home

semirestore.exe

SemiRestore7

The application semirestore.exe has been detected as a potentially unwanted program by 16 anti-malware scanners.
Product:
SemiRestore7

Version:
1.0.0.0

MD5:
db4e90131d7168bbd7ebfc99f99bc8e0

SHA-1:
749d38fee0a6b5ee357fbff431a961876a14a5dd

SHA-256:
7cab639139be97d33e48a02f447aadb8bc9e81564c86dab00d0eb3322654f022

Scanner detections:
16 / 68

Status:
Potentially unwanted

Analysis date:
4/19/2024 9:08:40 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.1989052
799

Avira AntiVirus
PCK/MSIL.Confuser
7.11.189.52

Bitdefender
Trojan.GenericKD.1989052
1.0.20.1660

Emsisoft Anti-Malware
Trojan.GenericKD.1989052
8.14.11.28.04

F-Secure
Trojan.GenericKD.1989052
11.2014-28-11_6

G Data
Trojan.GenericKD.1989052
14.11.24

IKARUS anti.virus
PUA.MSIL.Confuser
t3scan.1.8.3.0

K7 AntiVirus
Riskware
13.186.14161

Kaspersky
UDS:DangerousObject.Multi.Generic
14.0.0.2879

McAfee
Artemis!DB4E90131D71
5600.6933

MicroWorld eScan
Trojan.GenericKD.1989052
15.0.0.996

Norman
Obfuscated.gen!r
11.20141128

nProtect
Trojan.GenericKD.1989052
14.11.27.01

Panda Antivirus
Trj/Chgt.N
14.11.28.04

Trend Micro House Call
Suspicious_GEN.F47V1121
7.2.332

VIPRE Antivirus
Trojan.Win32.Generic
35192

File size:
552.5 KB (565,760 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014

Original file name:
SemiRestore7.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
11/21/2014 12:37:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:Eg5fl/0sfGMp7iiSMeyjw4w+0lzhabAbAKWlXERS+QLjS4:EgNF0sfDpOiIyM4l0ld7bAtlkCjJ

Entry address:
0x7F4EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.8478

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
501.5 KB (513,536 bytes)

Remove semirestore.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.