home

I3GManager.exe

I3GManager

Interezen Co.,Ltd

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program IPinside Agent by interezen. This is installed with IPinside Agent. The file has been seen being downloaded from static.knbank.co.kr.
Publisher:
Interezen. Co., Ltd.  (signed by Interezen Co.,Ltd)

Product:
I3GManager

Description:
I3GManager Security Module Installer

Version:
1, 0, 2, 9

MD5:
24906f1ce132213db5bcf4a9044871dd

SHA-1:
763527c5c6734b2ecd686f7d73454777afbd14e9

SHA-256:
50906b5feb7196a5993f8cbda8ae3d5564334a48e545c8ace84ab65b1e61d0a1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/5/2024 11:48:31 PM UTC  (a few moments ago)

File size:
1 MB (1,071,472 bytes)

Product version:
1, 0, 2, 9

Copyright:
Interezen. Copyright ⓒ 2009

Original file name:
I3GManager.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\interezen\i3gmanager.exe

Digital Signature
Signed by:
Interezen Co.,Ltd

Authority:
Thawte, Inc.

Valid from:
9/25/2014 9:00:00 AM

Valid to:
10/26/2015 8:59:59 AM

Subject:
CN="Interezen Co.,Ltd", OU=IT Team, O="Interezen Co.,Ltd", L=Gangnam-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6EA4650EBD1A554AA658AB268A3177D6

File PE Metadata
Compilation timestamp:
7/24/2015 6:03:02 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:HhlTFW5rU+1iGY6k+RSXJ0m/H2gk82U/nvZcykkUmdH5TsFbpzBIQf1m:BLLcil7J0I2+2EvZcy7UmdZmzih

Entry address:
0x172F4

Entry point:
E8, F9, C0, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 6A, 00, FF, 75, 14, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 72, C1, 00, 00, 83, C4, 14, 5D, C3, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9...
 
[+]

Entropy:
7.8587  (probably packed)

Code size:
172.5 KB (176,640 bytes)

Program Uninstaller
Program name:
IPinside Agent

Display publisher:
interezen

Display version:
1.0.2.9

Uninstall string:
C:\Program Files (x86)\Interezen\I3GManager.exe /uninstall


The file I3GManager.exe has been discovered within the following program.

IPinside Agent  by interezen
Publisher's description - “Real IP (private IP / certified. NAT IP / Proxy IP) that provides both BPBT (Brawser Plugin Based Tech.”
www.interezen.co.kr/interezen/business/ipinside.jsp
About 9% of users remove it
 
Powered by Should I Remove It?

The file I3GManager.exe has been seen being distributed by the following URL.

http://static.knbank.co.kr/ibs/private/static/.../I3GManager.exe

Scan I3GManager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.