home

Heimdal.ClientHost.exe

Heimdal.ClientHost

Heimdal Security

It runs as a separate (within the context of its own process) windows Service named “Heimdal Client Host”.
Publisher:
Heimdal Security  (signed and verified)

Product:
Heimdal.ClientHost

Version:
2.2.5.2000

MD5:
86ddaf66309d5123164254fc0ce32bcc

SHA-1:
83d7a3875d6e11e78c37a74639b3801478b818ef

SHA-256:
b22b4be390efdf8a68c190872d1d7d7ac56ac07423ff399ecffed4d8dea5925b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:36:43 AM UTC  (today)

File size:
64.2 KB (65,712 bytes)

Product version:
2.2.5.2000

Copyright:
Copyright © 2015-2016

Original file name:
Heimdal.ClientHost.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\heimdal\heimdal.clienthost.exe

Digital Signature
Signed by:
Heimdal Security

Authority:
COMODO CA Limited

Valid from:
8/11/2015 5:00:00 PM

Valid to:
8/11/2016 4:59:59 PM

Subject:
CN=Heimdal Security, O=Heimdal Security, STREET=Vestergade 2, L=København K, PostalCode=1456, C=DK

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CADE179F80F289D64896802B086C578E

File PE Metadata
Compilation timestamp:
6/3/2016 2:52:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
48.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:/RIA+IRxYjl09tMyQBORiGtAsiHNwroAnOALaNrcQXa9JiayqyUV4zYcHeGi3JgI:JIA+IMzBORintwoAJLRiatVG6gApiIZ

Entry address:
0x9346

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0850

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
29 KB (29,696 bytes)

Service
Display name:
Heimdal Client Host

Type:
Win32OwnProcess


Scan Heimdal.ClientHost.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.