» miconsoft.EXE
Overview
Analysis
File Details
Programs (1)

miconsoft.EXE

Miconsoft 응용 프로그램

IMI

The application miconsoft.EXE, “Miconsoft MFC 응용 프로그램” by IMI has been detected as a potentially unwanted program by 12 anti-malware scanners. This file is typically installed with the program Miconsoft Control management by Miconsoft which is a potentially unwanted software program.

File name:

miconsoft.EXE

Publisher:

IMI (signed and verified)

Product:

Miconsoft 응용 프로그램

Description:

Miconsoft MFC 응용 프로그램

Version:

1, 0, 0, 1

MD5:

880882c8d915ae9f05dc940da8b6d3fe

SHA-1:

378fd48e5c0662e0b84cd35580e7f6280862b65b

SHA-256:

5238d7c2a9daf7870c81f336f250e678ae4a52947babc17f3aca860793aabc8f

Scanner detections:

12 / 68

Status:

Potentially unwanted

Analysis date:

4/19/2024 8:34:26 PM UTC (today)

Scan engine

Detection

Engine version

AhnLab V3 Security

PUP/Win32.Miconsoft

14.04.28

Avira AntiVirus

Adware/Kraddare.CH.17

7.11.143.56

AVG

Skodna.Generic

2015.0.3491

Baidu Antivirus

Trojan.Win32.Adware

4.0.3.14428

Comodo Security

ApplicUnwnt.Win32.Adware.Kraddare.EI

18100

ESET NOD32

Win32/Adware.Kraddare.CH (variant)

8.9672

Fortinet FortiGate

Riskware/Kraddare

4/28/2014

IKARUS anti.virus

AdWare.Kraddare

t3scan.1.6.1.0

McAfee

Artemis!880882C8D915

5600.7147

Trend Micro House Call

ADW_KRADDARE

7.2.118

Trend Micro

ADW_KRADDARE

10.465.28

ViRobot

Adware.Agent.102048

2011.4.7.4223

File size:

99.7 KB (102,048 bytes)

Product version:

1, 0, 0, 1

Original file name:

miconsoft.EXE

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\miconsoft\miconsoft.exe

Digital Signature

Signed by:

IMI

Authority:

VeriSign, Inc.

Valid from:

9/20/2011 9:00:00 AM

Valid to:

10/20/2013 8:59:59 AM

Subject:

CN=IMI, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=IMI, L=Deokjin-gu, S=Jeollabuk-do, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

06A38B57BC3AEA6CD3BADC12C68A1602

File PE Metadata

Compilation timestamp:

5/17/2012 12:28:46 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

1536:fB1gl0dCrFE3hCUlGmyMIqkKaqnDV6C8pVoJJq1pWhR/V+q:XwcCrUhllGXMaqnDIfVoJJq1pWhR//

Entry address:

0xF7EA

Entry point:

55, 8B, EC, 6A, FF, 68, 90, 28, 41, 00, 68, E4, F7, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 10, 23, 41, 00, 59, 83, 0D, 0C, 66, 41, 00, FF, 83, 0D, 10, 66, 41, 00, FF, FF, 15, 14, 23, 41, 00, 8B, 0D, 00, 66, 41, 00, 89, 08, FF, 15, 18, 23, 41, 00, 8B, 0D, FC, 65, 41, 00, 89, 08, A1, 1C, 23, 41, 00, 8B, 00, A3, 08, 66, 41, 00, E8, 22, 01, 00, 00, 39, 1D, F0, 59, 41, 00, 75, 0C, 68, 78, F9, 40, 00, FF, 15, 20, 23... 
[+]

Entropy:

5.8520

Developed / compiled with:

Microsoft Visual C++ v6.0

Code size:

68 KB (69,632 bytes)

The file miconsoft.EXE has been discovered within the following program.

Miconsoft Control management by Miconsoft

74% remove it

Remove miconsoft.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.