home

novousuario.exe

SICNET Tecnologia de Soluções Ltda

This is a setup program which is used to install the application. The file has been seen being downloaded from www.sicnet.com.br.
Publisher:
SICNET Tecnologia de Soluções Ltda  (signed and verified)

Version:
1.0.11.35

MD5:
67a93e19420b0da24276105c92ef03fe

SHA-1:
e5e998f31a254e0a2dc6ce3bf805b38867f11dcc

SHA-256:
943b07b5707fc720fb498579db182d54f0c875c89abb190d2d41e7964b77eb93

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 4:13:01 AM UTC  (today)

File size:
761.2 KB (779,448 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

Common path:
C:\users\{user}\downloads\novousuario.exe

Digital Signature
Signed by:
SICNET Tecnologia de Soluções Ltda

Authority:
COMODO CA Limited

Valid from:
7/29/2014 9:00:00 PM

Valid to:
7/29/2017 8:59:59 PM

Subject:
CN=SICNET Tecnologia de Soluções Ltda, O=SICNET Tecnologia de Soluções Ltda, STREET="Av. Paulista, 807 conj 804", L=São Paulo, S=SP, PostalCode=01311100, C=BR

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B50099F6AA88AB68D3876A8417CBA5A3

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:A2+mUG6Dhe0Ax1p7ek6mr2HsWTiIH66rDPH0S5ByCvhHSNlGw7:lh1R5L6mrqHi6lPPUAByahH0Gc

Entry address:
0xA0CF4

Entry point:
55, 8B, EC, 83, C4, F0, B8, 54, 0A, 4A, 00, E8, 54, 5B, F6, FF, A1, C0, 35, 4A, 00, 8B, 00, E8, 38, 3D, FC, FF, A1, C0, 35, 4A, 00, 8B, 00, BA, 54, 0D, 4A, 00, E8, 0F, 39, FC, FF, 8B, 0D, B0, 35, 4A, 00, A1, C0, 35, 4A, 00, 8B, 00, 8B, 15, 28, EE, 49, 00, E8, 27, 3D, FC, FF, A1, C0, 35, 4A, 00, 8B, 00, E8, 9B, 3D, FC, FF, E8, BE, 35, F6, FF, 00, 00, FF, FF, FF, FF, 17, 00, 00, 00, 43, 72, 69, 61, E7, E3, 6F, 20, 64, 65, 20, 6E, 6F, 76, 6F, 20, 75, 73, 75, E1, 72, 69, 6F, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
639.5 KB (654,848 bytes)

The file novousuario.exe has been seen being distributed by the following URL.

http://www.sicnet.com.br/.../novousuario.exe

Scan novousuario.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.