home

lnssatt.exe

GFI LanGuard 2012

GFI Software Development Ltd

It runs as a separate (within the context of its own process) windows Service named “GFI LanGuard 11 Attendant Service”.
Publisher:
GFI Software Development Ltd.  (signed by GFI Software Development Ltd)

Product:
GFI LanGuard 2012

Description:
GFI LanGuard Attendant Service

Version:
11.1.2012.1123

MD5:
2eefbed80b4ccc5dbec08f12f0a1eacf

SHA-1:
8b0a6d5557815b9040de076f818b8e8be0412971

SHA-256:
30bd09b77218f14f25ceebc34e06b5428970a238fd5e39866fe13e06a85b674a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 10:27:11 AM UTC  (today)

File size:
130.4 KB (133,496 bytes)

Product version:
11.1.2012.1123

Copyright:
Copyright © 2012 GFI Software

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\gfi\languard 11 agent\lnssatt.exe

Digital Signature
Signed by:
GFI Software Development Ltd

Authority:
DigiCert Inc

Valid from:
6/13/2012 5:00:00 PM

Valid to:
6/19/2014 5:00:00 AM

Subject:
CN=GFI Software Development Ltd, O=GFI Software Development Ltd, L=San Gwann, S=San Gwann, C=MT

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0409A59BB27A11C463D2F2D79A6D55E6

File PE Metadata
Compilation timestamp:
11/22/2012 11:55:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:bwiKl5nctxAAYH7gwEMlwXsS2MmFs9C/n7sVnTmC9tOZRna86N9A5mnF+1sjafgh:o5ncn8Ifbb9C/n7sBTmsOZQ9AiqI

Entry address:
0x83A5

Entry point:
E8, FA, 05, 00, 00, E9, D8, FC, FF, FF, CC, FF, 25, 7C, A1, 40, 00, 3B, 0D, 18, 32, 41, 00, 75, 02, F3, C3, E9, 75, 06, 00, 00, 8B, C1, C7, 00, 88, 08, 41, 00, C2, 04, 00, 8B, FF, 55, 8B, EC, F6, 45, 08, 02, 57, 8B, F9, 74, 25, 56, 68, 76, 8B, 40, 00, 8D, 77, FC, FF, 36, 6A, 0C, 57, E8, A0, 00, 00, 00, F6, 45, 08, 01, 74, 07, 56, E8, C7, F9, FF, FF, 59, 8B, C6, 5E, EB, 14, E8, 6E, 07, 00, 00, F6, 45, 08, 01, 74, 07, 57, E8, B0, F9, FF, FF, 59, 8B, C7, 5F, 5D, C2, 04, 00, 8B, C1, C2, 04, 00, 8B, 00, 81, 38...
 
[+]

Entropy:
5.7685

Code size:
35 KB (35,840 bytes)

Service
Display name:
GFI LanGuard 11 Attendant Service

Service name:
gfi_lanss11_attservice

Description:
Starts common sub-processes which are required by GFI products.

Type:
Win32OwnProcess


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.