home

forensicexplorer.exe

GetData Pty Ltd

Publisher:
GetData Pty Ltd  (signed and verified)

Description:
Forensic Explorer

Version:
1.5.2.2658

MD5:
a684824498a055c7468007896f802d6c

SHA-1:
fb4420138eda52d553a43a26d2922aa0c5e65d2b

SHA-256:
a05dd188f7ad670fb2cc47344e27da0bb280d1e93aa219bbea4aa689dbcdf604

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:49:45 PM UTC  (today)

File size:
41 MB (43,013,104 bytes)

Product version:
1.5

Copyright:
© 2014 GetData Pty Ltd

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\getdata\forensic explorer v1\forensicexplorer.exe

Digital Signature
Signed by:
GetData Pty Ltd

Authority:
GoDaddy.com, Inc.

Valid from:
4/3/2013 3:34:53 PM

Valid to:
4/3/2014 3:34:53 PM

Subject:
CN=GetData Pty Ltd, O=GetData Pty Ltd, L=KOGARAH, S=NSW, C=AU

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
277049179431A7

File PE Metadata
Compilation timestamp:
1/2/2014 5:51:53 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:O6U6tfpDPL1Q4JmJRgBnXFH3JylKya4pzCT3cbnoXgaJe68j7+NX:3lPPLmqacnXFXklKya4xP0Xxh8GNX

Entry address:
0x28F3A50

Entry point:
B8, FF, 00, 00, 00, 8B, 1D, 70, 63, DB, 02, F7, C3, 00, 01, 00, 00, 74, 0D, 57, 8B, FC, 8B, 47, 10, 50, 8B, 47, 0C, 50, EB, 02, 50, 50, E8, 59, FF, FF, FF, 83, C4, 08, 5F, 8B, 1D, 90, 82, DB, 02, F7, C3, 10, 00, 00, 00, 75, 08, A1, 5C, 83, DF, 02, 50, EB, 05, 33, C0, C2, 0C, 00, 33, C0, C3, CC, CC, CC, CC, CC, CC, CC, 56, 8B, F1, E8, B8, DB, 06, 00, 33, C0, 89, 86, B8, 02, 00, 00, 89, 86, BC, 02, 00, 00, 89, 86, C0, 02, 00, 00, 89, 86, C4, 02, 00, 00, 89, 86, C8, 02, 00, 00, 89, 86, E4, 02, 00, 00, 89, 86...
 
[+]

Entropy:
7.9672  (probably packed)

Code size:
34.5 MB (36,207,616 bytes)

Scan forensicexplorer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.