home

svchostanalyzer.exe

Svchost Process Analyzer

A. & M. Neuber Software

This is a setup program which is used to install the application. The file has been seen being downloaded from neuber.com and multiple other hosts.
Publisher:
Neuber Software  (signed by A. & M. Neuber Software)

Product:
Svchost Process Analyzer

Version:
1.3.0.11

MD5:
c0b826afa4765bb24ca3327c3358b093

SHA-1:
69358d3c08c43cbaecfce2eaa2eddbd32f0bec27

SHA-256:
12d2146672a281319dea9f2ad3d31c16fc5eb25479cca271a986442214b7d7eb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 10:19:03 AM UTC  (today)

File size:
523.6 KB (536,128 bytes)

Product version:
1.1.0.0

Copyright:
Copyright (c) 2009-2015 Neuber Software

Original file name:
svchost-analyzer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
A. & M. Neuber Software

Authority:
Symantec Corporation

Valid from:
4/23/2015 2:00:00 AM

Valid to:
6/22/2018 1:59:59 AM

Subject:
CN=A. & M. Neuber Software, O=A. & M. Neuber Software, L=Halle, S=Sachsen-Anhalt, C=DE

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3D42E406CF5E4F4C9C8C05854C07297F

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:A/R5fhak9m+pt7RA99ln0mq1PjKxEVLW1meyUGpPCOe:A/R51Npt7o3031bW1HGM

Entry address:
0x1000

Entry point:
68, 01, 30, 4D, 00, E8, 01, 00, 00, 00, C3, C3, 5E, 65, BA, 57, 22, F3, 5B, FC, 7F, BC, 21, 3C, FE, 23, 5A, D6, AC, BF, 79, 75, D2, AE, 32, B5, E2, 37, 88, 32, 51, BE, A4, 6D, C2, 6D, 8D, 2B, 93, D8, 9D, 95, 57, 69, A7, 8A, 25, 4E, C9, 07, 3A, 20, 38, E9, E0, 46, A9, 7D, 20, C2, 10, 2A, 1E, 44, B7, EE, C7, D7, 7D, 0E, 47, E5, 58, B2, 05, 00, E1, 3A, B6, B3, 6E, 2E, E1, B7, 74, 3C, 16, 72, 48, 22, 61, 31, 97, 24, 20, 8E, E7, B9, 80, EB, 80, D4, 3C, 64, 24, C3, CD, 3A, 69, 5E, 64, F3, 31, D6, E3, EC, 4D, 9A...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
447.5 KB (458,240 bytes)

The file svchostanalyzer.exe has been seen being distributed by the following 2 URLs.

http://neuber.com/free/.../SvchostAnalyzer.exe

http://www.neuber.com/.../SvchostAnalyzer.exe

Scan svchostanalyzer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.