home

imgrdwnld.exe

Image Plugin

Snap-on Business Solutions Inc.

The program is a setup application that uses the InstallShield Setup installer. This is installed with multiple programs including Opel Vauxhall EPC and GM Global Local Database. The file has been seen being downloaded from 82.141.142.4 and multiple other hosts.
Publisher:
Snap-on Business Solutions   (signed by Snap-on Business Solutions Inc.)

Product:
Image Plugin

Description:
Setup Launcher

Version:
3.05.0001

MD5:
8791b3d0400ecc9aecf6bc64a86d0b16

SHA-1:
24187d620b2067ed41aa596eda02a59ffa109fba

SHA-256:
fd5eb390653b2b30f7386faf35c760c4e3f26501d84074bfd19c04aa30812740

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/6/2026 5:39:47 PM UTC  (today)

File size:
6.3 MB (6,649,496 bytes)

Product version:
3.05.0001

Copyright:
Copyright (C) 2006 Macrovision Corporation

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Common path:
C:\Program Files\snap-on business solutions\global epc\gm\tomcat\webapps\pqmace\web-inf\classes\downloads\imgrdwnld.exe

Digital Signature
Signed by:
Snap-on Business Solutions Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
4/27/2009 6:52:59 PM

Valid to:
5/16/2011 10:47:45 PM

Subject:
CN=Snap-on Business Solutions Inc., OU="Snap-on Business Solutions, Inc.", O=Snap-on Business Solutions Inc., L=Richfield, S=Ohio, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
1111876EDF25F6B3FE672BC4FC511D7A

File PE Metadata
Compilation timestamp:
3/1/2007 12:02:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:+AAkpFZIXBdEFV1MoXNdmJiV2mYqFi8JZy163IJWI/grCPitAJSbv30:+AvIEj1Mo9dpPY+ny1JJ/yCRSD0

Entry address:
0x28171

Entry point:
55, 8B, EC, 6A, FF, 68, A0, 50, 43, 00, 68, 78, B3, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 7C, 41, 43, 00, 33, D2, 8A, D4, 89, 15, 34, 32, 44, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 30, 32, 44, 00, C1, E1, 08, 03, CA, 89, 0D, 2C, 32, 44, 00, C1, E8, 10, A3, 28, 32, 44, 00, 6A, 01, E8, 30, 1F, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 3B, 10, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.9408

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
204 KB (208,896 bytes)

The file imgrdwnld.exe has been discovered within the following programs.

GM Global Infrastructure  by Snap-on Business Solutions
www.snaponbusinesssolutions.com
About 1% of users remove it
GM Global Local Database  by Snap-on Business Solutions
About 2% of users remove it
Image Plugin  by Snap-on Business Solutions
Publisher's description - “Snap-on Business Solutions has designed and published electronic parts catalogs (EPCs) for top brands in a variety of industries for over twenty years.”
www.snaponbusinesssolutions.com/support
About 6% of users remove it
Opel Vauxhall EPC  by Snap-on Business Solutions
About 1% of users remove it
 
Powered by Should I Remove It?

The file imgrdwnld.exe has been seen being distributed by the following 8 URLs.

http://82.141.142.4:351/PQMace/.../imgrdwnld.exe

http://85.90.166.20:351/PQMace/.../imgrdwnld.exe

http://localhost:5031/CYWW/.../imgrdwnld.exe

http://joseph-komputer:351/PQMace/.../imgrdwnld.exe

http://epc2011.gma.org.ua/PQMace/.../imgrdwnld.exe

http://sbs.snapon.com/sites/default/files/.../imgrdwnld.exe

http://www.snaponbusinesssolutions.com/sites/default/files/.../imgrdwnld.exe

http://spoepc.xw.gm.com/PQMace/.../imgrdwnld.exe

Scan imgrdwnld.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.