RadarSync2009.exe

rs2011FixIt

RadarSync

The executable RadarSync2009.exe has been detected as malware by 1 anti-virus scanner.
Publisher:
3v  (signed by RadarSync)

Product:
rs2011FixIt

Version:
3.7.0.16

MD5:
71ec3dd99beb3e3120ccd52cc11c858e

SHA-1:
881208c6724bd8b60fa830811a49a9eed2c6302d

SHA-256:
b6bc5320192d12459b4baedb973914abfea1136c5840a4e9c221a916bbd871ab

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/27/2024 8:40:27 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Optional.RadarSync.DriverUpdater (L)
16.10.19.4

File size:
87.8 KB (89,912 bytes)

Product version:
3.7.0.16

Copyright:
Copyright © 3v 2011

Original file name:
RadarSync2009.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\radarsync\radarsync2009.exe

Digital Signature
Signed by:

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/19/2010 7:00:00 PM

Valid to:
5/20/2011 6:59:59 PM

Subject:
CN=RadarSync, O=RadarSync, L=Highland Park, S=Illinois, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
382F2F14FD5F1B98676121F145541A

File PE Metadata
Compilation timestamp:
5/5/2011 5:52:23 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:7hLgJbPf2gRs4+8m0R+kKaNNId5Ksl16MVAPZPFvPbSbVb4GNUc3q:GKmPpN4KsndeZxbSbV0Dca

Entry address:
0x16F1E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.6192

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
84 KB (86,016 bytes)

Remove RadarSync2009.exe - Powered by Reason Core Security