» yodot-photo-recovery.exe
Overview
Analysis
File Details
Downloads (1)

yodot-photo-recovery.exe

Yodot Recovery Software

Yodot Software

This is a self-extracting archive and installer. The file has been seen being downloaded from f106c2fdc37239d65fa2-3e4b8066b303917e64532803215a9d58.ssl.cf2.rackcdn.com.

File name:

Publisher:

Yodot Software

Product:

Yodot Recovery Software

Description:

Yodot Recovery Software Setup

Version:

3.0.0.108

MD5:

790cb1d978d06f30b76dadc0600eed9b

SHA-1:

a2527ed862c83350990796a06580c89f23b84df4

SHA-256:

ac65bcfa0150d56135c2b8de714122f910ac68497668d142b8de22eb30a0e1ec

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/17/2024 6:16:26 PM UTC (today)

File size:

18.8 MB (19,732,442 bytes)

Product version:

3.0.0.108

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\yodot-photo-recovery.exe

File PE Metadata

Compilation timestamp:

6/20/1992 1:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

393216:70aH20iddEh1xFrLgSXYgm1jD6t0TBWruBxwbUR/gk46T/Ap/tN6dmDDU5jRn8vj:7ni/0Tx8QY/WtVruPwbUR/X46T/A/N6G

Entry address:

0x83000

Entry point:

90, 90, BB, BF, 49, B0, 03, 90, 90, BF, 20, 30, 48, 00, 90, 90, 68, 98, 05, 00, 00, 5E, 90, 31, 1C, 3E, 90, 83, EE, 02, 83, EE, 02, 90, 75, F3, 57, 34, B1, 03, BF, 49, B0, 03, BF, 49, F0, 03, 47, EC, B0, 03, 5F, 29, 9A, 02, 65, 2E, 9A, 02, BF, F9, B2, 03, 40, B6, 4F, FC, 0B, 99, F0, 03, DB, 9B, F0, 03, C3, 9B, F0, 03, BF, 49, B0, 03, BF, 49, B0, 03, BF, 49, B0, 03, 0B, EF, B0, 03, DD, 9B, B0, 03, C5, 9B, B0, 03, BF, 49, B0, 03, BF, 49, B0, 03, BF, 49, B0, 03, BF, 49, B0, 03, A3, 98, F0, 03, BF, 49, B0, 03... 
[+]

Entropy:

7.9896 (probably packed)

Code size:

39.5 KB (40,448 bytes)

The file yodot-photo-recovery.exe has been seen being distributed by the following URL.

https://f106c2fdc37239d65fa2-3e4b8066b303917e64532803215a9d58.ssl.cf2.rackcdn.com/yodot-photo-recovery.exe

Scan yodot-photo-recovery.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.