home

injectwinsockservicev6.exe

Anqing Inspector Software Ltd.

It runs as a separate (within the context of its own process) windows Service named “HttpAnalyzerV6 CodeHook service”.
Publisher:
Anqing Inspector Software Ltd.  (signed and verified)

MD5:
92f7e1ea446dafc08b20f06d8bb6f9bc

SHA-1:
2b0a2a3f6f74605990fa8b89e0296f74fab74e79

SHA-256:
c1868589313aac139abe10f7bfcb6e2deea59eb435bb1d7f6967530cc9fe87a3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 9:49:28 AM UTC  (today)

File size:
455.8 KB (466,752 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ieinspector\httpanalyzerfullv6\injectwinsockservicev6.exe

Digital Signature
Signed by:
Anqing Inspector Software Ltd.

Authority:
GlobalSign nv-sa

Valid from:
3/25/2010 1:00:26 PM

Valid to:
3/25/2013 1:00:26 PM

Subject:
E=support@ieinspector.com, CN=Anqing Inspector Software Ltd., O=Anqing Inspector Software Ltd., C=CN

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012794560C97

File PE Metadata
Compilation timestamp:
12/18/2010 8:02:48 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x6417C

Entry point:
55, 8B, EC, B9, 05, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, B8, E0, 28, 46, 00, E8, 96, 31, FA, FF, 33, C0, 55, 68, 85, 42, 46, 00, 64, FF, 30, 64, 89, 20, E8, 7F, D8, FF, FF, A1, 0C, 81, 46, 00, 8B, 00, FF, D0, 85, C0, 74, 0A, E8, 01, DC, FF, FF, E9, AA, 00, 00, 00, 33, DB, E8, 41, F3, F9, FF, 83, F8, 02, 7C, 29, 8D, 55, E8, B8, 02, 00, 00, 00, E8, 8F, F3, F9, FF, 8B, 45, E8, 8D, 55, EC, E8, 4C, D8, FB, FF, 8B, 45, EC, BA, 9C, 42, 46, 00, E8, B7, 12, FA, FF, 75, 02, B3, 01, E8, 0E, F3, F9, FF, 48, 7C...
 
[+]

Entropy:
6.7480

Developed / compiled with:
Microsoft Visual C++

Code size:
396 KB (405,504 bytes)

Service
Display name:
HttpAnalyzerV6 CodeHook service

Service name:
HttpAnalyzerV6 DllInjectService

Type:
Win32OwnProcess


Scan injectwinsockservicev6.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.