60second_en_us.exe

Bitdefender SRL

This is a setup program which is used to install the application. The file has been seen being downloaded from www.sosvirus.net and multiple other hosts.
Publisher:
Bitdefender SRL  (signed and verified)

MD5:
ec49ec4785eb3e962b2cc9857655f99a

SHA-1:
e8e0662b230e684248ff9cd98e09f935d81c8e29

SHA-256:
247924303b9f13135a9a1990dd0a610fc8931e26822d43631d3445398b3373be

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 2:51:23 PM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0120
7.2.198

File size:
156.4 KB (160,160 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\60second_en_us.exe

Digital Signature
Signed by:

Authority:
VeriSign

Valid from:
12/4/2012 7:00:00 PM

Valid to:
1/4/2014 6:59:59 PM

Subject:
CN=Bitdefender SRL, OU=PD, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Bitdefender SRL, L=Bucharest, S=Romania, C=RO

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
491F09787113578567BB451222AA64D1

File PE Metadata
Compilation timestamp:
1/7/2013 2:47:25 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:7kcH/0Y7k/wuPbOEnQT9um89fxSQsoFlXzkIW:7kcHP7k/wuPqEnQ8m89fqqlXzW

Entry address:
0x1D61

Entry point:
E8, D9, 17, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, F8, EF, 40, 00, 89, 0D, F4, EF, 40, 00, 89, 15, F0, EF, 40, 00, 89, 1D, EC, EF, 40, 00, 89, 35, E8, EF, 40, 00, 89, 3D, E4, EF, 40, 00, 66, 8C, 15, 10, F0, 40, 00, 66, 8C, 0D, 04, F0, 40, 00, 66, 8C, 1D, E0, EF, 40, 00, 66, 8C, 05, DC, EF, 40, 00, 66, 8C, 25, D8, EF, 40, 00, 66, 8C, 2D, D4, EF, 40, 00, 9C, 8F, 05, 08, F0, 40, 00, 8B, 45, 00, A3, FC, EF, 40, 00, 8B, 45, 04, A3, 00, F0, 40, 00, 8D, 45, 08, A3, 0C, F0, 40...
 
[+]

Code size:
34.5 KB (35,328 bytes)

The file 60second_en_us.exe has been discovered within the following programs.

Quicken 2013  by Intuit Inc.
Quicken is a personal finance management tool developed by Intuit, Inc.
www.intuit.com
11% remove it
Toolwiz BSafe  by ToolWiz
www.Toolwiz.com
About 9% of users remove it
About 5% of users remove it
 
Powered by Should I Remove It?

The file 60second_en_us.exe has been seen being distributed by the following 12 URLs.

https://www.sosvirus.net/en/download/.../?wpdmdl=813

https://download.bitdefender.com/npd/.../60Second_en_us.exe

http://work-soft.net/.../download.php?id=MTEzODg=908165b2bbe23bb6627dcafcd2bcb038&dfu=MTEzODg=908165b2bbe23bb6627dcafcd2bcb038&sec_code=9729c&name=60Second_en_us.exe