home

sframe.exe

Gala Lab Corp.

Publisher:
Gala Lab Corp.  (signed and verified)

MD5:
6f6e278d4bb787e416ed522f47a4eec2

SHA-1:
fdfb23a650bc8f37052cb7797c73ea2fa10c2757

SHA-256:
d8a307f73c05b1ee90aae307e0483b42f66a4eb58e5da2fead7c42c964d9af11

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:45:59 AM UTC  (today)

File size:
4.3 MB (4,457,544 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\syswow64\sframe.exe

Digital Signature
Signed by:
Gala Lab Corp.

Authority:
Thawte, Inc.

Valid from:
8/23/2012 2:00:00 AM

Valid to:
8/24/2014 1:59:59 AM

Subject:
CN=Gala Lab Corp., OU=Tech Support Headquarters, O=Gala Lab Corp., L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0DF9EE3CFBC6D8DEE0777F9263CE06DF

File PE Metadata
Compilation timestamp:
5/22/2013 9:32:33 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:9+XONyIKbWOMzap+EbX/SrK14oXwcuoAWCxcTq6hp4lEViO1fI:UXOwIoRlP3rw/s5xcEVxI

Entry address:
0x1000

Entry point:
68, 01, 90, E9, 00, E8, 01, 00, 00, 00, C3, C3, C9, C9, 21, 04, 92, 4B, 3F, 54, 6A, D7, 65, 69, AB, 3B, 4C, 0B, 43, 95, 18, 52, 71, B6, 6C, C4, DD, A7, CB, 60, 49, 28, 9D, 70, 3D, 3E, 20, 50, 05, 6B, 71, E0, F9, 45, 6B, 8B, 59, 5F, CE, 44, 58, FF, 38, 0F, 7D, 62, BB, D4, C7, DB, B6, 24, 66, 05, B9, F6, 54, 7A, FD, 7E, 04, 61, 51, 61, 36, 5B, 95, 50, 1C, 17, 29, 59, 76, 40, A2, 59, E0, 01, D1, 79, 8D, 2F, A4, B6, 70, 0B, 50, 4D, DC, 1D, 33, AA, 02, 43, 23, BD, 35, 1F, C7, C2, C1, 55, 9E, 3A, 7F, 29, 76, 10...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
7.2 MB (7,532,032 bytes)

The file sframe.exe has been discovered within the following program.

Rappelz_TestServer  by Galalab
HTTP://RAPPELZ.COM
About 6% of users remove it
 
Powered by Should I Remove It?

Scan sframe.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.