home

allimymaincouponlauncher.exe

LiveIconLauncher

TCOMMS Co,Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Windows Allimy MainCoupon’.
Publisher:
(C) TComms  (signed by TCOMMS Co,Ltd)

Product:
LiveIconLauncher

Version:
1.19c

MD5:
73c93507d6b02df00d824fa12b01fe32

SHA-1:
208953fc0288fc1b6bb29ff686b7dac5abe9b663

SHA-256:
6ec4df4d5a2d7392010bf9aa8397d5c82592cedd7a16be12c51ab043b3286450

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/27/2025 4:05:10 AM UTC  (today)

File size:
169.8 KB (173,864 bytes)

Product version:
1, 0, 0, 0

Copyright:
Copyright (C) 2011

Original file name:
LiveIconLauncher.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\windows allimy maincoupon\bin\allimymaincouponlauncher.exe

Digital Signature
Signed by:
TCOMMS Co,Ltd

Authority:
thawte, Inc.

Valid from:
3/20/2015 9:00:00 AM

Valid to:
4/19/2017 8:59:59 AM

Subject:
CN="TCOMMS Co,Ltd", OU=Dev. Team, O="TCOMMS Co,Ltd", L=Geumcheon-gu, S=SEOUL, C=KR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
751BCB92FE300D140F413132F00719C5

File PE Metadata
Compilation timestamp:
6/24/2016 6:29:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:XxPwZKzWmvTNJnENeo7Ybch8Jel0UTH0etVVnMjOMDfkBQf+Kabc:hPZDTN5oGq0UTBtVSjOMDcS2KaA

Entry address:
0x1133E

Entry point:
55, 8B, EC, 6A, FF, 68, 38, 7B, 41, 00, 68, CA, 14, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 64, 65, 41, 00, 59, 83, 0D, A8, EC, 41, 00, FF, 83, 0D, AC, EC, 41, 00, FF, FF, 15, 68, 65, 41, 00, 8B, 0D, 70, EB, 41, 00, 89, 08, FF, 15, 6C, 65, 41, 00, 8B, 0D, 6C, EB, 41, 00, 89, 08, A1, 70, 65, 41, 00, 8B, 00, A3, A4, EC, 41, 00, E8, 4A, 01, 00, 00, 39, 1D, 18, E2, 41, 00, 75, 0C, 68, F4, 14, 41, 00, FF, 15, 74, 65...
 
[+]

Entropy:
6.1833

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
84 KB (86,016 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Windows Allimy MainCoupon

Command:
C:\Program Files\windows allimy maincoupon\bin\allimymaincouponlauncher.exe


Scan allimymaincouponlauncher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.