home

FileAssociation.exe

Seclore FileSecure

Seclore Technology Private Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FileAssociations’.
Publisher:
Seclore Technology Pvt. Ltd.  (signed by Seclore Technology Private Limited)

Product:
Seclore FileSecure

Description:
FileSecure File Association Executable

Version:
1.0.0.0

MD5:
84d4a623effac5bc1e0c3788a3ea8d40

SHA-1:
7bde23068c9395cb616faf1aadea653281e8a95b

SHA-256:
a9e7fa5e2d33ffcd4024f9685274e075cecff6ff6167d0fd8446f57159eed81e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 7:01:32 PM UTC  (today)

File size:
112.9 KB (115,600 bytes)

Product version:
1.0.0.0

Copyright:
Copyright (c) 2008 Seclore Technology Pvt. Ltd.

Original file name:
FileAssociation.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\seclore\filesecure\desktop client\fileassociation.exe

Digital Signature
Signed by:
Seclore Technology Private Limited

Authority:
Symantec Corporation

Valid from:
2/3/2015 5:30:00 AM

Valid to:
5/1/2018 5:29:59 AM

Subject:
CN=Seclore Technology Private Limited, OU=STPL, O=Seclore Technology Private Limited, L=Mumbai, S=Maharashtra, C=IN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
262C0B338882BAF7EDCB763C14E352EA

File PE Metadata
Compilation timestamp:
2/1/2016 6:04:55 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
1536:wBn5yxP4zFEdrKUh3jjUazSE7d0eqSicZrNcu9sWjcdtgobsXZ2tRGeiA:ykyarKy7SE7dLFnCtgobgZ2LviA

Entry address:
0x3063

Entry point:
E8, 21, 42, 00, 00, E9, 7B, FE, FF, FF, FF, 35, 54, B0, 41, 00, FF, 15, 4C, 20, 41, 00, 85, C0, 74, 02, FF, D0, 6A, 01, 6A, 00, E8, 3C, 45, 00, 00, 59, 59, E9, 54, 45, 00, 00, 56, 6A, 04, 6A, 20, E8, CB, 45, 00, 00, 59, 59, 8B, F0, 56, FF, 15, 48, 20, 41, 00, A3, 74, C3, 41, 00, A3, 70, C3, 41, 00, 85, F6, 75, 05, 6A, 18, 58, 5E, C3, 83, 26, 00, 33, C0, 5E, C3, 6A, 0C, 68, 70, 83, 41, 00, E8, 06, 43, 00, 00, 83, 65, E4, 00, E8, 10, 38, 00, 00, 83, 65, FC, 00, FF, 75, 08, E8, 23, 00, 00, 00, 59, 8B, F0, 89...
 
[+]

Entropy:
6.4451

Code size:
65 KB (66,560 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
FileAssociations

Command:
"C:\Program Files\seclore\filesecure\desktop client\fileassociation.exe"


Scan FileAssociation.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.