» rf.exe
Overview
Analysis
File Details

rf.exe

Alawar Entertainment Inc

File name:

rf.exe

Publisher:

Alawar Entertainment Inc (signed and verified)

MD5:

57cb9052250d30eb9c9cc4ffbac7b286

SHA-1:

dfc0637b23e3472cecce1d3582eb9a0e64c41207

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 11:38:57 AM UTC (today)

File size:

587.8 KB (601,904 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\games.rambler.ru\камнемания\rf.exe

Digital Signature

Signed by:

Alawar Entertainment Inc

Authority:

VeriSign, Inc.

Valid from:

12/13/2007 3:00:00 AM

Valid to:

1/2/2009 2:59:59 AM

Subject:

CN=Alawar Entertainment Inc, OU=-, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Alawar Entertainment Inc, L=Alexandria, S=Virginia, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

72F3743DF8E423F8F36A6E5C1F8A2153

File PE Metadata

Compilation timestamp:

9/2/2008 2:51:03 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0x1000

Entry point:

68, 01, 90, 48, 00, E8, 01, 00, 00, 00, C3, C3, EC, 83, 63, C2, B3, 72, 96, C8, 6F, 20, 04, 97, BD, 12, 65, 2E, 28, 83, 58, C1, EC, 98, 9F, 3D, 6F, 8B, 76, C8, 3B, 73, 87, E7, FE, 7F, C4, 1A, 9C, 84, 5B, D7, AB, C1, 11, E8, 92, 2F, F0, EF, 85, 05, E9, EB, 9F, EE, 4A, 26, 4C, A5, 59, B4, 74, 63, F5, 54, AD, 0B, 1B, D6, 66, E8, 86, FE, 38, 2B, 71, A2, C5, BB, 89, 59, 67, 10, C6, 2D, 9D, C6, 07, 57, CB, A2, D0, 23, 58, AB, E5, 84, 26, B0, EE, 0E, 92, 3C, C5, B0, 4D, BD, 55, AC, 32, F0, 66, FB, 8C, 1D, 3F, 9E... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

25 KB (25,600 bytes)

Scan rf.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.