home

SLRegCerts.exe

Skyline DataMiner

Skyline Communications

Publisher:
Skyline Communications  (signed and verified)

Product:
Skyline DataMiner

Description:
Skyline Certificate Registration

Version:
8.5.1512.0

MD5:
48d1b55461e73aad3288c0fd67b6875d

SHA-1:
bdc555e3104d945888925a4dcc698c25a76d6fd6

SHA-256:
7c261fecb1b83d5da8c1364ed34ddbd3b988bd662c559c340b7a64fe76630886

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:41:14 AM UTC  (today)

File size:
15.1 KB (15,512 bytes)

Product version:
8.5.1512.0

Copyright:
Copyright © Skyline Communications 2009-2013

Original file name:
SLRegCerts.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\slregcerts.exe

Digital Signature
Signed by:
Skyline Communications

Authority:
Skyline Communications Root CA

Valid from:
5/16/2007 4:06:51 AM

Valid to:
12/31/2039 5:59:59 PM

Subject:
CN=Skyline Communications

Issuer:
CN=Skyline Communications Root CA

Serial number:
C2AA377642174FA6413F4B6D0E48B528

File PE Metadata
Compilation timestamp:
3/19/2015 9:50:52 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:1K76AV3PgQejkoEJUebCIUWYR9mupGlP1hoLcQejRnYe+PjPIR8M3Tvj:Q6AV/ejheuRWYRIDhofejRnYPLI+2j

Entry address:
0x40CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8536

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
8.5 KB (8,704 bytes)

The file SLRegCerts.exe has been seen being distributed by the following 2 URLs.

http://200.52.196.171/.../getTool.aspx?name=SLRegCerts

http://200.52.196.169/.../getTool.aspx?name=SLRegCerts

Scan SLRegCerts.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.