home

S2_Recovery_Tools_for_Microsoft_PowerPoint.exe

PowerPointRecovery

Paul Pruitt

Publisher:
Microsoft  (signed by Paul Pruitt)

Product:
PowerPointRecovery

Version:
1.0.0.1

MD5:
001cb6c0fbc0ed316f0b0205a178eaed

SHA-1:
c7083a13e5c25d46523dc68384e11b7f26751a79

SHA-256:
9ce9b785913afd160b1d3d054135e091387d986f8f6511e4414623a352989b64

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:17:01 PM UTC  (today)

File size:
1.3 MB (1,378,944 bytes)

Product version:
1.0.0.1

Copyright:
Copyright © Paul D Pruitt 2013

Original file name:
S2_Recovery_Tools_for_Microsoft_PowerPoint.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\s2 recovery tools for microsoft powerpoint\s2_recovery_tools_for_microsoft_powerpoint.exe

Digital Signature
Signed by:
Paul Pruitt

Authority:
COMODO CA Limited

Valid from:
1/10/2013 7:00:00 PM

Valid to:
1/11/2014 6:59:59 PM

Subject:
CN=Paul Pruitt, OU=Sole Proprietor of S2 Services, O=Paul Pruitt, STREET=9006 Friars Rd, STREET=Bethesda, L=Paul Pruitt, S=MD, PostalCode=20817, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
5AD65BEA6F03B4F8AAABED812ED9BF66

File PE Metadata
Compilation timestamp:
7/24/2013 2:42:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:r15p6lbx5ncJmbKaLyqQ4rGkrxENmWRRn0GSJanktLApX8rE:rp4vCmyoakr+NlRn0GSEkt+8

Entry address:
0x147BEE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, F9, 1F, F0, 51, 00, 00, 00, 00, 02, 00, 00, 00, 1C, 01, 00, 00, 1C, 80, 14, 00, 1C, 60, 14, 00, 52, 53, 44, 53, 7E, 0C, 51, CD, 40, 43, 74, 40, 84, E8, 70, A1, B1, 94, B3, BA, 01, 00, 00, 00, 49, 3A, 5C, 44, 6F, 63, 75, 6D, 65, 6E, 74, 73, 5C, 56, 69, 73, 75, 61, 6C, 20, 53, 74, 75, 64, 69, 6F, 20, 32, 30, 31, 32, 5C, 50, 72, 6F, 6A, 65, 63, 74, 73, 5C, 50, 6F, 77, 65, 72, 50, 6F, 69, 6E, 74, 52, 65, 63, 6F, 76, 65, 72...
 
[+]

Entropy:
7.7495

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.3 MB (1,334,272 bytes)

Scan S2_Recovery_Tools_for_Microsoft_PowerPoint.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.