home

gcodecopen.exe

gcodec

HANcommunication

The application gcodecopen.exe by HANcommunication has been detected as adware by 6 anti-malware scanners.
Publisher:
(주)한커뮤니케이션  (signed by HANcommunication)

Product:
gcodec

Description:
gcodecopen

Version:
2014.5.15.1

MD5:
6c4d5bf75b3a763138bb356604b0d752

SHA-1:
4950fa392ace23f74f93904bfd431c8d28f34b0f

SHA-256:
b3856d08948f46a2d1f8c0efda8153aad1e03b2d602ba7bd88665853a6b54fdd

Scanner detections:
6 / 68

Status:
Adware

Analysis date:
4/26/2024 1:48:03 PM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
PUP/Win32.GCodec
14.05.26

Comodo Security
ApplicUnwnt
18308

ESET NOD32
Win32/AdWare.Kraddare.JP (variant)
8.9834

Reason Heuristics
PUP.HANcommunication.K
14.11.30.23

Trend Micro House Call
TROJ_GEN.F47V0515
7.2.146

ViRobot
Adware.Gcodec.2087960
2011.4.7.4223

File size:
2 MB (2,087,960 bytes)

Product version:
2014.5.15.1

Copyright:
Copyright(c) 2011 by HanCommunication All rights reserved

Original file name:
gcodeccopen.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\gcodec\gcodecopen.exe

Digital Signature
Signed by:
HANcommunication

Authority:
Thawte, Inc.

Valid from:
5/12/2013 9:00:00 AM

Valid to:
6/12/2015 8:59:59 AM

Subject:
CN=HANcommunication, O=HANcommunication, L=seoul, S=Guro-gu, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3962DEF517F7534C2829A48F9A9454D4

File PE Metadata
Compilation timestamp:
5/15/2014 10:00:42 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Dj+jKTx0/M5NkeT/0TSdNS0C9+b5B4SOdb3XwFbELSOQZVDjmQ0S+Vp7i0Dknhji:vPxTV89i56SKbQWSOVVtT61hbV4OC

Entry address:
0x1BAC14

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 8C, FB, 5A, 00, E8, BB, FD, E4, FF, 68, 90, AC, 5B, 00, 6A, FF, 6A, 00, E8, 55, 30, E5, FF, 8B, D8, 85, DB, 74, 51, E8, 5A, 31, E5, FF, 85, C0, 75, 48, A1, 64, 2C, 5C, 00, 8B, 00, E8, B6, 51, F5, FF, A1, 64, 2C, 5C, 00, 8B, 00, B2, 01, E8, A8, 6E, F5, FF, 8B, 0D, 74, 2B, 5C, 00, A1, 64, 2C, 5C, 00, 8B, 00, 8B, 15, CC, B2, 5A, 00, E8, A8, 51, F5, FF, A1, 64, 2C, 5C, 00, 8B, 00, E8, F4, 52, F5, FF, 85, DB, 74, 06, 53, E8, B6, 2F, E5, FF, 5B, E8, F0, BC, E4, FF, 67, 00, 63, 00...
 
[+]

Entropy:
6.5150

Developed / compiled with:
Microsoft Visual C++

Code size:
1.7 MB (1,809,408 bytes)

Remove gcodecopen.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.