» RWipe.dll
Overview
Analysis
File Details

RWipe.dll

R-Wipe&Clean

R-tools technology Inc.

File name:

RWipe.dll

Publisher:

R-tools technology Inc. (signed and verified)

Product:

R-Wipe&Clean

Description:

R-Wipe&Clean Server

Version:

7.6.12.95

MD5:

56252cc1566ed3764252acc79a8312b9

SHA-1:

c7933fb4a660f838005adec73a6a8c9d087a4c9f

SHA-256:

5edae982fa076e6581100816561cd75b7ce911e5873ebc35d0db027cc087d1d1

Scanner detections:

3 / 68

Status:

Clean (3 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

11/24/2024 11:27:37 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

F-Prot

W32/OnlineGames.F.gen

v6.4.4.4.56

Kaspersky

Trojan-PSW.Win32.Tepfer

15.0.2.529

Vba32 AntiVirus

suspected of Trojan-Downloader.IstBar.15

3.12.8.12

File size:

4.9 MB (5,166,672 bytes)

Product version:

7.6.12.95

Original file name:

RWipe.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\r-wipe&clean\crack_pkt\rwipe.dll

Digital Signature

Signed by:

R-tools technology Inc.

Authority:

GlobalSign nv-sa

Valid from:

3/21/2007 5:11:17 PM

Valid to:

3/21/2009 5:11:17 PM

Subject:

E=office@r-tt.com, CN=R-tools technology Inc., O=R-tools technology Inc., C=CA

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

010000000001117656E255

File PE Metadata

Compilation timestamp:

7/4/2007 12:06:49 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

Entry address:

0x2D838A

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, FC, E5, 39, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, A4, E6, 39, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, 15, FF, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, BB, B6, E1, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, F1, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, E0, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00... 
[+]

Entropy:

6.2097

Developed / compiled with:

Microsoft Visual C++ 6.0

Code size:

3.1 MB (3,198,976 bytes)

Scan RWipe.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.