home

DiskRec.exe

Disk Recoup

QueTek Consulting Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from www.quetek.com.
Publisher:
QueTek Consulting Corporation  (signed and verified)

Product:
Disk Recoup(TM)

Description:
Disk copy utility for faulty hard drives

Version:
2, 2, 2, 0

MD5:
2244b66421a4951fce8aba0d677429bf

SHA-1:
1555ff61d758103aff9cdfe3a07df074975411fd

SHA-256:
8e9f67d7fae05979699d789514dfdee1b3fd4452d08722dcf5b1df8f90a9d58f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 3:24:44 PM UTC  (today)

File size:
1 MB (1,095,960 bytes)

Product version:
2, 2, 2, 0

Copyright:
Copyright (C) 2005-2012

Original file name:
DiskRec.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
QueTek Consulting Corporation

Authority:
Thawte, Inc.

Valid from:
8/15/2011 2:00:00 AM

Valid to:
11/5/2012 12:59:59 AM

Subject:
CN=QueTek Consulting Corporation, OU=SALES, O=QueTek Consulting Corporation, L=Houston, S=Texas, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
5EEDADBC500597FD510C64AA949E42DA

File PE Metadata
Compilation timestamp:
8/16/2012 6:55:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:rSQTYNP57pO0ogGHTi2/zs8K90B0jkQ4Bb57I19X2lB7KuR9:7TYNaPi27s8a0HBBbQGb+89

Entry address:
0x4A5CD

Entry point:
E8, 3D, 9F, 00, 00, E9, 17, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, 80, F9, 40, 73, 16, 80, F9, 20, 73, 06, 0F, AD, D0, D3, FA, C3, 8B, C2, C1, FA, 1F, 80, E1, 1F, D3, F8, C3, C1, FA, 1F, 8B, C2, C3, 6A, 0C, 68, 58, 6E, 48, 00, E8, 57, 67, 00, 00, 8B, 75, 08, 85, F6, 74, 75, 83, 3D, C4, 33, 49, 00, 03, 75, 43, 6A, 04, E8, F5, A0, 00, 00, 59, 83, 65, FC, 00, 56, E8, 63, A1, 00, 00, 59, 89, 45, E4, 85, C0, 74, 09, 56, 50, E8, 7F, A1, 00, 00, 59, 59, C7, 45, FC, FE, FF, FF, FF, E8, 0B, 00, 00, 00, 83...
 
[+]

Code size:
432 KB (442,368 bytes)

The file DiskRec.exe has been seen being distributed by the following URL.

http://www.quetek.com/diskrecoup/.../diskrec.exe

Scan DiskRec.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.