home

pdoubledecker.exe

MagicRAR

Publisher:
MagicRAR  (signed and verified)

Version:
1.0.0.0

MD5:
5be1488b7e49afc69967cd9d5b7f62cb

SHA-1:
a2a41e2f5ef0326169b908a520d90c5ee8b7934e

SHA-256:
97e2c5b449bc7a0b97498eac88b6bbd812a506172d035b6c7eb3dfa9a87be637

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 7:32:20 AM UTC  (today)

File size:
2.9 MB (2,989,512 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\{807a6a73-c16f-4886-8b06-00dec76cd483}\offline\95d63ae6\7400af37\pdoubledecker.exe

Digital Signature
Signed by:
MagicRAR

Authority:
Unizeto Technologies S.A.

Valid from:
8/7/2013 6:35:09 AM

Valid to:
8/7/2014 6:35:09 AM

Subject:
E=rarmagic@gmail.com, CN="Open Source Developer, Simon KING", O=MagicRAR, C=AU

Issuer:
CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
4D5CA833D2BAED0D8765A05064FE64A1

File PE Metadata
Compilation timestamp:
2/13/2014 4:15:43 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:HlfwxvJCST0IjWfoWBi9VN8v4OcbzzXkdMQYL1wg:HloJAKN8QV0dMQYJwg

Entry address:
0x1E8890

Entry point:
55, 8B, EC, 83, C4, E0, 53, 33, C0, 89, 45, E0, 89, 45, E4, 89, 45, E8, 89, 45, EC, B8, 4C, 66, 5D, 00, E8, 99, 3A, E2, FF, 8B, 1D, 10, 23, 5F, 00, 33, C0, 55, 68, 13, 8C, 5E, 00, 64, FF, 30, 64, 89, 20, 8D, 55, EC, B8, 01, 00, 00, 00, E8, 98, C1, E1, FF, 8B, 45, EC, BA, 2C, 8C, 5E, 00, E8, FF, 09, E2, FF, 74, 3C, 8D, 55, E8, B8, 01, 00, 00, 00, E8, 7C, C1, E1, FF, 8B, 45, E8, BA, 40, 8C, 5E, 00, E8, E3, 09, E2, FF, 74, 20, 8D, 55, E4, B8, 01, 00, 00, 00, E8, 60, C1, E1, FF, 8B, 45, E4, BA, 54, 8C, 5E, 00...
 
[+]

Entropy:
6.2593

Developed / compiled with:
Microsoft Visual C++

Code size:
1.9 MB (1,997,824 bytes)

Scan pdoubledecker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.