home

LogonExpertService.exe

LogonExpert Service

Softros Systems, Inc.

It runs as a windows Service named “Logon Expert Service”.
Publisher:
Softros Systems, Inc.  (signed and verified)

Product:
LogonExpert Service

Description:
LogonExpert System Service

Version:
4.2.3.0

MD5:
e4e707630d2f0e4ca77f82171792225c

SHA-1:
aa8dcfb91b654e66e3d83820621e23cb8ee265dc

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/25/2024 5:07:14 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Packed.ASPack
0.98/17411

Quick Heal
(Suspicious) - DNAScan
2.16.11.00

File size:
637.2 KB (652,512 bytes)

Product version:
4.x

Copyright:
Copyright © 2001-2009 Softros Systems, Inc.

Trademarks:
LogonExpert

Original file name:
LogonExpertService.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\softros systems\logonexpert\logonexpertservice.exe

Digital Signature
Signed by:
Softros Systems, Inc.

Authority:
The USERTRUST Network

Valid from:
9/18/2007 8:00:00 PM

Valid to:
9/18/2010 7:59:59 PM

Subject:
CN="Softros Systems, Inc.", O="Softros Systems, Inc.", STREET=1903 60th Place E. Suite M4448, L=Bradenton, S=Florida, PostalCode=34203, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
4D000BBF5CF76AABEB996648543FBED8

File PE Metadata
Compilation timestamp:
3/3/2009 8:24:43 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:+2mIvlPWxobb9FNnwuuftt5pB6gkyRc6b7MP+Dd2/gJ:bHvlPWx/RpB6gkyRN7MP+h2/gJ

Entry address:
0x1000

Entry point:
68, 01, C0, 4D, 00, E8, 01, 00, 00, 00, C3, C3, F4, 4A, BA, 6F, 96, 70, 6D, 48, 4E, 24, 66, 8E, 50, E2, 1B, CE, 90, 0C, 40, BD, 4E, DA, 14, 02, B1, 89, 5E, 39, D8, 6B, BC, 81, F0, AD, AB, DB, 25, A6, 0D, 56, B2, 1D, E6, 25, 26, 19, 37, 63, 38, D8, FB, DB, B9, 92, C0, BC, B6, F8, 31, 7D, 8D, 35, 51, 45, 3A, 0A, 05, C4, 4B, 3D, 21, D8, 5C, 22, 48, 61, 13, AF, E8, 4E, E3, E6, 05, A8, D3, AD, 2A, 6B, 93, 37, 1F, FB, 4A, 1E, AF, BC, 0E, 8B, 51, AA, 36, 07, 43, 18, E5, 7A, 8A, CB, D8, 7F, 88, 71, 8D, B8, 47, 4B...
 
[+]

Entropy:
6.6919

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
480 KB (491,520 bytes)

Service
Display name:
Logon Expert Service

Service name:
LogonExpertSvc

Description:
LogonExpert interacting service for performing automatic secure Windows logon.

Type:
Win32OwnProcess, InteractiveProcess


Scan LogonExpertService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.