home

flexihub32.exe

FlexiHub Service

Eltima LLC

It runs as a separate (within the context of its own process) windows Service named “Eltima FlexiHub”.
Publisher:
ELTIMA Software  (signed by Eltima LLC)

Product:
FlexiHub Service

Version:
3.0.10251

MD5:
84340b96cb4d5b351b7c8f649f8006e2

SHA-1:
fa90e8b1db97ed69cc7be0222c04df558ac451d4

SHA-256:
0cbdcea2cec044dbc8b49751ddf8258bb067d5db8a84586458497b7b884e73ca

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/25/2024 1:21:53 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Floxif.H virus
6.3.12010.0

F-Prot
W32/Floxif.B
4.6.5.141

File size:
3.7 MB (3,866,255 bytes)

Product version:
3.0

Copyright:
(c) ELTIMA Software. All rights reserved.

Original file name:
flexihub.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\eltima software\flexihub\flexihub32.exe

Digital Signature
Signed by:
Eltima LLC

Authority:
VeriSign, Inc.

Valid from:
6/15/2015 6:00:00 AM

Valid to:
6/15/2017 5:59:59 AM

Subject:
CN=Eltima LLC, O=Eltima LLC, L=Zaporizhzhya, S=Zaporizhzhya, C=UA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
24FB447C68123A001F0EDFCF5D891C30

File PE Metadata
Compilation timestamp:
1/4/2017 7:13:07 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

Entry address:
0x1D553F

Entry point:
E9, BC, A6, FD, FF, E9, 95, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 83, 65, E0, 00, 57, 6A, 07, 59, 33, C0, 8D, 7D, E4, F3, AB, 5F, 85, F6, 75, 15, E8, 25, DF, FF, FF, C7, 00, 16, 00, 00, 00, E8, 7E, F9, FF, FF, 83, C8, FF, C9, C3, 39, 45, 0C, 74, E6, 56, E8, 4B, 5E, 00, 00, 59, B9, FF, FF, FF, 7F, C7, 45, EC, 49, 00, 00, 00, 89, 75, E8, 89, 75, E0, 89, 4D, E4, 3B, C1, 77, 03, 89, 45, E4, FF, 75, 14, 8D, 45, E0, FF, 75, 10, FF, 75, 0C, 50, FF, 55, 08, 83, C4, 10, C9, C3, 8B, FF, 55, 8B, EC, 56, 8B, 75...
 
[+]

Entropy:
6.6448

Packer / compiler:
Xtreme-Protector v1.05

Code size:
2.3 MB (2,364,416 bytes)

Service
Display name:
Eltima FlexiHub

Service name:
flexihub

Type:
Win32OwnProcess


Scan flexihub32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.