» rterm.exe
Overview
Analysis
File Details
Programs (1)

rterm.exe

WinAgents RouterTweak

Tandem Systems Ltd.

This is installed with WinAgents Rhino Terminal.

File name:

rterm.exe

Publisher:

WinAgents Software Group (signed by Tandem Systems Ltd.)

Product:

WinAgents RouterTweak

Description:

RouterTweak

Version:

3.0.1.382

MD5:

8b8c20b3c26d495ce71cce04aaa4cd46

SHA-1:

2e44011a08c043ca89da18597df0138b81a57911

SHA-256:

20b206edf8b99eaebefbd0a015655385f48dfff4f3c5203df4bd4a6658944442

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 6:20:03 AM UTC (today)

File size:

4.1 MB (4,315,280 bytes)

Product version:

3.0.1.382

Trademarks:

RouterTweak

Original file name:

RouterTweak.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Tandem Systems Ltd.

Authority:

COMODO CA Limited

Valid from:

3/8/2012 1:00:00 AM

Valid to:

3/9/2014 12:59:59 AM

Subject:

CN=Tandem Systems Ltd., O=Tandem Systems Ltd., STREET=Office 509 89 ul Kommunisticheskaya, L=Saransk, S=Outside United States, PostalCode=430005, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

0087221DA052E3E494B51D398A68FD7FCA

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:PCsAp5Q+Q5lZufhhH4U/HwAimvqJrCCILCCBzizXZzClCx:asAp5c5lZwhRXzvVzizXZ+y

Entry address:

0x1000

Entry point:

68, 01, F0, B8, 00, E8, 01, 00, 00, 00, C3, C3, B5, 78, 3D, 3E, 6A, 03, 72, 7F, E6, 8E, 9D, C8, BC, 4C, EA, A5, 5A, 25, 6F, FB, 26, 9E, 4D, D2, 6C, 6F, 2C, 90, F9, E5, 71, 70, 5C, C6, 95, 86, 51, DE, 94, 86, 6A, 53, 8C, 72, 2B, C0, 9E, 28, 29, 26, E4, 8E, 6B, 71, A5, 51, FA, 23, E6, A9, 00, 51, 74, 89, 01, 00, 85, E4, 8A, 89, 5C, 61, F2, EF, 43, 95, 7B, 49, 1F, A4, 91, 94, 26, 24, 14, 3B, 80, 63, 03, 31, 1C, 52, 13, 68, 87, 65, 27, 17, D4, 04, B5, 85, A1, BB, 9C, 3C, 55, 51, 88, A8, 7A, F7, 32, 76, 97, 32... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

5 MB (5,193,728 bytes)

The file rterm.exe has been discovered within the following program.

WinAgents Rhino Terminal by Tandem Systems, Ltd.

www.winagents.com

About 3% of users remove it

Scan rterm.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.