home

SamsungRapidApp.exe

Samsung RAPID Mode

Samsung Electronics Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SamsungRapidApp’.
Publisher:
Samsung Electronics Co., Ltd.  (signed and verified)

Product:
Samsung RAPID Mode

Description:
Samsung RAPID Mode Notification Utility

Version:
1.0.1.42 built by: WinDDK

MD5:
0c9e4fd7c897b58ca1e888a01b44ff64

SHA-1:
f81e90558dc91453df743fb6804d4762b64a13d4

SHA-256:
6393a5e815bd2eb92c2c2ac90da04cadb45edf9be6b170b637ad067bec05cd6e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:50:09 AM UTC  (today)

File size:
106.7 KB (109,280 bytes)

Product version:
Samsung RAPID Mode 1.0.1.42

Copyright:
© Samsung Electronics Co., Ltd.. All rights reserved.

Original file name:
SamsungRapidApp.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\rapid\cachefilter\samsungrapidapp.exe

Digital Signature
Signed by:
Samsung Electronics Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
6/26/2013 1:00:00 AM

Valid to:
6/27/2014 12:59:59 AM

Subject:
CN="Samsung Electronics Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Samsung Electronics Co., Ltd.", L=Seoul, S=Seocho-gu, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6C752E68EE3F3FE6A026EB914E3C4752

File PE Metadata
Compilation timestamp:
7/29/2013 7:56:19 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
384:nhjf61gbwQqXRq9MuBpn2SBP+qBMh3VAiLNiTJZ5vMucRpOLOxM5S77v4zIww1ww:nWbRiMuB12SBPtBMRx4zIHyEuG0PG

Entry address:
0x289C

Entry point:
48, 83, EC, 28, E8, 6B, 02, 00, 00, 48, 83, C4, 28, E9, DA, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 49, 18, 00, 00, 75, 12, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 03, C2, 00, 00, 48, C1, C9, 10, E9, EC, 02, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, 48, 83, EC, 28, 48, 8B, 01, 81, 38, 63, 73, 6D, E0, 75, 2C, 83, 78, 18, 04, 75, 26, 8B, 40, 20, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 07...
 
[+]

Entropy:
4.2488

Code size:
10 KB (10,240 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SamsungRapidApp

Command:
C:\Program Files\rapid\cachefilter\samsungrapidapp.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.