home

emc.exe

ExpandIT Mobile Client

ExpandIT Development Aps

Publisher:
ExpandIT  (signed by ExpandIT Development Aps)

Product:
ExpandIT Mobile Client

Version:
2.15.0328

MD5:
72b4b3713991746fde8ddc92e37a1299

SHA-1:
39f71026c11901a653d3c91e7030b98f8dd3d89a

SHA-256:
4fa4b5b0badd1056479c2a90c69f959524566765c8d2bdd9578223f6c2a55a48

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:19:22 PM UTC  (a few moments ago)

File size:
1.9 MB (1,974,944 bytes)

Product version:
2.15.0328

Copyright:
Copyright ©2008 All rights reserved

Trademarks:
ExpandIT BAS® is a registered trademark

Original file name:
emc.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\Program Files\expandit\emc\emc.exe

Digital Signature
Signed by:
ExpandIT Development Aps

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
10/1/2009 2:00:00 AM

Valid to:
10/31/2011 12:59:59 AM

Subject:
CN=ExpandIT Development Aps, OU=SECURE APPLICATION DEVELOPMENT, O=ExpandIT Development Aps, L=Hoersholm, S=Copenhagen, C=DK

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
7BAF3981486453F2EF61D45247934389

File PE Metadata
Compilation timestamp:
9/10/2010 3:17:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:j2j9b2bgfnYUDEgdNHq+FgTIwxHBiaG57+qeRDBxAI/ef3CevI8Q:slECHq+FgTIwxHBiaG57+qexBxAIKCwO

Entry address:
0xD1F8

Entry point:
68, 40, D8, 40, 00, E8, F0, FF, FF, FF, 00, 00, 50, 00, 00, 00, 30, 00, 00, 00, 48, 00, 00, 00, 00, 00, 00, 00, 3F, 1E, A8, 73, E1, 52, 7E, 47, A1, F6, 1C, 3D, BB, 58, 8C, 63, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 2D, 2D, 2D, 2D, 2D, 2D, 4D, 6F, 62, 69, 6C, 65, 43, 6C, 69, 65, 6E, 74, 5F, 57, 69, 6E, 33, 32, 00, 2D, 2D, 2D, 2D, 2D, 00, 2D, 2D, 2D, 2D, 2D, 2D, 2D, C8, 00, 00, 00, 98, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 19, 00, 00, 00, 84, 59, 46, 0D, 7D, 85, CC, 44, 8F, B0, CF, 4A, 23, 3A, 55, 6B...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
1.8 MB (1,855,488 bytes)

Scan emc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.