home

osd.exe

System Utility

Mitac Technology Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘OSD’.
Publisher:
Mitac Technology Corporation  (signed and verified)

Product:
System Utility

Version:
1.0.0.0

MD5:
1b74d57a0af5552c7519e9192e0a0335

SHA-1:
240be78db0fb7cd8bd6aacb7ab6596c20131bb14

SHA-256:
84e1c824407e8d41f00b7b0ca30b72e519ce61b8ba6039b3da66f9d1b4b1d043

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 4:39:56 PM UTC  (today)

File size:
141.8 KB (145,168 bytes)

Product version:
1.0.0.0

Original file name:
9515.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\gtc\osd\osd.exe

Digital Signature
Signed by:
Mitac Technology Corporation

Authority:
VeriSign, Inc.

Valid from:
10/8/2008 5:30:00 AM

Valid to:
10/24/2009 5:29:59 AM

Subject:
CN=Mitac Technology Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Mitac Technology Corporation, L=Taipei, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6088078EE11491F60CCDDEF11374431A

File PE Metadata
Compilation timestamp:
8/26/2009 3:08:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:fGtIhHkp6EIhHkp6X+aLrEfTFOL82zLmF9hwDfQnLJIhHkp6A:eqhEShEk+4QT282O7QdhEH

Entry address:
0x1DEDE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.9045

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
112 KB (114,688 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
OSD

Command:
C:\Program Files\gtc\osd\osd.exe


Scan osd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.