home

ExpandITClientManager.exe

ExpandIT Client Manager

ExpandIT Development Aps

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ExpandIT Client Manager - Desktop Client’.
Publisher:
ExpandIT Development Aps  (signed and verified)

Product:
ExpandIT Client Manager

Version:
6.0.0.80

MD5:
145bf0a8018d631f6080eb540832d22e

SHA-1:
5565aa9e54dc171e03441c5afe52055e437d28ae

SHA-256:
67050ad571975c02073136ca24cce1f759b928ddf3127228ab38b26664e4e7ae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2025 11:11:08 PM UTC  (a few moments ago)

File size:
508.8 KB (520,976 bytes)

Product version:
6.0.0.80

Copyright:
Copyright © ExpandIT Development 2016

Original file name:
ExpandITClientManager.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\expandit\client manager - desktop client\expanditclientmanager.exe

Digital Signature
Signed by:
ExpandIT Development Aps

Authority:
thawte, Inc.

Valid from:
9/26/2015 5:00:00 PM

Valid to:
11/3/2017 4:59:59 PM

Subject:
CN=ExpandIT Development Aps, OU=SECURE APPLICATION DEVELOPMENT, O=ExpandIT Development Aps, L=Hoersholm, S=Copenhagen, C=DK

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
0EE304A4124CEB645636C5B866F95559

File PE Metadata
Compilation timestamp:
8/4/2016 4:29:38 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:kfQjjxB2tAEs7nR3VxU/LrQwusq2cunNklkObgwPrrQwusq2cu7:zxB2t6RnJwuFYnwowuFY7

Entry address:
0x6692E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.1399

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
402.5 KB (412,160 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ExpandIT Client Manager - Desktop Client

Command:
"C:\Program Files\expandit\client manager - desktop client\expanditclientmanager.exe"


Scan ExpandITClientManager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.