home

Restore.exe

Restore

Texthelp Ltd.

Publisher:
Texthelp Systems Ltd  (signed by Texthelp Ltd.)

Product:
Restore

Version:
1.00.0019

MD5:
93d9f162eccbe5ffeb30c63943ebef1d

SHA-1:
3b23b66ab4261a04ac3645e7d1afeddb08a24480

SHA-256:
4f869113cc8278d64c47dd4c60faeacd606b5cc2d5715265118748ebf7aaa30e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 10:47:19 PM UTC  (today)

File size:
727.5 KB (744,912 bytes)

Product version:
1.00.0019

Original file name:
Restore.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\restore.exe

Digital Signature
Signed by:
Texthelp Ltd.

Authority:
VeriSign, Inc.

Valid from:
11/6/2014 12:00:00 AM

Valid to:
12/17/2017 11:59:59 PM

Subject:
CN=Texthelp Ltd., O=Texthelp Ltd., L=Antrim, S=Antrim, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0B58B82EDC02CFD427588A601D0ED5

File PE Metadata
Compilation timestamp:
11/19/2014 10:02:25 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:1DSwM9ficGXzB4bIoFsfxHnxUPcUUoYSfzD+tDwp0m:1ewb4EfxHnxUoDw2m

Entry address:
0x1CC8

Entry point:
68, D4, D9, 49, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, 22, 77, BB, 6D, 88, 25, 39, 47, B3, 62, 19, B6, 98, EA, A1, 20, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 52, 65, 73, 74, 6F, 72, 65, 00, 00, 00, 00, 00, FF, CC, 31, 00, 23, 93, 92, 98, 76, E4, 57, D3, 4E, B3, C9, 59, 05, D6, 83, 08, A4, 59, F2, 8F, DC, 86, 85, F6, 4B, A4, 78, 99, 61, CE, 18, 4A, DD, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00, AA, 00, 60, D3, 93, 00, 00, 00...
 
[+]

Entropy:
2.0424

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
708 KB (724,992 bytes)

Scan Restore.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.