home

appservice.exe

OKWare Co., Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘AnyMP4 Free iPhone Data RecoveryAppService’.
Publisher:
OKWare Co., Ltd  (signed and verified)

MD5:
446c04cedb6b144965708729156e6798

SHA-1:
a8802f0aa49702296dcb6e551c26ae2c01e74005

SHA-256:
459911386a070263bd8154ad4d7e5987f43be95f2883f8cd1e15a517e23d14ee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 2:24:19 AM UTC  (today)

File size:
77.8 KB (79,624 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\anymp4 studio\anymp4 free iphone data recovery\appservice.exe

Digital Signature
Signed by:
OKWare Co., Ltd

Authority:
GlobalSign nv-sa

Valid from:
9/3/2014 3:30:06 PM

Valid to:
11/4/2017 10:21:38 PM

Subject:
CN="OKWare Co., Ltd", O="OKWare Co., Ltd", L=Beijing, S=Beijing, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172FFAED22F49874E5BBCBF62EFBA3E38

File PE Metadata
Compilation timestamp:
9/18/2014 2:39:18 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x7C9F

Entry point:
E8, 34, 04, 00, 00, E9, 36, FD, FF, FF, 6A, 14, 68, 68, CB, 40, 00, E8, 77, 03, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, 79, 04, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, 6D, 03, 00, 00, C2, 10, 00, 6A, 0C, 68, 88, CB, 40, 00, E8, 19, 03, 00, 00, 83, 65, E4, 00, 8B, 75, 0C, 8B, C6, 0F, AF, 45...
 
[+]

Entropy:
6.4773

Code size:
33.5 KB (34,304 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
AnyMP4 Free iPhone Data RecoveryAppService

Command:
C:\Program Files\anymp4 studio\anymp4 free iphone data recovery\appservice.exe


Scan appservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.