home

RZL Internet Programmaktualisierung.exe

RZL Internet Programmaktualisierung

RZL Software GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘RZL-PatchLoader’.
Publisher:
RZL Software GmbH  (signed and verified)

Product:
RZL Internet Programmaktualisierung

Version:
1.47.0.0

MD5:
3015bfc72c84bafbfb52a13dcac1a2dd

SHA-1:
b792771ad4beb7b3a7ee39d480b469def78d5708

SHA-256:
6af9e5d618a63278a2f6d0d739311fcc2ba5dac16e119065d0f57f8ea1fdf211

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:26:17 PM UTC  (today)

File size:
2.4 MB (2,483,936 bytes)

Product version:
1.47.0.0

Original file name:
RZL Internet Programmaktualisierung.exe

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\rzlwin\rzl internet programmaktualisierung.exe

Digital Signature
Signed by:
RZL Software GmbH

Authority:
A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH

Valid from:
10/15/2012 1:28:20 PM

Valid to:
10/15/2017 11:28:20 AM

Subject:
E=edv@rzl.at, SERIALNUMBER=163619793587, CN=RZL Software GmbH, O=RZL Software GmbH, C=AT

Issuer:
CN=a-sign-corporate-light-03, OU=a-sign-corporate-light-03, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, C=AT

Serial number:
0C8317

File PE Metadata
Compilation timestamp:
1/27/2014 11:43:43 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
49152:GZE0OiorzS7qQGGTtufFMZRvdf3PY/OMnFtfsf50DSDGK41khBDW81:eOi2zUqQGGTgfFMZ/3P6OUvsz41khBSY

Entry address:
0x1B1A50

Entry point:
E8, FE, E5, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 30, CB, 63, 00, E8, AA, 0F, 00, 00, E8, 8C, B5, 00, 00, 0F, B7, F0, 6A, 02, E8, 91, E5, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 22, B3, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
1.9 MB (1,986,048 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
RZL-PatchLoader

Command:
"C:\Program Files\rzlwin\rzl internet programmaktualisierung.exe"


Scan RZL Internet Programmaktualisierung.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.