home

findlinks.exe

Sysinternals FindLinks

Microsoft Corporation

Publisher:
Sysinternals  (signed by Microsoft Corporation)

Product:
Sysinternals FindLinks

Description:
FindLinks

Version:
1.00

MD5:
22e730e83572055fe9abea2f32711bf0

SHA-1:
d45e7c89514a495013b16ec1036d51346909de73

SHA-256:
cc2fcfa0e629d8df76377e610a0a973588ad1b087700dfb10f3780926e3da387

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/24/2024 12:32:22 AM UTC  (today)

File size:
100.8 KB (103,216 bytes)

Product version:
1.00

Copyright:
Copyright © 2011 Mark Russinovich

Original file name:
findlinks.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\findlinks.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/19/2010 11:53:10 PM

Valid to:
10/19/2011 11:53:10 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6108775F00000000004A

File PE Metadata
Compilation timestamp:
6/19/2011 8:15:42 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
1536:CmpjIk9ZR6PTm8rAZLabUb68VBXken5KMpGtdaf+4NZ5zR3ei:Bpjj6bmNLu/MpGtdaf+4NZe

Entry address:
0x2B54

Entry point:
E8, E0, 51, 00, 00, E9, A5, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 80, 8A, 41, 00, 89, 0D, 7C, 8A, 41, 00, 89, 15, 78, 8A, 41, 00, 89, 1D, 74, 8A, 41, 00, 89, 35, 70, 8A, 41, 00, 89, 3D, 6C, 8A, 41, 00, 66, 8C, 15, 98, 8A, 41, 00, 66, 8C, 0D, 8C, 8A, 41, 00, 66, 8C, 1D, 68, 8A, 41, 00, 66, 8C, 05, 64, 8A, 41, 00, 66, 8C, 25, 60, 8A, 41, 00, 66, 8C, 2D, 5C, 8A, 41, 00, 9C, 8F, 05, 90, 8A, 41, 00, 8B, 45, 00, A3, 84, 8A, 41, 00, 8B, 45, 04, A3, 88, 8A, 41, 00, 8D, 45, 08, A3, 94, 8A, 41...
 
[+]

Entropy:
6.6156

Code size:
64 KB (65,536 bytes)

The file findlinks.exe has been discovered within the following programs.

NirSoft BlueScreenView  by NirSoft
Publisher's description - “BlueScreenView scans all your minidump files created during 'blue screen of death' crashes, and displays the information about all crashes in one table.”
www.nirsoft.net/utils/blue_screen_view.html
7% remove it
NirSoft ServiWin  by NirSoft
Publisher's description - “ServiWin utility displays the list of installed drivers and services on your system. For some of them, additional useful information is displayed: file description, version, product name, company that created the driver file, and more.”
www.nirsoft.net/utils/serviwin.html
10% remove it
SUPERAntiSpyware  by SUPERAntiSpyware.com
SUPERAntiSpyware is a software application distributed as shareware which can detect and remove spyware, adware, trojan horses, rogue security software, computer worms, rootkits, parasites and other potentially harmful software applications.
www.superantispyware.com/support.html
25% remove it
Sysinternals Software  by Sysinternals - www.sysinternals.com
technet.microsoft.com/en-us/sysinternals/bb545027.aspx
4% remove it
SysInternalsUpdater  by Wieldraaijer
About 1% of users remove it
 
Powered by Should I Remove It?

The file findlinks.exe has been seen being distributed by the following URL.

https://live.sysinternals.com/FindLinks.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.