home

ontrackeasyrecoveryenterprise11.1.0.0cr.exe

Setup

Dey yazilim ve internet hizmetleri san. tic. ltd. sti.

The application ontrackeasyrecoveryenterprise11.1.0.0cr.exe by Dey yazilim ve internet hizmetleri san. tic. ltd. sti has been detected as adware by 8 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software.
Publisher:
Microsoft  (signed by Dey yazilim ve internet hizmetleri san. tic. ltd. sti.)

Product:
Setup

Version:
1.0.0.0

MD5:
7ea2e7354c0f4486241cedb1650ec3ba

SHA-1:
2252a7e7e1af779cce925ab63d1a02602b373b53

SHA-256:
4fe7c6b9f026076a5056ab803c1a3799eebdd8712ea3e4a4a2b4cf7cdf5fd128

Scanner detections:
8 / 68

Status:
Adware

Analysis date:
4/26/2024 12:54:30 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.3228

Dr.Web
Trojan.KillFiles.18730
9.0.1.016

ESET NOD32
MSIL/Adware.Joedown (variant)
9.11024

Fortinet FortiGate
Adware/Agent
1/16/2015

IKARUS anti.virus
not-a-virus:AdWare.MSIL.Agent
t3scan.1.8.6.0

Kaspersky
not-a-virus:AdWare.MSIL.Agent
14.0.0.2633

McAfee
Artemis!7EA2E7354C0F
5600.6884

Reason Heuristics
PUP.Installer.Amonitize
15.2.14.11

File size:
555.7 KB (569,048 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Microsoft 2014

Trademarks:
Microsoft

Original file name:
SetupFullCube.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\ontrackeasyrecoveryenterprise11.1.0.0cr.exe

Digital Signature
Signed by:
Dey yazilim ve internet hizmetleri san. tic. ltd. sti.

Authority:
COMODO CA Limited

Valid from:
3/12/2014 3:00:00 AM

Valid to:
3/13/2015 2:59:59 AM

Subject:
CN=Dey yazilim ve internet hizmetleri san. tic. ltd. sti., O=Dey yazilim ve internet hizmetleri san. tic. ltd. sti., STREET=kuloglu mah alyon gecidi sok, STREET=beyoglu, L=istanbul, S=istanbul, PostalCode=34433, C=TR

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FD3AA42CD883A6D47CC56CDA9837EB85

File PE Metadata
Compilation timestamp:
1/16/2015 11:03:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:MMGsgL7GZOsLa30hTbeS/J1s0ldUmx/bLbYnwch3SFMGsgL7GK:M/nGZY09KS/J1sGdUmx/bwnwccF/nGK

Entry address:
0x62F7E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
388 KB (397,312 bytes)

Remove ontrackeasyrecoveryenterprise11.1.0.0cr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.