» ultrasavergettingstarted.exe
Overview
Analysis
File Details
Programs (1)

ultrasavergettingstarted.exe

4X UltraSaver Getting Started

G7 Productivity Systems

This is installed with 4X UltraSaver.

File name:

Publisher:

G7 Productivity Systems (signed and verified)

Product:

4X UltraSaver Getting Started

Description:

Getting Started Wizard

Version:

3.4.0.1

MD5:

153ba2f296227274f052bc28461d9a00

SHA-1:

37bcc390f411f02cfe9e493f9f6d0c0931433ba9

SHA-256:

921b910d833d8f86119df3c13b51cd3994e32f64a5edfcb24e7fabea866c03ad

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 11:13:05 PM UTC (a few moments ago)

File size:

491.1 KB (502,872 bytes)

Product version:

3.4.0.1

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\g7ps\4x ultrasaver\ultrasavergettingstarted.exe

Digital Signature

Signed by:

G7 Productivity Systems

Authority:

VeriSign, Inc.

Valid from:

12/7/2006 6:00:00 PM

Valid to:

2/8/2008 5:59:59 PM

Subject:

CN=G7 Productivity Systems, OU=Admin, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=G7 Productivity Systems, L=San Diego, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

7654B25E9615C6CEDCBDC4DD50A3EC65

File PE Metadata

Compilation timestamp:

6/19/1992 5:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

6144:N8VioFWlE44Zv3p+xP5iSkomGdV9Ylxt6TzRad2475n8z5I33nq7c7CeAleot:IioZp+xPBQlxaU447JHaw7C9eC

Entry address:

0x5FF64

Entry point:

55, 8B, EC, 83, C4, F0, B8, 4C, FA, 45, 00, E8, 7C, 6A, FA, FF, A1, 54, 30, 46, 00, 8B, 00, E8, 98, 0B, FF, FF, A1, 50, 2C, 46, 00, 50, A1, 44, 31, 46, 00, 50, A1, 9C, 2F, 46, 00, 50, A1, D4, 2F, 46, 00, 50, A1, 40, 2F, 46, 00, 50, 8B, 0D, 38, 2E, 46, 00, 8B, 15, A0, 32, 46, 00, A1, 68, 46, 46, 00, E8, 80, F9, FF, FF, A1, 44, 31, 46, 00, 83, 38, 00, 0F, 86, 85, 00, 00, 00, A1, 54, 30, 46, 00, 8B, 00, 8B, 48, 30, B2, 01, A1, F0, 23, 45, 00, E8, 84, 24, FF, FF, A3, 14, 56, 46, 00, A1, 44, 31, 46, 00, 8B, 00... 
[+]

Entropy:

6.5548

Developed / compiled with:

Microsoft Visual C++

Code size:

380.5 KB (389,632 bytes)

The file ultrasavergettingstarted.exe has been discovered within the following programs.

4X UltraSaver by G7 Productivity Systems, Inc.

www.g7ps.com

About 1% of users remove it

Scan ultrasavergettingstarted.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.