» 苹果刷机助手v1.28.exe
Overview
Analysis
File Details

苹果刷机助手v1.28.exe

iPhone Restore Tool

深圳市为爱普信息技术有限公司

File name:

苹果刷机助手v1.28.exe

Publisher:

深圳市为爱普信息技术有限公司 (signed and verified)

Product:

iPhone Restore Tool

Version:

1, 0, 1, 0

MD5:

e6a6c91dfaf32858c0fb96397db3310d

SHA-1:

06b94b37a11368268e11be8d07de1d13b9789a73

SHA-256:

202c2ae865c418f5966edd8c260094e5bf8a63d33e9054348a44f86001f5b19a

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

2/26/2025 9:21:29 PM UTC (today)

Scan engine

Detection

Engine version

AVG

Win32/Heur

2016.0.3062

Comodo Security

TrojWare.Win32.Amtar.KNB

16805

File size:

18.9 MB (19,864,112 bytes)

Product version:

1, 0, 1, 0

Original file name:

苹果刷机助手.EXE

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

深圳市为爱普信息技术有限公司

Authority:

GlobalSign nv-sa

Valid from:

5/22/2012 12:05:51 PM

Valid to:

5/23/2013 12:05:51 PM

Subject:

CN=深圳市为爱普信息技术有限公司, O=深圳市为爱普信息技术有限公司, L=Shenzhen, S=Guangdong, C=CN

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11210E8884FF97E07AF62AF27C885CA9980C

File PE Metadata

Compilation timestamp:

7/31/2012 7:31:00 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

393216:1/yIaNa1S9hyTdji9ikXHgNUKt88dIUf0gCiNFZVpGtTOXm9aNPEyo:QASDygfXANUKttC27NFZA9mJo

Entry address:

0x13AFD3B

Entry point:

E8, 1D, 00, 00, 00, 53, 61, 66, 65, 6E, 67, 69, 6E, 65, 20, 50, 72, 6F, 74, 65, 63, 74, 6F, 72, 20, 76, 32, 2E, 31, 2E, 37, 2E, 30, 00, EB, 8B, AA, 2F, BF, DA, 29, D7, C2, 8B, EB, 89, 45, 00, 5D, 61, E9, 2F, 69, EC, FF, E9, 99, 00, 00, 00, F5, 66, 89, 64, 24, 1E, FF, 74, 24, 28, 8D, 64, 24, 02, 89, 44, 24, 21, 8A, C4, EB, 59, 7F, FD, 6D, F4, 07, E0, 4F, CE, 5C, 3B, D6, 38, DF, 8D, 64, 24, 03, 83, C4, 00, FC, 8D, 64, 24, 01, F5, 83, EC, 08, E8, C3, FF, FF, FF, 22, A4, 3A, 5D, AC, 45, 51, D0, 53, CA, 65, 81... 
[+]

Entropy:

7.9914 (probably packed)

Scan 苹果刷机助手v1.28.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.