home

WyzUALauncher.exe

WyzMeeting User Agent Launcher

SAMSUNG SDS CO., LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WyzMeeting UA Launcher’.
Publisher:
SAMSUNG SDS CO., LTD  (signed and verified)

Product:
WyzMeeting User Agent Launcher

Version:
5, 1, 1, 11721

MD5:
f48d86461653cd7261419d95728e2870

SHA-1:
3daf4993e551b0c737022148f83c7d0c0c839709

SHA-256:
ede66da5ae2795f35a42ba3afd3f9da79ded0cb051dd1b282529cd01b9ad237c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:27:47 AM UTC  (today)

File size:
2.3 MB (2,437,240 bytes)

Product version:
5, 1, 1, 11721

Original file name:
WyzUALauncher.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\samsung wyzmeeting\wyzuseragent\wyzualauncher.exe

Digital Signature
Signed by:
SAMSUNG SDS CO., LTD

Authority:
Thawte, Inc.

Valid from:
4/21/2014 7:00:00 AM

Valid to:
6/20/2016 6:59:59 AM

Subject:
CN="SAMSUNG SDS CO., LTD", OU=IT Team, O="SAMSUNG SDS CO., LTD", L=Gangnam-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0FEB3C7F137F2ECD355FA838BB7AE4C0

File PE Metadata
Compilation timestamp:
3/4/2015 9:22:15 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
49152:2tVoQNh+a+rCqayYj1uHpUB05UKP0Jwkpv7jHSnqfY6EU:RQNh+VrCqa71uHCB0lCwkv7jH2Gj

Entry address:
0x135FD4

Entry point:
E8, 72, E6, 00, 00, E9, 7B, FE, FF, FF, 55, 8B, EC, 5D, E9, 00, 00, 00, 00, 55, 8B, EC, 6A, 0A, 6A, 00, FF, 75, 08, E8, 96, E9, 00, 00, 83, C4, 0C, 5D, C3, 55, 8B, EC, 56, E8, F5, AE, 00, 00, 8B, B0, 80, 00, 00, 00, E8, EA, AE, 00, 00, 8B, 4D, 08, 89, 88, 80, 00, 00, 00, 8B, C6, 5E, 5D, C3, 55, 8B, EC, FF, 15, DC, 01, 57, 00, 6A, 01, A3, 4C, 10, 5E, 00, E8, 72, E9, 00, 00, FF, 75, 08, E8, D9, EC, 00, 00, 83, 3D, 4C, 10, 5E, 00, 00, 59, 59, 75, 08, 6A, 01, E8, 58, E9, 00, 00, 59, 68, 09, 04, 00, C0, E8, A7...
 
[+]

Entropy:
5.8970

Code size:
1.4 MB (1,503,232 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WyzMeeting UA Launcher

Command:
C:\Program Files\samsung wyzmeeting\wyzuseragent\wyzualauncher.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.