» samsung_usb_driver_for_mobile_phones.exe
Overview
Analysis
File Details
Programs (1)
Downloads (6)

samsung_usb_driver_for_mobile_phones.exe

SAMSUNG USB Driver for Mobile Phones

Samsung Electronics CO., LTD.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with Samsung Kies. The file has been seen being downloaded from downloader.disk.yandex.com and multiple other hosts.

File name:

samsung_usb_driver_for_mobile_phones.exe

Publisher:

Samsung Electronics CO., LTD. (signed and verified)

Product:

SAMSUNG USB Driver for Mobile Phones

Description:

SAMSUNG USB Driver for Mobile Phones

Version:

1.5.29.0

MD5:

22d0578e7a7eec602a38eb726ff9b990

SHA-1:

204a7d23b7c936639919490dfd3a14e5ee0451d1

SHA-256:

613e53b9f577edf87a728c2dae19580180d7aefa16a1ec36315be3bd73225645

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/30/2024 10:10:18 AM UTC (today)

File size:

14.7 MB (15,369,584 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Common path:

C:\Program Files\samsung\kies\usb driver\samsung_usb_driver_for_mobile_phones.exe

Digital Signature

Signed by:

Samsung Electronics CO., LTD.

Authority:

VeriSign, Inc.

Valid from:

12/6/2010 8:00:00 AM

Valid to:

12/22/2013 7:59:59 AM

Subject:

CN="Samsung Electronics CO., LTD.", OU=Computer System, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Samsung Electronics CO., LTD.", L=Suwon, S=Kyungki-Do, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

02DE9572414317531C3A3D52989EB11C

File PE Metadata

Compilation timestamp:

12/6/2009 6:50:41 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

393216:PhhcVp9sKM4CUAhazozR1TxTXpMJ5iurNcDWLZmsEdFLCytWaoqjekU:PncVpPlCUpozRuHHxcQYsEdhtWaoH

Entry address:

0x30CB

Entry point:

81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00... 
[+]

Entropy:

7.9999

Packer / compiler:

Nullsoft install system v2.x

Code size:

22.5 KB (23,040 bytes)

The file samsung_usb_driver_for_mobile_phones.exe has been discovered within the following program.

Samsung Kies by Samsung Electronics CO., LTD.

Publisher's description - “Simplify, sync and keep life up to date with Kies. Manage music, movies and photos. Backup precious contacts and calendars. Or download apps and podcasts and automatically upgrade device firmware. Kies conveniently syncs your life across all your devices.”

www.samsung.com/us/kies

10% remove it

The file samsung_usb_driver_for_mobile_phones.exe has been seen being distributed by the following 6 URLs.

https://downloader.disk.yandex.com/disk/35706eb33fe234a2c9399b45a0aadc409a21a58e54653b61920b296c31b01c31/580b9088/.../x-msdownload&fsize=15369584&hid=550475eab0070bbc877d71de59dc0dd8&media_type=executable&tknv=v2

http://4pda.ru/.../index.php?act=attach&id=3870247&dlsess=28b7bb162d10699a32ba098968992af3

http://4pda.ru/.../index.php?act=attach&id=4525025&dlsess=8f5cec056b8c38adb36a5ef6aa39e6af

http://4pda.ru/.../index.php?act=attach&id=3870247&dlsess=b225321287a17b45135a769715eccf4d

http://androidjam.ru/files/drivers/.../SAMSUNG USB Driver for Mobile Phones v1.5.29.0.exe

http://cs3-1.4pda.to/.../SAMSUNG_USB_Driver_for_Mobile_Phones_v1.5.29.0.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.