home

FACE.exe

Geek Squad MRI Toolset

Geek Squad, Inc

Publisher:
Geek Squad  (signed by Geek Squad, Inc)

Product:
Geek Squad MRI Toolset

Description:
MRI FACE

Version:
5.10.3.2438

MD5:
f534497dd64f7dd31d6ab5459b73400b

SHA-1:
f89b70ade1facabb7d1b33e759ee6cf1c9673ccc

SHA-256:
c06bf4fe20cd8d63327079c0566d56a42821187980a3c2546bf92c643f48afa3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 4:58:08 PM UTC  (today)

File size:
109.7 KB (112,360 bytes)

Product version:
5.10.3.2438

Copyright:
Confidential Trade Secret of ©2004-2016 Best Buy Enterprise Services, Inc. For internal use only.

Original file name:
FACE.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Geek Squad, Inc

Authority:
Symantec Corporation

Valid from:
6/15/2016 7:00:00 PM

Valid to:
11/12/2018 5:59:59 PM

Subject:
CN="Geek Squad, Inc", O="Geek Squad, Inc", L=Richfield, S=Minnesota, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
674CEB1CD886FB3BA1792851F3797234

File PE Metadata
Compilation timestamp:
6/18/2016 2:31:56 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:rNvnnwTcOdaJvTSnDBqXPefn1WNkdufNkVQpZ/2bLSmQo3HglQRwClI1Nejby6o8:rln8lQongXP44CahZ/4UQRjIWb5o8

Entry address:
0x1000

Entry point:
B8, 08, BB, 45, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 62, 89, FB, 99, 49, 1D, 55, 91, C5, 64, 4F, AF, 29, FE, E9, 8A, 84, DA, B4, CE, C0, 34, 54, A1, AA, 10, 9E, F8, 80, 2D, 88, 5D, 3D, B5, 36, 97, F8, B6, 2E, 6D, FE, 54, BF, 56, DD, E5, ED, F2, AF, 8B, 85, 4C, 19, 2C, 27, 41, 06, 3C, 57, 65, EA, AE, 02, 73, FC, 6C, 03, 34, 05, DF, D4, 94, 0E, 1D, 36, 26, 4F, AA, F7, 80, 9A, 8F, A8, 51, 69, C8, 66, 7C, 7A, 1A, C4, E8, 60...
 
[+]

Entropy:
7.9128

Packer / compiler:
PECompact v2

Code size:
193 KB (197,632 bytes)

Scan FACE.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.