home

MobileCtrl.exe

Mobile Control

Ours Technology Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CS Dispatch’.
Publisher:
Samsung  (signed by Ours Technology Inc.)

Product:
Mobile Control

Version:
1, 0, 1127, 259

MD5:
23630ebc00ad9f62fbacacf16f146b56

SHA-1:
2a6ff5ea914f1cc59f1dfc30ed2c52cede9a2c0c

SHA-256:
58e618119da090b3f23278b8c39dda0867545ab1455a74427a169e2874141f1e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/23/2024 9:10:49 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Suspicious
24005

File size:
303.5 KB (310,824 bytes)

Product version:
1, 0, 1127, 259

Copyright:
Copyright (C) 2011

Original file name:
MobileCtrl.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (Taiwanese)

Common path:
C:\ProgramData\samsung\mobilecontrol\functmodules\{8aec7f86-b5f4-499b-9ace-203f46e4469d}\mobilectrl.exe

Digital Signature
Signed by:
Ours Technology Inc.

Authority:
VeriSign, Inc.

Valid from:
7/19/2011 2:00:00 AM

Valid to:
7/31/2012 1:59:59 AM

Subject:
CN=Ours Technology Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Ours Technology Inc., L=Hsinchu Hsien, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1884DCB425490F882A2BB220C2FEA034

File PE Metadata
Compilation timestamp:
4/2/2012 12:18:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x362E80

Entry point:
60, BE, 00, 20, 72, 00, 8D, BE, 00, F0, CD, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
264 KB (270,336 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CS Dispatch

Command:
C:\ProgramData\samsung\mobilecontrol\functmodules\{8aec7f86-b5f4-499b-9ace-203f46e4469d}\mobilectrl.exe -gC:runfromregistry


Scan MobileCtrl.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.