home

windows 7 start orb changer v5.exe

Windows 7 Start Orb Changer

door2windows

Publisher:
door2windows

Product:
Windows 7 Start Orb Changer

Version:
5.0.0.0

MD5:
f723941300d921fa48aa7cbc4e1b396a

SHA-1:
11bf0c334d32543732511201a21664c39cea1893

SHA-256:
b871e52c2dadc19926e212dfd900788af9d27c7fba34f18e49f2f3edad7acd25

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:30:47 PM UTC  (today)

File size:
423 KB (433,152 bytes)

Product version:
5.0.0.0

Copyright:
© door2windows

Original file name:
W7SOC.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\windows 7 start orb changer v5.exe

File PE Metadata
Compilation timestamp:
6/16/2012 2:15:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:XOfc5LzXPd2tUhOMNoDdpoocUoXqBN1NbtSgN7OlN4ZVB8+BPKghFrX2WjSXsU3h:XKc5GUhOMNoDdpoocUoXqBN1NbtSgN7E

Entry address:
0x593DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 80, 00, 00, 80, 10, 00, 00, 00, 98, 00, 00, 80, 18, 00, 00, 00, B0, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 08, 00, 02, 00, 00, 00, C8, 00, 00, 80, 03, 00, 00, 00, E0, 00, 00, 80, 04, 00, 00, 00, F8, 00, 00, 80, 05, 00, 00, 00, 10, 01...
 
[+]

Entropy:
5.6517

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
349 KB (357,376 bytes)

The file windows 7 start orb changer v5.exe has been discovered within the following program.

DATE A LIVE_Yoshino by Ayaka Yume(20130608)  by Ayaka Yume
About 7% of users remove it
 
Powered by Should I Remove It?

The file windows 7 start orb changer v5.exe has been seen being distributed by the following 16 URLs.

http://download15.mediafire.com/kas1s8c0eqhg/.../Windows 7 Start Orb Changer v5.exe

http://download15.mediafire.com/3z6kyt0jcbvg/.../Windows 7 Start Orb Changer v5.exe

https://mega.nz/persistent/.../dg9iAIIA

http://download6.mediafire.com/30el51re36mg/.../Windows 7 Start Orb Changer v5.exe

http://download15.mediafire.com/a1761w925ejg/.../Windows 7 Start Orb Changer v5.exe

http://6de867e5.dl-one2up.com/onetwo/content/2014/10/.../6de867e57cfa04c97c111ef88ab4b089.exe

http://download6.mediafire.com/3nu07vqhzb5g/.../Windows 7 Start Orb Changer v5.exe

https://mega.nz/temporary/.../dg9iAIIA

http://download1005.mediafire.com/78enyccs12vg/.../Windows 7 Start Orb Changer v5.exe

http://download1005.mediafire.com/ajoimf2aogtg/.../Windows 7 Start Orb Changer v5.exe

https://doc-10-5s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/76uang62aln8vbo0k5hhkj8ae9671thb/1427709600000/07345346988218139206/.../0BxKo4w1NHjlQU0tqeWJWODhDdDg?e=download

https://doc-10-5s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/ucdshfn8jhkd3qfn07i36pkn13hrgq9v/1426924800000/07345346988218139206/.../0BxKo4w1NHjlQU0tqeWJWODhDdDg?e=download

https://docs.google.com/uc?id=0BxKo4w1NHjlQU0tqeWJWODhDdDg&export=download

https://docs.google.com/uc?authuser=0&id=0BxKo4w1NHjlQU0tqeWJWODhDdDg&export=download

http://download1005.mediafire.com/56n6466674fg/.../Windows 7 Start Orb Changer v5.exe

http://download708.mediafire.com/x1nxewlibdag/.../Windows 7 Start Orb Changer v5.exe

Scan windows 7 start orb changer v5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.