» evolutionsvc.exe
Overview
Analysis
File Details

evolutionsvc.exe

Pastel Software

File name:

evolutionsvc.exe

Publisher:

Softline Limited (signed by Pastel Software)

Description:

Pastel Evolution Manager Centre Service

Version:

1.0.0.0

MD5:

5e80f2f4c05380d462aaad1c94aa3e65

SHA-1:

f2e64785092ad04e4db61f8f0a587712eace2303

SHA-256:

7bc38361cea5be3db1fe2df4ebbee1db118a811731e8bbf3cf187504363afb9c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 10:08:26 AM UTC (today)

File size:

361.9 KB (370,576 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Language:

English (South Africa)

Common path:

C:\Program Files\pastel evolution\evolutionsvc.exe

Digital Signature

Signed by:

Pastel Software

Authority:

Thawte, Inc.

Valid from:

2/8/2012 3:00:00 AM

Valid to:

2/21/2014 2:59:59 AM

Subject:

CN=Pastel Software, OU=Development, O=Pastel Software, L=Johannesburg, S=Gauteng, C=ZA

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

7002DA94F0B157CFFCE94F6B5E95660F

File PE Metadata

Compilation timestamp:

2/13/2012 12:16:16 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

3072:GA3jQluPxekz2oxt8l2OeXpe6HMhiRi2EUQxrVdbN2qq0Na28RlZe/fygujiH4XM:GA3jLYkCo3XVFQPdYJZb+4a0YzPKMlt

Entry address:

0x15C04

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, B8, 38, 33, 41, 00, E8, 6E, B5, FE, FF, 8B, 1D, 70, B7, 41, 00, 6A, 00, E8, 49, B7, FE, FF, 8B, 03, 8B, 10, FF, 52, 34, A1, D0, B9, 41, 00, C6, 00, 01, 8B, 03, 83, C0, 3C, BA, 98, 5C, 41, 00, E8, 97, B4, FE, FF, 8B, 0D, 3C, 60, 41, 00, 8B, 03, 8B, 15, 68, 23, 40, 00, 8B, 30, FF, 56, 30, 8B, 0D, 1C, 60, 41, 00, 8B, 03, 8B, 15, 18, 49, 40, 00, 8B, 30, FF, 56, 30, 8B, 0D, 2C, 60, 41, 00, 8B, 03, 8B, 15, 9C, 8A, 40, 00, 8B, 30, FF, 56, 30, 8B, 03, 8B, 10, FF, 52, 38, E8, EE, B6... 
[+]

Entropy:

5.6150

Developed / compiled with:

Microsoft Visual C++

Code size:

83.5 KB (85,504 bytes)

Scan evolutionsvc.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.