» oshidfui.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

oshidfui.exe

OSHI Defender

AVEAS, s.r.o.

It runs as a scheduled task under the Windows Task Scheduler. This is installed with OSHI Defender.

File name:

oshidfui.exe

Publisher:

Aveas Limited (signed by AVEAS, s.r.o.)

Product:

OSHI Defender

Version:

1.3.172

MD5:

f79786cc79f37c86233d87f505f3efe9

SHA-1:

7f81ff89660fb1193bcfa937917e3a2a27c9a3d9

SHA-256:

7d8ecaf57386eb42cbda680a20fc8fc9b6ec0f67dbb76c786110051a3b23d001

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/5/2024 3:22:10 PM UTC (today)

File size:

4.2 MB (4,428,784 bytes)

Product version:

1.3.172.d3cc41a8f61f

Original file name:

Defender.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Program Files\oshi\defender\oshidfui.exe

Digital Signature

Signed by:

AVEAS, s.r.o.

Subject:

CN="AVEAS, s.r.o.", O="AVEAS, s.r.o.", L=Decin, C=CZ

Serial number:

01C9196556B1505D46B0E21D71D4E140

File PE Metadata

OS bitness:

Win64

CTPH (ssdeep):

98304:rnv6FwTU52KrKXzjBwo5BjwISH05kjzrghMN9k16ki9:76V52KrMhwonaH05kjzrghMNi+9

Entry point:

E8, 5A, ED, 01, 00, E9, 7F, FE, FF, FF, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 7F, 0F, B6, 44, 24, 08, 0F, BA, 25, 08, 0B, 6D, 00, 01, 73, 0D, 8B, 4C, 24, 0C, 57, 8B, 7C, 24, 08, F3, AA, EB, 5D, 8B, 54, 24, 0C, 81, FA, 80, 00, 00, 00, 7C, 0E, 0F, BA, 25, 40, 62, 6B, 00, 01, 0F, 82, 94, EE, 01, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1... 
[+]

Scheduled Task

Task name:

Launch Defender

Path:

\OSHI\Launch Defender

The file oshidfui.exe has been discovered within the following program.

OSHI Defender by Aveas Limited

Publisher's description - “OSHI Defender is New Generation Anti-Malware. Cloud-based virus protection keep you secured up to date in real-time. Secured DNS protect you from scam websites, stop rootkit and malware communications without any CPU usage.”

www.oshidefender.com/index.php

19% remove it

Scan oshidfui.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.