home

rmmenu.exe

RootsMagic, Inc.

Publisher:
RootsMagic, Inc.  (signed and verified)

MD5:
c41f1668ef679427048c6c3f7c2d24c1

SHA-1:
a623a4b602f843ce8b12d9925519cde8477f6efc

SHA-256:
e406deadc5340b5ed1d41f41d7500c29ebc0d155906fd98a2412b58d0a39440a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:50:39 PM UTC  (today)

File size:
1.1 MB (1,129,944 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\rootsmagic 4\rmmenu.exe

Digital Signature
Signed by:
RootsMagic, Inc.

Authority:
Starfield Technologies, Inc.

Valid from:
10/20/2010 3:42:48 PM

Valid to:
10/20/2013 2:53:07 PM

Subject:
CN="RootsMagic, Inc.", O="RootsMagic, Inc.", L=Springville, S=UT, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
4EF0518E06746A

File PE Metadata
Compilation timestamp:
2/17/2009 11:12:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:t2o9eGX3IcXGIDiCsFhVRz0Xi1WycHsfBwoWUe+I:M7cjiVJwGzZZ4Ue+I

Entry address:
0xA7A60

Entry point:
55, 8B, EC, 83, C4, F0, B8, 24, 61, 4A, 00, E8, D8, F5, F5, FF, A1, BC, B9, 4A, 00, 8B, 00, E8, D4, 11, FC, FF, A1, BC, B9, 4A, 00, 8B, 00, B2, 01, E8, C2, 30, FC, FF, A1, BC, B9, 4A, 00, 8B, 00, BA, CC, 7A, 4A, 00, E8, 85, 0C, FC, FF, 8B, 0D, 90, B8, 4A, 00, A1, BC, B9, 4A, 00, 8B, 00, 8B, 15, F4, 56, 4A, 00, E8, B5, 11, FC, FF, A1, BC, B9, 4A, 00, 8B, 00, E8, E1, 12, FC, FF, E8, D0, D0, F5, FF, FF, FF, FF, FF, 17, 00, 00, 00, 52, 6F, 6F, 74, 73, 4D, 61, 67, 69, 63, 20, 53, 68, 61, 72, 65, 61, 62, 6C, 65...
 
[+]

Entropy:
7.1935

Developed / compiled with:
Microsoft Visual C++

Code size:
664.5 KB (680,448 bytes)

Scan rmmenu.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.