Gridinsoft Logo
File Icon

The recoverit_setup_full4202.exe (recoverit_setup_full4202.exe) File Analysis

Updated 1 month ago
Checked by Malaware Check
recoverit_setup_full4202.exe

Technical Analysis

File Name recoverit_setup_full4202.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.214.174
Database Version 2025-04-17 07:00:21 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
2,059,768
File Size (bytes)
2025-04-17
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
f716d3c7ca128564cdb830b4fbe18dee
SHA1
d78da36a850587589c831ddf9294c49d7140f731
SHA256
6a8fa6a137bed12e17a0acbe6047e8d95ca5c36447df3ebbf8735ec0c020d691
SHA512
6f226f8d284996f695d9762ac9abc16ffa0a17dba1cabc6c691813c63ea925200dce341c11091a14909686f620929b183433817d4386395ee9e426c947fdcc68
ImpHash
06069c089469016295f0a16bdca1fba9

PE Analysis

Basic Information

▼
Icon
Hash: bb43569fd7cf17d1fafb34a59bf908db
Fuzzy: a310b4400ec622f840c09f66cdca9d80
dHash: e870b2b2ccf8e871
Image Base 0x00400000
Entry Point 0x00507e70
Compilation Time 2024-05-30 06:40:47
Checksum 0x0020290f (Actual: 0x0020290f)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path G:\devops_yanfa\workspace\p-4663c901377d457795e7a5c44ce670aa\src\bin\WAE_ESP.pdb
Digital Signature OK
Imports 18 libraries
Exports 0 functions
Resources 19 Resources
Sections 6 Sections

Version Information

▼
FileDescription recoverit_setup_full4202.exe
FileVersion 4.0.4.22
LegalCopyright Copyright©2024 Wondershare. All rights reserved.
ProductName Recoverit
ProductVersion 12.6.1
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,284,670 bytes 1,285,120 bytes 6.63 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ F82983DFCB52E6E5405E3A192EE975A1
.rdata 0x0013b000 344,562 bytes 344,576 bytes 5.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 75D84F58AD9D5467202EEDA13E4B63DF
.data 0x00190000 39,304 bytes 22,016 bytes 4.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E628770A46AF8568896B053D0B545254
.tls 0x0019a000 17 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x0019b000 312,252 bytes 312,320 bytes 7.67 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5AC0B6EACEDA9F82FEFFF61CD8873F39
.reloc 0x001e8000 72,564 bytes 72,704 bytes 6.62 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ E67A042318ADCF63273FFDA071D5A5AE
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 19 (311,195 bytes)
Resource Type Count Total Size Percentage
EXE 1 7,168 bytes
2.3%
PNG 2 77,759 bytes
25%
XML 3 8,837 bytes
2.8%
ZIPRES 1 93,918 bytes
30.2%
RT_ICON 8 117,962 bytes
37.9%
RT_GROUP_ICON 2 124 bytes
0%
RT_VERSION 1 2,612 bytes
0.8%
RT_MANIFEST 1 2,815 bytes
0.9%

Certificate Chain Analysis

▼
Certificate Information
Product Recoverit
Description recoverit_setup_full4202.exe
File Version 4.0.4.22
Signing Date 01:53 AM 08/24/2024 (287 days ago)
Verification Status Signed
Signers Wondershare Technology Group Co.,Ltd; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Copyright Copyright©2024 Wondershare. All rights reserved.
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Wondershare Technology Group Co.,Ltd #2 Chain
Validity Period: 2022-06-15 00:00:00 → 2025-04-05 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 04 31 98 06 C6 E4 9F C3 D3 90 99 B8 19 5F DB F0
DigiCert Timestamp 2023 #3 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware