home

procloggersvc.exe

NoVirusThanks Process Logger Service

NoVirusThanks Company Srl

Publisher:
NoVirusThanks Company Srl  (signed and verified)

Product:
NoVirusThanks Process Logger Service

Version:
1.0.0.0

MD5:
876ca2ce138789801c9c3a4ce5243a6c

SHA-1:
649a494152e130b677d8068daa4b64b8b7fecaf3

SHA-256:
9067dd56ecb9ec72c38e7c12088b0999661389c8b78d5985dadfafb3dfa30bd6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 2:08:23 PM UTC  (today)

File size:
2.1 MB (2,240,848 bytes)

Product version:
1.0.0.0

Copyright:
NoVirusThanks Company Srl

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\processloggerservice\64-bit\procloggersvc\service\procloggersvc.exe

Digital Signature
Signed by:
NoVirusThanks Company Srl

Authority:
GlobalSign nv-sa

Valid from:
4/2/2015 7:10:21 AM

Valid to:
5/24/2016 11:31:15 AM

Subject:
E=support@novirusthanks.org, CN=NoVirusThanks Company Srl, O=NoVirusThanks Company Srl, L=Castiglione Del Lago, S=Perugia, C=IT

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11215463CF7F7AF3A0EF00D25A13551CE6BC

File PE Metadata
Compilation timestamp:
3/15/2016 6:56:30 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:8eZwYAoQ4gIwYOmqd/3/aPzZqvBMSC+uoOX0asYmaLoYViV:nwYAoQ4gIwYOmqdv/ozZqviSe0as4LyV

Entry address:
0x1BB0C0

Entry point:
55, 53, 48, 83, EC, 28, 48, 8B, EC, 90, 48, 8D, 0D, A7, 45, FF, FF, E8, 9A, 70, E5, FF, 48, 8B, 05, 9B, 7E, 02, 00, 48, 8B, 00, 80, 78, 68, 00, 74, 13, 48, 8B, 05, 8B, 7E, 02, 00, 48, 8B, 08, E8, 7B, DD, FE, FF, 84, C0, 74, 16, 48, 8B, 05, 78, 7E, 02, 00, 48, 8B, 00, 48, 89, C1, 48, 8B, 18, FF, 93, 88, 00, 00, 00, 48, 8B, 05, 62, 7E, 02, 00, 48, 8B, 00, 48, 89, C1, 48, 8B, 15, 7D, 21, FF, FF, 4C, 8B, 05, F6, 7C, 02, 00, 48, 8B, 18, FF, 93, 80, 00, 00, 00, 48, 8B, 05, 3E, 7E, 02, 00, 48, 8B, 00, 48, 89, C1...
 
[+]

Entropy:
5.8483

Code size:
1.7 MB (1,810,944 bytes)

Scan procloggersvc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.