Gridinsoft Logo
File Icon

The Rickrack_v2.9.10_en_windows_AMD64.exe (Rickrack Installer) File Analysis

Technical Analysis

File Name Rickrack_v2.9.10_en_windows_AMD64.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Scanner Version 1.0.229.174
Database Version 2025-11-14 03:00:18 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
104,191,902
File Size (bytes)
2025-11-14
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
4e2b99db324dd0e9954082dea8f21b7c
SHA1
05eaa6fe6c2d7dbb66f21944b686f9a7826745d2
SHA256
1c333e14e0c061d084d7b9f4838f26b7ee511dae49ecd09544cc4f8546ce1494
SHA512
c674c0dd456884234568f6d8cb0f89643ec7f7968f766f2ebf6a567f36389f2f49413c701e8b93e2ce011ea166e440c4f148a09abd1fff9e73ef1504a5a524c1
ImpHash
f4639a0b3116c2cfc71144b88a929cfd

PE Analysis

Basic Information

Icon
Hash: 7cc224525f45a3d7da8a9a42a4be241f
Fuzzy: 2395421196171aad24669451b2535040
dHash: 71e0e4b2b2e4e071
Image Base 0x00400000
Entry Point 0x00403532
Compilation Time 2023-07-02 02:09:48
Checksum 0x00000000 (Actual: 0x0636d0ce)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Digital Signature No valid SignedData structure was found.
Imports 7 libraries
ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32
Exports 0 functions
Resources 9 Resources
Sections 5 Sections

Version Information

CompanyName Eigenmiao
FileDescription Rickrack Installer
FileVersion 2.9.10.0
InternalName RickrackSetup
LegalCopyright Copyright (c) 2019-2024 Eigenmiao. All Rights Reserved.
OriginalFilename RickrackSetup.exe
ProductName Rickrack Installer
ProductVersion 2.9.10
Translation 0x0409 0x04e4

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 26,840 bytes 27,136 bytes 6.48 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 742185983FA6320C910F81782213E56F
.rdata 0x00008000 5,220 bytes 5,632 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A995B118B38426885FC6CCAA984C8B7A
.data 0x0000a000 174,104 bytes 1,536 bytes 4.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9A9BF385A30F1656FC362172B16D9268
.ndata 0x00035000 73,728 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x00047000 13,944 bytes 14,336 bytes 7.19 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1ED5AABF47A399619F2CF8FE3C75C6D3
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 9 (13,351 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 9,949 bytes
74.5%
RT_DIALOG 5 1,500 bytes
11.2%
RT_GROUP_ICON 1 20 bytes
0.1%
RT_VERSION 1 812 bytes
6.1%
RT_MANIFEST 1 1,070 bytes
8%

Certificate Chain Analysis

Certificate Information
Product Rickrack Installer
Description Rickrack Installer
File Version 2.9.10.0
Original Name RickrackSetup.exe
Internal Name RickrackSetup
Copyright Copyright (c) 2019-2024 Eigenmiao. All Rights Reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware