home

drev321wd.exe

DRevitalize

Piotr Ułaszewski

Publisher:
Piotr Ulaszewski  (signed by Piotr Ułaszewski)

Product:
DRevitalize

Description:
DRevitalize 3.21

Version:
1, 0, 0, 0

MD5:
e4371fd3485a5a86ffcf1595adc2cf49

SHA-1:
2dfa3c0cc45b1f065d1de8b3143138fdd69a32d9

SHA-256:
a184865f2c30ba4256ce0d56727bcdeab35b4e5efbed7508ad2c98d5f8d51f6f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/1/2025 3:43:27 AM UTC  (today)

File size:
155.5 KB (159,240 bytes)

Product version:
3, 2, 1, 0

Copyright:
(c) Piotr Ulaszewski 2004-2016

Original file name:
Drev321w.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\drevitalize 3.21 demo\drev321wd.exe

Digital Signature
Signed by:
Piotr Ułaszewski

Authority:
COMODO CA Limited

Valid from:
12/31/2015 3:00:00 AM

Valid to:
12/31/2016 2:59:59 AM

Subject:
CN=Piotr Ułaszewski, O=Piotr Ułaszewski, STREET=Agrestowa 11, L=Suchy Dwór, S=Dolnośląskie, PostalCode=52-271, C=PL

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
008EDC28755CAAE41FA19435513A5036CE

File PE Metadata
Compilation timestamp:
8/4/2016 5:20:41 PM

OS version:
1.11

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.18

CTPH (ssdeep):
3072:MGqdlUv0wJtBdZw+g29bFAp1mguAyj0Mn1t/NtaNpexIbp/ns8bF1spS2Ls:MGqk0M7dZw+Zp2amRMgpeW3/Uz

Entry address:
0x144E30

Entry point:
60, BE, 15, 10, 52, 00, 8D, BE, EB, FF, ED, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Packer / compiler:
UPX 2.90LZMA

Code size:
144 KB (147,456 bytes)

Scan drev321wd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.