» cpeventmntrstartup_cd848bb23c5e4591a69084cd6bd5a2ab.exe
Overview
Analysis
File Details

cpeventmntrstartup_cd848bb23c5e4591a69084cd6bd5a2ab.exe

Engage

TelStrat

File name:

Publisher:

TelStrat (signed and verified)

Product:

Engage

Description:

Event Monitor

Version:

7.0.0.38

MD5:

8020cdf55cd575fee2a4cb7387d057d4

SHA-1:

ebf0d2ab0043ad40bc8e05ae0a104382c97e68cd

SHA-256:

6e22d119ef27f55c24419e283a3dce53cc7bfd83928364d203b97e14234ce4e3

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 9:39:55 AM UTC (today)

File size:

108.6 KB (111,200 bytes)

Product version:

2.0.1

Trademarks:

Engage

Original file name:

EventMonitor.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\roaming\microsoft\installer\{edc867e6-74be-4da3-a5cd-78880f162493}\cpeventmntrstartup_cd848bb23c5e4591a69084cd6bd5a2ab.exe

Digital Signature

Signed by:

TelStrat

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

6/25/2008 8:00:00 PM

Valid to:

8/29/2010 7:59:59 PM

Subject:

CN=TelStrat, OU=engage, O=TelStrat, L=Plano, S=Texas, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

1E241459D85C4186DD348D18A0E5B1B6

File PE Metadata

Compilation timestamp:

5/27/2009 11:56:22 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

1536:4d5p0mRsFB2ItwmZpS20GdS2NEp9IlAIe/0oOlKvUY9QOxG+lwxQJyGn:4dchPxEYFlK8Y9QOxG+a4ys

Entry address:

0x1841E

Entry point:

FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

5.2625

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

92 KB (94,208 bytes)

Scan cpeventmntrstartup_cd848bb23c5e4591a69084cd6bd5a2ab.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.