home

GameManiaSysInfoCollector_64.ocx

게임매니아 PC사양정보 컨트롤 64

IMI

The file GameManiaSysInfoCollector_64.ocx by IMI has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
IMI  (signed and verified)

Product:
게임매니아 PC사양정보 컨트롤 64

Version:
1.0.0.1

MD5:
9b44b88de7710e6f7d41c9639cb24412

SHA-1:
88eebe97bd563418cdeb82ca4751330563ce60cf

SHA-256:
f494ca4423b7228ca81cd1c207dce5af49167fea6fce01ff755a0d8ea72e4788

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/8/2024 3:12:58 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.IMI (M)
16.7.1.13

File size:
524.6 KB (537,200 bytes)

Product version:
1.0.0.1

Copyright:
imi. Copyright(C) 2013

Original file name:
GameManiaSysInfoCollector_64.ocx

File type:
OLE control extension (Win64 OCX)

Common path:
C:\windows\downloaded Program Files\gamemaniasysinfocollector_64.ocx

Digital Signature
Signed by:
IMI

Authority:
VeriSign, Inc.

Valid from:
9/20/2011 9:00:00 AM

Valid to:
10/20/2013 8:59:59 AM

Subject:
CN=IMI, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=IMI, L=Deokjin-gu, S=Jeollabuk-do, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
06A38B57BC3AEA6CD3BADC12C68A1602

File PE Metadata
Compilation timestamp:
8/22/2013 12:27:01 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:/xM+JLWTHPm7o+bjKizE1du2VsznxikcC1+LFT1uSZOmoVpPbs5UNJ/Slor4abGA:/a+JLWKc+bDzF2VGvBOySy/PbX4orX

Entry address:
0x3C680

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 83, FA, 01, 49, 8B, F8, 8B, DA, 48, 8B, F1, 75, 05, E8, 6F, 79, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 83, FE, FF, FF, CC, CC, CC, 48, 89, 6C, 24, 20, 57, 41, 54, 41, 55, 41, 56, 41, 57, 48, 83, EC, 20, 49, 63, 78, 0C, 4C, 8B, F9, 49, 8B, C8, 4D, 8B, E1, 4D, 8B, F0, 4C, 8B, EA, E8, 76, 7A, 00, 00, 85, FF, 4D, 8B, 17, 4D, 89, 14, 24, 8B, E8, 0F, 84, BE, 00, 00, 00, 48, 8D, 0C, BF, 48...
 
[+]

Entropy:
6.1111

Code size:
339 KB (347,136 bytes)

Safe for Initializing Control
CLSID:
{A8DD45D3-8DB5-4881-A24D-B5C42F784AA0}

CLSID name:
GameManiaSysInfoCollector_64 Control


Remove GameManiaSysInfoCollector_64.ocx - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.