Bluebeam Admin User.exe

Bluebeam PDF Revu

Bluebeam Software, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘BbInstallUser’.
Publisher:
Bluebeam Software, Inc.  (signed and verified)

Product:
Bluebeam PDF Revu

Description:
Bluebeam Administrator User

Version:
1.0.3036.23343

MD5:
7ee7d1c9e399b2cc6d7ebc983fa7eac8

SHA-1:
d3711aa9a5873fd61e0be83dc015cd3f96ca6966

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 2:25:19 AM UTC  (today)

File size:
48.7 KB (49,824 bytes)

Product version:
1.0.3036.23343

Copyright:
2003 - 2008

Trademarks:
Bluebeam

Original file name:
Bluebeam Admin User.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\bluebeam software\pushbutton pdf\bluebeam admin user.exe

Digital Signature
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/16/2008 6:00:00 PM

Valid to:
3/17/2009 5:59:59 PM

Subject:
CN="Bluebeam Software, Inc.", OU=SECURE APPLICATION DEVELOPMENT, O="Bluebeam Software, Inc.", L=Pasadena, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
2FF143C60B5B882D0E30B1FA5ED5BAEE

File PE Metadata
Compilation timestamp:
4/24/2008 3:07:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:BRMoE5WReyzlxmMo12nyd8zNtSIUOkXZ9tUp+bYm4QFoUR/HVij3dWH88Cp8aYJo:BRj55q2S8Td+J9tw+bYm4a71ijsJTLJm

Entry address:
0x32AA

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.3058

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
8 KB (8,192 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
BbInstallUser

Command:
C:\Program Files\bluebeam software\pushbutton pdf\bluebeam admin user.exe


Scan Bluebeam Admin User.exe - Powered by Reason Core Security