home

modemlistener.exe

JRD COMMUNICATION (SHENZHEN) LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘EE MORPHO ModemListener’.
Publisher:
JRD COMMUNICATION (SHENZHEN) LTD  (signed and verified)

MD5:
8f3241a43c4e5f648d439f6378dc3655

SHA-1:
fbc4b7800b7d2cf02acacbefa512129c00addd4e

SHA-256:
efc1bc1c607454d22fd71749738c4e15787953a7e5ba37813a1280d2c261523b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:00:34 AM UTC  (today)

File size:
155.3 KB (159,056 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\web connection\y855_ee\backgroundservice\modemlistener.exe

Digital Signature
Signed by:
JRD COMMUNICATION (SHENZHEN) LTD

Authority:
VeriSign, Inc.

Valid from:
10/26/2011 1:00:00 AM

Valid to:
12/17/2014 11:59:59 PM

Subject:
CN=JRD COMMUNICATION (SHENZHEN) LTD, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=JRD COMMUNICATION (SHENZHEN) LTD, L=深圳, S=广东省深圳市, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5A361595684C6091D0F5D75FE412DC04

File PE Metadata
Compilation timestamp:
5/16/2014 7:37:48 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:0nuQviSQoiKEjQddxQegJm854lXHGMERPY5rk5iD:7GLreFgBXm32kk

Entry address:
0xC01B

Entry point:
E8, 06, 6D, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04, 2B...
 
[+]

Code size:
110.5 KB (113,152 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
EE MORPHO ModemListener

Command:
C:\Program Files\web connection\y855_ee\backgroundservice\modemlistener.exe start


Scan modemlistener.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.