home

Scania.FleetManagement.Tacho.WinApps.RemoteDownloadAuthentication.GUI.exe

GUI

Scania CV AB

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Scania Tachograph Remote Download’.
Publisher:
SCANIA  (signed by Scania CV AB)

Product:
GUI

Version:
2.0.5158.18741

MD5:
c3f8e3f3972464a5a7ee3a8b2d33847e

SHA-1:
0f7f9921da1c00f8cc9e2776b7c71dcfca383e49

SHA-256:
5e5818d5943a739dd65ee199c7a57dd9611f9883037227980710d093c4d60c48

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 3:15:24 AM UTC  (today)

File size:
95 KB (97,304 bytes)

Product version:
2.0.5158.18741

Copyright:
Copyright © SCANIA 2012

Original file name:
Scania.FleetManagement.Tacho.WinApps.RemoteDownloadAuthentication.GUI.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\scania\scania tachograph remote download\scania.fleetmanagement.tacho.winapps.remotedownloadauthentication.gui.exe

Digital Signature
Signed by:
Scania CV AB

Authority:
GlobalSign nv-sa

Valid from:
6/18/2012 9:58:27 AM

Valid to:
6/19/2015 9:58:27 AM

Subject:
CN=Scania CV AB, OU=REIS, O=Scania CV AB, L=Sodertalje, S=Sweden, C=SE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C419EEA78FFE84C988903818E4B97C94

File PE Metadata
Compilation timestamp:
2/14/2014 10:24:43 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:o7AecpNURFc9s+X+Xw7UUdJx/Mp1Hbr00VEqky7GYU0ALwCV01:Z3WoHJxM/HvggU0PCVo

Entry address:
0x170DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
84.5 KB (86,528 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Scania Tachograph Remote Download

Command:
C:\Program Files\scania\scania tachograph remote download\scania.fleetmanagement.tacho.winapps.remotedownloadauthentication.gui.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.