home

gerenciadorlocal.exe

Gerenciador Local

Positivo Informatica SA

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Deskmedia’.
Publisher:
Positivo Informática  (signed by Positivo Informatica SA)

Product:
Gerenciador Local

Version:
1.0.0.80

MD5:
4dd1e0767a996ac000f67fadddee798f

SHA-1:
c4c1a687d53c1853ea99a97f083a0b0620972cb3

SHA-256:
ffc4039645758e2923273ad60184ef06ccf604cea1adf4de638b693d4ef1366c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 8:24:19 PM UTC  (today)

File size:
1.3 MB (1,353,872 bytes)

Product version:
1.0.0.80

Copyright:
Copyright (C) 2014

Original file name:
Gerencia.exe

File type:
Executable application (Win64 EXE)

Language:
Brazilian Portuguese

Digital Signature
Signed by:
Positivo Informatica SA

Authority:
GlobalSign nv-sa

Valid from:
1/5/2017 10:58:21 AM

Valid to:
11/18/2017 5:00:57 PM

Subject:
CN=Positivo Informatica SA, O=Positivo Informatica SA, STREET="Rua Joao Bettega, 5200 Cidade Industrial de Curitiba", L=Curitiba, S=PR, C=BR, OID.1.3.6.1.4.1.311.60.2.1.3=BR, SERIALNUMBER=81.243.735/000148, OID.2.5.4.15=Private Organization

Issuer:
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3, O=GlobalSign nv-sa, C=BE

Serial number:
401FCA475337FF32046B14A5

File PE Metadata
Compilation timestamp:
1/11/2017 6:31:03 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0xF4E44

Entry point:
48, 83, EC, 28, E8, 67, 04, 00, 00, 48, 83, C4, 28, E9, 9E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, B9, 71, 04, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, D9, 04, 00, 00, CC, FF, 25, 1A, EA, 00, 00, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 8B, F2, 48, 8B, D9, F6, C2, 02, 74, 2A, 44, 8B, 41, F8, 4C, 8D, 0D, 14, 06, 00, 00, BA, 18, 00, 00, 00, E8, 56, 01...
 
[+]

Code size:
1 MB (1,053,184 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Deskmedia

Command:
"C:\positivo\deskmedia\gerenciadorlocal.exe"


Scan gerenciadorlocal.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.