» el2sladm.exe
Overview
Analysis
File Details

el2sladm.exe

WinAgents EventLog Translation Server

Tandem Systems Ltd

File name:

el2sladm.exe

Publisher:

WinAgents Software Group (signed by Tandem Systems Ltd)

Product:

WinAgents EventLog Translation Server

Description:

EventLog Translation Server

Version:

1.5.0.74

MD5:

5993ce5e484c7d7bf3f460caef4b9f71

SHA-1:

0d4f1fac454c6f2fb7cb9c16f400e5d7d8ea3373

SHA-256:

02123d0cb0339b1726fc56a242cadf57c37a915197c6f832d64765998f5a661a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 2:57:48 AM UTC (today)

File size:

1.2 MB (1,281,744 bytes)

Product version:

1.5.0.74

Trademarks:

EventLog Translation Server

Original file name:

el2sladm.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\winagents\eventlog translation service\el2sladm.exe

Digital Signature

Signed by:

Tandem Systems Ltd

Authority:

The USERTRUST Network

Valid from:

9/3/2009 3:00:00 AM

Valid to:

9/4/2010 2:59:59 AM

Subject:

CN=Tandem Systems Ltd, O=Tandem Systems Ltd, STREET=Ul. Kommunisticheskaya Street, L=Saransk, S=Mordovia, PostalCode=430005, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00F2541E6302A2B82D37DAA0C42C298628

File PE Metadata

Compilation timestamp:

6/20/1992 1:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

Entry address:

0x1000

Entry point:

68, 01, 10, 6D, 00, E8, 01, 00, 00, 00, C3, C3, B0, C2, F9, 5F, 57, DA, D5, C3, 7C, 02, 0D, 86, 5D, E4, 00, 95, 3D, E3, 54, A8, 04, B8, 0F, EB, 1D, 27, D3, 31, 77, CC, A6, E5, 4D, A2, 49, 10, D1, B0, BD, F8, 2B, F1, 31, 09, B5, 85, A5, FE, BE, 50, 48, F4, 9B, 0E, 84, 30, 6E, 98, C7, 87, C2, 90, 19, 2F, 35, 7D, EC, 1D, 1A, B6, 03, 5A, FF, 5A, D9, CA, BE, FD, 45, 1B, 7C, 0A, EE, B1, 05, BF, F4, 18, FE, 57, 17, 7F, F9, 3B, 1D, E3, 96, E5, 24, 52, AC, E8, 24, 11, EE, F6, F5, 6F, 6A, 0E, 67, 8B, 25, 41, D0, 80... 
[+]

Entropy:

7.8925

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

2.4 MB (2,567,680 bytes)

Scan el2sladm.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.