home

emcee.exe

Emcee App Software

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in.
Publisher:
Emcee App Software  (signed and verified)

MD5:
c3156308d6ecdf43cb8575917bd7fbc2

SHA-1:
840047a3caaa164e87098d27252d0ebb308ca23d

SHA-256:
74edc9cadbef2c74c033bd57c4216d9c22591072376261349dfc8ca23289e8a6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 6:00:30 PM UTC  (today)

File size:
495.7 KB (507,616 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\emcee\emcee.exe

Digital Signature
Signed by:
Emcee App Software

Authority:
VeriSign, Inc.

Valid from:
10/15/2014 1:00:00 AM

Valid to:
12/13/2016 11:59:59 PM

Subject:
CN=Emcee App Software, O=Emcee App Software, L=Middleton, S=Wisconsin, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0819CEEA6ED5B06005BA56548FB80A4D

File PE Metadata
Compilation timestamp:
7/21/2015 11:03:14 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:Frnyu/Zd3HqPASJPXFmkO5il58ibTrTEiaK5jM5YAVbu/VEMIMRiZN6:Bn5r3HeJUkOu58URNKhVb4dIlj6

Entry address:
0x2A3F2

Entry point:
FF, 25, 0C, C5, 42, 00, CC, CC, CC, CC, CC, CC, CC, CC, 8D, 4D, EC, E9, A8, A6, FD, FF, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, E4, 33, C8, E8, B6, D7, FF, FF, 8B, 4A, FC, 33, C8, E8, AC, D7, FF, FF, B8, B8, F3, 44, 00, E9, B1, D7, FF, FF, CC, CC, CC, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, E4, 33, C8, E8, 8E, D7, FF, FF, B8, E4, F3, 44, 00, E9, 93, D7, FF, FF, CC, CC, CC, CC, CC, 8B, 4D, F0, E9, 08, B0, FD, FF, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, F8, 33, C8, E8, 66, D7, FF, FF, B8, 78, F4, 44, 00, E9, 6B, D7, FF...
 
[+]

Entropy:
6.5064

Code size:
171 KB (175,104 bytes)

Scheduled Task
Task name:
EmceeX-omolopegold

Trigger:
Logon (Runs on logon)


Scan emcee.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.