» restorer64.exe
Overview
Analysis
File Details

restorer64.exe

Restorer Ultimate

Bitmart Inc.

File name:

restorer64.exe

Publisher:

Bitmart Inc. (signed and verified)

Product:

Restorer Ultimate

Version:

7, 0, 701, 112

MD5:

63a6e457386797cb36c7a9f601a55020

SHA-1:

307c377b305fda27361014d67a9f0409b12ed81b

SHA-256:

445086bb9b42fe0cc74cbef660fd07a3ca784003fbb27ae343e9211feafa0750

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 12:49:28 AM UTC (today)

File size:

25 MB (26,163,688 bytes)

Product version:

7, 0, 701, 112

Trademarks:

Original file name:

Restorer Ultimate.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Program Files\restorer ultimate\restorer64.exe

Digital Signature

Signed by:

Bitmart Inc.

Authority:

GlobalSign nv-sa

Valid from:

6/30/2010 4:25:06 AM

Valid to:

6/30/2013 4:25:00 AM

Subject:

E=office@bitmart.net, CN=Bitmart Inc., OU=Office, O=Bitmart Inc., L=Richmond Hill, S=Ontario, C=CA

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

01000000000129882CD880

File PE Metadata

Compilation timestamp:

9/28/2011 9:47:39 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

393216:c3rZLrEm/wa3vCv4XgamQBiojJqJsv6tWKFdu9CM+7cM4:c3rZ0ojJpUcf

Entry address:

0x3E55EC

Entry point:

48, 83, EC, 28, E8, A3, 1D, 01, 00, 48, 83, C4, 28, E9, 1A, FE, FF, FF, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 6C, 24, 10, 48, 89, 74, 24, 18, 57, 48, 83, EC, 60, 48, 8B, E9, 48, 8B, CA, 49, 8B, F1, 49, 8B, F8, 48, 8B, DA, E8, 48, BE, FF, FF, 48, 85, DB, 75, 25, E8, 4A, ED, FF, FF, 48, 83, 64, 24, 20, 00, 45, 33, C9, 45, 33, C0, 33, D2, 33, C9, C7, 00, 16, 00, 00, 00, E8, FF, AC, FF, FF, 83, C8, FF, EB, 44, 48, 85, FF, 74, D6, C7, 44, 24, 48, 49, 00, 00, 00, 48, 89, 5C, 24, 40, 48, 89, 5C, 24, 30, 48, 3D, FF... 
[+]

Entropy:

6.3852

Code size:

15 MB (15,732,224 bytes)

Scan restorer64.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.