home

TActions.exe

MegaFon Internet

RooX Solutions LLC

Publisher:
RooX  (signed by RooX Solutions LLC)

Product:
MegaFon Internet

Version:
2.2.0.5938

MD5:
e6a0ab52a389bfcc845fe7b589675803

SHA-1:
2736a26b2f941a80413e645872dbee7742528ff4

SHA-256:
0f10422236d41d3912bff81d0388aa7f858850f7a84e312ac50014734ce52429

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 8:12:05 PM UTC  (today)

File size:
908 KB (929,840 bytes)

Product version:
2.2.0.5938

Copyright:
(c) 2013 RooX. All rights reserved.

Original file name:
TActions.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\megafon\megafon internet\tactions.exe

Digital Signature
Signed by:
RooX Solutions LLC

Authority:
COMODO CA Limited

Valid from:
5/31/2012 6:00:00 PM

Valid to:
6/1/2013 5:59:59 PM

Subject:
CN=RooX Solutions LLC, O=RooX Solutions LLC, STREET="Rusakovskaya ul, d 13", L=Moscow, S=Outside United States, PostalCode=107140, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
008B7CC84331D8E5621BD9027BE3425769

File PE Metadata
Compilation timestamp:
4/24/2013 6:59:41 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:7AUsKpFpWIVaVYScHUuLt5xDneHLjqyOLsgWCFgRs0GhkS2AUsKpFpWIVaVYScHa:EnVdcHUuLt5FneynVdcHUuLt5FnerTf

Entry address:
0xB269

Entry point:
E8, A5, 04, 00, 00, E9, 63, FD, FF, FF, CC, FF, 25, E0, 32, 41, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, F0, FA, 47, 00, 89, 0D, EC, FA, 47, 00, 89, 15, E8, FA, 47, 00, 89, 1D, E4, FA, 47, 00, 89, 35, E0, FA, 47, 00, 89, 3D, DC, FA, 47, 00, 66, 8C, 15, 08, FB, 47, 00, 66, 8C, 0D, FC, FA, 47, 00, 66, 8C, 1D, D8, FA, 47, 00, 66, 8C, 05, D4, FA, 47, 00, 66, 8C, 25, D0, FA, 47, 00, 66, 8C, 2D, CC, FA, 47, 00, 9C, 8F, 05, 00, FB, 47, 00, 8B, 45, 00, A3, F4, FA, 47, 00, 8B, 45, 04, A3, F8, FA, 47, 00...
 
[+]

Entropy:
6.3612

Packer / compiler:
PEQuake V0.06

Code size:
70.5 KB (72,192 bytes)

Scan TActions.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.