home

tsvr.exe

合肥智明星通软件科技有限公司

The application tsvr.exe by 合肥智明星通软件科技有限公司 has been detected as a potentially unwanted program by 3 anti-malware scanners. It runs as a separate (within the context of its own process) windows Service named “IhPul”.
Publisher:
合肥智明星通软件科技有限公司  (signed and verified)

MD5:
d0139d4e7b346c48d32fcf4d43c34526

SHA-1:
ac0b0c043306ecbc92b2eaa6bc19d74da50f2fc1

SHA-256:
892d8302878aa5261ae536b3c5e189cb9e0fff0e21b78519cfd4ec112b9c6f2c

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
6/27/2025 3:09:14 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Adware.Mutabaha.1137, Adware.Mutabaha.779
9.0.1.05190

F-Secure
Riskware.Application.Elex.AH
5.15.154

Kaspersky
not-a-virus:AdWare.Win32.ELEX
15.0.2.529

File size:
113.6 KB (116,368 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\tsv\tsvr.exe

Digital Signature
Signed by:
合肥智明星通软件科技有限公司

Authority:
GlobalSign nv-sa

Valid from:
10/26/2015 9:16:00 AM

Valid to:
8/5/2016 8:17:44 AM

Subject:
CN=合肥智明星通软件科技有限公司, O=合肥智明星通软件科技有限公司, L=合肥, S=安徽, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112188C06CE42FEC143689EB8C1DFD2B586C

File PE Metadata
Compilation timestamp:
3/18/2016 10:29:17 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x9535

Entry point:
22, 6A, 5C, 22, 3A, 5C, 22, 66, 61, 6C, 73, 65, 5C, 22, 2C, 5C, 22, 6B, 5C, 22, 3A, 5C, 22, 5C, 22, 2C, 5C, 22, 68, 5C, 22, 3A, 5C, 22, 66, 61, 6C, 73, 65, 5C, 22, 2C, 5C, 22, 69, 5C, 22, 3A, 5C, 22, 66, 61, 6C, 73, 65, 5C, 22, 7D, 2C, 7B, 5C, 22, 66, 5C, 22, 3A, 5C, 22, 32, 5C, 22, 2C, 5C, 22, 67, 5C, 22, 3A, 5C, 22, 66, 61, 6C, 73, 65, 5C, 22, 2C, 5C, 22, 64, 5C, 22, 3A, 5C, 22, 36, 32, 2E, 30, 5C, 22, 2C, 5C, 22, 65, 5C, 22, 3A, 5C, 22, 31, 34, 35, 36, 38, 32, 33, 30, 39, 33, 35, 39, 32, 5C, 22, 2C, 5C...
 
[+]

Code size:
36.5 KB (37,376 bytes)

Service
Display name:
IhPul

Description:
Manages network policy and network policy notification delivery for TSv.com.

Type:
Win32OwnProcess


Remove tsvr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.