Information about WinRAR-12398-dp.exe

WinRAR-12398-dp.exe

File Details

Product Name:

Ran

Company Name:

Hesudemo

MD5: e064bbc67c3f180e1c576f9d6581af7d
Size: 999 KB
First Published: 2017-11-16 22:07:38 (6 years ago)
Latest Published: 2017-11-16 22:07:38 (6 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2017-11-16 22:07:38 (6 years ago)

Overview

Signed By: Mode Beta (Fried Cookie Ltd)
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%profile%\downloads

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00009c40

PE Sections:

Name Size of data MD5
CODE 37888 085cdebbeac3475e3b781873664e01e8
DATA 1024 d5ea23d4ecf110fd2591314cbaa84278
BSS 0 00000000000000000000000000000000
.idata 2560 bb5485bf968b970e5ea81292af2acdba
.tls 0 00000000000000000000000000000000
.rdata 512 9ba824905bf9c7922b6fc87a38b74366
.reloc 0 00000000000000000000000000000000
.rsrc 29696 0c435b07ac1c6d282044cb45c95b7e53

More information:

Search on Virustotal
copyright for information about WinRAR-12398-dp.exe