» Restore.dll
Overview
Analysis
File Details
Programs (1)

Restore.dll

TimeBack

Chongqing XIA Software Technology, Inc.

File name:

Restore.dll

Publisher:

XIASOFT TECH CO.,LTD. (signed by Chongqing XIA Software Technology, Inc.)

Product:

TimeBack

Description:

TimeBack SDK

Version:

3,1,0,30

MD5:

3ad8f799ab3b267cf6c75a5af459a828

SHA-1:

45c26c4139f5ecaf5cb4e91b8af9503eb7805c20

SHA-256:

19d54c27755dbcc34ba94a57d592424cb20dc3db68b17a094603939057374833

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 7:38:57 PM UTC (today)

File size:

144.9 KB (148,408 bytes)

Product version:

3,1,0,30

Original file name:

Restore.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\xia soft\fastrestore\restore.dll

Digital Signature

Signed by:

Chongqing XIA Software Technology, Inc.

Authority:

VeriSign, Inc.

Valid from:

9/10/2013 2:00:00 AM

Valid to:

9/7/2014 1:59:59 AM

Subject:

CN="Chongqing XIA Software Technology, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Chongqing XIA Software Technology, Inc.", L=ChongQing, S="Yubei District, ChongQing", C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

15460F15A5EB1B967F68E0513800E16C

File PE Metadata

Compilation timestamp:

12/27/2013 1:37:23 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

3072:AgW+GNYlp9Hh8QeCsh3q5104GMoq9uls9Gcv2ZWtChDNBL:xr9H6he0VqMluN2ZtB

Entry address:

0xFB14

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, 78, EF, 01, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, 84, 06, 02, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, E7, FE, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, AC, 77, FF, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, C3, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, B2, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

92 KB (94,208 bytes)

The file Restore.dll has been discovered within the following program.

FastRestore by XIA Software Technology, Inc.

Publisher's description - “FastRestore is a Windows based application that is able to restore protected area like OS or partition to its original configurations each time it restarts. You may roll back your configuration at each rebooting or manual rebooting.”

sysnew.com/fastrestore/support.html

56% remove it

Scan Restore.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.