home

allimysajulauncher.exe

LiveIconLauncher

TCOMMS Co,Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Windows Allimy Saju’.
Publisher:
(C) TComms  (signed by TCOMMS Co,Ltd)

Product:
LiveIconLauncher

Version:
1.19c

MD5:
5dad942aec93096e67be2d6443d8d11b

SHA-1:
6e9353552de76ce077e12bf1515f21563d4ce0d0

SHA-256:
f1c58eef3e04dddf54c5244331f8a9e0f5659eb5f715f24279fda82a7878fa5d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/27/2025 4:00:42 AM UTC  (today)

File size:
169.8 KB (173,864 bytes)

Product version:
1, 0, 0, 0

Copyright:
Copyright (C) 2011

Original file name:
LiveIconLauncher.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\windows allimy saju\bin\allimysajulauncher.exe

Digital Signature
Signed by:
TCOMMS Co,Ltd

Authority:
thawte, Inc.

Valid from:
3/20/2015 9:00:00 AM

Valid to:
4/19/2017 8:59:59 AM

Subject:
CN="TCOMMS Co,Ltd", OU=Dev. Team, O="TCOMMS Co,Ltd", L=Geumcheon-gu, S=SEOUL, C=KR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
751BCB92FE300D140F413132F00719C5

File PE Metadata
Compilation timestamp:
12/1/2016 4:50:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:4miT3sYzWm0wN8nzNeo7BHJelUETH0erX1nMjOMDfkBQf+Kaom2:4/T3lYwNVoDqUETBrXyjOMDcS2KaU

Entry address:
0x1133E

Entry point:
55, 8B, EC, 6A, FF, 68, 38, 7B, 41, 00, 68, CA, 14, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 64, 65, 41, 00, 59, 83, 0D, 88, EC, 41, 00, FF, 83, 0D, 8C, EC, 41, 00, FF, FF, 15, 68, 65, 41, 00, 8B, 0D, 50, EB, 41, 00, 89, 08, FF, 15, 6C, 65, 41, 00, 8B, 0D, 4C, EB, 41, 00, 89, 08, A1, 70, 65, 41, 00, 8B, 00, A3, 84, EC, 41, 00, E8, 4A, 01, 00, 00, 39, 1D, F8, E1, 41, 00, 75, 0C, 68, F4, 14, 41, 00, FF, 15, 74, 65...
 
[+]

Entropy:
6.1823

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
84 KB (86,016 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Windows Allimy Saju

Command:
C:\Program Files\windows allimy saju\bin\allimysajulauncher.exe


Scan allimysajulauncher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.