ShareBoxUp.exe

쉐어박스 업로드

raonmedia

The application ShareBoxUp.exe by raonmedia has been detected as a potentially unwanted program by 2 anti-malware scanners.
Publisher:
http://sharebox.co.kr  (signed by raonmedia)

Product:
쉐어박스 업로드

Version:
1.1.1.1

MD5:
0c05dbf1f4f64f51e9b48f78b36f53e5

SHA-1:
ac3acc9566a4f5b2e6f0432983602bd37aef3d17

SHA-256:
2b6d23d0098e7923af4d1528c72f9f44f634904d65d0c05472b992ae242bd6df

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 4:10:39 AM UTC  (today)

Scan engine
Detection
Engine version

Malwarebytes
Adware.ShareBox
v2015.10.16.06

Reason Heuristics
PUP.raonmedia (M)
15.10.16.18

File size:
4.9 MB (5,180,968 bytes)

Product version:
1.1.1.1

Copyright:
(주)라온미디어. All rights reserved.

Original file name:
ShareBoxUp.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\sharebox\shareboxup.exe

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
12/2/2013 9:00:00 AM

Valid to:
2/1/2015 8:59:59 AM

Subject:
CN=raonmedia, O=raonmedia, L=Suyeong-gu, S=Busan, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A0C0931FF30DE6691ED7C9CEB0F3A9C

File PE Metadata
Compilation timestamp:
8/7/2014 8:20:34 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
98304:OoLVLeUKYv6b5BmHMik11D0foflpI4FOKoPeDH:fVLUHmkkkI4FOu

Entry address:
0x1A881B

Entry point:
E8, 34, 07, 01, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 40, D4, 65, 00, E8, AF, 09, 00, 00, E8, AA, 8E, 00, 00, 0F, B7, F0, 6A, 02, E8, C7, 06, 01, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, A9, 5B, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.4020

Code size:
1.9 MB (1,971,200 bytes)

Remove ShareBoxUp.exe - Powered by Reason Core Security