» patchrecovery.exe
Overview
Analysis
File Details
Programs (1)

patchrecovery.exe

PatchRecovery

JCR Soft.Co.,ltd

This is installed with DARK BLOOD ONLINE.

File name:

patchrecovery.exe

Publisher:

JCR SOFT Co.Ltd., (signed by JCR Soft.Co.,ltd)

Product:

PatchRecovery

Description:

PatchRecovery Tools.

Version:

1.0.0.2

MD5:

8643c7263049d5a935fddd6f32623faa

SHA-1:

121a597457fce45339e463e81024cc8123da8a20

SHA-256:

191bfc4e3bed8959ba8da5a9f6aa1a4ce64ba77204cb09459fe7f9857305000a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/8/2024 6:06:28 PM UTC (today)

File size:

581.5 KB (595,504 bytes)

Product version:

1.0.0.2

Original file name:

JPatchRecovery.exe

File type:

Executable application (Win32 EXE)

Language:

Korean (Korea)

Common path:

C:\Program Files\steam\steamapps\common\dark blood\patchrecovery.exe

Digital Signature

Signed by:

JCR Soft.Co.,ltd

Authority:

Thawte, Inc.

Valid from:

3/5/2013 7:00:00 PM

Valid to:

6/5/2014 7:59:59 PM

Subject:

CN="JCR Soft.Co.,ltd", O="JCR Soft.Co.,ltd", L=Buk-gu, S=daegu, C=KR

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

38C5DFC5CFF4F2FB47C53BA527975C10

File PE Metadata

Compilation timestamp:

6/3/2013 5:18:39 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:bFnf5phjQyRhn7oJFVx0dqSxzLRMeV/cHgwz/o9Tkjh:H7jAPVxmPRMaAQ9Tkjh

Entry address:

0x2E1CF

Entry point:

E8, EB, 7A, 00, 00, E9, 17, FE, FF, FF, E8, 89, 6A, 00, 00, FF, 74, 24, 04, E8, E0, 68, 00, 00, FF, 35, 50, 4D, 48, 00, E8, A2, 74, 00, 00, 68, FF, 00, 00, 00, FF, D0, 83, C4, 0C, C3, 68, 5C, 1A, 47, 00, FF, 15, F0, F1, 46, 00, 85, C0, 74, 16, 68, 4C, 1A, 47, 00, 50, FF, 15, 70, F2, 46, 00, 85, C0, 74, 06, FF, 74, 24, 04, FF, D0, C3, FF, 74, 24, 04, E8, D1, FF, FF, FF, 59, FF, 74, 24, 04, FF, 15, A8, F0, 46, 00, CC, 6A, 08, E8, 8A, 7C, 00, 00, 59, C3, 6A, 08, E8, A9, 7B, 00, 00, 59, C3, 56, 8B, F0, EB, 0B... 
[+]

Entropy:

6.4481

Code size:

440 KB (450,560 bytes)

The file patchrecovery.exe has been discovered within the following program.

DARK BLOOD ONLINE by JCR Soft Co., Ltd

About 7% of users remove it

Scan patchrecovery.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.