home

savvyconnectui.exe

SavvyConnect Application

Luth Research LLC

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SavvyConnectMenu’.
Publisher:
Luth Research LLC  (signed and verified)

Product:
SavvyConnect Application

Version:
3.12.0.7

MD5:
ed5cda0bda3d1e4688ea97f9defb1405

SHA-1:
c64e460256f49a9e85d5b41fd60a8ee8542bbaf7

SHA-256:
e32b0314a2fe22072f1486b0b0561fee7dc50a13a8b8c6866ec95bc1e9664bdf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 4:28:52 AM UTC  (today)

File size:
568.8 KB (582,448 bytes)

Product version:
3.12.0.7

Copyright:
Luth Research LLC

Original file name:
SavvyConnectMenuWTL.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\luth research\savvyconnectframework\bin\scui\savvyconnectui.exe

Digital Signature
Signed by:
Luth Research LLC

Authority:
VeriSign, Inc.

Valid from:
4/23/2013 5:00:00 PM

Valid to:
6/22/2016 4:59:59 PM

Subject:
CN=Luth Research LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Luth Research LLC, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2E77D2E7B951AA155FEC08C32AEBA6E7

File PE Metadata
Compilation timestamp:
11/12/2014 9:54:44 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:exF5m4xe7tMKdVSz9JHqwJUYSLviax5LIXxEBEsBvHeMlgyPrpny7UhKYL:eF5BeKJKAVfax58xEBEgGYfBd

Entry address:
0x36FBE

Entry point:
E8, 14, A5, 00, 00, E9, 89, FE, FF, FF, 6A, 0C, 68, 98, 20, 46, 00, E8, EC, 1F, 00, 00, 6A, 0E, E8, 4B, 79, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08, 8B, 4E, 04, 85, C9, 74, 2F, A1, D4, 97, 46, 00, BA, D0, 97, 46, 00, 89, 45, E4, 85, C0, 74, 11, 39, 08, 75, 2C, 8B, 48, 04, 89, 4A, 04, 50, E8, DA, C5, FF, FF, 59, FF, 76, 04, E8, D1, C5, FF, FF, 59, 83, 66, 04, 00, C7, 45, FC, FE, FF, FF, FF, E8, 0A, 00, 00, 00, E8, DB, 1F, 00, 00, C3, 8B, D0, EB, C5, 6A, 0E, E8, 17, 78, 00, 00, 59, C3, CC, CC, CC, CC, CC, CC...
 
[+]

Entropy:
6.1771

Code size:
325.5 KB (333,312 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SavvyConnectMenu

Command:
"C:\Program Files\luth research\savvyconnectframework\bin\scui\savvyconnectui.exe" -a


Scan savvyconnectui.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.