» 32fsu40.exe
Overview
Analysis
File Details
Downloads (3)

32fsu40.exe

File Scavenger

QueTek Consulting Corporation

File name:

32fsu40.exe

Publisher:

QueTek Consulting Corporation (signed and verified)

Product:

File Scavenger

Description:

File Scavenger (R) - Disk recovery tool

Version:

4.2.2.0

MD5:

fb3eb75809e1c1a171e6c0dc4cd8bd8e

SHA-1:

4134ac5701341d930e7edb268b6e7ec8e9be83f9

SHA-256:

b90e325b9b792a3434cf3b0eea8c82cb86afe4f8248fc72a51e4ba93ce682235

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/27/2024 11:53:53 PM UTC (a few moments ago)

File size:

1.8 MB (1,919,688 bytes)

Product version:

4.2.2.0

Trademarks:

File Scavenger

Original file name:

FileScav.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\32fsu40.exe

Digital Signature

Signed by:

QueTek Consulting Corporation

Subject:

CN=QueTek Consulting Corporation, OU=SALES, O=QueTek Consulting Corporation, L=Houston, S=Texas, C=US

Serial number:

0781411AA6A0C17F67B603FEDAF4B13E

File PE Metadata

OS bitness:

Win64

CTPH (ssdeep):

24576:9AKgEUqZk6ij9a0bnAp1GUNgIInBOqVQZF10ovT4cf/RedUgHS1/nkbF3zNj:urbdbU1Pg1gqVQb10ob4SsdZy1vkr

Entry point:

E8, 99, B0, 00, 00, E9, 17, FE, FF, FF, 51, C7, 01, FC, 41, 52, 00, E8, 1C, B1, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, AE, F9, FC, FF, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, 6A, B1, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 6A, 0C, 68, 60, 9A, 53, 00, E8, 9C, 71, 00, 00, 8B, 75, 08, 85, F6, 74, 75, 83, 3D, 04, D9, 55, 00, 03, 75, 43, 6A, 04, E8, 3B, B3, 00, 00, 59, 83, 65, FC, 00, 56, E8, A9, B3, 00, 00, 59, 89, 45... 
[+]

Entropy:

6.6380

The file 32fsu40.exe has been seen being distributed by the following 3 URLs.

http://www.quetek.com/.../32fsu32.exe

http://www.quetek.com/.../32fsu42.exe

http://www.brothersoft.com/d.php?soft_id=58725&url=http://www.quetek.com/.../32fsu40.exe&name=File Scavenger

Scan 32fsu40.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.