home

rdph.exe

Andrea Nagar

Publisher:
Andrea Nagar  (signed and verified)

Version:
1.0.0.0

MD5:
2a0a15708063515f6fa894630cf7c2a1

SHA-1:
d5713d99af3f732c62919d877c7a227fc1c6b3c5

SHA-256:
6faf844c65485912abd3018870bce8045f31c14db32ddc5f0870bcccc4503324

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 2:26:34 AM UTC  (today)

File size:
1.3 MB (1,398,160 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\phraseexpander\rdph.exe

Digital Signature
Signed by:
Andrea Nagar

Authority:
COMODO CA Limited

Valid from:
7/10/2012 8:00:00 PM

Valid to:
7/11/2014 7:59:59 PM

Subject:
CN=Andrea Nagar, OU=Andrea Nagar, O=Andrea Nagar, STREET="Via Marco Polo, 22", L=TORINO, S=Torino, PostalCode=10129, C=IT

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
3E82E296E8A189B49682B76F86841629

File PE Metadata
Compilation timestamp:
5/14/2012 7:31:01 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:aidMLZWQ/Q5nuFmgDIWZNlR3gU5JI+gBRn4BwcIm0h2bL0CnGSABa7OvhZ:zM9XzFmgDI+GMJRgYBw1SGZo4hZ

Entry address:
0x4626C0

Entry point:
60, BE, 00, F0, 71, 00, 8D, BE, 00, 20, CE, FF, C7, 87, 44, EC, 3A, 00, 74, 15, A2, C4, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07...
 
[+]

Entropy:
7.8732

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:
1.3 MB (1,327,104 bytes)

The file rdph.exe has been discovered within the following program.

PhraseExpander 3.6.0.0  by Nagarsoft
Publisher's description - “Instantly pull up the texts you use often by typing a keyboard shortcut. You don’t need to remember your phrases anymore. Nor to hunt around for them. All you need is our text expander to store all the pieces of information you use often and get them at the touch of a button.”
www.phraseexpander.com
About 4% of users remove it
 
Powered by Should I Remove It?

Scan rdph.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.