» V100Config.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

V100Config.exe

Rapoo V100 Mechanical Gaming Suit

ShenZhen Rapoo Technology

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Rapoo V100 Config’. This is installed with Programma driver per tastiera retroilluminata e gaming mouse ot.

File name:

V100Config.exe

Publisher:

Rapoo (signed by ShenZhen Rapoo Technology)

Product:

Rapoo V100 Mechanical Gaming Suit

Description:

Rapoo V100 Mechanical Gaming Suit Driver

Version:

1.0.0.1

MD5:

74258006f836344882885aedf875136a

SHA-1:

012b4f64c3b638ef8c25b37a98cbfdd9bc6a26aa

SHA-256:

1e37d886ed1c3e279fcc876d35b810fefbdcf0d0ead140ff662d94ee98fa14b6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 10:18:41 PM UTC (today)

File size:

2 MB (2,131,256 bytes)

Product version:

1.0.0.1

Original file name:

V100Config.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\rapoo\v100\v100config.exe

Digital Signature

Signed by:

ShenZhen Rapoo Technology

Authority:

VeriSign, Inc.

Valid from:

1/7/2013 4:00:00 PM

Valid to:

4/9/2015 4:59:59 PM

Subject:

CN=ShenZhen Rapoo Technology, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ShenZhen Rapoo Technology, L=ShenZhen, S=GuangDong, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

461464704116F94F48D98BFE2EF436D6

File PE Metadata

Compilation timestamp:

3/13/2014 12:28:13 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:dWohuCAJFI6wY9jNcnd3Xu2AAsEaOmuHj+fzZVj6:j5AoLY9jNcdzAxnVuHj+7ZVm

Entry address:

0x10866D

Entry point:

E8, 5F, 7E, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, 40, 27, 58, 00, 75, 02, F3, C3, E9, E1, 7E, 00, 00, 8B, FF, 51, C7, 01, 5C, 8C, 55, 00, E8, D9, 7F, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, 5F, 25, F0, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 14, 80, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 14, 75, 20, E8, 3F, 26, 00, 00, 53... 
[+]

Entropy:

6.1815

Code size:

1.2 MB (1,252,352 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Rapoo V100 Config

Command:

C:\Program Files\rapoo\v100\v100config.exe

The file V100Config.exe has been discovered within the following program.

Programma driver per tastiera retroilluminata e gaming mouse ot by Rapoo, Inc.

www.rapoo.com.cn

About 1% of users remove it

Scan V100Config.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.