home

ติดตั้งโปรแกรมรุ่งเรือง59.exe

Setup

Company

This is a self-extracting archive and installer. The file has been seen being downloaded from doc-0g-b4-docs.googleusercontent.com.
Publisher:
Company

Product:
Setup

Description:
Installation

Version:
1.0.0.0

MD5:
6975db528f1e99a13fad5ec16146a1c6

SHA-1:
0dc5cc86aa64511d3abc14855bcf94da0e45beb5

SHA-256:
d932985af99b587fb9386f5cf53541bfcb46cfb8a14caf3080fa924b6a947533

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/22/2025 7:24:03 PM UTC  (today)

File size:
633.4 MB (664,196,892 bytes)

Product version:
1.0.0.0

Copyright:
(c)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
2/7/2015 11:22:59 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12582912:PY30OQubXlVjcohJO74pAf4XiQaZczl/8Or/mkDikzKJZ/mkDkMp29jCVI:PM2+1VAoD24ifMMWJ/F/xDy/xDf292a

Entry address:
0x237568

Entry point:
55, 8B, EC, 83, C4, F0, B8, 98, EB, 62, 00, E8, 44, 73, DD, FF, A1, 30, 13, 64, 00, 8B, 00, E8, 74, 7A, FB, FF, A1, 30, 13, 64, 00, 8B, 00, BA, CC, 75, 63, 00, E8, 13, 74, FB, FF, 8B, 0D, FC, 14, 64, 00, A1, 30, 13, 64, 00, 8B, 00, 8B, 15, 6C, 51, 61, 00, E8, 63, 7A, FB, FF, A1, 30, 13, 64, 00, 8B, 00, E8, BB, 7B, FB, FF, E8, 3A, 23, DD, FF, 00, 00, B0, 04, 02, 00, FF, FF, FF, FF, 05, 00, 00, 00, 53, 00, 65, 00, 74, 00, 75, 00, 70, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9989

Developed / compiled with:
Microsoft Visual C++

Code size:
2.2 MB (2,316,800 bytes)

The file ติดตั้งโปรแกรมรุ่งเรือง59.exe has been seen being distributed by the following URL.

https://doc-0g-b4-docs.googleusercontent.com/docs/securesc/aibjsjudfg40tbp961c65p25kt2u5brs/effcafv5ai0ls99ivfq2r5kvnj9n9fd1/1467122400000/16212539734704400687/.../0B86R1J1upBcAQVdCT0xEMjlzcXM?e=download

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.