home

surfeasyvpn.exe

SurfEasy Inc

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘SurfEasy’.
Publisher:
SurfEasy Inc  (signed and verified)

MD5:
a1524dd914b1709e8d041b7044624886

SHA-1:
5d6f31cc4becd4ef856765b2ea34426521a14657

SHA-256:
2c861e6c35c6976ec5351366318d39d2caaab9b9f6a562df6fad613c68c03dae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 8:50:35 AM UTC  (today)

File size:
12.8 MB (13,421,936 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\surfeasy vpn\client\surfeasyvpn.exe

Digital Signature
Signed by:
SurfEasy Inc

Authority:
Symantec Corporation

Valid from:
1/7/2015 2:00:00 AM

Valid to:
2/7/2016 1:59:59 AM

Subject:
CN=SurfEasy Inc, O=SurfEasy Inc, L=Toronto, S=Ontario, C=CA

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
7AB29F0F99D73DC0356D7255FC8719C7

File PE Metadata
Compilation timestamp:
1/15/2015 2:25:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:DJlKqGAzKsHyFfWcBHZ9HK7sPz54MeEEYrTcvqM2POic:P7GjQOZ9q7sPH4qMlR

Entry address:
0x1CBAD3

Entry point:
E8, 2A, CE, 00, 00, E9, 16, FE, FF, FF, FF, 35, C8, 5C, 07, 01, E8, F3, B9, 00, 00, 85, C0, 59, 74, 02, FF, D0, 6A, 19, E8, C6, C2, 00, 00, 6A, 01, 6A, 00, E8, 30, 6A, 00, 00, 83, C4, 0C, E9, 35, 69, 00, 00, 56, FF, 35, C8, 5C, 07, 01, E8, C8, B9, 00, 00, FF, 74, 24, 0C, 8B, F0, E8, 46, B9, 00, 00, 59, 59, A3, C8, 5C, 07, 01, 8B, C6, 5E, C3, E9, 69, F5, FF, FF, 6A, 0C, 68, 38, 1A, 03, 01, E8, DE, C1, 00, 00, 8B, 75, 08, 85, F6, 74, 75, 83, 3D, 5C, 6D, 07, 01, 03, 75, 43, 6A, 04, E8, 1F, D1, 00, 00, 59, 83...
 
[+]

Entropy:
7.4568

Code size:
2.5 MB (2,613,248 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SurfEasy

Command:
C:\Program Files\surfeasy vpn\client\surfeasyvpn.exe startup


Scan surfeasyvpn.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.