home

WIALauncher.exe

WIA Client Launcher

Asiasoft Online Pte Ltd

The application WIALauncher.exe by Asiasoft Online Pte has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
T3 Entertainment  (signed by Asiasoft Online Pte Ltd)

Product:
WIA Client Launcher

Version:
1.01.0.0

MD5:
9ecd5162ddb42acc1f474672b10ab106

SHA-1:
93610348be798114507b86702175dd68d338692e

SHA-256:
74f1f7a604429bc3aac89868cdd44cbe0f471a320c402d325605bb4719df2057

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/28/2024 2:36:26 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Asiasoft (M)
16.6.18.11

File size:
16.1 MB (16,908,736 bytes)

Product version:
1.01

Copyright:
T3 Entertainment Co.,Ltd. All rights reserved.

Original file name:
WIALauncher.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\wia\wialauncher.exe

Digital Signature
Signed by:
Asiasoft Online Pte Ltd

Authority:
GlobalSign nv-sa

Valid from:
11/6/2014 12:18:34 PM

Valid to:
11/7/2015 12:18:34 PM

Subject:
E=ensemble@asiasoft.net, CN=Asiasoft Online Pte Ltd, O=Asiasoft Online Pte Ltd, L=Singapore, S=Singapore, C=SG

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121316AC469EDBB903A2A501E45268109FD

File PE Metadata
Compilation timestamp:
3/19/2015 7:28:07 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:9IvvuO55aRxqiusQF2ieovo0R9Vjsknejvjj1jKys:9IvvuO55aRxqiusS2iJT9VXn7ys

Entry address:
0x3EA91

Entry point:
E8, 76, C7, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 6A, 00, FF, 75, 14, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, EF, C7, 00, 00, 83, C4, 14, 5D, C3, 8B, FF, 55, 8B, EC, 8B, 45, 08, 66, 8B, 08, 40, 40, 66, 85, C9, 75, F6, 2B, 45, 08, D1, F8, 48, 5D, C3, 8B, FF, 55, 8B, EC, 8B, 55, 08, 53, 56, 57, 33, FF, 3B, D7, 74, 07, 8B, 5D, 0C, 3B, DF, 77, 1E, E8, 3F, 05, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 55, E4, FF, FF, 83, C4, 14, 8B, C6, 5F, 5E, 5B, 5D, C3, 8B, 75, 10, 3B, F7, 75, 07, 33, C0...
 
[+]

Entropy:
5.2729

Code size:
337.5 KB (345,600 bytes)

Remove WIALauncher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.