home

rta.exe

Timo Esser

Publisher:
Timo Esser  (signed and verified)

MD5:
7c485f34ccc4f5eb46a11da4288c3b06

SHA-1:
b80972d1085f5437d730bb3e5c1168abe8102f1f

SHA-256:
0571348c12678482ba6401e7f980ead63283b9abf7ac4b315874a54e5efed01a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 4:36:06 AM UTC  (today)

File size:
6.8 MB (7,080,240 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\real time analyzer\rta.exe

Digital Signature
Signed by:
Timo Esser

Authority:
COMODO CA Limited

Valid from:
8/3/2011 2:00:00 AM

Valid to:
8/3/2012 1:59:59 AM

Subject:
CN=Timo Esser, O=Timo Esser, STREET=Charlottenweg 1, L=Waldenbuch, S=BW, PostalCode=71111, C=DE

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B8FB9DD3E2E4BA46DD2D632DF9494401

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:hWTfuiznRPld6FjkLBkncknHxmfh+euupcM0ZiN+CkPijpsnOMPWP4ZXogbLlwH7:oTfuiznRPld6FjkLBkncknHxmfh+euun

Entry address:
0x141ECC

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 68, EE, 53, 00, E8, DB, 55, EC, FF, 8B, 1D, 84, B7, 54, 00, 8B, 03, E8, 9A, 35, F3, FF, 8B, 03, BA, 90, 1F, 54, 00, E8, 0E, 30, F3, FF, 8B, 0D, 30, B5, 54, 00, 8B, 03, 8B, 15, 24, 88, 53, 00, E8, 93, 35, F3, FF, 8B, 0D, 8C, B5, 54, 00, 8B, 03, 8B, 15, 34, 24, 4D, 00, E8, 80, 35, F3, FF, 8B, 0D, B8, B1, 54, 00, 8B, 03, 8B, 15, FC, 4F, 4D, 00, E8, 6D, 35, F3, FF, 8B, 0D, F8, B7, 54, 00, 8B, 03, 8B, 15, D0, EB, 53, 00, E8, 5A, 35, F3, FF, 8B, 0D, 9C, B8, 54, 00, 8B, 03, 8B, 15...
 
[+]

Entropy:
5.6202

Developed / compiled with:
Microsoft Visual C++

Code size:
1.3 MB (1,312,768 bytes)

Windows Firewall Allowed Program
Name:
rta


Scan rta.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.