home

ds2010.exe

concept/design GmbH

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘DataSecurity2’.
Publisher:
S.A.D. GmbH  (signed by concept/design GmbH)

Description:
DataSecurity 2

Version:
2.5.0.0

MD5:
e9368c739add44241c297d48715163f4

SHA-1:
41862c17f2f9c53702ccb55329b7a88060cbe81e

SHA-256:
b56a4243231db61e1bf868aa7aca25070c1c6e2162864719f59126c4694c8aa5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 3:51:11 PM UTC  (today)

File size:
819.9 KB (839,616 bytes)

Product version:
2.x

Copyright:
(c) 2011 S.A.D. GmbH

Trademarks:
(c) 2011 S.A.D. GmbH

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\s.a.d\simontools datasecurity 2\ds2010.exe

Digital Signature
Signed by:
concept/design GmbH

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
7/7/2009 2:00:00 AM

Valid to:
7/8/2011 1:59:59 AM

Subject:
CN=concept/design GmbH, OU=Software Development, O=concept/design GmbH, L=Detmold, S=Nordrhein Westfalen, C=DE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
100FA3F2A76DCE6D8D2477B91AED3666

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:YW8zrGjEIURGeAiQIB0ryaGHS7I4n5O1L71UL8VpgFxFEIrYqVD1+cpSCzaIDjUv:YW8/iCGIBonnMHu3aJqNrz5wlee

Entry address:
0x1000

Entry point:
68, 01, 60, 63, 00, E8, 01, 00, 00, 00, C3, C3, 7A, 20, 58, 93, 3F, 1C, 87, 92, EA, 25, 84, D7, 4E, 35, 05, C9, 96, AD, 54, 70, 4E, F2, D4, 02, 2F, 24, DD, BE, 7A, 6E, 9F, FB, C6, 9D, 1D, CE, 90, 61, 9B, C2, 03, 4B, 7E, 0E, 6E, 07, C2, 4D, 76, 55, 19, 1A, 04, F6, 56, 3E, E1, 63, 6D, 24, F4, 0D, 09, B5, 22, A7, A0, 41, 2E, BE, 13, CB, F9, 03, 52, C4, D5, FA, D8, 5B, 5E, F7, 1A, DD, D6, B7, 90, DA, C2, DC, 5D, 57, FF, 33, F8, 09, 18, BD, 4C, 3A, 57, 14, 0E, 81, EB, F4, C2, DA, E1, A4, 96, A4, 18, 1C, F5, 91...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
924.5 KB (946,688 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DataSecurity2

Command:
"C:\Program Files\s.a.d\simontools datasecurity 2\ds2010.exe" \autostart


Scan ds2010.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.