home

Portable SecretZone.exe

Samsung Portable SecretZone

Clarus, Inc.

Publisher:
Clarus, Inc.  (signed and verified)

Product:
Samsung Portable SecretZone

Version:
1.0.81.0

MD5:
871f872b0c66ccf39f6c28b1ddae7a93

SHA-1:
d9f28fb705636b927ad7554f60a77129fab5c05b

SHA-256:
f428314582e132eba06c6edac5822d33f6c89e621ff6b217e89c99af31d7ce5d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/19/2024 9:38:02 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Suspicious
17571

File size:
1.4 MB (1,419,856 bytes)

Product version:
1.0.0.1

Copyright:
Copyright 2011 Clarus,Inc.

Original file name:
Portable SecretZone.exe

File type:
Executable application (Win32 EXE)

Language:
Korean

Common path:
C:\users\{user}\appdata\local\temp\portable secretzone.exe

Digital Signature
Signed by:
Clarus, Inc.

Authority:
Thawte, Inc.

Valid from:
4/7/2013 9:00:00 PM

Valid to:
6/7/2014 8:59:59 PM

Subject:
CN="Clarus, Inc.", O="Clarus, Inc.", L=Seocho-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6E2E527C790E005741281BA18FFEC8A7

File PE Metadata
Compilation timestamp:
6/5/2013 5:41:06 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:45fNItz5DYDLZIGTjNDMPHni9Yn100X4u2vD/GPEkO6m88dO:OfNk5Y5Gi96G/GPvWQ

Entry address:
0x27AE6

Entry point:
55, 8B, EC, 6A, FF, 68, A0, F3, 42, 00, 68, F8, 7E, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, 5F, 57, FF, 15, 10, B6, 42, 00, 59, 83, 0D, 74, 25, 64, 00, FF, 83, 0D, 78, 25, 64, 00, FF, FF, 15, D4, B5, 42, 00, 8B, 0D, 68, 25, 64, 00, 89, 08, FF, 15, D8, B5, 42, 00, 8B, 0D, 64, 25, 64, 00, 89, 08, A1, DC, B5, 42, 00, 8B, 00, A3, 70, 25, 64, 00, E8, C8, 03, 00, 00, 39, 1D, 28, A2, 43, 00, 75, 0C, 68, 1C, 7F, 42, 00, FF, 15...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
168 KB (172,032 bytes)

Scan Portable SecretZone.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.