» tallylicserver.exe
Overview
Analysis
File Details
Behaviors (1)

tallylicserver.exe

Tally

Tally Solutions Private Limited

It runs as a windows Service named “Tally License Server 7.6”.

File name:

tallylicserver.exe

Publisher:

Tally Solutions Pvt. Ltd. (signed by Tally Solutions Private Limited)

Product:

Tally

Description:

Tally License Server

Version:

7.6.0.0

MD5:

f725ee43956e54348b9d87c4f3e03a8e

SHA-1:

00dfac2d25ebf7e099981f720f25b1cb3a137f8e

SHA-256:

02aec319e93ddb5095049592af50f490ded0c9f6bee2d6894003df7c2accf2a9

Scanner detections:

3 / 68

Status:

Clean (3 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/26/2024 11:18:42 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Packed/PECompact

7.1.1

Dr.Web

DLOADER.Trojan

9.0.1.0168

Trend Micro House Call

TROJ_GEN.F47V1107

7.2.168

File size:

1014 KB (1,038,320 bytes)

Product version:

Version 7.6

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Tally Solutions Private Limited

Authority:

VeriSign, Inc.

Valid from:

1/12/2012 3:00:00 AM

Valid to:

1/12/2013 2:59:59 AM

Subject:

CN=Tally Solutions Private Limited, OU=RnD, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Tally Solutions Private Limited, L=Bangalore, S=Karnataka, C=IN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

51C09D1ACE647EE3683019EF67C7CACA

File PE Metadata

Compilation timestamp:

10/16/2012 12:03:42 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

7.10

CTPH (ssdeep):

12288:6Av7SyZ+4G3UB/XwANn6ATRRCfEj7n3JXo5mpLsfDmOc2F4SUaEYoSoHH7RMl3px:RpZzVmf873yrci4S7dofVSZPp0muWb

Entry address:

0x97AF7

Entry point:

B8, DC, DD, 72, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, C0, 15, 39, 7C, 80, E8, 07, 21, 21, 70, 74, 48, AC, 25, 37, 85, BF, EE, 27, C3, E7, 57, 20, 87, D7, 9B, 31, D2, BC, 5D, 55, 61, BE, 79, 16, 6F, 7D, FD, 79, 6A, A4, A4, 58, 1C, 5C, 1D, 0A, 8F, 7A, 94, A6, 90, AF, 0D, 95, 03, 78, 6D, 9A, 65, B6, DD, 4B, B1, 72, 5A, 3D, 27, 18, E0, 6F, 88, 8B, 53, 0C, E4, 65, AA, 8A, 14, 3E, 93, 19, F0, 35, 59, 12, E8, 26, A3, 87, 09, 94... 
[+]

Entropy:

7.9984

Packer / compiler:

PECompact v2

Code size:

2.1 MB (2,203,648 bytes)

Service

Display name:

Tally License Server 7.6

Type:

Win32OwnProcess, InteractiveProcess

Scan tallylicserver.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.