home

WinsshdActStateCheck.exe

WinsshdActStateCheck

Bitvise Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WinSSHD Activation State Checker’.
Publisher:
Bitvise  (signed by Bitvise Limited)

Product:
WinsshdActStateCheck

Description:
Opens the WinSSHD Control Panel if your WinSSHD evaluation period has expired or is about to.

Version:
4.23

MD5:
513e539df72faf6f53999b71c89e00eb

SHA-1:
1beb95dea6756eb27538cb0cf2e54091f37f227e

SHA-256:
9ab1bbc3c96259ccb7fa89c5dd6310b2af09ca2de108101f5f1b53d004163691

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 8:29:41 PM UTC  (today)

File size:
441 KB (451,584 bytes)

Product version:
4.23

Copyright:
Copyright (C) 2007 by Bitvise Limited. Portions Copyright (C) 1995-2003 by Wei Dai.

Original file name:
WinsshdActStateCheck.exe

File type:
Executable application (Win32 EXE)

Language:
Slovenian (Slovenia)

Common path:
C:\Program Files\bitvise winsshd\winsshdactstatecheck.exe

Digital Signature
Signed by:
Bitvise Limited

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/18/2007 1:00:00 AM

Valid to:
1/18/2009 12:59:59 AM

Subject:
CN=Bitvise Limited, OU=Secure Application Development, O=Bitvise Limited, L=Gibraltar, S=00, C=GI

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
0880909509F99171AD1FBA62A7F585E2

File PE Metadata
Compilation timestamp:
3/23/2007 12:35:08 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:lO+DaaaMhqXwTyYm03/IAt6RJtNLdJNTGEC:zaaxA2Iy6RJvvZGEC

Entry address:
0x3A548

Entry point:
55, 8B, EC, 6A, FF, 68, 28, 73, 45, 00, 68, BC, A7, 43, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, A4, 40, 45, 00, 33, D2, 8A, D4, 89, 15, DC, C6, 46, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, D8, C6, 46, 00, C1, E1, 08, 03, CA, 89, 0D, D4, C6, 46, 00, C1, E8, 10, A3, D0, C6, 46, 00, 33, F6, 56, E8, 32, 44, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, FD, 40, 00, 00, FF, 15, A0, 40, 45, 00, A3, 04, DE, 46, 00, E8...
 
[+]

Entropy:
6.2754

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
332 KB (339,968 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WinSSHD Activation State Checker

Command:
"C:\Program Files\bitvise winsshd\winsshdactstatecheck.exe"


Scan WinsshdActStateCheck.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.