home

Extract.exe

Aloaha Timestamper

Wrocklage Intermedia GmbH

This file is installed with the program Aloaha PDF Saver.
Publisher:
Zest Promotions Limited  (signed by Wrocklage Intermedia GmbH)

Product:
Aloaha Timestamper

Description:
Aloaha Self Extractor

Version:
1.00.0039

MD5:
ae0b2b5716ca0bd221016d0e5cac17bd

SHA-1:
1290a068d9c2a99860ee34918a8b564987e5236e

SHA-256:
bcd56b674cfa32d4f467bebc42988a42b2e416ed54429003eb4fd08a7260a7b7

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/25/2024 6:48:04 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
W32/Ramnit.A
7.11.30.172

File size:
122.6 KB (125,576 bytes)

Product version:
1.00.0039

Copyright:
Wrocklage Intermedia GmbH

Trademarks:
Aloaha Software

Original file name:
Extract.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\wrocklage\extract.exe

Digital Signature
Signed by:
Wrocklage Intermedia GmbH

Authority:
StartCom Ltd.

Valid from:
4/5/2013 11:42:01 AM

Valid to:
4/5/2015 5:32:50 PM

Subject:
E=info@wrocklage.de, CN=Wrocklage Intermedia GmbH, O=Wrocklage Intermedia GmbH, L=Ibbenbueren, S=Nordrhein-Westfalen, C=DE, Description=0xC3J0qHPGjDilu1

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
095B

File PE Metadata
Compilation timestamp:
9/15/2006 8:56:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:0T3t3G3S3jzVELls98Oo8tS53Q3x3Z3a1VVPLLa0Is:0hAsO78tSJ9

Entry address:
0x1500

Entry point:
68, EC, BF, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, EB, 1D, E6, 8F, 44, 61, 1E, 40, 9D, 72, DB, F1, 41, 64, 7B, C9, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 45, 78, 74, 72, 61, 74, 6F, 72, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 01, 43, F7, 84, 3B, 20, 7B, 1C, 4F, A4, 3B, 8D, 5E, 06, 5A, 18, B1, 4D, 5C, 3B, D0, 12, 5F, 05, 40, B4, 5D, C8, AA, D3, 8A, 8C, EF, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
3.2237

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
60 KB (61,440 bytes)

The file Extract.exe has been discovered within the following program.

Aloaha PDF Saver  by Wrocklage Intermedia GmbH
www.aloaha.com/wi-software-en/aloaha-pdf-saver.php
About 4% of users remove it
 
Powered by Should I Remove It?

Scan Extract.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.