roboform-setup.exe

RoboForm

Siber Systems Inc

This is a setup and installation application.
Publisher:
Siber Systems  (signed by Siber Systems Inc)

Product:
RoboForm

Description:
RoboForm Installer and Uninstaller

Version:
7-9-17-5

MD5:
20efae31e43d97a19211544012947d6f

SHA-1:
69ff433aa98684bef6267d54cf28f81a9c37f8ee

SHA-256:
79b24f6451aeb749c0f1a360b944e016185edf9e9e7929a73c211f41f3922837

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:03:43 PM UTC  (today)

File size:
16.9 MB (17,767,464 bytes)

Product version:
7-9-17-5

Copyright:
Copyright (C) 1999-2015 Siber Systems Inc.

Original file name:
rfwipeout.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\roboform-setup.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
2/13/2012 2:00:00 AM

Valid to:
2/13/2017 1:59:59 AM

Subject:
CN=Siber Systems Inc, OU=RoboForm GoodSync, O=Siber Systems Inc, STREET=11781 Lee Jackson Hwy, STREET=Suite 380, L=Fairfax, S=VA, PostalCode=22033, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00EE721E6F485BBE355E57D2A4AA24D7C2

File PE Metadata
Compilation timestamp:
12/29/2015 7:00:42 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
393216:ryzdsQDperdpl8s/jISVVzlH8U7f8EJNnnKVZq:rSs8daRXlHdQeNnnj

Entry address:
0xA3CB7

Entry point:
E8, 4A, 9B, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 51, 51, 8D, 45, F8, 50, FF, 15, 88, 30, 4C, 00, 8B, 4D, F8, 8B, 45, FC, 6A, 00, 81, C1, 00, 80, C1, 2A, 68, 80, 96, 98, 00, 15, 21, 4E, 62, FE, 50, 51, E8, B1, 41, 00, 00, 83, FA, 07, 7C, 0E, 7F, 07, 3D, FF, 6F, 40, 93, 76, 05, 83, C8, FF, 8B, D0, 8B, 4D, 08, 85, C9, 74, 05, 89, 01, 89, 51, 04, C9, C3, 55, 8B, EC, 5D, E9, A3, EF, FF, FF, CC, CC, CC, CC, CC, CC, CC, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76...
 
[+]

Code size:
773 KB (791,552 bytes)

The file roboform-setup.exe has been seen being distributed by the following 30 URLs.

&onid=2196&oid=3001-2196_4-10211384&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=internet/file-sharing&topicbrcrm=&pid=14472226&mfgid=6196618&merid=6196618&ctype=dm&cval=NONE&devicetype=desktop&pguid=818f517d44ef6bdd3302d349&viewguid=a3o3yTEwyEjgXkuuNRf5q2bJVW84TqkUTipu&destUrl=http://software-files-a.cnet.com/u/.../RoboForm-Setup-cnetc.exe

http://www.roboform.net/.../AiRoboForm.exe

&onid=2196&oid=3001-2196_4-10211384&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=internet/file-sharing&topicbrcrm=&pid=14472226&mfgid=6196618&merid=6196618&ctype=dm&cval=NONE&devicetype=desktop&pguid=c11c0e45b9515ce1f28e5c47&viewguid=a6vzDIBvuWjs@Q43-vx02hmXp5rJ3C8t7967&destUrl=http://software-files-a.cnet.com/u/.../RoboForm-Setup-cnetc.exe

&onid=2196&oid=3001-2196_4-10211384&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=internet/file-sharing&topicbrcrm=&pid=14472226&mfgid=6196618&merid=6196618&ctype=dm&cval=NONE&devicetype=desktop&pguid=891fb3ffecb35a4dbe322144&viewguid=bBC4stOEZQZ2cctLxCPkx6EwA@4BymnrjfxM&destUrl=http://software-files-a.cnet.com/u/.../RoboForm-Setup-cnetc.exe

&onid=2196&oid=3001-2196_4-10211384&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=internet/file-sharing&topicbrcrm=&pid=14472226&mfgid=6196618&merid=6196618&ctype=dm&cval=NONE&devicetype=desktop&pguid=4fa01be340141dc2839dec40&viewguid=ascWudNCzzx8fPiktlzx7x5tOg7n012WebUA&destUrl=http://software-files-a.cnet.com/u/.../RoboForm-Setup-cnetc.exe

Latest 30 of 30 download URLs

Scan roboform-setup.exe - Powered by Reason Core Security