» rooarr.exe
Overview
Analysis
File Details

rooarr.exe

Jan Adamec

File name:

rooarr.exe

Publisher:

Jan Adamec (signed and verified)

MD5:

153aafe4adefee2a6d29662fd4a8db56

SHA-1:

7d8e8b95e9677966ba5d5ec369eba8106fea8944

SHA-256:

de6aba1c509898f1755ddf4f4657d3d5e1a6c8efcd2c0e6f5504d69bdbee077b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/25/2024 2:57:39 PM UTC (today)

File size:

4.6 MB (4,791,032 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\room arranger\rooarr.exe

Digital Signature

Signed by:

Jan Adamec

Authority:

COMODO CA Limited

Valid from:

10/10/2015 2:00:00 AM

Valid to:

10/10/2018 1:59:59 AM

Subject:

CN=Jan Adamec, O=Jan Adamec, STREET=Na vysine 2076/3, L=Praha 4, S=-, PostalCode=14300, C=CZ

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00F51820C01D2422ECF3D1657765A66FA2

File PE Metadata

Compilation timestamp:

12/7/1973 1:58:56 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.24

CTPH (ssdeep):

98304:8BgitIy5yrNWehCUuLd3bRw142MeZMx3lHqPr/Ua94q4C:ViH5yrNWehCUuLd3bRw142MeZMhVqb9t

Entry address:

0x14C0

Entry point:

83, EC, 0C, C7, 05, AC, DE, 85, 00, 01, 00, 00, 00, E8, 5E, FA, 24, 00, 83, C4, 0C, E9, A6, FC, FF, FF, 8D, B6, 00, 00, 00, 00, 83, EC, 0C, C7, 05, AC, DE, 85, 00, 00, 00, 00, 00, E8, 3E, FA, 24, 00, 83, C4, 0C, E9, 86, FC, FF, FF, 90, 90, 90, 90, 90, 90, 55, 89, E5, 56, 53, 83, EC, 10, 8B, 1D, 2C, 28, 86, 00, C7, 04, 24, 00, E0, 74, 00, FF, D3, 89, C6, 83, EC, 04, B8, 88, FB, 67, 00, 85, F6, 74, 29, C7, 04, 24, 00, E0, 74, 00, FF, 15, 64, 28, 86, 00, 83, EC, 04, A3, 54, EC, 85, 00, C7, 44, 24, 04, 13, E0... 
[+]

Code size:

3.3 MB (3,446,272 bytes)

Scan rooarr.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.