home

imgr.exe

iMacros

Star Finanz - Software Entwicklung und Vertriebs GmbH

Publisher:
iOpus Software GmbH  (signed by Star Finanz - Software Entwicklung und Vertriebs GmbH)

Product:
iMacros

Version:
6.50.0013

MD5:
ee3f4a0a8d9b24e1ff88fa129498505f

SHA-1:
6819a722843b510d3714030f7d99372bc5491105

SHA-256:
46c57aac537862a30739eefd3c46e2678be6f025567bf9a9c1e8af7ad816e4fc

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 8:51:26 AM UTC  (today)

Scan engine
Detection
Engine version

Sophos
Virus 'Mal/VBCheMan-C'
5.23

File size:
301.2 KB (308,432 bytes)

Product version:
6.50.0013

Copyright:
iOpus Software GmbH

Original file name:
imgr.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\starmoney 8.0 s-edition\app\imgr.exe

Digital Signature
Signed by:
Star Finanz - Software Entwicklung und Vertriebs GmbH

Authority:
Thawte, Inc.

Valid from:
7/8/2011 2:00:00 AM

Valid to:
9/29/2013 1:59:59 AM

Subject:
CN=Star Finanz - Software Entwicklung und Vertriebs GmbH, OU=Entwicklung, O=Star Finanz - Software Entwicklung und Vertriebs GmbH, L=Hamburg, S=Hamburg, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
165EFDEB28FAD3FF2EF95A2935D5009A

File PE Metadata
Compilation timestamp:
4/17/2009 9:22:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:Zi7/xIEz+eATW/gRA3pmmceMKLTxwmLntEzgmu9ZHR1nXTX:YkupmmcpKLNwgtEzyZHTj

Entry address:
0x3988

Entry point:
68, 14, 3D, 40, 00, E8, F0, FF, FF, FF, 00, 00, 40, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, 84, 48, 1C, 06, DD, 9D, F7, 41, A2, B9, 15, 23, 90, 69, 02, 77, 00, 00, 00, 00, 00, 00, 09, 00, 01, 00, 20, 20, 54, 61, 62, 49, 69, 6D, 67, 72, 00, 20, 20, 20, 00, 20, 20, 20, 3D, 20, 20, 20, 00, 00, 00, 00, 88, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 0D, 00, 00, 00, 06, E7, C9, 23, E1, FF, 27, 46, B8, 66, E5, 00, D5, 56, 67, E6, 02, 00, 00, 00, 90, 00, 00, 00, B0, 00, 00, 00, 02, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
268 KB (274,432 bytes)

Automation Object
CLSID:
{23C9E706-FFE1-4627-B866-E500D55667E6}

CLSID name:
imgr.cHook


Scan imgr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.