf/soft/2014/5/ba/.../fixattrb-bkav_3001.exe

http://vlr.tynt.com/?format=txt&key=284d869ffe43382ebe88a02cabb697ab&u=http://www.bkav.com.vn/home/Download/FixAttrb.exe&subId=w!hws07z3mialy&txt=http://www.bkav.com.vn/home/Download/FixAttrb.exe&loc=http://bb.com.vn/pro/d/FixAttrb.exe/&ref=http://bb.com.vn/pro/bkav-pro-se/.../2670-bkav-fixattrb-phuc-hoi-cac-file-bi-an-tren-usb-do-virus-pha-bang-cong-cu-fixattrbexe.html&title=T?i v? ph?n m?m di?t virus - Download Antivirus Software

https://www.google.com/url?hl=vi&q=http://www.bkav.com.vn/home/.../FixAttrb.exe&source=gmail&ust=1465309803429000&usg=AFQjCNE-33iWN_1BfO4jXp1ArtzKyz9oPQ

http://vlr.tynt.com/?format=txt&key=284d869ffe43382ebe88a02cabb697ab&u=https://googledrive.com/host/0BwxKwqLyP8DWbXR0RDJib3ljdXM/FixAttrb.exe&subId=w!hws07z3mialy&txt=https://googledrive.com/host/0BwxKwqLyP8DWbXR0RDJib3ljdXM/FixAttrb.exe&loc=http://bb.com.vn/pro/d/FixAttrb.exe/&ref=http://bb.com.vn/pro/dichvu/.../1812-phuc-hoi-cac-file-bi-an-tren-usb-the-nho-do-nhiem-virus.html&title=T?i v? ph?n m?m di?t virus - Download Antivirus Software

http://c236.x8top.net/2107tmp/cf/soft/2014/5/ba/.../fixattrb-bkav_3001.exe

http://download1473.mediafire.com/djd1jk8ow8og/.../FixAttrb.exe

http://f20.softwaretop.net/tmp/cf/soft/2014/5/ba/.../fixattrb-bkav_3001.exe

https://doc-14-0k-docs.googleusercontent.com/docs/securesc/hbdgjj2ejbjpd7vp9i27782ag26tbjim/amt53nvpn73n1pdfetsamu9qn0j0bvr8/1461585600000/.../08957134293112533945/0B9y7ruasXAnQNDdFcnpENmE1NlU?e=download

http://f70.softwaretop.net/2107tmp/cf/soft/2014/5/ba/.../fixattrb-bkav_3001.exe

http://c36.softwaretop.net/2107tmp/cf/soft/2014/5/ba/.../fixattrb-bkav_3001.exe

ftp://10.186.0.2/02.PHONG BAN/CNTT/bon/software/.../FixAttrb.exe

https://ebdba46bc4939e92453d1a86646ac9e144d8c67d.googledrive.com/host/.../FixAttrb.exe

https://googledrive.com/host/.../FixAttrb.exe

http://bb.com.vn/.../FixAttrb.exe

http://bkav.com.vn/home/.../FixAttrb.exe

http://www.bkav.com.vn/home/.../FixAttrb.exe

Latest 30 of 30 download URLs

Scan fixattrb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.