home

rmx.inst.wks.exe

rmx.inst.wks

RA-MICRO GmbH & Co. KGaA

Publisher:
RA-MICRO GmbH & Co. KGaA  (signed and verified)

Product:
rmx.inst.wks

Version:
14.11.4.1

MD5:
adb44771d3b60562c1fe7043c14fe54a

SHA-1:
192df09d655d692a42913abef51c19b108c2cc29

SHA-256:
fa6895ff711475f6c435d6641a8776c21fd0d0a4bf39dd0f387269789dacaa26

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 2:36:27 AM UTC  (today)

File size:
277.6 KB (284,248 bytes)

Product version:
14.11.4.1

Copyright:
Copyright © RA-MICRO GmbH 2014

Original file name:
rmx.inst.wks.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\application data\application data\application data\application data\application data\application data\application data\xenocode\sandbox\ra-micro\14.11.14.1\2014.12.29t16.19\local\modified\@appdir@\update\rmx.inst.wks.exe

Digital Signature
Signed by:
RA-MICRO GmbH & Co. KGaA

Authority:
GlobalSign nv-sa

Valid from:
4/5/2013 10:16:43 AM

Valid to:
4/5/2016 10:16:43 AM

Subject:
CN=RA-MICRO GmbH & Co. KGaA, O=RA-MICRO GmbH & Co. KGaA, L=Berlin, C=DE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11210B6A8FC260B1FE48FE2A674D2E9943C6

File PE Metadata
Compilation timestamp:
11/4/2014 3:25:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:TBob/0zRnykXKfw8MltVJ7iSQHjkyZalaOhCFq/ixjy:m0+LUixu

Entry address:
0x2C7DA

Entry point:
FF, 25, E8, C7, 42, 00, 00, 00, 00, 00, 00, 00, 00, 00, BC, C7, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, DB, E1, 58, 54, 00, 00, 00, 00, 02, 00, 00, 00, 74, 00, 00, 00, 0C, C8, 02, 00, 0C, AA, 02, 00, 52, 53, 44, 53, 35, BB, E5, B9, C3, B6, 33, 44, AF, 1D, 13, 20, 58, 87, B9, 9B, 01, 00, 00, 00, 45, 3A, 5C, 52, 41, 2D, 4D, 49, 43, 52, 4F, 5F, 54, 46, 53, 5C, 52, 41, 2D, 4D, 49, 43, 52, 4F, 5C, 4D, 61, 69, 6E, 5C, 53, 6F, 75, 72, 63, 65, 5C, 49, 6E, 73, 74, 5C, 53, 6F, 75, 72, 63, 65, 5C, 72, 6D, 78, 2E, 69...
 
[+]

Code size:
170.5 KB (174,592 bytes)

Scan rmx.inst.wks.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.