home

RdReportOn.EXE

RdReportOn 응용 프로그램

M2Soft Co. Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘RdReportOn’.
Publisher:
M2Soft Co. Ltd.  (signed and verified)

Product:
RdReportOn 응용 프로그램

Description:
RdReportOn MFC 응용 프로그램

Version:
1, 0, 0, 11

MD5:
148973e29f4bf2bec87b032e684c6ce8

SHA-1:
3306b503d5883c7942e01dbb54fc76501fb14510

SHA-256:
2930ed013b8f4dbb576bdd395e49653f7326cf39c35379133ecd4d8bf6c49677

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:41:20 PM UTC  (today)

File size:
113.3 KB (116,024 bytes)

Product version:
1, 0, 0, 11

Copyright:
Copyright (C) 2008

Original file name:
RdReportOn.EXE

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
M2Soft Co. Ltd.

Authority:
VeriSign, Inc.

Valid from:
4/15/2009 9:00:00 AM

Valid to:
5/7/2010 8:59:59 AM

Subject:
CN=M2Soft Co. Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=M2Soft Co. Ltd., L="66-1, Yangjae-dong, Seocho-gu", S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
46559B8680ED2B53F15C03E2A142EAE6

File PE Metadata
Compilation timestamp:
1/27/2010 11:10:07 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:Rx0QXqBDAuvq1zopwJ9PzplYFq1sAI/e5Y5n:ZKp01lYAfI/1n

Entry address:
0xD880

Entry point:
55, 8B, EC, 6A, FF, 68, 68, 1B, 41, 00, 68, 0C, DA, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 80, 06, 41, 00, 59, 83, 0D, 90, 66, 41, 00, FF, 83, 0D, 94, 66, 41, 00, FF, FF, 15, 7C, 06, 41, 00, 8B, 0D, 70, 66, 41, 00, 89, 08, FF, 15, 78, 06, 41, 00, 8B, 0D, 6C, 66, 41, 00, 89, 08, A1, 74, 06, 41, 00, 8B, 00, A3, 8C, 66, 41, 00, E8, 1C, 01, 00, 00, 39, 1D, 98, 64, 41, 00, 75, 0C, 68, 08, DA, 40, 00, FF, 15, 70, 06...
 
[+]

Entropy:
5.7480

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
60 KB (61,440 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
RdReportOn

Command:
C:\rdreportonhi\rdreporton.exe


Scan RdReportOn.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.