home

mcmanager.exe

Mirth Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Mirth Connect Server Manager’.
Publisher:
Mirth Corporation  (signed and verified)

MD5:
386dd237d0e2c4b1396b1caf1f7b7e22

SHA-1:
a52b1614a10b3e7b0432a5825504bcf947b46c32

SHA-256:
43d815f17cd241bfd96ff1600dda85f171e08648fe6e4dded0f15e406c2f9f92

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 3:28:06 AM UTC  (today)

File size:
297.6 KB (304,776 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\mirth connect\mcmanager.exe

Digital Signature
Signed by:
Mirth Corporation

Authority:
DigiCert Inc

Valid from:
2/27/2013 4:00:00 AM

Valid to:
3/3/2016 4:00:00 PM

Subject:
CN=Mirth Corporation, O=Mirth Corporation, L=Costa Mesa, S=California, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0A91ADB71F7CE8543BCBB5D43C902E8A

File PE Metadata
Compilation timestamp:
9/24/2014 12:15:09 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:yLBunHbFXO6AOitdNu/S51MOY+zAwFiKQaM:yLB0FF6dc/S5yOY+zbFEa

Entry address:
0x11AFE

Entry point:
E8, 21, AC, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 33, C9, 3B, 04, CD, 38, CC, 42, 00, 74, 13, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0E, 6A, 0D, 58, 5D, C3, 8B, 04, CD, 3C, CC, 42, 00, 5D, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, 5D, C3, E8, EA, 07, 00, 00, 85, C0, 75, 06, B8, A0, CD, 42, 00, C3, 83, C0, 08, C3, E8, D7, 07, 00, 00, 85, C0, 75, 06, B8, A4, CD, 42, 00, C3, 83, C0, 0C, C3, 8B, FF, 55, 8B, EC, 56, E8, E2, FF, FF, FF, 8B, 4D, 08...
 
[+]

Entropy:
5.8601

Code size:
142.5 KB (145,920 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Mirth Connect Server Manager

Command:
"C:\Program Files\mirth connect\mcmanager.exe"


Scan mcmanager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.