home

ptm5300pushmonitor.exe

Zhuhai Seine Technology Co., Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PTM5300Monitor’.
Publisher:
Seine  (signed by Zhuhai Seine Technology Co., Ltd)

Description:
M5000-M6000 Push Scan Monitor

Version:
1.0.0.1

MD5:
f7440ce8d98656582cad0ba422a4ff53

SHA-1:
7b8731c9d23620c2e86f9ad88bb254693ec475e1

SHA-256:
a533bddcc27b4882770042753232664e4737ae95aac1267bede49b64d8322888

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 9:49:16 PM UTC  (today)

File size:
283 KB (289,816 bytes)

Product version:
1.0.0.1

Copyright:
Copyright ? 2012 Zhuhai Seine Technology Co., Ltd. All rights reserved.

Original file name:
PushMonitor.exe

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\pantum\ptm5300\pushscan\ptm5300pushmonitor.exe

Digital Signature
Signed by:
Zhuhai Seine Technology Co., Ltd

Authority:
VeriSign, Inc.

Valid from:
1/17/2012 3:00:00 AM

Valid to:
1/17/2015 2:59:59 AM

Subject:
CN="Zhuhai Seine Technology Co., Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Zhuhai Seine Technology Co., Ltd", L=ZhuHai, S=GuangDong, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
012566AAF83B582DDE2375C4EFBE7A5D

File PE Metadata
Compilation timestamp:
6/3/2013 10:54:03 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:CRbMz0ZRwWU9My5ilWhg36IDi5D9gfp6YV8tC:Cxq2RwWSelWhgQJgwYqU

Entry address:
0x14DF0

Entry point:
48, 83, EC, 28, E8, E3, 39, 00, 00, 48, 83, C4, 28, E9, 16, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, C9, 33, 02, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, 51, 3A, 00, 00, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8D, 05, E7, 87, 01, 00, 8B, DA, 48, 8B, F9, 48, 89, 01, E8, 7E, 3B, 00, 00, F6, C3, 01, 74, 08, 48, 8B, CF, E8, 01, D0, FE, FF, 48, 8B, C7, 48, 8B...
 
[+]

Code size:
160 KB (163,840 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PTM5300Monitor

Command:
C:\Program Files\pantum\ptm5300\pushscan\ptm5300pushmonitor.exe


Scan ptm5300pushmonitor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.