home

StartupManager.exe

Geek Squad MRI Toolset

Geek Squad, Inc

Publisher:
Geek Squad  (signed by Geek Squad, Inc)

Product:
Geek Squad MRI Toolset

Description:
MRI Startup Manager

Version:
5.10.2.2385

MD5:
7e44856c5177eec4b10549b0158f0824

SHA-1:
6cf1dbe8d653bf84d645ad93c8b18d6193c42b58

SHA-256:
66f752693909331c45d3a0f2ba46aac5c131d9ae1277b6b7b086d7dc59773349

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 7:35:37 PM UTC  (today)

File size:
242.8 KB (248,624 bytes)

Product version:
5.10.2.2385

Copyright:
Confidential Trade Secret of ©2004-2016 Best Buy Enterprise Services, Inc. For internal use only.

Original file name:
StartupManager.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\logmein rescue applet\lmir0001.tmp\toolset\mri\bde\mri\startupmanager.exe

Digital Signature
Signed by:
Geek Squad, Inc

Authority:
Symantec Corporation

Valid from:
10/13/2015 5:00:00 PM

Valid to:
11/12/2018 3:59:59 PM

Subject:
CN="Geek Squad, Inc", O="Geek Squad, Inc", L=Richfield, S=Minnesota, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3B77D05F156C7C1C3F21AC8913ECD579

File PE Metadata
Compilation timestamp:
4/29/2016 1:35:14 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:6Z18LcgklQbcj82htstUcXvhE5a/SZw1Fn4:c1KcdQbGX7ARXT34

Entry address:
0x1000

Entry point:
B8, FC, 24, 4D, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 19, B6, 1B, 63, 36, 8F, E2, 26, D8, 56, 53, 52, 9E, 22, 13, 39, C8, AC, BA, F7, 30, 07, 9A, 69, AA, D3, 88, 11, 2B, 7F, 03, E6, 56, B5, 65, CB, F4, C0, BD, 75, 0B, 28, 5B, DB, 7A, 1F, 66, A8, 9C, 6E, 60, 3E, DD, 38, 93, CA, 94, 5E, 5F, 7C, 4A, 5B, 61, B2, C6, F3, 8A, BE, 6C, 35, 16, 42, A3, 33, E0, 16, B4, FE, F1, 46, 03, 71, BD, F3, 1A, EA, 4A, 5E, 80, 6D, AF, 62, F7...
 
[+]

Entropy:
7.7481

Packer / compiler:
PECompact v2

Code size:
397.5 KB (407,040 bytes)

Scan StartupManager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.