» aofpr.exe
Overview
Analysis
File Details

aofpr.exe

Accent OFFICE Password Recovery

Passcovery Ltd.

File name:

aofpr.exe

Publisher:

AccentSoft Team (signed by Passcovery Ltd.)

Product:

Accent OFFICE Password Recovery

Version:

4.1.0.9

MD5:

f25c75b43517492154332ba46c1da44b

SHA-1:

151285e12287a8327a6742e6a657a43a9463995b

SHA-256:

270471bea24d3a7374c51b0eac290fbb6ade5c7d23d168902c0276ab70cb7e5b

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

12/28/2024 2:42:00 PM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/170.3

Quick Heal

(Suspicious) - DNAScan

10.14.11.00

File size:

1023 KB (1,047,536 bytes)

Product version:

4.1

Original file name:

aofpr.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\accent office password recovery\aofpr.exe

Digital Signature

Signed by:

Passcovery Ltd.

Authority:

VeriSign, Inc.

Valid from:

12/15/2009 1:00:00 AM

Valid to:

12/16/2010 12:59:59 AM

Subject:

CN=Passcovery Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Passcovery Ltd., L=St.Petersburg, S=Russia, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

37DFE5CF99C25D29D2E3CA01E187B2A2

File PE Metadata

Compilation timestamp:

6/15/2010 4:49:44 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.0

CTPH (ssdeep):

24576:8Chd8/J8RPqZY3SLhpiDyoyODgjz5DLPkSDEaW1HGUApzr:8CX8OVCHqSdjkSDEJw75r

Entry address:

0x1000

Entry point:

68, 01, B0, 5F, 00, E8, 01, 00, 00, 00, C3, C3, C1, A9, 22, 7B, 43, 58, EB, 21, DB, 62, EF, 58, 87, 8A, 7A, 04, E3, 47, 1D, 6B, 1D, 6C, 20, 5F, 92, C6, 58, 76, 50, 8B, 81, 09, 59, 0E, 9A, 0D, 25, 9D, 28, 5D, D7, 9B, 28, 7B, 8C, ED, 9A, 11, 57, 65, 22, C0, F0, 39, C0, 37, 2C, 1C, 17, DC, F8, AC, 00, 99, FB, 07, 64, AA, 78, DF, B0, 70, 82, 8A, CA, 7D, 9A, 93, DD, 2C, 78, 17, 7A, DB, 9A, 6E, F1, 5E, AE, DC, C4, 24, 2E, 07, 8B, CE, EA, 17, A9, 6D, 4E, 50, F8, 53, 2C, 98, 01, BC, 05, A4, 57, 15, 9D, FE, B6, 35... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.2 MB (1,220,608 bytes)

Scan aofpr.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.