home

IMC.EXE

Inbit Messenger

Inbit Inc

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘InbitIMC’.
Publisher:
Inbit Inc.  (signed by Inbit Inc)

Product:
Inbit Messenger

Version:
4, 4, 0, 0

MD5:
ce4f8d3a4e05d524ca49371c74715eee

SHA-1:
3568af1ba20209a07a788d8fe91cc1df1f6d8664

SHA-256:
2aacafe72bedae955b60eae4d25d08e2f252e3a3807c6bda2961b5500e41f97c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:57:33 AM UTC  (today)

File size:
3.2 MB (3,350,840 bytes)

Product version:
4, 4, 0, 0

Copyright:
© 2004-2009 Inbit Inc.

Trademarks:
Inbit is a registered trademark of Inbit Inc.

Original file name:
IMC.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\inbit\inbit messenger\imc.exe

Digital Signature
Signed by:
Inbit Inc

Authority:
The USERTRUST Network

Valid from:
1/26/2009 4:30:00 AM

Valid to:
11/20/2010 4:29:59 AM

Subject:
CN=Inbit Inc, O=Inbit Inc, STREET=1340 S. De Anza Blvd Ste 202, L=San Jose, S=CA, PostalCode=95129, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
71027C93C4A4713C94BE3A28C4D1C9B1

File PE Metadata
Compilation timestamp:
12/6/2009 10:49:10 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:eogWtIS+OrWLj0XA21Ho3Systl5vieICLmJhYDCtr:eUISHWLj0XV1HobsjZBIrXY+tr

Entry address:
0xF2102

Entry point:
E8, 13, 74, 00, 00, E9, 17, FE, FF, FF, 8B, 44, 24, 04, 85, C0, 56, 8B, F1, C6, 46, 0C, 00, 75, 63, E8, 1F, 70, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, 90, B7, 6F, 00, 74, 12, 8B, 0D, AC, B6, 6F, 00, 85, 48, 70, 75, 07, E8, D7, 7D, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, B0, B5, 6F, 00, 74, 16, 8B, 46, 08, 8B, 0D, AC, B6, 6F, 00, 85, 48, 70, 75, 08, E8, 54, 76, 00, 00, 89, 46, 04, 8B, 46, 08, F6, 40, 70, 02, 75, 14, 83, 48, 70, 02, C6, 46, 0C, 01, EB, 0A, 8B, 08, 89, 0E...
 
[+]

Entropy:
6.4450

Code size:
2.4 MB (2,474,496 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
InbitIMC

Command:
"C:\Program Files\inbit\inbit messenger\imc.exe"


Scan IMC.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.