home

prowin.EXE

Thomson Reuters

Publisher:
Thomson Reuters  (signed and verified)

Description:
Loader

Version:
5.82

MD5:
d4089b35e66b87ae4a18db8fe28c9cc6

SHA-1:
c4fc19a3cef3d3de8062fdb6b3d9e9aa91ccdab5

SHA-256:
eba4b539b39b4855e9187906dffc4a05a4f46282957a1fea0579d585d741faef

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 9:46:27 AM UTC  (today)

File size:
1.6 MB (1,648,584 bytes)

Product version:
5.82

Copyright:
Thomson Reuters

Original file name:
prowin.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Thomson Reuters

Authority:
Symantec Corporation

Valid from:
8/2/2015 5:00:00 PM

Valid to:
8/3/2017 4:59:59 PM

Subject:
CN=Thomson Reuters, OU=Legal, O=Thomson Reuters, L=Eagan, S=Minnesota, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2EF5B4D2D26A8A9281CA351660A566C8

File PE Metadata
Compilation timestamp:
8/3/2016 10:08:23 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
24576:l4GPmyCGK1zd4AHLiC3NMGYWESUYYHUTjV2:SGPuwULiYYWMYnTU

Entry address:
0x3857C

Entry point:
DB, E3, 31, C0, BB, 28, 07, 4A, 00, 89, C1, E8, DC, 93, FC, FF, 09, C0, 74, 14, B8, 68, 2D, 46, 00, E8, D6, 93, FC, FF, E8, 49, 93, FC, FF, B8, 00, 00, 00, 00, E8, 57, 93, FC, FF, 90, 90, 90, 60, 89, C6, 83, 7E, 61, 00, 74, 17, 8B, 4E, 61, B8, 01, 02, 00, 00, BB, 00, 00, 00, 00, BA, 01, 00, 00, 00, E8, 04, 90, FC, FF, 8B, 46, 08, E8, 50, FB, FE, FF, C7, 46, 61, 00, 00, 00, 00, 8B, 46, 08, E8, 39, FB, FE, FF, 61, C3, 90, 90, 90, 83, EC, 38, 56, 57, B8, 10, 29, 4E, 00, E8, 71, 7E, 00, 00, 89, C3, B8, C4, 28...
 
[+]

Entropy:
6.0633

Code size:
533 KB (545,792 bytes)

Scan prowin.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.