jihosoftphotorecoveryaff.exe

Jihosoft Photo Recovery

Jihosoft Studio

This is a setup and installation application. The file has been seen being downloaded from www.freerecoverytools.com.
Publisher:
Jihosoft Studio

Product:
Jihosoft Photo Recovery

Description:
Jihosoft Photo Recovery 6.3 Installer

Version:
6.3

MD5:
fab1448cb37c6795484e735c6fe2263c

SHA-1:
2a9bd49dd323f3c640fc2910f94b7bf09153824c

SHA-256:
11fe5ba0b4c11cb2f99533d9325ae228fcb5947b219e1a9ab2134871b4b6d7b9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/7/2024 8:51:51 PM UTC  (today)

File size:
11.1 MB (11,615,000 bytes)

Product version:
6.3

Copyright:
Copyright © 2014 Apex Co. Ltd.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\jihosoftphotorecoveryaff.exe

File PE Metadata
Compilation timestamp:
10/9/2012 1:48:22 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:9j0WOMUZ4yt8YiRz2u4diwocHbQe0Zhi8RKU4JpkO39TkoTJinnEA:9DMt8dx2x/HyZ3R78pkO39TkqJin

Entry address:
0xF3BC

Entry point:
F6, C5, AA, 87, EA, 4B, 02, C5, 69, F3, 5C, 80, 40, 18, BE, 0F, 9B, F2, 13, 4A, F7, C2, 3A, 93, F6, 01, FF, C5, 8D, 0D, F7, 2D, AD, 06, 8D, 35, CF, F2, 3E, 4E, 03, F7, 3B, C2, F2, 86, CC, C6, C7, 36, 85, FA, BF, 6B, 11, 00, 00, 29, FE, 81, EF, 9D, 03, 00, 00, 04, B0, 28, EB, FF, CA, 72, 05, B4, CE, F2, 3C, BD, C6, C0, 71, 68, 41, 70, FA, FF, 13, EF, 10, F7, FE, CF, 5A, 84, FC, 89, FB, 35, 36, 71, 82, D3, 81, C2, 14, 51, 00, 00, 87, CE, 8A, C8, FE, C3, 2B, FA, FF, C0, FE, CD, 81, EF, AC, 3E, 05, 00, 88, CE...
 
[+]

Entropy:
7.9953  (probably packed)

Code size:
59 KB (60,416 bytes)

The file jihosoftphotorecoveryaff.exe has been seen being distributed by the following URL.

Scan jihosoftphotorecoveryaff.exe - Powered by Reason Core Security