home

riwork.exe

Keepit

Keepit AS

Publisher:
Keepit AS  (signed and verified)

Product:
Keepit

Version:
3,0,0,2258

MD5:
02b716fcec180c0de0e09418639d5d00

SHA-1:
460ae686808d80a0b1e129bf6a533e5d6e6dda4a

SHA-256:
80d924fe9eacb58c8de8acc9c7ff9a0a1e33c0f6e9148fb687a9106a087fbdd9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 5:29:32 AM UTC  (today)

File size:
816.4 KB (835,960 bytes)

Product version:
3,0,0,2258

Copyright:
(C) 2007-2011 Keepit A/S (https://www.keepit.com/)

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\updatestar online backup\x5juzosl.ver\riwork.exe

Digital Signature
Signed by:
Keepit AS

Authority:
VeriSign, Inc.

Valid from:
7/23/2009 2:00:00 AM

Valid to:
10/7/2012 1:59:59 AM

Subject:
CN=Keepit AS, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Keepit AS, L=Copenhagen, S=Denmark, C=DK

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
13F981CC0BBECA0CC8669B2B01C455BC

File PE Metadata
Compilation timestamp:
12/8/2011 1:16:50 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
6144:AzEBHI/LampUH7Rhi9iCnAEpk6gl04fxOYuXT+ruXhL6zlf6XlVjD4c6gUIKdLfD:5BHzb22QRGlcTX8tq8ckjZfuWLL1KHU

Entry address:
0x6B38

Entry point:
48, 83, EC, 28, E8, 53, 04, 00, 00, 48, 83, C4, 28, E9, 9E, FD, FF, FF, CC, CC, 48, 89, 5C, 24, 10, 44, 89, 44, 24, 18, 48, 89, 4C, 24, 08, 56, 57, 41, 54, 48, 83, EC, 40, 49, 8B, F1, 41, 8B, F8, 4C, 8B, E2, 48, 8B, D9, FF, CF, 89, 7C, 24, 70, 78, 0F, 49, 2B, DC, 48, 89, 5C, 24, 60, 48, 8B, CB, FF, D6, EB, E9, EB, 00, 48, 8B, 5C, 24, 68, 48, 83, C4, 40, 41, 5C, 5F, 5E, C3, CC, CC, 48, 8B, C4, 4C, 89, 48, 20, 44, 89, 40, 18, 48, 89, 50, 10, 53, 56, 57, 41, 54, 48, 83, EC, 38, 4D, 8B, E1, 49, 63, F8, 48, 8B...
 
[+]

Code size:
516 KB (528,384 bytes)

Scan riwork.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.