» PicaLoader.EXE
Overview
Analysis
File Details

PicaLoader.EXE

PicaLoader

VOWSoft,Ltd.

File name:

PicaLoader.EXE

Publisher:

VOWSoft,Ltd. http://www.vowsoft.com (signed by VOWSoft,Ltd.)

Product:

PicaLoader

Version:

1, 7, 1, 8856

MD5:

64e7a185376a9f535bed83d281e8718b

SHA-1:

315d0eeb31d8820bbf86582af37935d4031dd9fa

SHA-256:

bda2aad35920f1c4953709a547512415064aecf25b138aa0b0de50e2e2da8c7e

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/19/2024 6:24:23 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.PECompact-1

0.98/18155

IKARUS anti.virus

Backdoor.Win32.PcClient

t3scan.1.1.118.0

File size:

1.7 MB (1,756,480 bytes)

Product version:

1, 7, 1, 8856

Trademarks:

PicaLoader

Original file name:

PicaLoader.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\picaloader\picaloader.exe

Digital Signature

Signed by:

VOWSoft,Ltd.

Authority:

The USERTRUST Network

Valid from:

6/25/2008 3:00:00 AM

Valid to:

6/26/2009 2:59:59 AM

Subject:

CN="VOWSoft,Ltd.", O="VOWSoft,Ltd.", POBox=725, STREET="Xuweilu, #605", STREET="Tawan street #40, Huanggu District", L=Shenyang, S=Liaoning, PostalCode=110035, C=CN

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00E6F94F63D05570D6B21BB288FB7AEA24

File PE Metadata

Compilation timestamp:

1/2/2009 8:59:29 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:tGwtkjiOY+a5WnGqzAzHBsnTXtmuPTljtzzzzzzm:ttkjxagGAAzHBsnTXdxzzzzzzm

Entry address:

0x1000

Entry point:

B8, E4, 69, 89, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, FB, D1, 12, 37, 7A, E4, 36, FB, A8, 6A, CD, 44, D8, 40, 49, 57, 66, 7E, 7A, 84, C3, 99, 0C, 0C, 75, 7F, FA, 9E, CB, 6F, 3B, E1, 42, 79, EF, A6, 3B, F6, 1D, 46, 2E, 52, FE, B6, 9B, 5F, 48, CC, A9, C3, 81, CE, 48, EB, FA, 92, EE, 59, E2, 35, 84, D4, FA, 18, 16, AD, E2, C0, 24, A1, 01, E9, A8, 2F, BE, 27, 31, BC, 21, 5E, 6B, B5, A8, A3, FB, D0, 53, B1, B8, 44, 56, C0, 27... 
[+]

Packer / compiler:

PECompact v2

Code size:

4.4 MB (4,591,616 bytes)

Scan PicaLoader.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.