» EassosRecovery.EXE
Overview
Analysis
File Details

EassosRecovery.EXE

数据恢复精灵 - 分区及文件数据恢复软件

Eassos Technology Co., Ltd.

File name:

EassosRecovery.EXE

Publisher:

Eassos Technology Co., Ltd. (signed and verified)

Product:

数据恢复精灵 - 分区及文件数据恢复软件

Description:

数据恢复精灵

Version:

4,2,0

MD5:

2e439af8b71afbaf4229dd0c6351c8a2

SHA-1:

d515e6dc44c3e5d78838664b720c22917ddb8c11

SHA-256:

340d4f025a7cc07780800d1aa17890d317fff3bc456f59ae7e592e5979f01745

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/16/2024 4:34:13 AM UTC (today)

File size:

12.2 MB (12,825,480 bytes)

Product version:

4,2,0

Trademarks:

Eassos

Original file name:

EassosRecovery.EXE

File type:

Executable application (Win64 EXE)

Language:

Chinese (Simplified, China)

Common path:

C:\Program Files\数据恢复精灵\eassosrecovery.exe

Digital Signature

Signed by:

Eassos Technology Co., Ltd.

Authority:

thawte, Inc.

Valid from:

4/15/2016 8:00:00 AM

Valid to:

12/10/2017 7:59:59 AM

Subject:

CN="Eassos Technology Co., Ltd.", OU=IT, O="Eassos Technology Co., Ltd.", L=Qinhuangdao, S=Hebei, C=CN

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

5842BD66D7350C163BF965965292BFFA

File PE Metadata

Compilation timestamp:

10/31/2016 4:04:14 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

196608:i5RmPoCw4khYMS8qUvNx6LQjkwBKbvShpILKloebyvExpTeSuLBrFDeJpGhA+hO2:i5lhJS8q4NIAkl4oSP5oFeJkhJhO2

Entry address:

0x1CC333A

Entry point:

EB, 08, 6A, EC, B7, 00, 00, 00, 00, 00, E9, FD, 22, 2F, 00, 00, 43, 4F, 4D, 44, 4C, 47, 33, 32, 2E, 64, 6C, 6C, 00, D0, AC, 4F, 04, 94, CF, 6F, B2, 88, C8, E7, 2D, B5, 6B, BF, F1, D2, 4E, B6, 3E, C1, D2, 4E, B5, 4A, FB, D2, 4E, B7, 78, 0C, D2, 4E, B8, 87, 46, D2, 4E, B5, 71, F3, D2, 4E, B6, 18, 54, D2, 4E, B7, AB, 74, D2, 4E, B6, 47, 05, D2, 4E, B6, 22, 1D, EE, 4D, 77, A2, E5, AC, 4A, 94, C9, AB, 53, B1, 49, 94, 3B, 53, B1, 4A, 7C, 89, 53, B1, 48, 36, 56, 53, B1, 47, C5, 0C, 53, B1, 4A, 23, A9, 53, B1, 49... 
[+]

Entropy:

7.9714 (probably packed)

Code size:

5.5 MB (5,792,256 bytes)

Scan EassosRecovery.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.