» undelete.exe
Overview
Analysis
File Details
Programs (1)

undelete.exe

Paragon System Utilities

Paragon Software GmbH

This is installed with Paragon GPT Loader.

File name:

undelete.exe

Publisher:

Paragon Software Group (signed by Paragon Software GmbH)

Product:

Paragon System Utilities

Description:

A part of Paragon System Utilities

Version:

10.0.15.12418

MD5:

11183826bb4a1f7d88b9e634de4fba77

SHA-1:

8c3fbd0a659f02718121fb1b2fd488c4b72564da

SHA-256:

16534060a7423695df3c875d40332b8c4226a1a61637c72088d531d5081fb7e3

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 6:19:58 PM UTC (today)

File size:

26.6 KB (27,216 bytes)

Product version:

10.0.15.12418

Original file name:

undelete.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\paragon software\gpt disk manager\program\undelete.exe

Digital Signature

Signed by:

Paragon Software GmbH

Authority:

VeriSign, Inc.

Valid from:

4/16/2010 2:00:00 AM

Valid to:

4/17/2011 1:59:59 AM

Subject:

CN=Paragon Software GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Paragon Software GmbH, L=Freiburg, S=Germany, C=DE

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

399D8E4D83C09C3D0CF59F4CC270718F

File PE Metadata

Compilation timestamp:

11/9/2010 2:07:44 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

192:RQaYTR84l3o1oyTTsJ2Zun0ZtyowJL/qXKx++UG+ebCf3tQpkqs1I5Zgjl5cpD:a5TN41BC0ZtYJL9x+VobCPd1M6jQJ

Entry address:

0x17DF

Entry point:

55, 8B, EC, 6A, FF, 68, 30, 21, 40, 00, 68, 44, 19, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 1C, 20, 40, 00, 59, 83, 0D, B4, 30, 40, 00, FF, 83, 0D, B8, 30, 40, 00, FF, FF, 15, 20, 20, 40, 00, 8B, 0D, B0, 30, 40, 00, 89, 08, FF, 15, 24, 20, 40, 00, 8B, 0D, AC, 30, 40, 00, 89, 08, A1, 14, 20, 40, 00, 8B, 00, A3, BC, 30, 40, 00, E8, 1D, 01, 00, 00, 39, 1D, A0, 30, 40, 00, 75, 0C, 68, 68, 19, 40, 00, FF, 15, 28, 20... 
[+]

Developed / compiled with:

Microsoft Visual C++ v6.0

Code size:

4 KB (4,096 bytes)

The file undelete.exe has been discovered within the following program.

Paragon GPT Loader by Paragon Software

www.ParagonSoftware.com

About 5% of users remove it

Scan undelete.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.