home

SamsungRapidApp.exe

Samsung RAPID Mode

Samsung Electronics Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SamsungRapidApp’.
Publisher:
Samsung Electronics Co., Ltd.  (signed and verified)

Product:
Samsung RAPID Mode

Description:
Samsung RAPID Mode Notification Utility

Version:
1.0.1.68 built by: WinDDK

MD5:
a9c1846a38725698f5ce2b61048a32c6

SHA-1:
398a9882734890ea5e65b5212f2ebd6ed42356a2

SHA-256:
bd5895c849fb5653d3fefcbba60ca740d033c86db508d919a92021b7d0c4a64a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:37:32 AM UTC  (today)

File size:
274.7 KB (281,312 bytes)

Product version:
Samsung RAPID Mode 1.0.1.68

Copyright:
© Samsung Electronics Co., Ltd.. All rights reserved.

Original file name:
SamsungRapidApp.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\samsung\rapid\cachefilter\samsungrapidapp.exe

Digital Signature
Signed by:
Samsung Electronics Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
6/26/2013 1:00:00 AM

Valid to:
6/27/2014 12:59:59 AM

Subject:
CN="Samsung Electronics Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Samsung Electronics Co., Ltd.", L=Seoul, S=Seocho-gu, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6C752E68EE3F3FE6A026EB914E3C4752

File PE Metadata
Compilation timestamp:
5/19/2014 3:25:27 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:hVWB0hOaKBNr4twS3v/veZQDGMzZo+gFcYKszRizDU2N5T1MOY4Mi1imsCSWaUe8:hVW6kaKrmHvbzZWc4GDUh1m2tGz

Entry address:
0x299C

Entry point:
48, 83, EC, 28, E8, 6B, 02, 00, 00, 48, 83, C4, 28, E9, DA, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 49, 17, 00, 00, 75, 12, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 03, C2, 00, 00, 48, C1, C9, 10, E9, EC, 02, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, 48, 83, EC, 28, 48, 8B, 01, 81, 38, 63, 73, 6D, E0, 75, 2C, 83, 78, 18, 04, 75, 26, 8B, 40, 20, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 07...
 
[+]

Entropy:
3.7948

Code size:
10 KB (10,240 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SamsungRapidApp

Command:
C:\Program Files\samsung\rapid\cachefilter\samsungrapidapp.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.