» WsServer.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

WsServer.exe

AdRem MyNet Toolset

AdRem Software sp z o.o.

It runs as a separate (within the context of its own process) windows Service named “AdRem MyNet Toolset Service”. This is installed with AdRem MyNet Toolset.

File name:

WsServer.exe

Publisher:

AdRem Software, Inc. (signed by AdRem Software sp z o.o.)

Product:

AdRem MyNet Toolset

Description:

MyNet Toolset Service

Version:

1.0.0.116

MD5:

eea7b4193cfdd90f106aba56b09c8ad6

SHA-1:

750c103f09d2c617aac78dab705479d9d2db406f

SHA-256:

8b368456a342801f8db58a3cc9f845ed4cb1ae524bfb079b4162e4092eed7cd2

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 3:40:22 AM UTC (today)

File size:

1.3 MB (1,376,680 bytes)

Product version:

1.0.0.0

Original file name:

WsServer.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\adrem\mynettoolset\1.0\wsserver.exe

Digital Signature

Signed by:

AdRem Software sp z o.o.

Authority:

VeriSign, Inc.

Valid from:

11/3/2009 1:00:00 AM

Valid to:

11/23/2012 12:59:59 AM

Subject:

CN=AdRem Software sp z o.o., OU=Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=AdRem Software sp z o.o., L=Krakow, S=Malopolska, C=PL

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

766A74F9840E579A390DB815B3E6A952

File PE Metadata

Compilation timestamp:

11/26/2009 12:09:07 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:1jSOIUDgGgyzaQfWTjTVjfOzm77WVfJVWztaco05EtvZ/C9AK89OWPCVBVGVMo:xSsDbgyzNfi5OS77WXVn65EtZC9ALiVW

Entry address:

0x1000

Entry point:

68, 01, 40, 6D, 00, E8, 01, 00, 00, 00, C3, C3, E7, 01, 63, 8F, 94, 02, 72, 47, 6E, 8C, 94, 45, EE, DF, C3, 31, 5F, 63, B9, B6, F9, 5D, 52, 87, 24, 42, 9F, 11, F5, F8, 91, 40, 30, 5E, 57, 46, 78, 44, E3, B6, FA, C9, 84, 72, DF, F0, D7, E9, 61, F4, 68, 2A, 44, CC, E3, C3, 1F, 80, 08, A0, 07, 2C, 25, 32, B2, 16, 81, F4, FC, C7, 19, 4B, 85, 39, 8A, D9, 07, 5B, 0F, FE, 32, CA, 07, 0D, D9, A1, 81, DA, F0, E3, 56, FC, BA, 2B, CF, A0, 64, FB, 65, 9A, F5, 8B, E8, 0A, A2, 66, 7B, 31, 35, 05, 5A, EB, DC, 19, C2, 32... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.7 MB (1,766,912 bytes)

Service

Display name:

AdRem MyNet Toolset Service

Service name:

AdRemWsServer

Type:

Win32OwnProcess

The file WsServer.exe has been discovered within the following program.

AdRem MyNet Toolset by AdRem Software, Inc.

www.adremsoft.com

18% remove it

Scan WsServer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.