7data-ar.exe

7-Data Android Recovery

SharpNight Co,Ltd

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.tamindir.com and multiple other hosts.
Publisher:
SharpNight Co,Ltd

Product:
7-Data Android Recovery

Description:
7-Data Android Recovery Setup

MD5:
c9eae0fc1746ad98ee47edf242d1f405

SHA-1:
de18652de17141fcba9b98c98a1b9d83ce5df3fb

SHA-256:
88aecb81bc0d6b5bcd7bccb66ce5bc8162e2f49f7123f166e7c9576fb92a842f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:32:10 AM UTC  (today)

File size:
2 MB (2,083,582 bytes)

Product version:
1.1

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

File PE Metadata
Compilation timestamp:
6/20/1992 2:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:1qgs4pbRClfZW0DllA+KNbSGFtmC55T0AoO21zi0VQ:IlabRC1Zjll41Ftmo5T0AEiR

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9945

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file 7data-ar.exe has been seen being distributed by the following 32 URLs.

http://www.tamindir.com/indir/MjAxNS0wMi0xNCAyMjo0MjoxMg==/7-data-android/.../1.0

http://gsf-cf.softonic.com/de1/865/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666566&instance=softonic_en&type=PROGRAM&Expires=1434725664&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=M57aLG0h2-35a48foM86c8C0B~L8~1wMcJdEt2uIag1w4p~q9ny4zPd5qoD41UOZfYFr5tFpWRY3dKmNqDpQWVMTioihTIUAaLHLMcxvrMpTcGmDMcCJYuiuYrYjxHVI7v0FFYVsv8~OnqyzJWbZeo87P3ro05KsNEW0krXB6A0_&filename=7data-ar.exe

http://gsf-cf.softonic.com/de1/865/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666566&instance=softonic_en&type=PROGRAM&Expires=1426023306&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=hCELnxK5SkOyoPV4i6WSlT6JRqLPLe0AzMsw4fR5lkVA1Ra9SBw-2VYf6QA01O8Tf7B9yT1QoKj10rHNU7iydYceRHRSlIEcBU54g0Nyd~Q54TNSg3vVYfnJWEZ5JN793ChuFamRYXMBZI4COuF2A75itAeLAaglGZ-qM2Uwb~8_&filename=7data-ar.exe

http://gsf-cf.softonic.com/de1/865/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666566&instance=softonic_it&type=PROGRAM&Expires=1441404852&Signature=PAZGCOmjun9Ru98fTo6obW4RG9FDsLHtEIDQJt4cepUYo2iA24hDtauWrWecvmyS7Cj2WhD~IHTYMn-mYNUnfzAxpZD7gs8lvRt0gkgAxE3JgmOSZqRdDcLJwbaBXS5LfHU2ZVL-5fP01cijhXrnpg~oqQ8A3mJ8mIRbOZDnlqU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=7data-ar.exe

http://gsf-cf.softonic.com/de1/865/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666566&instance=softonic_es&type=PROGRAM&Expires=1436164582&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=g2f4wTWhCgnnf3ZeFojvLgakuLKk-eQi7DNtPuNRVy13I9sQzFPQMrQe51qyL~melQQEqhz1XLLWrPY41bLZBd~FxPf2ee9LgKhQFuhq35vXx-lYBrYd7tp~bhllXi2yXzB0bq51RasbWjeOAIylk~W0VA~YnA9ylGg52Zfyf2I_&filename=7data-ar.exe

http://gsf-cf.softonic.com/de1/865/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666566&instance=softonic_br&type=PROGRAM&Expires=1437975533&Signature=W70HT1tguZBvQnHtCbv7TPCLqSzTD80AJ39zg2jdL9szjBAQacL4Vh6KIWT~vpnv7Utm~d1WCvogxFcXVeipJppuKxi~bQf2lHJP0FnCSRSF6Joxh0GdADCp2M9fwRR7UY25q3yF8b-tpYSTcewS6na3E9rFawC77D9g8b6ak5A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=7data-ar.exe

http://gsf-cf.softonic.com/de1/865/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666566&instance=softonic_br&type=PROGRAM&Expires=1441679689&Signature=deOu6bKCDsJfTyqEp-XUg-ELkylodrpzij4ksA~qam5fkl8pyOMHxTXq50o2XEipI8KVd7KfvzwLffYQX9k-TppP9SQAj0tAz2xLAE4dX1SdOIZ4h8fYMnYzCn8dTyHDlFcWpDW4mLXpknvUt9jeCMqBTJhZsh4zlBNmCp8j1Ak_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=7data-ar.exe

http://gsf-cf.softonic.com/de1/865/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666566&instance=softonic_fr&type=PROGRAM&Expires=1445327292&Signature=RlPOYrQPfXplfYhU2GOua-N6yp53TLkaXS71R6JmseKUgvb4oJEK-l0LWOI7wdsaixk8MVgVe4HTOPgSQld7prSaSPbIWJmAcnF6AwV3TTz4C6BrASw5gf7eBc37M-vvtLq31AflynQzVMM3QzOD8a1KsHY-JgluZ~HepN~CIHE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=7data-ar.exe

http://gsf-cf.softonic.com/de1/865/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666566&instance=softonic_en&type=PROGRAM&Expires=1454705653&Signature=amBKibLY1rchh90i4SbpK14lPSxD9IcOybFdru93NsAdBVYTcwX-mGrujY2oV1SuLrgIcjHL3c5cC3u5lkeXqRMLAcpFt30IcsKeGiqQ9IG5cTEoTyvmXaGTqil8sRQ9Q8WWekCPk9DtAXcTVm86YA35dUdQLt6hlgyQXn92PjI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=7data-ar.exe

Latest 30 of 32 download URLs

Scan 7data-ar.exe - Powered by Reason Core Security