home

HmResident.exe

常駐秀丸エディタ用プログラム

SAITO-KIKAKU CORPORATION

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘GasGlance AppIntegrator 64-bit’.
Publisher:
有限会社サイトー企画  (signed by SAITO-KIKAKU CORPORATION)

Product:
常駐秀丸エディタ用プログラム

Version:
8, 6, 2, 1

MD5:
97a8bb27a5d1142ce925f11f7030d2e0

SHA-1:
f934c886079bfaaec2c69661008448257429fbcc

SHA-256:
a2f7a03104d1a9727f21e592dea3c321c88792581a4e609e9bd5944430b2b346

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 6:12:01 AM UTC  (today)

File size:
54.1 KB (55,384 bytes)

Product version:
8, 6, 2, 1

Copyright:
Copyright (C) 1992-2016 有限会社サイトー企画

Original file name:
HmResident.exe

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\hidemaru\hmresident.exe

Digital Signature
Signed by:
SAITO-KIKAKU CORPORATION

Authority:
COMODO CA Limited

Valid from:
1/18/2016 4:00:00 PM

Valid to:
1/18/2018 3:59:59 PM

Subject:
CN=SAITO-KIKAKU CORPORATION, O=SAITO-KIKAKU CORPORATION, STREET=4-3-12、 Yanagi-machi, L=Sabae-shi, S=Fukui, PostalCode=916-0047, C=JP

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
4C60E70220847DA21A63C4BCE0357F13

File PE Metadata
Compilation timestamp:
6/27/2016 8:59:26 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x1480

Entry point:
48, 83, EC, 28, E8, 07, 20, 00, 00, 48, 83, C4, 28, E9, 0E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, CD, AC, 00, 00, FF, 15, BF, 6B, 00, 00, 48, 8B, 05, B8, AD, 00, 00, 48, 89, 44, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, 0B, 65, 00, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24, 50, 00, 74, 41, 48, C7, 44, 24, 38, 00, 00, 00, 00, 48, 8D, 44, 24, 48, 48, 89, 44, 24, 30, 48, 8D, 44, 24, 40, 48, 89, 44, 24...
 
[+]

Entropy:
6.1825

Code size:
27 KB (27,648 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
GasGlance AppIntegrator 64-bit

Command:
C:\Program Files2\gasgla~2\bar\1.bin\appintegrator64.exe


Scan HmResident.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.