» uSafeOn_Launcher.exe
Overview
Analysis
File Details

uSafeOn_Launcher.exe

uSafeOn_Launcher

Besoft Enc CO,.Ltd.

File name:

Publisher:

BESOFT Enc (signed by Besoft Enc CO,.Ltd.)

Product:

uSafeOn_Launcher

Version:

1.0.0.0

MD5:

1bdfeca033a2de28b68845ccab33b599

SHA-1:

3078db857a7e27c1565619310dcfc00d89af5cbb

Scanner detections:

2 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

11/23/2024 9:27:30 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

TR/Spy.Banker.Gen2

7.11.151.204

Dr.Web

DLOADER.Trojan

9.0.1.0197

File size:

617.9 KB (632,752 bytes)

Product version:

1.0.0.0

Original file name:

uSafeOn_Launcher.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\besoft\setup\usafeon_launcher.exe

Digital Signature

Signed by:

Besoft Enc CO,.Ltd.

Authority:

VeriSign, Inc.

Valid from:

11/30/2009 9:00:00 AM

Valid to:

12/1/2010 8:59:59 AM

Subject:

CN="Besoft Enc CO,.Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Besoft Enc CO,.Ltd.", L=Gangnam-gu, S=Seoul, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3943FDE33EB7FE86B2EAA3C1A004B58F

File PE Metadata

Compilation timestamp:

10/13/2010 4:06:02 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:nZKTz2vcV9xp+5OTvXmPc0xF4W+WRRWmQDUp3FySMGIPU3+:ZA2gx85qvXJ074W+KRWmQYy3GIA+

Entry address:

0x81A94

Entry point:

55, 8B, EC, 83, C4, F0, 53, B8, 7C, 03, 48, 00, E8, DB, 51, F8, FF, E8, CE, 17, F8, FF, 83, F8, 05, 75, 5E, 68, 14, 1B, 48, 00, 6A, FF, 6A, 00, E8, 97, 53, F8, FF, 8B, D8, 85, DB, 74, 4A, E8, 64, 54, F8, FF, 85, C0, 75, 41, 53, E8, 4A, 53, F8, FF, A1, 2C, 49, 48, 00, 8B, 00, E8, E2, 44, FD, FF, 8B, 0D, E8, 47, 48, 00, A1, 2C, 49, 48, 00, 8B, 00, 8B, 15, F4, FE, 47, 00, E8, E2, 44, FD, FF, A1, 2C, 49, 48, 00, 8B, 00, C6, 40, 5B, 00, A1, 2C, 49, 48, 00, 8B, 00, E8, 03, 46, FD, FF, 5B, E8, 51, 2E, F8, FF, 00... 
[+]

Entropy:

6.5599

Developed / compiled with:

Microsoft Visual C++

Code size:

513 KB (525,312 bytes)

Scan uSafeOn_Launcher.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.