home

RM.IS.RichClient.UI.ObjectPromoter.exe

RM.IS.RichClient.UI.ObjectPromoter

RM Plc

Publisher:
RM Plc  (signed and verified)

Product:
RM.IS.RichClient.UI.ObjectPromoter

Version:
1.7.3909.802

MD5:
8ddf245caf3794def539c2749bf52f35

SHA-1:
f3b025747d9210e8d9df7d89a4830fd671cf912e

SHA-256:
fde94d7c1bb1f53cc95ad232fe0fb848407ca56dc17f83b331ce0950ad905bb9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 5:29:05 PM UTC  (today)

File size:
270.9 KB (277,360 bytes)

Product version:
1.7.3909.802

Copyright:
Copyright © RM plc 2006

Original file name:
RM.IS.RichClient.UI.ObjectPromoter.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\apps\2.0\jjzdldob.87x\pt1p9var.1ye\rm.i..tion_4d0cadc0864c14f9_0001.0007_929ca598f578025a\rm.is.richclient.ui.objectpromoter.exe

Digital Signature
Signed by:
RM Plc

Authority:
COMODO CA Limited

Valid from:
3/31/2016 5:30:00 AM

Valid to:
3/31/2018 5:29:59 AM

Subject:
CN=RM Plc, O=RM Plc, STREET=140 Eastern Avenue, STREET=Milton Park, L=Abingdon, S=Oxfordshire, PostalCode=OX14 4SB, C=GB

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B8C6F8552782D88DFD7F67F30E010B67

File PE Metadata
Compilation timestamp:
4/12/2016 5:52:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
48.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:/YytbqhjsNglYtOOZ13yICfgnmwJO0RS0Qooo1h5qSWmujYDgXCOfdrckSfOhbPx:/YytbqhjsN73X5nmrmK7KUObk

Entry address:
0x42BEE

Entry point:
FF, 25, 00, 20, 40, 00, 20, 00, 0D, 00, 0A, 00, 09, 00, 2C, 00, 2E, 00, 2B, 00, 7C, 00, 26, 00, 5B, 00, 5D, 00, 7B, 00, 7D, 00, 28, 00, 29, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9027

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
259.5 KB (265,728 bytes)

Scan RM.IS.RichClient.UI.ObjectPromoter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.