XecureAero.dll

XecureURL Protector

SoftSecurity Co. Ltd.

This is installed with TouchEn safe.
Publisher:
SoftForum Co. Ltd.  (signed by SoftSecurity Co. Ltd.)

Product:
XecureURL Protector

Description:
ClientKeeper PhishingPro

Version:
1, 0, 0, 3

MD5:
4fdd2be084b4171bf35777d66bc923da

SHA-1:
a8821d5092441b8c2677e4808e6e418d6040a10d

SHA-256:
a65ed40e7ad43df26d18ff428c63694c5d7df8d169e9b0734e8dfbbb8bb2e5a3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 6:38:21 PM UTC  (today)

File size:
119.1 KB (121,936 bytes)

Product version:
1, 0, 0, 3

Copyright:
SoftForum Co. Ltd. Copyright 2009

Original file name:
XecureAero.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\bin\xecureaero.dll

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
12/15/2010 9:00:00 AM

Valid to:
12/16/2011 8:59:59 AM

Subject:
CN=SoftSecurity Co. Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SoftSecurity Co. Ltd., L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7BC30056E4BA2A4A96DDBA0C0AE5CE2D

File PE Metadata
Compilation timestamp:
5/7/2009 4:46:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:ismUoE8oD/qap4gGJUlUMrttyZKRhWJ9cC+ie6R8Gc6224:KUoE8oD/V1IArtty06VR8B62

Entry address:
0x825A

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 3B, 1F, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 50, 82, 01, 10, 89, 0D, 4C, 82, 01, 10, 89, 15, 48, 82, 01, 10, 89, 1D, 44, 82, 01, 10, 89, 35, 40, 82, 01, 10, 89, 3D, 3C, 82, 01, 10, 66, 8C, 15, 68, 82, 01, 10, 66, 8C, 0D, 5C, 82, 01, 10, 66, 8C, 1D, 38, 82, 01, 10, 66, 8C, 05, 34, 82, 01, 10, 66, 8C, 25, 30, 82, 01, 10, 66, 8C, 2D, 2C, 82, 01, 10, 9C, 8F, 05, 60, 82, 01, 10, 8B, 45...
 
[+]

Entropy:
6.2674

Code size:
72 KB (73,728 bytes)

The file XecureAero.dll has been discovered within the following program.

TouchEn safe  by SoftSecurity Co. Ltd.
25% remove it
 
Powered by Should I Remove It?

Scan XecureAero.dll - Powered by Reason Core Security