home

restorationsuite_win32_1_7_2.tmp

Acon AS

Publisher:
Acon AS  (signed and verified)

Description:
Setup/Uninstall

Version:
51.52.0.0

MD5:
b00fe22ac8ed7928c2837a3fa162fa96

SHA-1:
0f4c05394e7a97b8b051540f6c1d7ced9f9b77ff

SHA-256:
ef488a8a7fa93095e413bbf80865de62595fd8db64e4591e1e02e436bb063772

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/30/2024 10:57:59 AM UTC  (today)

File size:
755.7 KB (773,792 bytes)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\restorationsuite_win32_1_7_2.tmp

Digital Signature
Signed by:
Acon AS

Authority:
COMODO CA Limited

Valid from:
11/23/2015 3:00:00 AM

Valid to:
11/23/2018 2:59:59 AM

Subject:
CN=Acon AS, OU=Acon Digital, O=Acon AS, POBox=Acon AS, STREET=Sørkedalsveien 273, L=Oslo, S=Oslo, PostalCode=0754, C=NO

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
458F8C60015E9ABA4AB66C9CB299B3DE

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:fQhCh1/aLmSKrPD37zzH2A6QGgx/bsQeq9KgERkVfzrrNV4blc4/Nat9Ayx9iin:fQYh1yLmSKrPD37zzH2A6QD/InqggE2N

Entry address:
0x99AE0

Entry point:
55, 8B, EC, 83, C4, F4, 53, 56, 57, E8, 56, 98, F6, FF, E8, AD, BB, F6, FF, E8, 34, C8, F6, FF, E8, D7, C8, F6, FF, E8, 5A, FE, F6, FF, E8, 6D, 6C, F7, FF, E8, D0, 6E, F7, FF, E8, 27, 8E, F7, FF, E8, 3A, F5, F7, FF, E8, 35, B4, F8, FF, E8, 5C, 5C, F9, FF, E8, 43, 6F, F9, FF, E8, 8E, 5C, FB, FF, E8, 55, 61, FB, FF, E8, 54, 69, FB, FF, E8, 33, 7D, FB, FF, E8, 26, 97, FB, FF, E8, 19, D6, FB, FF, E8, 18, E5, FB, FF, E8, 2B, F8, FB, FF, E8, 42, AF, FC, FF, E8, 6D, 37, FD, FF, E8, 84, F9, FD, FF, E8, 93, AE, FE...
 
[+]

Entropy:
6.6304

Developed / compiled with:
Microsoft Visual C++

Code size:
611.5 KB (626,176 bytes)

Scan restorationsuite_win32_1_7_2.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.