home

LaunchRemoteSupport.exe

RemoteSupportWrapper

John Shaw

Publisher:
Computer Guy IT Solutions  (signed by John Shaw)

Product:
RemoteSupportWrapper

Version:
1.00

MD5:
1a1670b8273a339eca4d295cbce4c181

SHA-1:
6bde6ada54afc4b6512b2283da573cf27d4cfa33

SHA-256:
6a863f2e20c6866f7b8cdeb7775267ed175e8a5c85a98f530bd1fdc3f8fe8df8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 6:30:52 AM UTC  (today)

File size:
230.9 KB (236,432 bytes)

Product version:
1.00

Original file name:
LaunchRemoteSupport.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\old files\remotesupport\launchremotesupport.exe

Digital Signature
Signed by:
John Shaw

Authority:
StartCom Ltd.

Valid from:
2/16/2012 12:30:13 PM

Valid to:
2/17/2014 9:18:06 AM

Subject:
E=nick@obxcompguy.com, CN=John Shaw, L=Manteo NC, S=North Carolina, C=US, Description=Q060IjEkExVuy25F

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0545

File PE Metadata
Compilation timestamp:
2/6/2012 2:58:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:pX9Y26LLaLdfY/vu+ezxkM/nZyPfWLSoXAzRbrcg3IueD:huauOJFkKnZyWLJXAzRb3YrD

Entry address:
0x3908

Entry point:
68, 90, 3B, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 48, 00, 00, 00, 00, 00, 00, 00, 91, D2, C7, 8F, 81, 89, 0B, 44, BB, 5C, E3, 36, 4C, 2E, DE, 26, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 20, 63, 6C, 73, 4F, 70, 52, 65, 6D, 6F, 74, 65, 53, 75, 70, 70, 6F, 72, 74, 57, 72, 61, 70, 70, 65, 72, 00, 6E, 20, 66, 00, 00, 00, 00, 01, 00, 0A, 00, 14, 51, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, 48, 53, 40, 00, 24, 51, 43, 00, 00, 00, 00, 00, 38, 8F, 7D, 03...
 
[+]

Entropy:
5.6101

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
208 KB (212,992 bytes)

Scan LaunchRemoteSupport.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.