home

EMMSN.EXE

TGCM

INDRA SISTEMAS, S.A.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Mobile Connection Manager’. This is installed with multiple programs including Escritorio Movistar Latam and Mobile Connection Manager.
Publisher:
Telefónica I+D  (signed by INDRA SISTEMAS, S.A.)

Product:
TGCM

Description:
Telefónica Group Connection Manager

Version:
8.6.5.342

MD5:
3f6b3a694ecf50a24c350ee2c62f27c9

SHA-1:
ba813de9c658057284baa33c16b601e75ff8fd3f

SHA-256:
efc86856aa33ad57d0148b70228877f47569e0ab26fbb3b8766f4f751fcf29cc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 10:12:07 PM UTC  (today)

File size:
3.9 MB (4,063,096 bytes)

Product version:
8.6.5.342

Copyright:
Copyright (C). All rights reserved.

Original file name:
EMMSN.EXE

File type:
Executable application (Win32 EXE)

Language:
Spanish (Spain, International Sort)

Common path:
C:\Program Files\o2\mobile connection manager\emmsn.exe

Digital Signature
Signed by:
INDRA SISTEMAS, S.A.

Authority:
VeriSign, Inc.

Valid from:
10/18/2010 7:00:00 AM

Valid to:
10/19/2011 6:59:59 AM

Subject:
CN="INDRA SISTEMAS, S.A.", OU=Telecom, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="INDRA SISTEMAS, S.A.", L=Alcobendas, S=Madrid, C=ES

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
62FCE778A317BB2380568847DA1E7014

File PE Metadata
Compilation timestamp:
5/19/2011 8:30:02 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:CGG0AjiWb7Y774Fc9dKk7XYOlBgx+O97j+I4TX8wT33+mqz:CcUY/BXYIgxvo8w0

Entry address:
0x20DFC0

Entry point:
E8, D6, AA, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 63, 61, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 7E, 0E, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 0C, 3B, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 1B, 0F, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8, 14, 61, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, AD...
 
[+]

Entropy:
6.5451

Code size:
2.7 MB (2,861,056 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Mobile Connection Manager

Command:
"C:\Program Files\o2\mobile connection manager\emmsn.exe" -dock


The file EMMSN.EXE has been discovered within the following programs.

Escritorio Movistar Latam  by Telefonica del Peru SAA
Publisher's description - “Escritorio Movistar Latam is a free software that provides a smart manage of your Wi-Fi or WWAN connections and gain mobile access to data services such as Internet, corporate Intranets or E-mail and Movistar services with the same speed as a fixed workstation.”
www.movistar.com
About 9% of users remove it
Mobile Connection Manager  by Telefónica UK Limited
Publisher's description - “With the O2 Mobile Connection Manager, you simply and easily establishes connections to the mobile Internet. For Windows: You have all wireless connections in a single software (WLAN, etc.). Due to clear statistics and automatic notifications Your surf volume always in view.”
hilfe.o2online.de
About 5% of users remove it
 
Powered by Should I Remove It?

Scan EMMSN.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.