home

SiteRemoteClientService.exe

SiteRemote

PROVISIO GmbH

It runs as a separate (within the context of its own process) windows Service named “SiteRemote Client”.
Publisher:
PROVISIO Corporation  (signed by PROVISIO GmbH)

Product:
SiteRemote

Description:
SiteRemote Client Service

Version:
1.0.0.1259

MD5:
60c2ffd4e3ec1d715a7d06f8866c61d0

SHA-1:
85356904f69f3cf268f3e2febbe5e20244a1d38d

SHA-256:
6b285cda1a74d3531f44bd90c535120ab415c0284c50968d96b1473ba937eedf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:40:34 AM UTC  (today)

File size:
149 KB (152,592 bytes)

Product version:
1.0.0.1259

Copyright:
© PROVISIO. All rights reserved.

Original file name:
SiteRemoteClientService.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\sitekiosk\siteremote\siteremoteclientservice.exe

Digital Signature
Signed by:
PROVISIO GmbH

Authority:
GlobalSign nv-sa

Valid from:
11/23/2010 7:22:11 AM

Valid to:
11/23/2013 7:22:08 AM

Subject:
E=contact-europe@provisio.com, CN=PROVISIO GmbH, O=PROVISIO GmbH, L=Muenster, S=NRW, C=DE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012C78E123B0

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:hcp9sDbJa2SRh6T8VVxe2pZPMtEdvuT+Lp7Rqe:hxA2Sfc8TkULdGT+j

Entry address:
0x247BF

Entry point:
FF, 25, 00, 80, 42, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, BB, A4, D5, 79, 72, C4, 70, 05, BB, A4, D5, 79, 72, C4, 70, 05, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0704

Code size:
144 KB (147,456 bytes)

Service
Display name:
SiteRemote Client

Description:
Provides status information and control capabilities to a SiteRemote server.

Type:
Win32OwnProcess


Scan SiteRemoteClientService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.