» RescueManager.exe
Overview
Analysis
File Details

RescueManager.exe

Smart PC Booster

ASK4EXPERT TECHNOLOGIES PRIVATE LIMITED

The application RescueManager.exe by ASK4EXPERT TECHNOLOGIES PRIVATE LIMITED has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.

File name:

RescueManager.exe

Publisher:

Ask4Expert Technologies Pvt Ltd. (signed by ASK4EXPERT TECHNOLOGIES PRIVATE LIMITED)

Product:

Smart PC Booster

Description:

Rescue Manager

Version:

6.0.0.1

MD5:

6cdf6b4afa44b2f5ea5087d81f974bb7

SHA-1:

40f1f9ca23f4c44589c5d2c6603e2b78dc0f6afc

SHA-256:

92c4c8a1e69ac68210d158b4f5fed39a9229f116c8caddf7f1cfcf3596a8c71a

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

12/1/2024 12:03:58 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.Pointstone

17.2.10.11

File size:

529 KB (541,744 bytes)

Original file name:

RescueManager.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\ask4expert\smart pc booster 7\rescuemanager.exe

Digital Signature

Signed by:

ASK4EXPERT TECHNOLOGIES PRIVATE LIMITED

Authority:

GoDaddy.com, Inc.

Valid from:

1/21/2014 9:46:02 PM

Valid to:

1/21/2015 9:46:02 PM

Subject:

CN=ASK4EXPERT TECHNOLOGIES PRIVATE LIMITED, O=ASK4EXPERT TECHNOLOGIES PRIVATE LIMITED, L=Delhi, S=Delhi, C=IN

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

136F74C999D8

File PE Metadata

Compilation timestamp:

1/29/2014 7:27:47 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

Entry address:

0x4666C

Entry point:

55, 8B, EC, 83, C4, E4, 53, 33, C0, 89, 45, E4, 89, 45, E8, 89, 45, EC, B8, EC, E8, 43, 00, E8, 80, AC, FB, FF, 8B, 1D, 54, B4, 44, 00, 33, C0, 55, 68, 9F, 67, 44, 00, 64, FF, 30, 64, 89, 20, 8B, 03, E8, 4D, C4, FB, FF, 8B, 03, B2, 01, E8, 6C, C4, FB, FF, 8B, 03, BA, B8, 67, 44, 00, E8, 28, C4, FB, FF, 8B, 0D, CC, 70, 44, 00, 8B, 03, 8B, 15, B4, C0, 41, 00, E8, 2D, C4, FB, FF, 8B, 0D, E0, 70, 44, 00, 8B, 03, 8B, 15, F8, E7, 43, 00, E8, 1A, C4, FB, FF, 8B, 0D, C4, 70, 44, 00, 8B, 03, 8B, 15, 40, C2, 41, 00... 
[+]

Entropy:

6.4180

Developed / compiled with:

Microsoft Visual C++

Code size:

274.5 KB (281,088 bytes)

Remove RescueManager.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.