Information about rav_1618280[2].exe

rav_1618280[2].exe

File Details

MD5: e90fa1fda400882285b93ef14c093b80
Size: 5 MB
First Published: 2017-09-02 16:04:58 (7 years ago)
Latest Published: 2017-10-01 23:07:22 (7 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2017-10-01 23:07:22 (7 years ago)

Overview

Signed By: Beijing Rising Information Technology Corporation Limited
Status: Valid

Common Places:

%programfiles%\rising\rsd\download
%localappdata%\microsoft\windows\temporary internet files\content.ie5\aw2e39xs
%localappdata%\microsoft\windows\temporary internet files\content.ie5\s6ae2xbx
%commonappdata%\rising\common\download
%allusersprofile%\\application data\rising\common\download
%profile%\boodi\local settings\temporary internet files\content.ie5\6ehxzjr9
%localappdata%\microsoft\windows\temporary internet files\content.ie5\7k6xv3k1
%localappdata%\microsoft\windows\temporary internet files\content.ie5\ax01vtbe

File Names:

rav_1618280.exe
rav_1618280[2].exe
rav_1618280[1].exe

Geography:

39.3%
17.9%
14.3%
14.3%
7.1%
3.6%
3.6%

OS Version:

Windows 7 82.1%
Windows XP 17.9%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0004dc82

PE Sections:

Name Size of data MD5
.text 473088 33f3200a8942fa20de26544ac1bd6f15
.rdata 72704 cb803dbf1cf62696c5c3731e38026a68
.data 16384 8f401e3684d740127d6cb305874d4cbe
.rsrc 352256 b3bd0af2b5dac535cf7af7f48d397782

More information:

Search on Virustotal
copyright for information about rav_1618280[2].exe