home

EMCUtil.exe

EMC Utility

ExpandIT Development Aps

Publisher:
ExpandIT  (signed by ExpandIT Development Aps)

Product:
EMC Utility

Version:
1.00.0031

MD5:
23a24ee83b98d44e2f6b2dc22b97481d

SHA-1:
9125d1e219ff704841eac551e0f753660070d2cc

SHA-256:
598653ce783f7e0598f3d61e7546147a52bbc5d00ac88adac67f7598eb43d748

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:29:00 AM UTC  (today)

File size:
124.7 KB (127,648 bytes)

Product version:
1.00.0031

Copyright:
Copyright (c) 2008. All rights reserved

Original file name:
EMCUtil.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\Program Files\expandit\emc\emcutil.exe

Digital Signature
Signed by:
ExpandIT Development Aps

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
10/1/2009 2:00:00 AM

Valid to:
10/31/2011 12:59:59 AM

Subject:
CN=ExpandIT Development Aps, OU=SECURE APPLICATION DEVELOPMENT, O=ExpandIT Development Aps, L=Hoersholm, S=Copenhagen, C=DK

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
7BAF3981486453F2EF61D45247934389

File PE Metadata
Compilation timestamp:
9/10/2010 3:17:33 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:dUZfeXDz2D7yKWm+nUwtNCwv6CZqXwN1P+haEA:dGeTz2Dnk3tNCbCjNFL

Entry address:
0x1DE0

Entry point:
68, A0, 2B, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, 1B, 1A, 46, 97, BD, 9A, 0F, 4C, 8C, 54, 78, E9, 8A, F0, 24, BA, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 49, 00, 06, 50, 83, 01, 45, 4D, 43, 55, 74, 69, 6C, 00, 00, 00, 00, 00, FF, CC, 31, 00, 2A, FF, 79, D1, 81, BB, 01, D1, 4E, 9A, A4, F5, 16, 18, 8F, 49, 62, D2, D1, 9F, 65, 04, 3E, 34, 48, 8D, 50, BD, 5A, 51, BE, 8C, B9, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00, AA, 00, 60, D3, 93, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
108 KB (110,592 bytes)

Scan EMCUtil.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.