home

ExpandITClientManager.exe

ExpandIT Client Manager

ExpandIT Development Aps

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ExpandIT Client Manager - Desktop Client’.
Publisher:
ExpandIT Development Aps  (signed and verified)

Product:
ExpandIT Client Manager

Version:
6.0.0.76

MD5:
a84fe5614f8699b5f7b93524382fc7c8

SHA-1:
880b0106ec39bdc92da727839227e12831441743

SHA-256:
5d3352d3d5b50c6b2c28445e3d5beda2e758bac047d0f05c3dd2a52dba9fffbc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/13/2025 1:17:45 PM UTC  (today)

File size:
507.3 KB (519,440 bytes)

Product version:
6.0.0.76

Copyright:
Copyright © ExpandIT Development 2016

Original file name:
ExpandITClientManager.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\expandit\client manager - desktop client\expanditclientmanager.exe

Digital Signature
Signed by:
ExpandIT Development Aps

Authority:
thawte, Inc.

Valid from:
9/26/2015 7:00:00 PM

Valid to:
11/3/2017 6:59:59 PM

Subject:
CN=ExpandIT Development Aps, OU=SECURE APPLICATION DEVELOPMENT, O=ExpandIT Development Aps, L=Hoersholm, S=Copenhagen, C=DK

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
0EE304A4124CEB645636C5B866F95559

File PE Metadata
Compilation timestamp:
1/19/2016 8:33:30 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:lkDWBWEs7nR3VxU/LrQwusq2cuvQohrb+FrQwusq2cuz:IWBYRnJwuFYvQoTwuFYz

Entry address:
0x662BE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.1388

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
401 KB (410,624 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ExpandIT Client Manager - Desktop Client

Command:
"C:\Program Files\expandit\client manager - desktop client\expanditclientmanager.exe"


Scan ExpandITClientManager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.