» latest.exe
Overview
Analysis
File Details
Programs (1)
Downloads (11)

latest.exe

COMODO BackUp

Comodo Security Solutions

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with Comodo BackUp. The file has been seen being downloaded from download.comodo.com and multiple other hosts.

File name:

latest.exe

Publisher:

COMODO (signed by Comodo Security Solutions)

Product:

COMODO BackUp

Description:

COMODO BackUp setup

Version:

4.4 build 23

MD5:

193642adb57aec509ba3fd698a09efd2

SHA-1:

d9166b6ac1c069f028188357ff40256d7395868c

SHA-256:

ae1c457e4968758551c0e99ce62cb87c02b6c134afda6d1d700da3b37a2d7610

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/5/2024 6:29:33 PM UTC (today)

File size:

21.4 MB (22,435,552 bytes)

Product version:

4.4 build 23

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\Program Files\comodo\comodo backup\latest.exe

Digital Signature

Signed by:

Comodo Security Solutions

Authority:

COMODO CA Limited

Valid from:

3/31/2014 8:00:00 PM

Valid to:

4/1/2015 7:59:59 PM

Subject:

CN=Comodo Security Solutions, O=Comodo Security Solutions, STREET=1255 Broad St., STREET=Suite 100, L=Clifton, S=New Jersey, PostalCode=07013, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

39F51FF05883BD411616BFA62C1C74EF

File PE Metadata

Compilation timestamp:

4/10/2010 8:19:31 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

393216:Es5Q1AuX1FFetKFOfzJyb2omyUw7RLo4WRsyo1fL79UXPj5MXHQqkJGlF:Es52AuXHQagzJk+yUwBo5oHUXPFkQ3K

Entry address:

0x354B

Entry point:

81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 84, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, 06, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 04, 86, 40, 00, 68, A0, 85, 46, 00, E8, 35, 26, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 23, 26, 00, 00... 
[+]

Entropy:

7.9970

Packer / compiler:

Nullsoft install system v2.x

Code size:

25 KB (25,600 bytes)

The file latest.exe has been discovered within the following program.

Comodo BackUp by COMODO

Publisher's description - “Comodo Backup is a powerful and easy to use desktop application that helps home and business users protect their valuable data against damage or loss.”

backup.comodo.com

9% remove it

The file latest.exe has been seen being distributed by the following 11 URLs.

http://download.comodo.com/cbu/download/.../CB_setup.exe#_ga=1.53315488.944793401.1486604186

http://www.majorgeeks.com/index.php?ct=files&action=download&

http://downloads.comodo.com/cbu/download/.../CB_setup.exe

http://www.techspot.com/downloads/downloadnow/.../?evp=b9f9adf415e4f8d287a2e784ef512b54&file=1

http://cdn.download.comodo.com/cbu/download/.../CB_4.4.1.23_xp_vista_server2003_server2008_win7_win8.exe

http://www.techspot.com/downloads/downloadnow/.../?evp=59b8cdbfc5c199e896809a7b532a018a&file=1

http://down.filepuma.com/files/compression-and-backup/.../Comodo_BackUp_v4.4.1.23.exe

http://www.filepuma.com/down/1426024252c7046/comodo_backup_4.4.1.23/.../0/

http://www.filepuma.com/file/1426024252c7046/comodo_backup_4.4.1.23/.../0/

http://cdn.download.comodo.com/cbu/download/.../CB_setup.exe

http://download.comodo.com/cbu/download/.../CB_setup.exe

Scan latest.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.