home

Offers.EXE

PCmover

Laplink Software

This is installed with PCmover Professional.
Publisher:
Laplink Software, Inc.  (signed by Laplink Software)

Product:
PCmover

Description:
Third Party Offers

Version:
4.00.612.0

MD5:
65eabc45d0a855ff84ecb5c8b0409c7d

SHA-1:
3b6a3fddcdbd27ccce3644e92c46ef4e8752bd53

SHA-256:
12486b8e566f74cafb6795a15a48c42827d02018dc77de5f71d3e60ae17feff0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 7:07:35 PM UTC  (today)

File size:
233.3 KB (238,896 bytes)

Product version:
4.00.612.0

Copyright:
Copyright (C) Laplink Software, Inc. 2002-2008

Original file name:
Offers.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\laplink\pcmover\offers.exe

Digital Signature
Signed by:
Laplink Software

Authority:
VeriSign, Inc.

Valid from:
1/26/2009 5:00:00 PM

Valid to:
1/26/2010 4:59:59 PM

Subject:
CN=Laplink Software, OU=IT Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Laplink Software, L=Kirkland, S=Wasington, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
78832D4BD060900117FA03155AEB70BD

File PE Metadata
Compilation timestamp:
3/26/2009 12:23:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:uGMUcbTbFujlnE+UbOOOOOOOONOOOOOOOOOOOOOOOOOOOOOYOOOOOOOOO8OOzOOm:uGnQ8jlnEO

Entry address:
0x9091

Entry point:
55, 8B, EC, 6A, FF, 68, 68, AB, 40, 00, 68, F6, 91, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 3C, A3, 40, 00, 59, 83, 0D, 40, D2, 40, 00, FF, 83, 0D, 44, D2, 40, 00, FF, FF, 15, 40, A3, 40, 00, 8B, 0D, 34, D2, 40, 00, 89, 08, FF, 15, 34, A3, 40, 00, 8B, 0D, 30, D2, 40, 00, 89, 08, A1, 30, A3, 40, 00, 8B, 00, A3, 3C, D2, 40, 00, E8, 23, 01, 00, 00, 39, 1D, 20, D1, 40, 00, 75, 0C, 68, 20, 92, 40, 00, FF, 15, 2C, A3...
 
[+]

Entropy:
6.7129

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
36 KB (36,864 bytes)

The file Offers.EXE has been discovered within the following program.

PCmover Professional  by Laplink Software, Inc.
Publisher's description - “PCmover Professional automatically moves all the programs, files and settings you select from your old PC to your new one and all of your applications will be installed automatically ready to use.”
www.Laplink.com
12% remove it
 
Powered by Should I Remove It?

Scan Offers.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.