home

PicaLoader.EXE

PicaLoader

VOWSoft,Ltd.

Publisher:
VOWSoft,Ltd. http://www.vowsoft.com  (signed by VOWSoft,Ltd.)

Product:
PicaLoader

Version:
1, 6, 6, 8768

MD5:
c802461d8d23b0c913cccd829557cb7c

SHA-1:
d25db4915869bf3fd33b81e876bb296639f295ab

SHA-256:
dce25f9626f912b6754c89582058cb20ec1012c505a22c23d733c6863a2bd2e7

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 9:57:45 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

File size:
1.4 MB (1,417,024 bytes)

Product version:
1, 6, 6, 8768

Copyright:
Copyright (C) VOWSoft,Ltd. 2002-2008

Trademarks:
PicaLoader

Original file name:
PicaLoader.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\picaloader\picaloader.exe

Digital Signature
Signed by:
VOWSoft,Ltd.

Authority:
The USERTRUST Network

Valid from:
6/24/2008 5:00:00 PM

Valid to:
6/25/2009 4:59:59 PM

Subject:
CN="VOWSoft,Ltd.", O="VOWSoft,Ltd.", POBox=725, STREET="Xuweilu, #605", STREET="Tawan street #40, Huanggu District", L=Shenyang, S=Liaoning, PostalCode=110035, C=CN

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00E6F94F63D05570D6B21BB288FB7AEA24

File PE Metadata
Compilation timestamp:
11/13/2008 5:28:11 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:JosSgT77xcUk963lWiP161GmKAeZafUJn9emV/uo220CDa/mautXTKBzzzzzzY:J7fxRP1QGgoac19em22048Vutuzzzzzs

Entry address:
0x1000

Entry point:
B8, 20, 97, 84, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, FB, D1, 12, 37, 7A, E4, 36, FB, A8, 6A, CD, 44, D8, 40, 49, 57, 66, 7E, 7A, 84, C3, 99, 0C, 0C, 75, 7F, FA, 9E, CB, 6F, 3B, E1, 42, 79, EF, A6, 3B, F6, 1D, 46, 2E, 52, FE, B6, 9B, 5F, 48, C8, 2B, 05, 02, 6B, BA, 34, E6, A4, E4, 9A, E8, 11, 02, 70, 4C, A1, 96, BF, 13, BA, 37, 95, 47, 4A, E7, A8, 11, 0A, E8, AE, 19, 7F, 40, 0D, B1, C0, F0, 81, D2, F4, BD, 52, 75, 4E, D2...
 
[+]

Entropy:
7.8208

Packer / compiler:
PECompact v2

Code size:
2.7 MB (2,801,664 bytes)

Scan PicaLoader.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.