home

adsrv.exe

Mircosoft

上海宁乐科技有限公司

Publisher:
Mircosoft Corporation  (signed by 上海宁乐科技有限公司)

Product:
Mircosoft

Description:
Mircosoft source engine

Version:
1, 0, 9603, 451

MD5:
2fabdea131a6912dcfe20592eeb4bec1

SHA-1:
868834d79822893f186699dc3d99a5281001908a

SHA-256:
b38b9090f00474c43df80b0f18bd15d8e3448e2281fbefc1cbe22b0bbad9cffc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 8:44:18 PM UTC  (today)

File size:
1.2 MB (1,283,168 bytes)

Product version:
1, 0, 9603, 451

Copyright:
Copyright (c) 2015 Mircosoft

Original file name:
AdvSrv.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\adsrv.exe

Digital Signature
Signed by:
上海宁乐科技有限公司

Authority:
VeriSign, Inc.

Valid from:
7/21/2014 8:00:00 AM

Valid to:
10/20/2016 7:59:59 AM

Subject:
CN=上海宁乐科技有限公司, OU=研发中心, O=上海宁乐科技有限公司, L=上海, S=上海, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
55BF245C8EC7D2A505127346D7280715

File PE Metadata
Compilation timestamp:
8/7/2016 1:36:11 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:L+56RjLGiDdUJAlCJ1EZSIpDjW4j0cogjmues3sLl8z5VYA:9blCJ6ZPDJj0cogy/gsLmwA

Entry address:
0x291CF

Entry point:
E8, 35, D4, 00, 00, E9, A4, FE, FF, FF, 33, C0, 40, C3, 8B, FF, 55, 8B, EC, 33, C0, 39, 45, 08, 6A, 00, 0F, 94, C0, 68, 00, 10, 00, 00, 50, FF, 15, 8C, 71, 44, 00, A3, 8C, 8E, 45, 00, 85, C0, 75, 02, 5D, C3, 33, C0, 40, A3, E8, 9E, 45, 00, 5D, C3, 83, 3D, E8, 9E, 45, 00, 03, 75, 57, 53, 33, DB, 39, 1D, D0, 9E, 45, 00, 57, 8B, 3D, 48, 71, 44, 00, 7E, 33, 56, 8B, 35, D4, 9E, 45, 00, 83, C6, 10, 68, 00, 80, 00, 00, 6A, 00, FF, 76, FC, FF, 15, 94, 71, 44, 00, FF, 36, 6A, 00, FF, 35, 8C, 8E, 45, 00, FF, D7, 83...
 
[+]

Entropy:
7.4529

Code size:
278 KB (284,672 bytes)

Scan adsrv.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.