home

HanvonBoardService.exe

HanvonBoardService

Hanwang Technology Co., LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HanvonBoardService’.
Publisher:
Hanvon  (signed by Hanwang Technology Co., LTD)

Product:
HanvonBoardService

Version:
1.0.0.0

MD5:
6a82392e56741d651859d391ee5c7a6d

SHA-1:
c60a9ba383fd39764f54bea856396491b9235efb

SHA-256:
a60861792933d9cdbe5c269f695e06c64c76a7ea087dd93200d7bb1d5e50aa83

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 7:18:14 PM UTC  (today)

File size:
13.2 KB (13,528 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Hanvon 2010

Original file name:
HanvonBoardService.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\hanvon\hanvonboard\hanvonboardservice.exe

Digital Signature
Signed by:
Hanwang Technology Co., LTD

Authority:
VeriSign, Inc.

Valid from:
9/8/2010 8:00:00 AM

Valid to:
9/15/2013 7:59:59 AM

Subject:
CN="Hanwang Technology Co., LTD", OU="PC ", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Hanwang Technology Co., LTD", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
75889BC72C8AFF58615C95BF67E188E8

File PE Metadata
Compilation timestamp:
8/16/2012 4:47:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:waCB/QfSNMIB3XBtLf4G8JG2B8ILlqhL8jQGQpkqs1I/0Aaa+ebCf01X:wgfuM03Xnf4xJxB8IghLcQ01NAaMbC6

Entry address:
0x3ABE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8713

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
7 KB (7,168 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
HanvonBoardService

Command:
C:\Program Files\hanvon\hanvonboard\hanvonboardservice.exe


Scan HanvonBoardService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.