home

html5locsvc.exe

HTML5LOC

Wi2geo Ltd

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘AlterGeoUpdater’.
Publisher:
AlterGeo  (signed by Wi2geo Ltd)

Product:
HTML5LOC

Description:
AlterGeo HTML5 location provider

Version:
3.5.1.853

MD5:
8c79eeb6dfaf63048709b94404097fab

SHA-1:
88701f5b2a972120bb620a3b62e8e610a44eea7a

SHA-256:
a25ffc718048219bdb3015f1d202749a9dcbec3a6ce2e7f76edbcf653373a240

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 10:25:45 PM UTC  (today)

File size:
29 KB (29,728 bytes)

Product version:
3.5.1.853

Copyright:
Copyright (C) 2008-2011 AlterGeo

Original file name:
html5loc.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\altergeo\update for html5 geolocation provider\html5locsvc.exe

Digital Signature
Signed by:
Wi2geo Ltd

Authority:
Thawte, Inc.

Valid from:
6/7/2011 3:00:00 AM

Valid to:
7/7/2012 2:59:59 AM

Subject:
CN=Wi2geo Ltd, OU=B2B Division, O=Wi2geo Ltd, L=Moscow, S=Moscow, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
26AF865AF9381D2526AA125D4102D3A5

File PE Metadata
Compilation timestamp:
2/29/2012 4:51:54 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
384:C/5UUJNQvpw1+c2v/C09vBuBC95ZbaAoerkvKcmYJLRUu/1:Ij2vpwg1vq09phbaAoa8KcfLZ1

Entry address:
0x1020

Entry point:
FF, 15, D0, 50, 40, 00, 0F, B7, 08, BA, 22, 00, 00, 00, 66, 3B, D1, 75, 12, 0F, B7, 48, 02, 83, C0, 02, 3B, CA, 74, 50, 66, 85, C9, 75, F0, EB, 3F, 66, 85, C9, 74, 28, 8D, 9B, 00, 00, 00, 00, BA, 20, 00, 00, 00, 66, 3B, D1, 74, 18, BA, 09, 00, 00, 00, 66, 3B, D1, 74, 0E, 0F, B7, 48, 02, 83, C0, 02, 66, 85, C9, 75, E0, EB, 12, 0F, B7, 08, 66, 85, C9, 74, 0A, BA, 20, 00, 00, 00, 66, 3B, D1, 74, 0A, B9, 09, 00, 00, 00, 66, 3B, 08, 75, 05, 83, C0, 02, EB, DF, E8, 88, 1D, 00, 00, 50, FF, 15, CC, 50, 40, 00, CC...
 
[+]

Code size:
14.5 KB (14,848 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
AlterGeoUpdater

Command:
C:\ProgramData\altergeo\update for html5 geolocation provider\html5locsvc.exe


Scan html5locsvc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.