home

diagnostic.exe

IL Diagnostic

Image Line

Publisher:
Image-Line bvba  (signed by Image Line)

Product:
IL Diagnostic

Version:
1.3.6.1

MD5:
f23b6d269fd727b549e9ea92720abfb6

SHA-1:
b13e35e0b881a6f090ff7ced21ded1c0004459ab

SHA-256:
fe392a2f1b19a29f87add1adeecda6d75474a99546b3611ecd2acb0fbe2e6d07

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 10:31:28 PM UTC  (today)

File size:
3.1 MB (3,268,488 bytes)

Product version:
1.3

Copyright:
Copyright (c) 2003-2015 Image-Line. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\diagnostic.exe

Digital Signature
Signed by:
Image Line

Authority:
Symantec Corporation

Valid from:
4/20/2015 8:00:00 PM

Valid to:
6/19/2017 7:59:59 PM

Subject:
CN=Image Line, OU=Music Software, O=Image Line, L=Gent, S=ovl, C=BE

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
675CD761D5E622BE396492313ABC0E9A

File PE Metadata
Compilation timestamp:
5/27/2015 11:38:24 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:vNseqMxGSnHgc7VjuXgWmjWSkHTj5f13g9Wnr4Rx:vdLAOyXgzjWOwrc

Entry address:
0x2AAC64

Entry point:
55, 8B, EC, 83, C4, E0, 53, 56, 57, 33, C0, 89, 45, E0, 89, 45, E4, 89, 45, EC, 89, 45, E8, B8, AC, D8, 69, 00, E8, 53, 37, D6, FF, 33, C0, 55, 68, 5B, AE, 6A, 00, 64, FF, 30, 64, 89, 20, A1, 78, 46, 6B, 00, 8B, 00, E8, 29, 39, F5, FF, 68, F4, E1, 6C, 00, 68, FF, 03, 00, 00, E8, 12, 76, D6, FF, 8D, 45, EC, BA, F4, E1, 6C, 00, B9, 00, 02, 00, 00, E8, C8, F5, D5, FF, FF, 75, EC, 68, 78, AE, 6A, 00, B8, F3, 05, 00, 00, E8, 62, BF, D5, FF, 99, 52, 50, E8, EA, 66, F6, FF, 33, D2, 03, 04, 24, 13, 54, 24, 04, 83...
 
[+]

Entropy:
6.6797

Developed / compiled with:
Microsoft Visual C++

Code size:
2.7 MB (2,790,400 bytes)

The file diagnostic.exe has been seen being distributed by the following 2 URLs.

http://downloads.image-line.com/.../diagnostic.exe

http://www.flstudio.com/diagnostic

Scan diagnostic.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.