» RescueExternalCollab.exe
Overview
Analysis
File Details
Behaviors (1)

RescueExternalCollab.exe

LogMeIn Rescue External Collab 7.9.0.2951

LogMeIn, Inc.

File name:

Publisher:

LogMeIn, Inc. (signed and verified)

Product:

LogMeIn Rescue External Collab 7.9.0.2951

Description:

LogMeIn Rescue External Collab

Version:

7.9.2951

MD5:

8bfc255b7a64bddeac4515ff4612a323

SHA-1:

0b6da267fbfa0fce646c7d193439d14afbe9414d

SHA-256:

06c030d858ccd34da0ef9e3954e391bf01ddccd1d3b4c82b4795a0c788825fcd

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/27/2024 12:43:17 AM UTC (today)

File size:

877.1 KB (898,104 bytes)

Product version:

7.9.2951

Original file name:

RescueExternalCollab.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\rescueexternalcollab.exe

Digital Signature

Signed by:

LogMeIn, Inc.

Authority:

Symantec Corporation

Valid from:

9/8/2015 9:00:00 PM

Valid to:

11/7/2018 9:59:59 PM

Subject:

CN="LogMeIn, Inc.", O="LogMeIn, Inc.", L=Boston, S=Massachusetts, C=US

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

1C683F7B8FFBCDACE1927D588D4906CF

File PE Metadata

Compilation timestamp:

6/30/2016 5:04:40 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

Entry address:

0x4506

Entry point:

E8, C5, 1D, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 83, 25, 6C, 64, 41, 00, 00, 83, EC, 1C, 53, 33, DB, 43, 09, 1D, 08, 50, 41, 00, 6A, 0A, E8, 9A, A6, 00, 00, 85, C0, 0F, 84, 4C, 01, 00, 00, 33, C9, 89, 1D, 6C, 64, 41, 00, 33, C0, 0F, A2, 56, 8B, 35, 08, 50, 41, 00, 57, 8D, 7D, E4, 83, CE, 02, 89, 07, 89, 5F, 04, 89, 4F, 08, 89, 57, 0C, 8B, 45, E4, 8B, 4D, F0, 89, 45, F4, 81, F1, 69, 6E, 65, 49, 8B, 45, EC, 35, 6E, 74, 65, 6C, 89, 35, 08, 50, 41, 00, 0B, C8, 8B, 45, E8, 35, 47, 65, 6E, 75, 0B, C8, F7, D9... 
[+]

Code size:

55 KB (56,320 bytes)

Startup File (User Run Once)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Name:

RescueExternalCollab_E3C9EC08DA4FD5231E37EA17F18C0B94

Command:

C:\users\{user}\downloads\rescueexternalcollab.exe -cleanup

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.