home

shutdown.exe

Pimp my Desktop

Mobile Concepts GmbH

This is installed with Pimp my Desktop.
Publisher:
Mobile Concepts GmbH  (signed and verified)

Product:
Pimp my Desktop

Description:
QuickLaunch Shutdown

Version:
1.0.0.43

MD5:
34b3405b3dc586ceb55750609a1b1656

SHA-1:
5e229a6d13c3c27c8cbd7c7041b1e226e157bb04

SHA-256:
1d4257aef972307470cf11dd85cdd7aa157caaa7b8d07a95d1b2452048390da8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 1:22:00 AM UTC  (today)

File size:
863.6 KB (884,352 bytes)

Product version:
1.0.0.0

Copyright:
(c) 2011 mobile concepts GmbH

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\pimp my desktop\shutdown.exe

Digital Signature
Signed by:
Mobile Concepts GmbH

Authority:
Thawte, Inc.

Valid from:
7/19/2011 6:00:00 PM

Valid to:
7/18/2012 5:59:59 PM

Subject:
CN=Mobile Concepts GmbH, O=Mobile Concepts GmbH, L=Übach-Palenberg, S=North Rhine-Westphalia, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0AA277A9D02FFF6ABF272D9E11EB83A0

File PE Metadata
Compilation timestamp:
9/1/2011 4:31:51 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:hkVJE1ItlNgmjdhl69IQU1yCwr062YGbQNmoh2YGbQNmoW888888888888W8888b:QJE1ItlNhX7yabQNmxbQNm8v

Entry address:
0x4AAC4

Entry point:
55, 8B, EC, 83, C4, F0, B8, 18, 57, 44, 00, E8, 38, F0, FB, FF, 33, C0, E8, 71, AB, FF, FF, E8, 8C, B1, FB, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.2866

Developed / compiled with:
Microsoft Visual C++

Code size:
294 KB (301,056 bytes)

The file shutdown.exe has been discovered within the following program.

Pimp my Desktop  by mobile concepts GmbH
About 1% of users remove it
 
Powered by Should I Remove It?

Scan shutdown.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.