home

egather2.exe

IBM eGatherer

IBM United Kingdom Ltd

Publisher:
IBM Corporation  (signed by IBM United Kingdom Ltd)

Product:
IBM eGatherer

Description:
IBM System Information Gatherer

Version:
2, 37, 0, 0

MD5:
ca9cab2b0dbc5f31b90d709ad3ab6f3f

SHA-1:
437d41cedb1fad0fd08e588687f0c8b419586c8d

SHA-256:
cff7929c4b01df0c3e9309872794d9cad9ec1227f056260a3ecf8d4b335fc921

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/8/2026 12:03:56 PM UTC  (today)

File size:
1.1 MB (1,176,704 bytes)

Product version:
2.37 (Release)

Copyright:
© Copyright 2000-2004

Original file name:
egather2.exe

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
IBM United Kingdom Ltd

Authority:
VeriSign, Inc.

Valid from:
4/1/2004 3:00:00 AM

Valid to:
4/2/2005 2:59:59 AM

Subject:
CN=IBM United Kingdom Ltd, OU=IBM Global Services, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=IBM United Kingdom Ltd, L=Greenock, S=Scotland, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2001 CA, OU=Terms of use at https://www.verisign.com/rpa (c)01, OU=VeriSign Trust Network, O="VeriSign, Inc."

Serial number:
2B53E656B024543BB40ACF82B814ED88

File PE Metadata
Compilation timestamp:
9/22/2004 6:56:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

CTPH (ssdeep):
24576:iyrUiJVxtR122ijjRxe9z49bXBwdnveZdz6iXOsN1E:iyrgjjPem9bXB2v8Q

Entry address:
0x3C889

Entry point:
55, 8B, EC, 6A, FF, 68, 00, 9E, 44, 00, 68, 60, 41, 44, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 10, 53, 56, 57, 89, 65, E8, FF, 15, F8, 91, 44, 00, 33, D2, 8A, D4, 89, 15, 64, 4A, 46, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 60, 4A, 46, 00, C1, E1, 08, 03, CA, 89, 0D, 5C, 4A, 46, 00, C1, E8, 10, A3, 58, 4A, 46, 00, 6A, 00, E8, 52, 57, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, 9A, 00, 00, 00, 59, 83, 65, FC, 00, E8, 0C, 27, 00, 00, FF, 15, F4, 91, 44, 00, A3, 64, 51, 46, 00, E8...
 
[+]

Entropy:
6.4101

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
288 KB (294,912 bytes)

Scan egather2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.