home

imagerescue4.exe

Image Rescue 4

This is a self-extracting archive and installer. The file has been seen being downloaded from store.lexar.com.
Product:
Image Rescue 4

Description:
Image Rescue 4 Setup

MD5:
a8060b1c797070d28b650b125c6088e1

SHA-1:
9b68e69a5200f36366c5e1c5ae665003aff6290d

SHA-256:
d9ae3bc84106ec947979ed347c912b4c0e41924a8fd656f9ad2ca85368cf73e7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:28:35 AM UTC  (today)

File size:
21.6 MB (22,687,352 bytes)

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\imagerescue4.exe

File PE Metadata
Compilation timestamp:
9/23/2009 6:06:57 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:XwmRMk3LKozZx29L0Ma7Isrxf/z5BOY984x4JULaT51DB:kcL3zZo9Q7brN/NI2zx4JL51t

Entry address:
0x163C4

Entry point:
49, 8B, C7, 4B, FF, CF, 8D, 15, 42, FC, C3, 30, 8D, 0D, B3, 79, 16, C5, F2, 0F, AF, C8, 84, EB, B2, F0, 88, C4, E8, 23, 00, 00, 00, 8B, D7, C6, C2, AF, 4E, FE, C5, 0F, BF, F3, 2B, DB, 76, 01, 49, 81, EB, 16, 82, FF, FF, 0B, D5, 0F, B7, CF, 89, FE, 81, EB, C8, 08, 00, 00, 5D, 0F, B6, D1, B0, 51, 8A, D0, 40, 80, D8, 31, 8D, 3D, 22, 86, 46, CB, 0F, AF, C9, 0F, AF, C5, 85, F6, 81, C5, E9, 89, 01, 00, 31, C3, C7, C0, 87, 51, 7F, 87, 81, ED, B6, 0B, 00, 00, 1A, EF, 0D, 59, 01, 27, 25, 33, D5, 89, FB, 81, EB, FD...
 
[+]

Entropy:
7.9995  (probably packed)

Code size:
84 KB (86,016 bytes)

The file imagerescue4.exe has been seen being distributed by the following URL.

http://store.lexar.com/dtech/index.cfm/ir4/.../imagerescue4.exe

Scan imagerescue4.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.