home

tweaking_rati.exe

Tweaking.com - Run As TrustedInstaller

Tweaking LLC

Publisher:
Tweaking.com  (signed by Tweaking LLC)

Product:
Tweaking.com - Run As TrustedInstaller

Version:
2.1.0.0

MD5:
2fbd44fed6c1eac78a2b2d8ae844778d

SHA-1:
dfb52fc90461ffa7df4aba1d9deea51680f10313

SHA-256:
bd3eded8d57883691b13fb0046640b870276750f7dafba29242906a93fc6ee13

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:57:26 PM UTC  (today)

File size:
121.4 KB (124,327 bytes)

Product version:
2.1.0.0

Copyright:
2014

Trademarks:
2014

Original file name:
tweaking_rati.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\tweaking.com\windows repair (all in one)\files\tweaking_rati.exe

Digital Signature
Signed by:
Tweaking LLC

Authority:
COMODO CA Limited

Valid from:
1/5/2014 4:00:00 PM

Valid to:
1/6/2015 3:59:59 PM

Subject:
CN=Tweaking LLC, OU=Major Geeks, O=Tweaking LLC, POBox=13031, STREET=7 Braniff Dr, L=Camillus, S=New York, PostalCode=13031, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
253149477D94A2376AC159DBFD034428

File PE Metadata
Compilation timestamp:
8/19/2014 3:58:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:RaFijwS2CGmmk9X3L3hoTN2s+zheW6BVrqzCJ3bdDY+W14N4NmzWlIA7hKRQRhR4:IcjwVwLc2lQBV+UdE+rECWp7hKmR4D

Entry address:
0x16F8

Entry point:
E9, C4, 4E, 00, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 60, 00, 00, 00, 48, 00, 00, 00, ED, 13, 8E, 88, 6A, 52, 0E, 42, B9, 1F, FF, 0D, 71, 05, DC, 51, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 2D, 43, 30, 30, 30, 2D, 52, 75, 6E, 41, 73, 54, 72, 75, 73, 74, 65, 64, 49, 6E, 73, 74, 61, 6C, 6C, 65, 72, 00, 5C, 57, 52, 75, 6E, 41, 73, 54, 72, 75, 73, 74, 65, 64, 49, 6E, 73, 74, 61, 6C, 6C, 65, 72, 00, 32, 2E, 00, 00, 00, 00, 01, 00, 02, 00, A8, 1D, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF...
 
[+]

Entropy:
7.1283

Packer / compiler:
Xtreme-Protector v1.05

Code size:
24 KB (24,576 bytes)

Scan tweaking_rati.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.