» fancyrd.exe
Overview
Analysis
File Details
Programs (1)

fancyrd.exe

Primo Ramdisk Ultimate Edition

SmartSource Shanghai Electronic Technology Co. Ltd

This file is installed with the program Primo Ramdisk Ultimate Edition 5.6.0.

File name:

fancyrd.exe

Publisher:

Romex Software (signed by SmartSource Shanghai Electronic Technology Co. Ltd)

Product:

Primo Ramdisk Ultimate Edition

Version:

5.6.0

MD5:

4b254c793976aa4a24c514e588108663

SHA-1:

796d7a78091263c8148166dc7d1013f4db9f1d72

SHA-256:

a950f54504b4310e2bbb72a3506464b3f4bc5a46baa7065704290708553f9fe7

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/25/2024 11:41:33 AM UTC (today)

Scan engine

Detection

Engine version

Trend Micro House Call

TROJ_GEN.F47V1112

7.2.212

File size:

1.1 MB (1,122,752 bytes)

Product version:

5.6.0

Original file name:

FancyRdUlt.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\primo ramdisk ultimate edition\fancyrd.exe

Digital Signature

Signed by:

SmartSource Shanghai Electronic Technology Co. Ltd

Authority:

GlobalSign nv-sa

Valid from:

8/13/2009 2:54:39 PM

Valid to:

8/13/2012 2:54:39 PM

Subject:

CN=SmartSource Shanghai Electronic Technology Co. Ltd, O=SmartSource Shanghai Electronic Technology Co. Ltd, C=CN

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000012312B9E9FE

File PE Metadata

Compilation timestamp:

6/24/2012 4:04:21 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:mTZciQhvYkrCvRqaSvoS2In5PmdzxTjNBnFMzOkWyLaGZNrZ:wZcNvYQCYamV2IkVCzLeGZD

Entry address:

0x55B01

Entry point:

E8, 12, 7C, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, 00, 49, 49, 00, 75, 02, F3, C3, E9, 94, 7C, 00, 00, 8B, FF, 55, 8B, EC, 8B, 45, 14, 56, 57, 33, FF, 3B, C7, 74, 47, 39, 7D, 08, 75, 1B, E8, ED, 2B, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 56, 14, 00, 00, 83, C4, 14, 8B, C6, EB, 29, 39, 7D, 10, 74, E0, 39, 45, 0C, 73, 0E, E8, C8, 2B, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, D7, 50, FF, 75, 10, FF, 75, 08, E8, 52, 7D, 00, 00, 83, C4, 0C, 33, C0, 5F, 5E, 5D, C3, 8B, FF, 55, 8B, EC, 83, EC, 20, 56, 33... 
[+]

Entropy:

6.8583

Code size:

464.5 KB (475,648 bytes)

The file fancyrd.exe has been discovered within the following program.

Primo Ramdisk Ultimate Edition 5.6.0 by Romex Software

www.romexsoftware.com

About 1% of users remove it

Scan fancyrd.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.