» imindmap_elevatedfileutility.exe
Overview
Analysis
File Details

imindmap_elevatedfileutility.exe

iMindMap Launcher Updater

ThinkBuzan Ltd

File name:

Publisher:

ThinkBuzan Ltd (signed and verified)

Product:

iMindMap Launcher Updater

Version:

1.0.0.0

MD5:

19c0c6eb0bfd0cffdf7259e1e66f331f

SHA-1:

5eda3839a4cb1a4074b67206fc3696c17019af28

SHA-256:

dd2450ba212101f5bf8c381734969a8f54105aaef83028802b2bb748af7ce3b4

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/27/2024 7:36:21 PM UTC (today)

File size:

3.4 MB (3,568,256 bytes)

Product version:

1.0.0.0

Original file name:

iMindMap_Launcher_Updater.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\ProgramData\thinkbuzan\imindmap_cache7\interop\imindmap_elevatedfileutility.exe

Digital Signature

Signed by:

ThinkBuzan Ltd

Authority:

VeriSign, Inc.

Valid from:

2/16/2011 12:00:00 AM

Valid to:

2/19/2012 11:59:59 PM

Subject:

CN=ThinkBuzan Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ThinkBuzan Ltd, L=Cardiff, S=South Glamorgan, C=GB

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

7DD90B0599A854BBD0E812C2BDD03F51

File PE Metadata

Compilation timestamp:

6/6/2011 6:02:26 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

8.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

6144:kA9nfsYTToJJgoi+J7iaaDHnRuNC5E1fTfQjYmawWmdWzVKyE4:Nc5jadBjY8Ak4

Entry address:

0x24370

Entry point:

FF, 25, 60, 43, 42, 00, 00, 00, 5F, 43, 6F, 72, 45, 78, 65, 4D, 61, 69, 6E, 00, 6D, 73, 63, 6F, 72, 65, 65, 2E, 64, 6C, 6C, 00, D4, 03, 00, 00, 7B, 7A, 7D, 02, D6, A1, 79, 51, FB, FE, F3, 28, 2E, BF, DF, C7, 47, 1D, 01, 61, 39, 41, 99, AD, 91, 81, D8, 31, 27, EE, 9F, B5, 47, 67, 80, 1F, 18, 37, 06, 1F, D6, 98, F0, C2, 7E, 3F, 45, 2F, 66, 4D, FF, 28, 3B, 64, C3, EF, 15, 77, 3E, 45, BB, 0C, 37, 8B, 25, FB, 9D, 8A, 37, E3, BE, 5F, E8, 96, 34, C6, 93, 12, 65, 11, 12, 37, CF, 5C, 62, ED, D2, 28, 4D, 84, FB, 5C... 
[+]

Entropy:

0.5713

Code size:

200.5 KB (205,312 bytes)

Scan imindmap_elevatedfileutility.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.