home

Launchpad Removal.EXE

Launchpad Removal Program

SanDisk Corporation

Publisher:
SanDisk Corporation

Product:
Launchpad Removal Program

Version:
1, 0, 2, 32

MD5:
0c3deb8c545a2c4d8f84278234cec3a2

SHA-1:
50d2987dad04cb9fd256b7d1a02ce0ce268a9410

SHA-256:
b2d1a3483cb19b44b7e95b9c69f98215da8f161e729a63069d40fe5ef2ab1404

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/28/2024 11:54:50 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Bkav FE
W32.Clod819.Trojan
1.3.0.4959

File size:
3.3 MB (3,493,888 bytes)

Product version:
1, 0, 2, 32

Copyright:
Copyright (C) 2006 SanDisk Corp.

Original file name:
Launchpad Removal.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\u3\temp\launchpad removal.exe

File PE Metadata
Compilation timestamp:
5/2/2008 3:41:45 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:LxvDiYlx4hrTQkHsZl3YbXx4hOrjWEKjaL6c5v4psjtBWq0RCrZls:V9gTQkHsZl3YrxZrjWEMWv4yRx0

Entry address:
0x10D3DF

Entry point:
E9, DB, BF, 1A, 00, E9, D4, A8, 20, 00, E9, AC, E3, 1E, 00, E9, 6D, B0, 12, 00, E9, A8, 07, 0D, 00, E9, 53, C8, 07, 00, E9, E1, 2A, 1A, 00, E9, 5E, 5B, 13, 00, E9, 04, 03, 12, 00, E9, AF, 62, 04, 00, E9, 6A, 6F, 03, 00, E9, 0A, 18, 1D, 00, E9, 80, B6, 19, 00, E9, 5D, 2C, 18, 00, E9, E5, C6, 15, 00, E9, 7E, 94, 15, 00, E9, CC, 46, 06, 00, E9, CD, 4B, 1D, 00, E9, DF, 99, 1C, 00, E9, E5, F2, 1D, 00, E9, 1D, AC, 19, 00, E9, F2, 17, 1D, 00, E9, 14, 3B, 1E, 00, E9, 07, 92, 13, 00, E9, 94, 5E, 07, 00, E9, C6, 4C...
 
[+]

Entropy:
5.4715

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
2.3 MB (2,420,736 bytes)

The file Launchpad Removal.EXE has been seen being distributed by the following URL.

http://mp3support.sandisk.com/.../launchpadremoval.exe

Scan Launchpad Removal.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.