home

restart_helper.exe

Comodo Security Solutions

This is installed with Comodo Dragon.
Publisher:
Comodo Security Solutions  (signed and verified)

MD5:
b89283ebe04c927583de02e6f14b722a

SHA-1:
5a9b939381c8f9f73ace05a9dd3bf0f4e0ecd0a1

SHA-256:
49b01ff20b4073973cb76e06b8568d3f1e0260c4edca40fe11c9b80c06a6935f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 6:35:06 PM UTC  (today)

File size:
128.6 KB (131,720 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\comodo\dragon\restart_helper.exe

Digital Signature
Signed by:
Comodo Security Solutions

Authority:
COMODO CA Limited

Valid from:
4/8/2013 2:00:00 AM

Valid to:
4/9/2014 1:59:59 AM

Subject:
CN=Comodo Security Solutions, O=Comodo Security Solutions, STREET=1255 Broad St., STREET=Suite 100, L=Clifton, S=New Jersey, PostalCode=07013, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
071AE4A2402BB0AD40F3FBD4402B9290

File PE Metadata
Compilation timestamp:
3/27/2013 3:43:50 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:uzLFpwjRX6YSmCKLNrYWCTHM//TfYoI5AWUBmrdM:YZ6RKrKhrYHT8/TfYSmm

Entry address:
0x827F

Entry point:
E8, 9B, 4C, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 85, C0, 74, 12, 83, E8, 08, 81, 38, DD, DD, 00, 00, 75, 07, 50, E8, 2B, F8, FF, FF, 59, 5D, C3, 8B, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, F1, C6, 46, 0C, 00, 85, C0, 75, 63, E8, 6F, 2A, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, A8, D6, 41, 00, 74, 12, 8B, 0D, 60, D4, 41, 00, 85, 48, 70, 75, 07, E8, 1E, 28, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, 58, DB, 41, 00, 74, 16, 8B, 46, 08, 8B, 0D, 60, D4, 41, 00...
 
[+]

Entropy:
6.5879

Code size:
90.5 KB (92,672 bytes)

The file restart_helper.exe has been discovered within the following program.

Comodo Dragon  by COMODO
Comodo Dragon is a freeware web browser. The Comodo Dragon browser developed by Comodo Security Solutions, Inc. is based on the Chromium software code developed by Google. It is an implementation of Chromium and is produced by Comodo Group.
www.comodo.com/home/browsers-toolbars/browser.php
42% remove it
 
Powered by Should I Remove It?

Scan restart_helper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.