home

WMObserverLauncher.exe

비스타용 System Observer Launcher

Wemade Entertainment

Publisher:
Wemade Entertainment Co., Ltd.  (signed by Wemade Entertainment)

Product:
비스타용 System Observer Launcher

Description:
Installed System Observer Launcher (On Vista)

Version:
1, 0, 0, 13

MD5:
0ad5e640ee9e603e16c0432d8001d85c

SHA-1:
72b7ecd5e93d8c624766f09816bce21e8eafe85c

SHA-256:
a18b06274705b2cfa4a3cb1da7900757a5a0064bed92f92c5840da07b430f8db

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/14/2025 11:10:27 PM UTC  (a few moments ago)

File size:
53.2 KB (54,504 bytes)

Product version:
1, 0, 0, 13

Copyright:
Wemade Copyright(C) 2008

Original file name:
WMObserverLauncher.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\syswow64\wmobserverlauncher.exe

Digital Signature
Signed by:
Wemade Entertainment

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
9/7/2009 9:00:00 AM

Valid to:
10/8/2011 8:59:59 AM

Subject:
CN=Wemade Entertainment, O=Wemade Entertainment, L=SEOUL, S=GYEONGGI-DO, C=KR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
11EC97B341BB977CB47FFF1280282D2A

File PE Metadata
Compilation timestamp:
9/9/2009 12:02:15 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
768:tCrw11rmFyjV3o5hUb53oQHUqagtzC6CnpaBFgsn4Lr/:tC6BZJ0hhQHUN6CgBFzn43/

Entry address:
0x1965

Entry point:
E8, DE, 19, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 08, AE, 40, 00, 89, 0D, 04, AE, 40, 00, 89, 15, 00, AE, 40, 00, 89, 1D, FC, AD, 40, 00, 89, 35, F8, AD, 40, 00, 89, 3D, F4, AD, 40, 00, 66, 8C, 15, 20, AE, 40, 00, 66, 8C, 0D, 14, AE, 40, 00, 66, 8C, 1D, F0, AD, 40, 00, 66, 8C, 05, EC, AD, 40, 00, 66, 8C, 25, E8, AD, 40, 00, 66, 8C, 2D, E4, AD, 40, 00, 9C, 8F, 05, 18, AE, 40, 00, 8B, 45, 00, A3, 0C, AE, 40, 00, 8B, 45, 04, A3, 10, AE, 40, 00, 8D, 45, 08, A3, 1C, AE, 40, 00, 8B...
 
[+]

Entropy:
6.0196

Code size:
28 KB (28,672 bytes)

Scan WMObserverLauncher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.