» remote accesswinlauncher.exe
Overview
Analysis
File Details
Behaviors (1)

remote accesswinlauncher.exe

SimpleHelp Ltd

File name:

Publisher:

SimpleHelp Ltd (signed and verified)

MD5:

ffed43708f2e7aa6c6c7bdbedacd7eca

SHA-1:

a4713119cb9afd8676956c90391b7e1b004c8a15

SHA-256:

cb5feb2a51817d4bbb704bdbc46506e806c4da2c3b20b76e720a7bc54880ab85

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 7:18:27 PM UTC (today)

File size:

472.2 KB (483,512 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\ProgramData\jwrapper-remote access\remote accesswinlauncher.exe

Digital Signature

Signed by:

SimpleHelp Ltd

Authority:

Thawte, Inc.

Valid from:

11/19/2013 5:00:00 PM

Valid to:

12/20/2015 4:59:59 PM

Subject:

CN=SimpleHelp Ltd, O=SimpleHelp Ltd, L=Burntisland, S=Midlothian, C=GB

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

6E482BF848A60C849477F7471B542310

File PE Metadata

Compilation timestamp:

10/16/2014 10:15:25 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

Entry address:

0x1B788

Entry point:

E8, 08, 8B, 00, 00, E9, 40, FE, FF, FF, 6A, 0C, 68, A8, 34, 43, 00, E8, 7E, 16, 00, 00, 8B, 4D, 08, 33, FF, 3B, CF, 76, 2E, 6A, E0, 58, 33, D2, F7, F1, 3B, 45, 0C, 1B, C0, 40, 75, 1F, E8, 1E, B7, FF, FF, C7, 00, 0C, 00, 00, 00, 57, 57, 57, 57, 57, E8, 54, 26, 00, 00, 83, C4, 14, 33, C0, E9, D5, 00, 00, 00, 0F, AF, 4D, 0C, 8B, F1, 89, 75, 08, 3B, F7, 75, 03, 33, F6, 46, 33, DB, 89, 5D, E4, 83, FE, E0, 77, 69, 83, 3D, A4, 92, 53, 00, 03, 75, 4B, 83, C6, 0F, 83, E6, F0, 89, 75, 0C, 8B, 45, 08, 3B, 05, 94, 92... 
[+]

Entropy:

4.9265

Code size:

168 KB (172,032 bytes)

Windows Firewall Allowed Program

Name:

shremoteaccessservicema_1

Scan remote accesswinlauncher.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.