home

leadercommand.exe

LeaderTask

Organizer LeaderTask, LLC

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘LeaderTask Company Management’.
Publisher:
Almeza Company  (signed by Organizer LeaderTask, LLC)

Product:
LeaderTask

Version:
7, 7, 3, 0

MD5:
d37feaa26d82dc7b70dd50fe0d9cd997

SHA-1:
f7fd6c571c10d837854dc20281f156c536e95d83

SHA-256:
853bc652b9048309b8003570e022eeef54c4abcf5e36e48cef4304942d46d6ac

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/27/2024 12:52:27 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
c:\users\test\appdata\local\temp\f7fdd7bb751c5d9a89a48ccdbbd4515bfacbd8c6 c:\users\test\appdata\loca
9.0.1.05190

File size:
4.4 MB (4,588,168 bytes)

Product version:
7, 7, 3, 0

Copyright:
Copyright (C) 2005-2010 Almeza Company

Trademarks:
Almeza, LeaderTask

Original file name:
LeaderTask.exe

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Organizer LeaderTask, LLC

Authority:
COMODO CA Limited

Valid from:
2/7/2013 6:00:00 AM

Valid to:
2/8/2014 5:59:59 AM

Subject:
CN="Organizer LeaderTask, LLC", O="Organizer LeaderTask, LLC", STREET=11 Cosmonauts st., L=Yaroslavl, S=Yaroslavl region, PostalCode=150062, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
4204804AAE20B5B0CB7EC608280E4191

File PE Metadata
Compilation timestamp:
11/22/2013 8:44:21 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:kttGKcE+5h7baszL4DXklacbf/p/6VGM/:4EDXhTzL4DU996VGM/

Entry address:
0x1000

Entry point:
68, 01, 70, F8, 00, E8, 01, 00, 00, 00, C3, C3, AC, DC, F2, 2E, DB, 50, F7, FC, 6E, 47, 1E, A4, 04, CC, 35, A0, AA, 1F, 59, F4, D5, 1B, 4D, 05, 13, 6C, FB, 09, 78, 12, BF, 35, 76, 48, 50, 48, 24, 44, 6E, ED, AB, 6C, 65, 36, A5, CF, FA, 5D, 78, 25, 3B, 6A, 19, 2D, 7A, 65, B8, BC, BB, 34, 54, E8, CC, 7A, F0, 84, 89, D8, 4D, BE, DA, 98, C9, 3C, 66, F8, 04, 33, 83, 41, F0, F3, E4, 7F, 4F, D1, 28, 64, 89, 51, 1A, 40, 95, 8A, 98, A2, C5, F2, A7, A2, 0E, 6B, C0, 2D, 2E, 92, 6D, 0C, 73, 9E, 77, 5D, BE, FC, 4D, D7...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
7.1 MB (7,417,856 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
LeaderTask Company Management

Command:
"C:\users\{user}\documents\leadercommand\leadercommand.exe" \minimize


Scan leadercommand.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.