home

rustclient.exe

Facepunch Studios Ltd

This is installed with Rust. The file has been seen being downloaded from doc-0o-7o-docs.googleusercontent.com.
Publisher:
Facepunch Studios Ltd  (signed and verified)

Version:
5.0.0.5205507

MD5:
ebaabda21069d8634ebdb022614ba9d4

SHA-1:
a7a73ce9bb51dd4c3ec84580d9fdb7ddb3323b19

SHA-256:
82c2e746859cb8b406f2fc2c982cd8542813ed80163814a32eeb46c7a54ce7db

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 8:36:39 AM UTC  (today)

File size:
17.6 MB (18,424,600 bytes)

Product version:
5.0.0.5205507

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\steam\steamapps\common\rust\rustclient.exe

Digital Signature
Signed by:
Facepunch Studios Ltd

Authority:
GoDaddy.com, Inc.

Valid from:
7/23/2012 6:32:47 PM

Valid to:
7/23/2015 6:32:47 PM

Subject:
CN=Facepunch Studios Ltd, O=Facepunch Studios Ltd, L=Walsall, S=West Midlands, C=GB

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
27B24898B9B2DF

File PE Metadata
Compilation timestamp:
12/18/2014 1:47:45 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:dGInqrHdqP3KK9YdALmdC/Pnwsl08/bRZ3y7aZVUBPt/RYGm:dGIq7W3KFALVXnwC08/bRh9ext/lm

Entry address:
0x67BCA0

Entry point:
48, 83, EC, 28, E8, E7, DA, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, 48, 89, 5C, 24, 10, 44, 89, 44, 24, 18, 48, 89, 4C, 24, 08, 56, 57, 41, 54, 48, 83, EC, 40, 49, 8B, F1, 41, 8B, F8, 4C, 8B, E2, 48, 8B, D9, FF, CF, 89, 7C, 24, 70, 78, 0F, 49, 2B, DC, 48, 89, 5C, 24, 60, 48, 8B, CB, FF, D6, EB, E9, EB, 00, 48, 8B, 5C, 24, 68, 48, 83, C4, 40, 41, 5C, 5F, 5E, C3, CC, CC, 48, 8B, C4, 4C, 89, 48, 20, 44, 89, 40, 18, 48, 89, 50, 10, 53, 56, 57, 41, 54, 48, 83, EC, 38, 4D, 8B, E1, 49, 63, F8, 48, 8B...
 
[+]

Entropy:
6.5791

Code size:
13 MB (13,623,808 bytes)

The file rustclient.exe has been discovered within the following program.

Rust  by Facepunch Studios
www.playrust.com
About 3% of users remove it
 
Powered by Should I Remove It?

The file rustclient.exe has been seen being distributed by the following URL.

https://doc-0o-7o-docs.googleusercontent.com/docs/securesc/ilugm7hv0dok36t9di59i1vpbn1jqo65/3eli63qf8knu2kskr5vaecav74gsa8f2/1420617600000/14443460608988754772/.../0B4aWcTGRZwumWF8xMFFFZ0VhbVU?e=download

Scan rustclient.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.