home

logonsessionold.exe

JWTS

Publisher:
JWTS  (signed and verified)

MD5:
f6be1c4d8515d5619c6a79443b5f50fc

SHA-1:
e3e65357b131d94d2da9abb27621e8e0aea94cd1

SHA-256:
6791d5b910b189e21daf103a928e027fcd4e32ac810acd211fb94f9fb213e3f1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 1:06:18 AM UTC  (today)

File size:
9.8 MB (10,268,672 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\logonsessionold.exe

Digital Signature
Signed by:
JWTS

Authority:
COMODO CA Limited

Valid from:
1/22/2016 5:30:00 AM

Valid to:
1/22/2017 5:29:59 AM

Subject:
CN=JWTS, O=JWTS, STREET=5 bis rue d'Arsonval, L=Paris, S=Paris, PostalCode=75015, C=FR

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00EB8D7D3B7964F43AF8A6D10531B94E74

File PE Metadata
Compilation timestamp:
1/2/2016 10:00:50 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x142F

Entry point:
E8, 1B, 14, 00, 00, E9, 95, FE, FF, FF, 3B, 0D, 50, 90, 40, 00, 75, 02, F3, C3, E9, A2, 14, 00, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 8B, D0, 66, 8B, 08, 83, C0, 02, 66, 85, C9, 75, F5, 66, 8B, 4D, 0C, 83, E8, 02, 3B, C2, 74, 05, 66, 39, 08, 75, F4, 66, 39, 08, 74, 02, 33, C0, 5D, C3, 8B, FF, 55, 8B, EC, 8B, 45, 08, 53, 8B, 5D, 0C, 66, 83, 3B, 00, 57, 8B, F8, 74, 43, 0F, B7, 08, 66, 85, C9, 74, 39, 8B, D1, 2B, C3, 8B, 4D, 0C, 66, 85, D2, 74, 19, 0F, B7, 11, 66, 85, D2, 74, 2B, 0F, B7, 1C, 08, 2B, DA, 75, 09...
 
[+]

Entropy:
0.2346

Code size:
18 KB (18,432 bytes)

Scan logonsessionold.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.