rt2_plat.exe

Railroad Tycoon II

PopTop Software, Inc.

Scan rt2_plat.exe - Powered by Reason Core Security
Publisher:
PopTop Software, Inc.

Product:
Railroad Tycoon II

Version:
1.0

MD5:
75c8d5bde43237b4225aaea0448b273d

SHA-1:
29d15eb51ce44a5ce42d8613fbb94d4f0705e880

SHA-256:
9dcf0d13c343d33a92f5540a7b1cce82d87cba8adfbf276c577e7ab0178d9a07

Scanner detections:
4 / 68

Status:
Clean  (4 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/3/2016 1:33:00 AM UTC  (today)

Scan engine
Detection
Engine version

McAfee Web Gateway
Heuristic.LooksLike.Heuristic.BehavesLike.Win32.Dropper.B
7.7104

Quick Heal
(Suspicious) - DNAScan
6.14.11.00

Trend Micro House Call
PAK_Generic.012
7.2.161

Trend Micro
PAK_Generic.012
10.465.10

File size:
416.5 KB (426,496 bytes)

Product version:
1.0

Copyright:
Copyright © 1998

Original file name:
RT2.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\steam\steamapps\common\railroad tycoon 2 platinum\rt2_plat.exe

File PE Metadata
Compilation timestamp:
2/19/2003 2:26:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:KcTftm5tOzW8u6408zfcCCDmBAz7wGun1z2HWhUqTxubmBz:dJMd80jDTzGu1z0Oc

Entry address:
0x1000

Entry point:
B8, 20, D8, 59, 00, FF, E0, 20, 00, A3, 3E, 16, 00, 00, 00, 00, 00, 00, 66, 69, 36, 47, E0, 92, 45, 6D, 05, 78, 1F, 95, 74, 27, 10, 04, 1B, 95, B6, DB, 20, 1B, D6, 7C, 65, A5, 63, 9F, D6, 35, 5A, B5, AC, 45, ED, F8, 4C, E3, A2, BC, EB, C3, 08, 52, C2, 4F, BE, DD, 4D, C2, 7E, 38, 23, C8, 90, CC, 14, 50, F5, 7D, F0, 50, 98, BB, 15, C4, BA, 2D, DA, 34, 92, D8, 6D, A0, 2F, FF, FC, 1E, 7D, F8, 07, B0, B2, 27, C4, 4B, 2B, 0C, 45, E8, 44, 62, 51, 3F, A5, 40, 29, 48, DF, A1, 3D, AE, CA, E0, B0, 72, DD, FD, C4, 9B...
 
[+]

Entropy:
7.9946  (probably packed)

Code size:
1.2 MB (1,261,568 bytes)

The file rt2_plat.exe has been discovered within the following program.

www.poptop.com/railroadtycooninfo.htm
1% remove it
 
Powered by Should I Remove It?

Scan rt2_plat.exe - Powered by Reason Core Security