home

PowerShellServer.exe

PowerShell Server V6

N SOFTWARE INC.

It runs as a separate (within the context of its own process) windows Service named “PowerShell Server V6”.
Publisher:
/n software inc. - www.nsoftware.com  (signed by N SOFTWARE INC.)

Product:
PowerShell Server V6

Version:
6.0.6160.0

MD5:
fd98de98f89da6a95e5d1b91cbdb3b50

SHA-1:
753ad0e61e9c13c7638ec8653f8294dc92e1815d

SHA-256:
0a8087d1f09087866f2b8cb8a42cb21f66cd36f03098ec2b27af7bf0958287bd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 9:00:38 PM UTC  (today)

File size:
1.9 MB (1,982,128 bytes)

Product version:
6.0.6160.0

Copyright:
Copyright (c) 2016 /n software inc. - All rights reserved.

Trademarks:
PowerShell Server (TM) is a Trademark of /n software inc.

Original file name:
PowerShellServer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\nsoftware\powershell server v6\powershellserver.exe

Digital Signature
Signed by:
N SOFTWARE INC.

Authority:
COMODO CA Limited

Valid from:
2/1/2016 5:30:00 AM

Valid to:
3/20/2019 5:29:59 AM

Subject:
CN=N SOFTWARE INC., O=N SOFTWARE INC., STREET=600 MARKET ST. STE 300, L=CHAPEL HILL, S=NC, PostalCode=27516, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
04C325B41C4270880AAF96B116D7D947

File PE Metadata
Compilation timestamp:
11/13/2016 4:34:23 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x1E107E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9248

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.9 MB (1,962,496 bytes)

Service
Display name:
PowerShell Server V6

Description:
Provides support for Windows PowerShell sessions and command invocation from remote machines through the SSH protocol

Type:
Win32OwnProcess


Scan PowerShellServer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.