home

ResetFileAttributes.exe

Reset File Attributes

Geek Squad

Publisher:
Geek Squad  (signed and verified)

Product:
Reset File Attributes

Description:
Resets default file attributes for Windows files

Version:
1.0.0.912

MD5:
149fdcd55738f57ab53fab23a15839ec

SHA-1:
42a4004dc326e6ce158b9cdaa02f6fb4196733fe

SHA-256:
dac692a5d2f7e3bd7b35ea3db2022d34d3542d4891b6a7c815f29385a0097b86

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:34:59 AM UTC  (today)

File size:
230.1 KB (235,584 bytes)

Product version:
1.0.0.912

Copyright:
Confidential Trade Secret of (c) 2004-2011 Best Buy Enterprise Services, Inc. For internal use only.

Original file name:
ResetFileAttributes.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\logmein rescue applet\lmir0005.tmp\toolset\resetfileattributes.exe

Digital Signature
Signed by:
Geek Squad

Authority:
VeriSign, Inc.

Valid from:
8/25/2009 5:00:00 PM

Valid to:
10/20/2012 4:59:59 PM

Subject:
CN=Geek Squad, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Geek Squad, L=Richfield, S=Minnesota, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
44980722CAD26153548BCFFFE3B23D73

File PE Metadata
Compilation timestamp:
6/17/2011 11:24:05 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
3072:6ZrPuUCvF8GiZPL8W7NiBPj8QZxR5vO4AvnfbOsmQRaWiFZjxH7PAhP4mko6xXzZ:61uU1bl86KBZNG4Avnqbzh7sPRKjXJb3

Entry address:
0x15963

Entry point:
B8, 28, DC, 49, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 3B, AA, 3F, 2A, E8, 4C, 2A, B1, 9B, 0C, 3D, 84, B1, 45, 44, 7B, D1, 9C, D7, 24, 6B, 8E, 96, 64, 6C, B1, 2E, 0C, E1, FA, 80, 08, 10, FB, CF, F1, 6F, 40, 0B, E3, 44, B4, 56, 6D, 37, 9A, BD, A3, A5, 3D, E5, E9, 17, 2F, 69, 6C, 64, 35, 08, 9B, C7, EF, F0, 92, C9, EA, B1, 8C, 36, 24, D6, 19, 95, 3F, 01, F2, 0A, 5E, C9, 43, 75, FD, 88, 85, CD, 1E, 26, AB, DA, F4, 51, F0, 89...
 
[+]

Entropy:
7.6308

Packer / compiler:
PECompact v2

Code size:
164.5 KB (168,448 bytes)

Scan ResetFileAttributes.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.