» stopusbcontrol.exe
Overview
Analysis
File Details

stopusbcontrol.exe

USBLockControl Application

Everstrike OOO

The application stopusbcontrol.exe, “USBLockControl MFC Application” by Everstrike OOO has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.

File name:

stopusbcontrol.exe

Publisher:

Everstrike Software (signed by Everstrike OOO)

Product:

USBLockControl Application

Description:

USBLockControl MFC Application

Version:

1, 3, 9, 0

MD5:

c4001cde45e489aa37a7fb7877ededbc

SHA-1:

aa1b3845168f3e2802d1662d247ca95faa9bbf74

SHA-256:

6a028ea9d235c81cf30f1cb3b46cc57248599509bf38e34f6ac591bd1bb8b99a

Scanner detections:

1 / 68

Status:

Adware

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

11/14/2024 2:43:13 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP (M)

16.8.19.1

File size:

6.9 MB (7,266,440 bytes)

Product version:

1, 3, 9, 0

Original file name:

USBLockControl.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\usb security enterprise\stopusbcontrol.exe

Digital Signature

Signed by:

Everstrike OOO

Authority:

VeriSign, Inc.

Valid from:

1/21/2010 1:00:00 AM

Valid to:

1/14/2011 12:59:59 AM

Subject:

CN=Everstrike OOO, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Everstrike OOO, L=Ulyanovsk, S=n/a, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4F047BCF18A6FDD97F5D03D2A61289D8

File PE Metadata

Compilation timestamp:

8/10/2010 1:48:42 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

196608:jHRO1t8ffv/v/bqo8P/v/j04/k2vvF8u3AY23RFs0c1inw:Qt8ffv/v/bqo8nv/l23Rvbw

Entry address:

0x6F5900

Entry point:

E8, 12, DA, FF, FF, 27, 25, DB, 7A, 0E, 0E, 27, 81, F1, C9, 9A, DF, 0D, 2F, 91, 3B, E5, 83, E1, 8C, C6, 23, 36, 65, F0, 4E, 5F, 18, 87, 28, 82, 5F, 3D, 0D, 1E, E5, 8E, C0, 67, B5, B1, DB, 9B, F6, EC, 22, E3, 0F, 7D, FE, 14, 65, 89, 42, D4, A9, 87, 91, 17, 20, 31, 6C, 9A, 19, 77, 98, 80, 0A, 92, A3, 56, D3, 6B, A9, 5F, 94, B2, 01, AC, 95, 72, 58, 65, C3, 51, 84, 48, 62, 86, A0, 1D, F5, BE, DE, 7C, EA, AC, C2, 2D, 9B, 46, A8, 47, 35, 96, 65, 67, 83, 7C, 56, F3, 29, 3F, C3, 7C, EA, 5C, 62, A4, 94, 06, 17, FE... 
[+]

Code size:

7 MB (7,332,864 bytes)

Remove stopusbcontrol.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.