home

rpcsandrasrv.exe

SiSoftware Sandra 2015

SiSoftware Ltd.

Publisher:
SiSoftware  (signed by SiSoftware Ltd.)

Product:
SiSoftware Sandra 2015

Description:
SiSoftware Sandra Agent Service (NT)(Unicode)

Version:
21.32.2015.3

MD5:
919c46786f6a6adbc8ae3c20619e8d79

SHA-1:
0fb2c3287ce39824403fc7228626acb5dbfeb79e

SHA-256:
afdc1ceaec86ddfb0d16c5987cbf0c4c3b3da0b436d2bf311d5003edec4829ba

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:58:46 PM UTC  (today)

File size:
2.9 MB (2,996,200 bytes)

Product version:
21.32.2015.3

Copyright:
Copyright © 1995-Present SiSoftware. All rights reserved.

Original file name:
SANDRA.THE.SRV

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\sisoftware\sisoftware sandra personal 2015.sp1a\wnt600x64\rpcsandrasrv.exe

Digital Signature
Signed by:
SiSoftware Ltd.

Authority:
SiSoftware Ltd.

Valid from:
8/12/2014 5:00:04 PM

Valid to:
12/31/2039 3:59:59 PM

Subject:
CN=SiSoftware SPC, OU=Development, O=SiSoftware Ltd., L=London, S=LN, C=UK

Issuer:
CN=SiSoftware CA, OU=Management, O=SiSoftware Ltd., L=London, S=LN, C=UK

Serial number:
F499C680368C79A64D7C51C25E6DF4F4

File PE Metadata
Compilation timestamp:
3/17/2015 6:13:25 AM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
49152:srrUsG1ugkb71//Xfdvd2ZZG+O8NMp8nzsb2aIM:ErnXfdupJzy

Entry address:
0x225598

Entry point:
48, 83, EC, 28, E8, 7F, 01, 00, 00, 48, 83, C4, 28, E9, 7E, FE, FF, FF, FF, 25, 28, 25, 00, 00, FF, 25, 2A, 25, 00, 00, FF, 25, 2C, 25, 00, 00, FF, 25, 2E, 25, 00, 00, FF, 25, 30, 25, 00, 00, FF, 25, 3A, 25, 00, 00, FF, 25, 44, 25, 00, 00, FF, 25, F6, 24, 00, 00, FF, 25, 58, 23, 00, 00, FF, 25, 4A, 23, 00, 00, FF, 25, 0C, 23, 00, 00, FF, 25, FE, 22, 00, 00, CC, CC, 48, 83, EC, 28, 48, 8B, 01, 81, 38, 63, 73, 6D, E0, 75, 1C, 83, 78, 18, 04, 75, 16, 8B, 48, 20, 8D, 81, E0, FA, 6C, E6, 83, F8, 02, 76, 0F, 81...
 
[+]

Entropy:
6.3163

Code size:
2.1 MB (2,252,800 bytes)

Windows Firewall Allowed Program
Name:
sisoftware sandra agent service (tcp-in)


Scan rpcsandrasrv.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.