home

rw5msg.EXE

roomMaster

InnQuest Software Corporation

Publisher:
InnQuest Software  (signed by InnQuest Software Corporation)

Product:
roomMaster

Description:
iQ-Messenger

Version:
0.0.0.107

MD5:
82fd0ef6f6a69bf940791b5fb91d5d07

SHA-1:
0cbd69985af87b70a7a1b5df271e8944f5a1618b

SHA-256:
87b06092bc3801ea2d5169790fe4320a2d619f7b3cb3a4d29df8d72fb8cfd562

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
5/10/2024 11:23:32 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Avira AntiVirus
W32/Sality.AT
7.11.30.172

File size:
133.2 KB (136,376 bytes)

Product version:
15.0.62.993

Copyright:
(c) 1995-2012, InnQuest Software Corporation

Trademarks:
InnQuest Software

Original file name:
rw5msg.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
InnQuest Software Corporation

Authority:
COMODO CA Limited

Valid from:
6/18/2012 8:00:00 PM

Valid to:
6/19/2015 7:59:59 PM

Subject:
CN=InnQuest Software Corporation, O=InnQuest Software Corporation, STREET="5300 West Cypress, Suite 160", L=Tampa, S=FL, PostalCode=33607, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
2909051E46581E2AD0A8FFEE8A807351

File PE Metadata
Compilation timestamp:
4/12/2014 7:11:54 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
1536:fTDd+t8oEuxKEWq4f6JqwLPX7zTkTQV+EFe2GSmaTAPXrLPI8eonfJqHWs9jxMR0:bxJjEPAPXFdg2s9Cc+Z7wp

Entry address:
0x1288

Entry point:
DB, E3, 31, C0, BB, 04, 00, 41, 00, 89, C1, E8, 70, FF, FF, FF, 09, C0, 74, 0A, B8, AC, BA, 40, 00, E8, 6A, FF, FF, FF, E8, 55, FF, FF, FF, 90, FF, 15, F8, 43, 41, 00, B8, 58, 25, 41, 00, BB, 80, 00, 00, 00, FF, 15, 0C, 43, 41, 00, B8, D8, 25, 41, 00, BB, 23, 00, 00, 00, FF, 15, 0C, 43, 41, 00, B8, FC, 25, 41, 00, BB, 80, 00, 00, 00, FF, 15, 0C, 43, 41, 00, B8, 7C, 26, 41, 00, BB, FF, 00, 00, 00, FF, 15, 0C, 43, 41, 00, B8, 7C, 27, 41, 00, BB, FF, 00, 00, 00, FF, 15, 0C, 43, 41, 00, B8, 7C, 28, 41, 00, BB...
 
[+]

Entropy:
5.9646

Code size:
58 KB (59,392 bytes)

Scan rw5msg.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.