home

trains.exe

RCL Software, Inc.

Publisher:
RCL Software, Inc.  (signed and verified)

MD5:
1558e7f65a0e06abaa9f5b96e8e08a40

SHA-1:
cf6475acaac359351f3ab0b67c1e97c6db1a4cb7

SHA-256:
027fd4ccdffb4daa4b0a4b664cdc732fadea56fd8b8e5f78985c0b49b431229c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:46:08 AM UTC  (today)

File size:
9.7 MB (10,169,552 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
RCL Software, Inc.

Authority:
COMODO CA Limited

Valid from:
3/1/2012 7:00:00 PM

Valid to:
3/2/2015 6:59:59 PM

Subject:
CN="RCL Software, Inc.", O="RCL Software, Inc.", STREET=211 Equinox Landing, L=Suffolk, S=Virginia, PostalCode=23434, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
23EFA97006D01B52CECA97F9F4E0028F

File PE Metadata
Compilation timestamp:
2/28/2014 12:47:11 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
98304:8sEl3ffreEp189dPs63Y+Hy0HRJ4A0KjGbXjN19v6E/5QKjhXrVlgpag+BPZ85sI:y0EAAXQ2BPZiHpBawpWVuW0

Entry address:
0xD36EC

Entry point:
DB, E3, 31, C0, BB, 84, 1D, 96, 00, 89, C1, E8, 34, E0, F2, FF, 09, C0, 74, 14, B8, 74, 04, 8E, 00, E8, 2E, E0, F2, FF, E8, 89, DF, F2, FF, B8, 00, 00, 00, 00, E8, 9F, DF, F2, FF, 90, 90, 90, 83, EC, 24, 56, 57, B8, A8, 87, B3, 00, E8, D1, 61, 00, 00, 89, 44, 24, 18, B8, 0C, 00, B3, 00, E8, C3, 61, 00, 00, 89, 44, 24, 14, B8, AC, 87, B3, 00, E8, B5, 61, 00, 00, 89, 44, 24, 1C, B8, 30, 00, B3, 00, E8, A7, 61, 00, 00, 89, 44, 24, 10, B8, B0, 87, B3, 00, E8, 99, 61, 00, 00, 89, 44, 24, 20, B8, 54, 00, B3, 00...
 
[+]

Entropy:
6.2309

Code size:
5.1 MB (5,317,120 bytes)

Scan trains.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.