home

LManager.exe

Launch Manager

Dritek System Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘LManager’.
Publisher:
Dritek System Inc.  (signed and verified)

Product:
Launch Manager

Version:
5.1.15.2881

MD5:
e43dd1b5a0be97df510d9f08cd789518

SHA-1:
7506fa2459cc325a9bd8c6fbcb3af519404da9ec

SHA-256:
d777bdf80e484298c1055e380631dcf859a8c40929a3ee53906bf90152ff2ea0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:53:03 PM UTC  (today)

File size:
1.1 MB (1,105,488 bytes)

Product version:
5.1.15.2881

Copyright:
(C) 2001-2012 Dritek System Inc.

Original file name:
LManager.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\launch manager\lmanager.exe

Digital Signature
Signed by:
Dritek System Inc.

Authority:
VeriSign, Inc.

Valid from:
10/1/2009 5:00:00 AM

Valid to:
10/16/2012 4:59:59 AM

Subject:
CN=Dritek System Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Dritek System Inc., L=Taipei City, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5841072795E9EF2A6EFCE6684F810592

File PE Metadata
Compilation timestamp:
3/23/2012 2:32:02 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:wqobIWxeuloXjUTLAMruKv9dHAV4JR0fHv:wqUgjUT0MrusdgGJR0fHv

Entry address:
0x59194

Entry point:
E8, 51, BB, 00, 00, E9, 79, FE, FF, FF, 6A, 0C, 68, 30, 48, 49, 00, E8, 1A, 6F, 00, 00, 33, FF, 89, 7D, E4, 33, C0, 8B, 75, 08, 3B, F7, 0F, 95, C0, 3B, C7, 75, 20, E8, 82, 2A, 00, 00, C7, 00, 16, 00, 00, 00, 57, 57, 57, 57, 57, E8, 53, F2, FF, FF, 83, C4, 14, 83, C8, FF, E9, B4, 00, 00, 00, 56, E8, 4D, 1C, 00, 00, 59, 89, 7D, FC, F6, 46, 0C, 40, 75, 77, 56, E8, 9E, 38, 00, 00, 59, 83, F8, FF, 74, 1B, 83, F8, FE, 74, 16, 8B, D0, C1, FA, 05, 8B, C8, 83, E1, 1F, C1, E1, 06, 03, 0C, 95, C0, 4D, 4A, 00, EB, 05...
 
[+]

Entropy:
6.6157

Code size:
490 KB (501,760 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
LManager

Command:
C:\Program Files\launch manager\lmanager.exe


Scan LManager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.