» samsung.exe
Overview
Analysis
File Details
Programs (1)

samsung.exe

Samsung Remote Client

123 Unlock

This file is installed with the program Simlock Remote Client.

File name:

samsung.exe

Publisher:

123UNLOCK.NL (signed by 123 Unlock)

Product:

Samsung Remote Client

Version:

14.12.0042

MD5:

d76bb2f50274b68c884a1c87cbc1a97a

SHA-1:

3a5458e5f8cc30dbd66d3a81db8f92f371c9e50a

SHA-256:

4572b038cf10e4ae85f9eefd2320cf0d0b0327f8e2a0a27fc5614f975b0c8ae3

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/24/2024 10:56:43 PM UTC (today)

Scan engine

Detection

Engine version

avast!

Win32:PUP-gen [PUP]

2014.9-160114

Trend Micro House Call

Suspicious_GEN.F47V1029

7.2.14

File size:

374 KB (383,016 bytes)

Product version:

14.12.0042

123UNLOCK Remote Services

Original file name:

samsung.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\simlock remote client\samsung.exe

Digital Signature

Signed by:

123 Unlock

Authority:

Starfield Technologies, Inc.

Valid from:

8/1/2012 8:58:57 AM

Valid to:

8/1/2014 8:58:57 AM

Subject:

CN=123 Unlock, OU=Development, O=123 Unlock, L=Apeldoorn, S=N/A, C=NL

Issuer:

SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

081CB8296AF5D9

File PE Metadata

Compilation timestamp:

4/16/2014 10:48:15 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:MVg8SdTyHo025oF7njW4QHjXibjxRcUSCUbDyr5HWxSepelMloXAZmU8PFvqr:MVgnW5soZjCDXGjxRfFEnOMyAZ2qr

Entry address:

0x25EE30

Entry point:

60, BE, 00, 40, 60, 00, 8D, BE, 00, D0, DF, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89... 
[+]

Entropy:

7.9044

Packer / compiler:

UPX 2.90LZMA

Code size:

364 KB (372,736 bytes)

The file samsung.exe has been discovered within the following program.

Simlock Remote Client by 123Unlock GSM Service

Publisher's description - “Samsung Remote Server by 123unlock is a professional unlock and repair service for your Samsung GSMs by cable. A stable, fast and easy method to unlock and repair your Samsung GSM specially designed for non technical consumers.”

www.UnlockSamsungOnline.nl

About 5% of users remove it

Scan samsung.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.