» KLPassRec.exe
Overview
Analysis
File Details

KLPassRec.exe

ZIP RAR ACE Password Recovery

Serhiy Horobets

File name:

KLPassRec.exe

Publisher:

Serhiy Horobets (signed and verified)

Product:

ZIP RAR ACE Password Recovery

Version:

2.47.38.0

MD5:

fcf57991c9b248445bfde8923710eeeb

SHA-1:

5ddb78c5fd2cfaaee0b2db0d461c11100d653545

SHA-256:

2bc808fd28d3c3cd8a96a78ad1a8da8c9f7fc7a07ae4b813193eb86a5003cf95

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 4:14:17 PM UTC (today)

File size:

1.2 MB (1,302,024 bytes)

Product version:

2.47.38.0

Original file name:

KLPassRec.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\zip rar ace password recovery\install\2.47.38\17a6fd4\klpassrec.exe

Digital Signature

Signed by:

Serhiy Horobets

Authority:

COMODO CA Limited

Valid from:

3/4/2012 7:00:00 PM

Valid to:

3/5/2013 6:59:59 PM

Subject:

CN=Serhiy Horobets, O=Serhiy Horobets, STREET=Sechenova st. 7a - 38, L=Kiev, S=Kiev, PostalCode=03127, C=UA

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

0BDC33B841D03A6A1313662DFBF9A51B

File PE Metadata

Compilation timestamp:

11/12/2012 7:36:18 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:168iNz7aNz8Sq2+TjgJDym7atJEVQweYX1A3zw5v1QTWZAYx5dk:4Bt2+gJDjMrY8Ov1fY

Entry address:

0x1000

Entry point:

68, 01, 00, 6C, 00, E8, 01, 00, 00, 00, C3, C3, 4B, AD, AD, 01, A2, 61, 6C, 31, 29, DB, F1, E7, F7, 7E, FD, C4, 00, 2F, 64, D9, D1, 39, 4D, 5C, A3, 95, 4D, 33, BB, BC, 3A, 79, 77, 5A, DB, 95, DA, 71, E1, EA, 20, CE, A3, 30, F8, 4C, 1A, 54, E2, B8, 5A, 5A, 0F, AA, 38, 24, AA, A6, E0, DC, F8, 58, DC, 82, 75, 5F, EB, 9E, 86, D3, 49, 81, F0, 81, B7, BA, 4C, EE, 9F, 82, C7, 48, A4, 00, B2, F7, DF, 69, DE, 43, 41, 7F, 83, B1, 4B, 2B, 7C, 20, F0, B0, 3D, D9, 95, 59, DF, BB, 59, CF, CE, 37, E2, E6, 51, FF, 60, DE... 
[+]

Entropy:

7.7806

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.3 MB (1,355,264 bytes)

Scan KLPassRec.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.