» passengerwebui.exe
Overview
Analysis
File Details

passengerwebui.exe

HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD.

File name:

passengerwebui.exe

Publisher:

HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD. (signed and verified)

MD5:

d40602acff4c6f3420993e5fec41bef6

SHA-1:

01df8093bd8aec4431a79bbd065e4be179cf63f8

SHA-256:

c9d076e8903915c1b01477e01d28d45b9c997defdfd62f9d48a9ff63ca5e1980

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 11:27:13 AM UTC (today)

File size:

247.7 KB (253,664 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\client\csc\passengerwebui.exe

Digital Signature

Signed by:

HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD.

Authority:

GlobalSign nv-sa

Valid from:

4/19/2016 10:26:10 AM

Valid to:

4/20/2019 10:26:10 AM

Subject:

CN="HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD.", O="HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD.", STREET=杭州市西湖区马塍路36号, L=Hangzhou, S=Zhejiang, C=CN, OID.1.3.6.1.4.1.311.60.2.1.2=ZHEJIANG, OID.1.3.6.1.4.1.311.60.2.1.3=CN, SERIALNUMBER=91330000733796106p, OID.2.5.4.15=Private Organization

Issuer:

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11217AC8455F6698571A5CFA13EAC185C34A

File PE Metadata

Compilation timestamp:

12/2/2016 1:23:31 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0x1FFED

Entry point:

E8, 36, 04, 00, 00, E9, 36, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, 6C, 31, 42, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, A0, A7, 42, 00, 89, 0D, 9C, A7, 42, 00, 89, 15, 98, A7, 42, 00, 89, 1D, 94, A7, 42, 00, 89, 35, 90, A7, 42, 00, 89, 3D, 8C, A7, 42, 00, 66, 8C, 15, B8, A7, 42, 00, 66, 8C, 0D, AC, A7, 42, 00, 66, 8C, 1D, 88, A7, 42, 00, 66, 8C, 05, 84, A7, 42, 00, 66, 8C, 25, 80, A7, 42, 00, 66, 8C, 2D, 7C, A7, 42, 00, 9C, 8F, 05, B0, A7, 42, 00, 8B, 45, 00, A3, A4, A7, 42, 00... 
[+]

Entropy:

6.2919

Code size:

133 KB (136,192 bytes)

Scan passengerwebui.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.