» SecureAPlusSetup.exe
Overview
Analysis
File Details
Downloads (4)

SecureAPlusSetup.exe

SecureAPlus

SecureAge Technology Pte Ltd

This is a self-extracting archive and installer. The file has been seen being downloaded from external.comss.ru and multiple other hosts.

File name:

Publisher:

SecureAge Technology (signed by SecureAge Technology Pte Ltd)

Product:

SecureAPlus

Description:

SecureAPlus Installer

Version:

3, 2, 0, 0

MD5:

2d2f32b067964836c1a4adb808d0b201

SHA-1:

d8db350fb77b07ef9c732d3e2355b4e3d90cf376

SHA-256:

1f9bd39cd768b8c3cefb900b8b8cdbc40b5e3fd50f1ceebc63c3e92e9c2c1bb1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/16/2024 6:39:47 AM UTC (today)

File size:

1.8 MB (1,916,608 bytes)

Product version:

3, 2, 0, 0

Original file name:

SecureAPlusSetup.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\secureaplussetup.exe

Digital Signature

Signed by:

SecureAge Technology Pte Ltd

Authority:

DigiCert Inc

Valid from:

12/3/2013 4:00:00 AM

Valid to:

2/13/2017 4:00:00 PM

Subject:

CN=SecureAge Technology Pte Ltd, O=SecureAge Technology Pte Ltd, L=Singapore, C=SG

Issuer:

CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0BC2456A55457A2E8D57DA2E1604AA26

File PE Metadata

Compilation timestamp:

7/24/2014 9:02:21 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:8mddPfJnjAdKNk/Hb0QBvWWkW4DLVkDSi1BhtOz28Eb/8knViYd:DTxjSKNk/Hb9BeW/nSi1BvOz28Eb/8kR

Entry address:

0x100131

Entry point:

E8, 4A, 74, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, 00, 40, 57, 00, 75, 02, F3, C3, E9, CC, 74, 00, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 14, 75, 20, E8, 2C, 24, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, AC, 16, 00, 00, 83, C4, 14, 83, C8, FF, E9, 99, 00, 00, 00, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 3B, FB, 74, 21, 3B, F3, 75, 1D, E8, FC, 23, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 7C, 16, 00, 00, 83, C4, 14, 83, C8, FF, EB, 6A, B8, FF, FF, FF, 7F, 89, 45, E4, 3B, F8... 
[+]

Code size:

1.2 MB (1,219,584 bytes)

The file SecureAPlusSetup.exe has been seen being distributed by the following 4 URLs.

http://external.comss.ru/url.php?url=http://dl4.comss.ru/.../SecureAPlusSetup.exe

http://software-files-a.cnet.com/s/software/13/86/46/.../SecureAPlusSetup.exe

http://software-files-a.cnet.com/s/software/13/81/93/.../SecureAPlusSetup.exe

https://secureaplus.secureage.com/.../SecureAPlusSetup.exe

Scan SecureAPlusSetup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.