home

recoverytoolboxforcdinstall.exe

Recovery Toolbox for CD Free

Recovery Toolbox, Inc.

This is a setup and installation application. The file has been seen being downloaded from recoverytoolbox.com.
Publisher:
Recovery Toolbox, Inc.

Product:
Recovery Toolbox for CD Free

Description:
Recovery Toolbox for CD Free Setup

MD5:
3e321038a688e682309dcf6e4a9d8f46

SHA-1:
2220d0e600577f6cc927f6601964c232d9785ee5

SHA-256:
42ac3ea44a52f918858d176a71f62cff18f56985ade8f35dec8ebfc224a716c5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:47:34 PM UTC  (today)

File size:
2.8 MB (2,920,448 bytes)

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\recoverytoolboxforcdinstall.exe

File PE Metadata
Compilation timestamp:
10/9/2012 11:48:22 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:3nU1GfqtzAr+twuGQ7dX7DCY6pJ9uD8uVQVcE/L7N5b6J/:X16Ar+JdrDPW9uDdQV95b+

Entry address:
0xF3BC

Entry point:
47, 4F, 89, EA, B4, 11, F6, C1, FA, 1A, D0, 88, CE, 55, F7, C0, 3C, 5C, 5D, 83, 3A, C5, 0A, E6, C6, C0, 4E, F2, FE, C6, E8, 00, 00, 00, 00, 0F, B6, F0, 80, F5, 69, 21, F0, B7, 87, 4F, F7, C5, 0B, 85, B9, 1D, F3, 80, E6, 24, EB, 09, F7, C7, 61, 0A, 6B, 9A, 4B, 21, F6, 55, 13, F1, 59, 0F, B6, D3, B7, 8B, 69, D5, 6F, AC, 09, 8E, 0F, BE, F2, 80, DE, 10, 85, EF, 8B, C1, 87, DE, EB, 08, 0F, AF, DD, 12, FB, 0F, AF, C8, 2B, E8, 8B, F0, 41, 86, DB, 6A, 00, 59, 13, C0, F3, 89, EE, 77, 04, 84, F3, 33, F3, F2, 69, DD...
 
[+]

Entropy:
7.9784  (probably packed)

Code size:
59 KB (60,416 bytes)

The file recoverytoolboxforcdinstall.exe has been seen being distributed by the following URL.

https://recoverytoolbox.com/.../RecoveryToolboxForCDInstall.exe

Scan recoverytoolboxforcdinstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.