» SecureWord.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

SecureWord.exe

SecureWord Application

CEZEO software Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SecureWord’. This file is installed with the program SecureWord.

File name:

SecureWord.exe

Publisher:

CEZEO software Ltd. (signed and verified)

Product:

SecureWord Application

Description:

SecureWord

Version:

1, 60, 13, 83

MD5:

79d7f08aac8421ebb9d142fe0101f0dc

SHA-1:

c89f801e59bf20757b103d695b2a07f348d94550

SHA-256:

9820e0782f04b07ca9ec4775bfc82c6d1369fe6d9ea3cb74b498e5cfdefc39a2

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

11/16/2024 8:45:37 PM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/17411

Quick Heal

(Suspicious) - DNAScan

5.14.11.00

File size:

305.7 KB (313,024 bytes)

Product version:

1, 60, 13, 83

Trademarks:

http://www.cezeo.com

Original file name:

SecureWord.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\cezeo software\secureword\secureword.exe

Digital Signature

Signed by:

CEZEO software Ltd.

Authority:

The USERTRUST Network

Valid from:

3/30/2009 9:00:00 AM

Valid to:

3/31/2010 8:59:59 AM

Subject:

CN=CEZEO software Ltd., O=CEZEO software Ltd., STREET=Politehnicheskaya str. 6A - 3-N, L=Saint-Petersburg, S=Saint-Petersburg, PostalCode=194021, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00994AB32A157B0C243A714B4E931820F7

File PE Metadata

Compilation timestamp:

7/21/2009 9:47:08 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:zT4v0ttnC6AA3F+AmzPezkOsstXDCbtx7MID+c/e:zsv0ttzAAKDGGtxp/e

Entry address:

0x1000

Entry point:

68, 01, E0, 46, 00, E8, 01, 00, 00, 00, C3, C3, 8F, E4, 3D, 6D, C4, EC, F7, 06, AF, C1, 3B, A4, F5, 6C, CB, 50, A1, BF, FD, 54, 6F, BB, 89, 27, D6, 25, CA, 16, 3A, FB, 44, 7D, BE, 8D, 00, 80, 8B, AF, 2F, 21, F4, D5, 77, FC, AD, 63, C4, EB, FE, A4, 63, 78, 45, 0C, D3, 99, C5, EC, CB, 4E, 67, 77, A1, 95, 56, EB, CF, 0A, 5A, D1, AD, C8, 46, 84, 71, FF, BC, C6, D8, FF, 11, 4D, 9B, F6, 96, A5, 6E, 14, AC, 8E, B5, 35, 15, C0, 47, 19, E3, DC, 1C, 2B, 35, 85, 46, A5, BE, 87, A1, 6C, 08, 94, 88, 62, 63, 2B, B6, D8... 
[+]

Entropy:

7.3149

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

239.5 KB (245,248 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

SecureWord

Command:

"C:\Program Files\cezeo software\secureword\secureword.exe"

The file SecureWord.exe has been discovered within the following program.

SecureWord by CEZEO software Ltd.

Publisher's description - “SecureWord was originally designed as the most convenient and fully functional program for storing important information such as logins, passwords and files.”

www.cezeo.com

7% remove it

Scan SecureWord.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.