» UserSysInfoCollector.exe
Overview
Analysis
File Details
Programs (2)

UserSysInfoCollector.exe

UserSysInfoCollector

NCsoft Corp.

File name:

Publisher:

NCSOFT Corporation (signed by NCsoft Corp.)

Product:

UserSysInfoCollector

Description:

UserSystemInformationCollector

Version:

1, 0, 0, 2

MD5:

436cce5cbad40ee52a018205668af397

SHA-1:

ffb47f727bda96268a9c56ab407e2dba8b6ae702

SHA-256:

4122f12f3dafe7bf069e7f68317048ff9bf17de25f6b7da03bcfb902910b2596

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 12:04:40 AM UTC (today)

File size:

352 KB (360,424 bytes)

Product version:

3.0.2.198

Original file name:

UserSysInfoCollector.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\gameforgelive\games\gbr_eng\aion\usersysinfocollector.exe

Digital Signature

Signed by:

NCsoft Corp.

Authority:

SGssl

Valid from:

3/8/2013 1:00:00 AM

Valid to:

3/9/2014 12:59:59 AM

Subject:

CN=NCsoft Corp., O=NCsoft Corp., STREET="507 Teheran-ro,", L=Gangnam-gu, S=Seoul, PostalCode=135880, C=KR

Issuer:

CN=SGTRUST CODE SIGNING CA, O=SGssl, C=KR

Serial number:

28E31647F215B601F8116284B271809B

File PE Metadata

Compilation timestamp:

7/19/2013 3:41:42 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:6JmHGvs1PWUKm5ZbnZxrrniViDE/bcmn9Q2ForjwpL:6Mq+Pym5ZZ5rwwKWKr

Entry address:

0x1FF99

Entry point:

E8, F6, 92, 00, 00, E9, 17, FE, FF, FF, 6A, 0C, 68, C8, 4E, 44, 00, E8, 01, 4F, 00, 00, 8B, 4D, 08, 33, FF, 3B, CF, 76, 2E, 6A, E0, 58, 33, D2, F7, F1, 3B, 45, 0C, 1B, C0, 40, 75, 1F, E8, B6, 28, 00, 00, C7, 00, 0C, 00, 00, 00, 57, 57, 57, 57, 57, E8, 73, 3A, 00, 00, 83, C4, 14, 33, C0, E9, D5, 00, 00, 00, 0F, AF, 4D, 0C, 8B, F1, 89, 75, 08, 3B, F7, 75, 03, 33, F6, 46, 33, DB, 89, 5D, E4, 83, FE, E0, 77, 69, 83, 3D, 34, 1A, 45, 00, 03, 75, 4B, 83, C6, 0F, 83, E6, F0, 89, 75, 0C, 8B, 45, 08, 3B, 05, 40, 1A... 
[+]

Code size:

240 KB (245,760 bytes)

The file UserSysInfoCollector.exe has been discovered within the following programs.

AION Free-To-Play by Gameforge 4D GmbH

Aion is a massively multiplayer online role-playing game.

www.Gameforge.com

10% remove it

NC Launcher (GameForge) by NCsoft Corporation, Ltd.

Publisher's description - “The NCSOFT Launcher lets you launch NCSOFT GameForge games, download new NCSOFT games, automatically download game updates without interrupting your gameplay, and keep up with the latest NCSOFT news.”

www.plaync.co.kr

About 7% of users remove it

Scan UserSysInfoCollector.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.