home

NPakRecovery.exe

TODO: <제품 이름>

NtreevSoft Co.,Ltd

Publisher:
TODO: <회사 이름>  (signed by NtreevSoft Co.,Ltd)

Product:
TODO: <제품 이름>

Description:
TODO: <파일 설명>

Version:
1.0.0.1

MD5:
ebfd813ea426a563ca15f4a1f0ca60f2

SHA-1:
1d81beef971f4b15e6e00de7d9b604154d7c8623

SHA-256:
744333f95830553aa52272b59728cf4e2f899e1ac66aa7925b5b8bae1aaa7899

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/25/2024 11:00:43 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Gen.Trojan.Heur!IK
8.14.12.20.11

IKARUS anti.virus
Gen.Trojan.Heur
t3scan.1.1.107.0

File size:
3 MB (3,118,112 bytes)

Product version:
1.0.0.1

Copyright:
TODO: (c) <회사 이름>. All rights reserved.

Original file name:
NPakRecovery.exe

File type:
Executable application (Win32 EXE)

Language:
Korean

Common path:
C:\users\{user}\appdata\local\gametree\alicia\modules\npakrecovery.exe

Digital Signature
Signed by:
NtreevSoft Co.,Ltd

Authority:
Thawte, Inc.

Valid from:
2/18/2011 1:00:00 AM

Valid to:
4/19/2013 1:59:59 AM

Subject:
CN="NtreevSoft Co.,Ltd", O="NtreevSoft Co.,Ltd", L=geumcheongu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
02963C314EE08A0CF543010516DFAA68

File PE Metadata
Compilation timestamp:
5/24/2011 7:36:32 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:hduxplc5JfIJmRs+2CNQ0vbCSCH1Ih1ufum3HuUAI4d8ZqZlrriyjbXMmg:rWwJimRyCNQ0vbCSCH1IhmXuUAJ8ZqZc

Entry address:
0x11B967

Entry point:
E8, CC, 75, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, C0, CD, 59, 00, 75, 02, F3, C3, E9, 56, 76, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, FC, A2, 54, 00, 57, FF, 35, 28, 7E, 5A, 00, FF, D6, FF, 35, 24, 7E, 5A, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 08, 3C, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 89, 77, 00, 00, 59, 59, 85...
 
[+]

Entropy:
6.3876

Code size:
1.3 MB (1,344,512 bytes)

Scan NPakRecovery.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.