home

gerenciadorlocal.exe

Gerenciador Local

Positivo Informática SA

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Deskmedia’.
Publisher:
Positivo Informática  (signed by Positivo Informática SA)

Product:
Gerenciador Local

Version:
1.0.0.80

MD5:
324ae74e82e3f745cf07a8e9aa563b0a

SHA-1:
07ee1a2c534cc1a57978850d1842b077a18a7388

SHA-256:
5aec23d8d26575c0614161aa0144cc11154f93cc5e0a44c5747614ee112b7e53

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 9:12:03 AM UTC  (today)

File size:
1018.4 KB (1,042,848 bytes)

Product version:
1.0.0.80

Copyright:
Copyright (C) 2014

Original file name:
Gerencia.exe

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

Digital Signature
Signed by:
Positivo Informática SA

Authority:
Symantec Corporation

Valid from:
3/4/2016 9:00:00 PM

Valid to:
4/4/2017 8:59:59 PM

Subject:
CN=Positivo Informática SA, O=Positivo Informática SA, L=Curitiba, S=Paraná, C=BR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
4FE5A3619D0C5175FDAF0C6A254B1BA8

File PE Metadata
Compilation timestamp:
3/9/2016 12:40:57 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0xCA0E0

Entry point:
E8, 44, 05, 00, 00, E9, B3, FD, FF, FF, 3B, 0D, 94, 10, 4F, 00, 75, 02, F3, C3, E9, CB, 05, 00, 00, CC, FF, 25, E0, 65, 4D, 00, 8B, FF, 55, 8B, EC, F6, 45, 08, 02, 57, 8B, F9, 74, 25, 56, 68, FA, A7, 4C, 00, 8D, 77, FC, FF, 36, 6A, 0C, 57, E8, 47, 01, 00, 00, F6, 45, 08, 01, 74, 07, 56, E8, E3, FC, FF, FF, 59, 8B, C6, 5E, EB, 14, E8, C2, 06, 00, 00, F6, 45, 08, 01, 74, 07, 57, E8, CC, FC, FF, FF, 59, 8B, C7, 5F, 5D, C2, 04, 00, FF, 25, 14, 64, 4D, 00, 6A, 14, 68, E0, 41, 4E, 00, E8, 22, 04, 00, 00, FF, 35...
 
[+]

Code size:
852 KB (872,448 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Deskmedia

Command:
"C:\positivo\deskmedia\gerenciadorlocal.exe"


Scan gerenciadorlocal.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.