usbdisabler64.exe

IntelliAdmin, LLC

It runs as a windows Service named “IntelliAdmin USB Disabler Pro”.
Publisher:
IntelliAdmin, LLC  (signed and verified)

MD5:
832e37d55e61dca4d5334e9440e5f5e1

SHA-1:
c6c1de01d9a283391b61eefa69f11734a0007d85

SHA-256:
5ec8e12d7234377607a683101c92ee96db4f535aa743d149042a59c877468fbb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:02:54 PM UTC  (today)

File size:
815.6 KB (835,200 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\intelliadmin\usbdisabler\service\usbdisabler64.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
1/14/2010 7:00:00 AM

Valid to:
1/15/2011 6:59:59 AM

Subject:
CN="IntelliAdmin, LLC", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="IntelliAdmin, LLC", L=Rochester Hills, S=Michigan, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
677740048F06F85F6294A5E7772CCCE1

File PE Metadata
Compilation timestamp:
7/27/2009 10:14:30 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:dpQnNYOiBbVNbF5LMQxH4CpJz0mxwmBjeS:dpgNY3t5IQz06aS

Entry address:
0x2D260

Entry point:
48, 83, EC, 28, E8, 57, 51, 01, 00, E8, 12, 00, 00, 00, 48, 83, C4, 28, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 81, EC, C8, 00, 00, 00, C7, 84, 24, A4, 00, 00, 00, 00, 00, 00, 00, 48, 8D, 4C, 24, 20, FF, 15, 43, 01, 06, 00, EB, 0A, B8, FF, 00, 00, 00, E9, 6A, 01, 00, 00, E8, A2, 01, 00, 00, 89, 84, 24, A0, 00, 00, 00, B9, 01, 00, 00, 00, E8, 41, 66, 01, 00, 85, C0, 75, 0A, B9, 1C, 00, 00, 00, E8, 53, 01, 00, 00, E8, 7E, 05, 00, 00, 85, C0, 75, 0A, B9, 10, 00, 00, 00, E8, 40, 01, 00, 00...
 
[+]

Entropy:
5.7220

Code size:
558 KB (571,392 bytes)

Service
Display name:
IntelliAdmin USB Disabler Pro

Service name:
USBDisabler

Description:
IntelliAdmin USB Disabler Pro allows you to manage access to USB based removable storage. See http://www.intelliadmin.com for more information.

Type:
Win32OwnProcess, InteractiveProcess


Scan usbdisabler64.exe - Powered by Reason Core Security