» elevated_launcher.exe
Overview
Analysis
File Details

elevated_launcher.exe

InstallAnywhere

RACON Software GmbH

This is a self-extracting archive and installer.

File name:

Publisher:

Flexera Software (signed by RACON Software GmbH)

Product:

InstallAnywhere

Description:

LaunchAnywhere

Version:

11, 0, 0, 0

MD5:

b4e723b28925eddecb39907c79765637

SHA-1:

6aeb919c898b0fead59717feb32dcbb380dcd369

SHA-256:

6ea2d0e948a3396b780087e99197dc9edb4f3c4cfc336b37694f50cbb48953fc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 6:32:49 AM UTC (today)

File size:

126.3 KB (129,360 bytes)

Product version:

11, 0, 0, 0

Original file name:

gui.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\elba5\programm\bin\elevated_launcher.exe

Digital Signature

Signed by:

RACON Software GmbH

Authority:

VeriSign, Inc.

Valid from:

8/4/2011 2:00:00 AM

Valid to:

8/4/2014 1:59:59 AM

Subject:

CN=RACON Software GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=RACON Software GmbH, L=Linz, S=Upper Austria, C=AT

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6C81AA31DAFFFE026598F62FE9008A9B

File PE Metadata

Compilation timestamp:

2/11/2010 12:05:58 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

3072:XyFXgn4KKv4CKyZ+iO5tn7Rd6jiN5d3KADXwBVHe48Q:ixKKcPt2jCKAy8Q

Entry address:

0x15244

Entry point:

B8, EC, 38, 44, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 46, A2, C0, 9D, 3E, DC, 55, 10, 0C, CC, 35, 7E, 10, 90, 6D, 36, 21, 20, B6, 08, 40, 1A, 1A, 25, B4, 12, D6, 96, 0C, 4B, 78, 5C, 52, 2D, 51, 76, C9, B9, 04, 0C, 25, F7, 92, 4A, 24, A1, D6, 2A, 19, 95, 68, AF, 84, 56, D2, D2, 12, 64, 49, A4, 4B, BA, 25, 80, 2F, A1, 97, 47, 00, F8, C8, 6D, 33, 1E, F8, 72, CD, 13, 7A, B6, 11, 40, 15, 40, 4B, 88, 25, 82, 2E, E1, 96, C9, BD... 
[+]

Packer / compiler:

PECompact v2

Code size:

140 KB (143,360 bytes)

Scan elevated_launcher.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.