gilisoft data recovery 3.5.exe
Hengyida Information Technology CO.,LTD.
The application gilisoft data recovery 3.5.exe, “flv-player-freenew” by Hengyida Information Technology CO.,LTD has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
File name:
gilisoft data recovery 3.5.exe
Description:
flv-player-freenew
MD5:
701404c9d358e8b4bb7d47749afc7853
SHA-1:
25cff98c7da2184151a6cbe05cb29f1f04192bbf
SHA-256:
c424067d3ba5b9b5d3a5793df44b59e4624aef6e9dd53bc3d70239be4d6c2cf9
Scanner detections:
1 / 68
Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.
Analysis date:
4/25/2024 5:08:47 AM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.HengyidaInformationTechnologyCOLTD (M)
16.2.4.9
File size:
760.2 KB (778,432 bytes)
File type:
Executable application (Win32 EXE)
Language:
English (United States)
Common path:
C:\users\{user}\downloads\programs\download\gilisoft data recovery 3.5.exe
Authority:
WoSign CA Limited
Valid from:
1/15/2014 11:35:57 AM
Valid to:
1/15/2015 11:35:57 AM
Subject:
CN="Hengyida Information Technology CO.,LTD.", E=EastRiverGroup@yahoo.com, O="Hengyida Information Technology CO.,LTD.", L=Chengdu, S=Sichuan, C=CN
Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN
Serial number:
166DAF8F034BBD9BE8EBE24044970524
Compilation timestamp:
6/20/1992 1:22:17 AM
CTPH (ssdeep):
12288:MIbK3CIWZCCd8Td5Zh6HktZCeEb4IvE9p7ziLVEw6:MOKOCCd8Td5Zh6HEbEYp/wEB
Code size:
541 KB (553,984 bytes)