gmx_mediacenter.exe

GMX Application {sync-000021}

1&1 Mail & Media GmbH

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘GMX Application {sync-000021}’.
Scan gmx_mediacenter.exe - Powered by Reason Core Security
Publisher:
1&1 Mail & Media GmbH

Product:
GMX Application {sync-000021}

Description:
GMX MediaCenter

Version:
1.7.3289.0

MD5:
ae2dfb3ff6edb9df087391923583cea9

SHA-1:
61c66d5888260f6a6e18028bfaff1139ef9125ab

SHA-256:
b062dc96b7c4bd18603af3a09062cf46d4fb35c5a0d7ea4bcb132e9342f38734

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/6/2016 9:01:39 PM UTC  (today)

File size:
773.5 KB (792,064 bytes)

Product version:
1.7.3289.0

Copyright:
Copyright © 1&1 Mail & Media GmbH 2013

Original file name:
gmx_mediacenter.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\gmx application {sync-000021}\gmx_mediacenter.exe

File PE Metadata
Compilation timestamp:
6/4/2014 6:14:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:mnaIBnmjgmaN2iZdWvWWNWWWWWAGzlVrataN2iZdWvWWNWWWWWAGp:IjTaAjp

Entry address:
0x74DAE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, B0, 00, 00, 80, 10, 00, 00, 00, C8, 00, 00, 80, 18, 00, 00, 00, E0, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
459.5 KB (470,528 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
GMX Application {sync-000021}

Command:
"C:\users\{user}\appdata\local\gmx application {sync-000021}\gmx_mediacenter.exe" \autostart


Scan gmx_mediacenter.exe - Powered by Reason Core Security