home

cardrecovery.exe

CardRecovery

WinRecovery Software

Publisher:
WinRecovery Software  (signed and verified)

Product:
CardRecovery

Version:
3.4.0.0

MD5:
17a176ad1e1c8f5f0238f898d7602628

SHA-1:
59769208602d6ad156fde834db086feda5edd07a

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/24/2024 7:59:36 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Packed.ASPack
0.98/17211

Quick Heal
(Suspicious) - DNAScan
7.15.11.00

File size:
508 KB (520,192 bytes)

Product version:
3.4.0.0

Copyright:
WinRecovery Software

Trademarks:
CardRecovery

Original file name:
cardrecovery.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\cardrecovery\cardrecovery.exe

Digital Signature
Signed by:
WinRecovery Software

Authority:
The USERTRUST Network

Valid from:
2/8/2006 7:00:00 PM

Valid to:
2/9/2008 6:59:59 PM

Subject:
CN=WinRecovery Software, O=WinRecovery Software, STREET=Yudao St. 29, L=Nanjing, S=JS, PostalCode=210016, C=CN

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
7A0F35A5D301113B4C50984A67E2F638

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:yEAbZEqi90WZ3Gk9Ymazjalr0KbGYWZmoNliSb3q6b7MP+Dd2ui1Y:1EI/Z3J9Y9zWNGZLDDL7MP+h21C

Entry address:
0x1000

Entry point:
68, 01, 80, 5B, 00, E8, 01, 00, 00, 00, C3, C3, C6, FC, 21, 94, 88, DC, 07, CC, 69, 75, F9, 6A, 69, B2, D7, 9A, 74, 54, B8, 50, 4A, 27, 53, 2E, C1, B0, 37, 50, BA, B2, 3D, 9E, ED, 3D, D3, AA, C7, DD, C3, 61, 9F, 8C, DD, 33, 0F, 4B, 5D, F1, 82, 55, 3A, 93, 63, 9D, F0, 48, 56, A9, 28, FE, 46, 91, 85, 57, 00, 4D, A1, 6C, 11, B4, B0, 99, F3, 30, 43, 43, 52, 61, 76, 10, 44, 46, CB, DD, D3, AB, 95, 07, FA, CD, A7, E7, B7, 42, 9D, 99, 47, 76, 75, C2, CE, E1, C6, 53, A9, 39, 99, 93, B7, D5, 61, 46, 7D, 75, 25, D3...
 
[+]

Entropy:
7.9141

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
653.5 KB (669,184 bytes)

Scan cardrecovery.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.