home

atrserver.exe

Advanced Time Reports Server

Xpress Software Inc.

It runs as a separate (within the context of its own process) windows Service named “ATRServer Service”.
Publisher:
Xpress Software Inc.  (signed and verified)

Product:
Advanced Time Reports Server

Version:
11.0.3.0

MD5:
6a9a33e358aa7bf2f87eadd438aece1a

SHA-1:
3198b38977adeb2f2f695cc53868ee9df82db6fe

SHA-256:
178771cc10c10814a3bf582249ca8bbc702d36b39efca53458dbe06f8630d7ec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/12/2025 2:06:21 PM UTC  (today)

File size:
1.1 MB (1,157,600 bytes)

Product version:
11.0.3

Copyright:
Copyright © 1996-2016, Xpress Software Inc.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\xpress software\atrclient\atrserver\atrserver.exe

Digital Signature
Signed by:
Xpress Software Inc.

Authority:
Symantec Corporation

Valid from:
1/19/2016 1:00:00 AM

Valid to:
2/18/2017 12:59:59 AM

Subject:
CN=Xpress Software Inc., O=Xpress Software Inc., L=Thornhill, S=Ontario, C=CA

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
653D6869A08EC81AADA56A5A428B7F36

File PE Metadata
Compilation timestamp:
1/21/2016 2:08:09 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:oGP8zVYFvRNLfz+wfFMGMtn+LwLEvUdqqdTH7UG24t:oGPgk5Nz+GFMuvU04TH7T24

Entry address:
0x1000

Entry point:
68, 01, 80, 66, 00, E8, 01, 00, 00, 00, C3, C3, F8, 79, 21, AA, 60, B3, 32, 19, 1E, EC, 02, DF, F6, F6, 8E, 95, 7F, 0E, 34, B7, AE, 39, DA, F4, F5, 52, 20, 26, 38, F2, 5B, A6, FB, E1, 91, 84, F4, 8F, 78, 23, EA, F7, DD, EB, F0, 0B, 80, 87, 7B, A9, F1, 5F, 6C, 27, 5A, 2F, AB, 63, 45, 8B, 58, A8, 23, 47, B9, 3D, A0, 76, FC, 49, 8F, 4F, 21, E0, 93, 57, A4, 81, 03, 0A, F1, 20, 7C, 29, 24, 0A, 91, F1, 14, 3E, 1D, 5C, FD, E2, 6B, 05, AA, E6, 91, 20, 7B, 57, 8F, F9, 08, 02, C6, 41, A8, BD, 4E, 25, 53, F4, 0A, FD...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
2 MB (2,045,440 bytes)

Service
Display name:
ATRServer Service

Service name:
ATRService

Type:
Win32OwnProcess


Scan atrserver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.