home

teacher.exe

Teacher Application

LanSchool Technologies, llc

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Teacher’.
Publisher:
LanSchool Technologies, llc  (signed and verified)

Product:
Teacher Application

Description:
Teacher Application

Version:
7,6,3,9

MD5:
5d635d0dd9447bdb903c94ed850851bd

SHA-1:
a02b56b0c697281fa252e84fb8b26748a89d73e1

SHA-256:
a8c3823f6d239738ab165d0d5160f859bd360c6126b963dcabb1105e6255e68b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 8:15:14 PM UTC  (today)

File size:
3.7 MB (3,921,792 bytes)

Product version:
7,6,3,9

Copyright:
Copyright (c) 2002-2011, LanSchool Technologies, llc

Original file name:
teacher.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\lanschool\teacher.exe

Digital Signature
Signed by:
LanSchool Technologies, llc

Authority:
VeriSign, Inc.

Valid from:
12/4/2010 10:00:00 PM

Valid to:
1/17/2014 9:59:59 PM

Subject:
CN="LanSchool Technologies, llc", OU=main, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="LanSchool Technologies, llc", L=Orem, S=Utah, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6BA650A376C0F4083C139C976695F672

File PE Metadata
Compilation timestamp:
3/1/2012 11:34:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x148B72

Entry point:
E8, 6F, 00, 01, 00, E9, 16, FE, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 80, F5, 5D, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 80, F5, 5D, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B...
 
[+]

Code size:
1.5 MB (1,564,672 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Teacher

Command:
C:\Program Files\lanschool\teacher.exe


Scan teacher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.