» mysecretfolder-v53-setup.exe
Overview
Analysis
File Details
Downloads (1)

mysecretfolder-v53-setup.exe

MySecretFolder

WinAbility® Software Corporation

This is a setup and installation application. The file has been seen being downloaded from files.winability.com.

File name:

Publisher:

WinAbility® Software Corporation

Product:

MySecretFolder

Description:

MySecretFolder Installation package

Version:

5.3

MD5:

01f4b1d455c2e2959457795370c8dad7

SHA-1:

998b6533d2c0bccf61c5e476c26e5cfedb17d3c1

SHA-256:

fa076baf29cf2fd64bce349363edf4183725be11ae16762a4b2932f2ec5b835c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/27/2024 5:46:41 PM UTC (today)

File size:

1.3 MB (1,325,144 bytes)

Product version:

5.3

Trademarks:

MySecretFolder[TM] and WinAbility® are registered trademarks or trademarks of WinAbility Software Corporation and/or its suppliers.

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\mysecretfolder-v53-setup.exe

File PE Metadata

Compilation timestamp:

4/2/2014 9:00:15 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:zsXMcmfSuu8hVGJ0gUBO6uBkUtVymrN81H7/xI0DQvf+GdFwF:gMcmfluKGJ16OzzrymG1H7xI0DwTwF

Entry address:

0x6703E0

Entry point:

85, F3, 85, C1, 71, 0B, 0F, BE, E9, FE, C0, 69, FD, 29, A6, 3C, AF, 4B, 70, 07, 85, CD, B9, FD, 5B, 7E, 04, 8D, 3D, FF, 8A, 0C, D8, FF, CD, 81, F2, 8C, E2, 76, E5, 8A, D9, F6, C6, 8C, 86, DD, 0A, F3, BD, CC, F0, FF, FF, 80, DE, 3B, B6, DB, 11, F2, 81, F5, CD, 0E, 00, 00, F6, C5, 4A, 86, DD, 69, D5, 32, 3F, 12, 44, 87, F5, 0F, BE, DB, 81, C6, 1A, 02, 00, 00, 0F, BF, CA, F3, 56, F3, F2, B2, 4F, 58, EB, 09, 8D, 15, CE, 48, 86, 02, 41, 31, F2, 69, C0, 45, 08, 00, 00, FE, CC, 0C, 91, F3, 0F, AF, F3, 69, DD, 69... 
[+]

Entropy:

7.9017 (probably packed)

Code size:

1.1 MB (1,187,840 bytes)

The file mysecretfolder-v53-setup.exe has been seen being distributed by the following URL.

http://files.winability.com/MySecretFolder-v53-setup.exe

Scan mysecretfolder-v53-setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.