home

forensicimager.exe

GetData Pty Ltd

Publisher:
GetData Pty Ltd  (signed and verified)

Description:
Forensic Imager

Version:
1.1.0.146

MD5:
b78fbf9d59708e86aa4c791fcc5132f6

SHA-1:
f33aa2d710c5859bc030c441467ad5b87b60ac61

SHA-256:
86d70c7747b6260a5df3c9aa9088f2ad8a6b4d1299df765b79e45e5097d92aee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:55:16 AM UTC  (today)

File size:
11.6 MB (12,205,512 bytes)

Product version:
1.1

Copyright:
© 2015 GetData Pty Ltd

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\gdt\recupera\forensicimager.exe

Digital Signature
Signed by:
GetData Pty Ltd

Authority:
VeriSign, Inc.

Valid from:
4/7/2010 7:00:00 PM

Valid to:
5/22/2013 6:59:59 PM

Subject:
CN=GetData Pty Ltd, OU=Data Recovery Software Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=GetData Pty Ltd, L=Loftus, S=New South Wales, C=AU

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
51A134464FFDA01A0B6625E9350D4D

File PE Metadata
Compilation timestamp:
9/9/2012 9:01:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x9268F8

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 50, 9E, D0, 00, E8, A3, 5F, 6E, FF, 8B, 1D, D4, EB, D7, 00, 8B, 03, E8, FE, 0E, 86, FF, 8B, 03, BA, CC, 69, D2, 00, E8, EA, 08, 86, FF, 8B, 03, 83, C0, 54, BA, F8, 69, D2, 00, E8, 5F, 1A, 6E, FF, E8, 3E, B5, DD, FF, B2, 01, E8, 93, 9F, DD, FF, E8, 86, 5B, D7, FF, 8B, 40, 08, 8B, 48, 18, B2, 01, A1, A4, 33, 68, 00, E8, 74, D2, 95, FF, 8B, 15, 7C, E3, D7, 00, 89, 02, E8, 13, B5, DD, FF, 0F, B6, 80, D8, 00, 00, 00, 8B, 15, 7C, E3, D7, 00, 8B, 12, 88, 42, 08, A1, 7C, E3, D7, 00...
 
[+]

Entropy:
6.8066

Developed / compiled with:
Microsoft Visual C++

Code size:
9.1 MB (9,588,224 bytes)

Scan forensicimager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.