home

efsrestore_64.exe

Encrypted File System (EFS) restoration tool

LLC SysDev Laboratories

Publisher:
LLC SysDev Laboratories  (signed and verified)

Product:
Encrypted File System (EFS) restoration tool

Version:
1.0.0.1

MD5:
50bc85ae25015a6ab0083495066d5538

SHA-1:
92a8ed11d196ccbb558fa4d60c72b9df6c03b925

SHA-256:
a5ac3f340de9cb52285f6c02b8d0a4f038fa8bf0108cf76312e0bdc5ebf0bbef

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 12:12:50 PM UTC  (today)

File size:
1.1 MB (1,187,400 bytes)

Product version:
1.0.0.1

Copyright:
Copyright (C) 2012 Bogdan Shulga (LLC SysDev Laboratories)

Original file name:
efsrestore

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\ufs explorer\efsrestore_64.exe

Digital Signature
Signed by:
LLC SysDev Laboratories

Authority:
Symantec Corporation

Valid from:
3/16/2016 3:30:00 AM

Valid to:
9/20/2016 4:29:59 AM

Subject:
CN=LLC SysDev Laboratories, O=LLC SysDev Laboratories, L=Donetsk, S=Donetsk Oblast, C=UA

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
54A4321E51EA5920E59ADD72A731F485

File PE Metadata
Compilation timestamp:
9/4/2016 2:25:50 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:0RvN+xsvFNK0Tl+akThfu8ar/T5hxv5sZG6KljQ4Ge6:0OTVTazTzxv559lES6

Entry address:
0x57D1C

Entry point:
48, 83, EC, 28, E8, 67, 34, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, 40, 53, 48, 83, EC, 20, 48, 8B, D9, C6, 41, 18, 00, 48, 85, D2, 75, 7F, E8, D1, 31, 00, 00, 48, 89, 43, 10, 48, 8B, 90, C0, 00, 00, 00, 48, 89, 13, 48, 8B, 88, B8, 00, 00, 00, 48, 89, 4B, 08, 48, 3B, 15, 69, CF, 07, 00, 74, 16, 8B, 80, C8, 00, 00, 00, 85, 05, 2B, CB, 07, 00, 75, 08, E8, 28, 42, 00, 00, 48, 89, 03, 48, 8B, 05, 1A, CA, 07, 00, 48, 39, 43, 08, 74, 1B, 48, 8B, 43, 10, 8B, 88, C8, 00, 00, 00, 85, 0D, 04, CB, 07, 00...
 
[+]

Entropy:
6.7286

Code size:
485.5 KB (497,152 bytes)

Scan efsrestore_64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.