home

WinToFlash.exe

Novicorp WinToFlash

Novicorp

Publisher:
Novicorp

Product:
Novicorp WinToFlash

Description:
WinToFlash application

Version:
0.7.20.0

MD5:
acf02de4f073b3b2657c3f4af1c6e935

SHA-1:
d35b5206f924bf2e948a46edd5e7c375aed0964f

SHA-256:
e97f20e221c868e7e6e75429be1e5f62938293c6038b4e4879174e9ad99ec287

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 9:41:12 AM UTC  (today)

File size:
2 MB (2,105,344 bytes)

Product version:
0.7.20.0

Copyright:
Novicorp, 2009-2011

Trademarks:
Novicorp, WinToFlash

Original file name:
WinToFlash.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
9/19/2011 4:47:35 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:cx+hn+QIxNi3d56/uVAFJVB6SsIgIfj+WAPQVJGgwWeytgdizAOv6r0xF:FOIRkESsIf3tnsizyg

Entry address:
0x199ED8

Entry point:
55, 8B, EC, 83, C4, F0, B8, 5C, 22, 59, 00, E8, 98, 11, E7, FF, A1, 10, E4, 59, 00, 8B, 00, E8, B8, F2, F3, FF, A1, 10, E4, 59, 00, 8B, 00, B2, 01, E8, E6, 0F, F4, FF, 8B, 0D, DC, DF, 59, 00, A1, 10, E4, 59, 00, 8B, 00, 8B, 15, 5C, 95, 55, 00, E8, AA, F2, F3, FF, A1, 10, E4, 59, 00, 8B, 00, E8, EE, F3, F3, FF, E8, 75, C5, E6, FF, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.4057

Developed / compiled with:
Microsoft Visual C++

Code size:
1.6 MB (1,674,240 bytes)

The file WinToFlash.exe has been seen being distributed by the following URL.

http://s10310.chomikuj.pl/File.aspx?e=qtb8Vs17uuXFz623lpPU8zrAiWJeqxOyxyOsSrhnWvlMFYiwevmxVKig3Dw-P_U0A2OxxhXf5zDN00BuYNKSPCdsaXr3Gs106qInmiEqWxSJJyJoVjWG2AB6JYthyohuJO5L3gZDXLOTh59zqfKYVA&pv=2

Scan WinToFlash.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.