home

safesignuserclient3087-32.exe

SafeSign User Client 3.0.87 (32 bits)

Morpho Cards & A.E.T

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from wwws.prodemge.gov.br.
Publisher:
Morpho Cards & A.E.T

Product:
SafeSign User Client 3.0.87 (32 bits)

Description:
SafeSign User Client 3.0.87 (32 bits) Setup

MD5:
ce10dbbe95e9c177c760f9b6d7608112

SHA-1:
340f2dd5be2b304c874bf46b7a372b7e8eae5dab

SHA-256:
4123bf54f70e7c6db512546fd1487bce3790cf0b94a1ffc26dfeb60820eee6e6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:00:34 PM UTC  (today)

File size:
6.4 MB (6,695,457 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\safesignuserclient3087-32.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:HjvWmcwrSdhXiDcMy/Qgrdd+C6ntJqgdmkVhTyaUTDcSc3p2Gp2ggJyRgJ:DvWcIVQgxy/qgU6UvcTZ5p2BCgJ

Entry address:
0x9C40

Entry point:
60, 88, CA, 53, 68, 41, DE, FF, 00, B4, 78, FE, CE, 8A, D5, 69, E8, 60, C9, 0F, 4F, 89, C3, 87, DB, 81, E9, CE, 9E, 00, 00, 88, EA, 89, C7, 81, C1, 03, 06, 00, 00, 87, C2, 68, 5A, 9A, 16, 00, 69, EA, 84, 87, 39, A9, 1B, D9, 89, DE, 23, FF, F6, C7, F3, C7, C3, 39, 6C, 5A, 6C, 87, D8, E8, 00, 00, 00, 00, 69, FF, 2F, AB, 73, 7C, F7, C0, D7, 5D, A6, F9, C6, C1, D3, 80, F5, D4, 35, 75, 31, 00, 00, 0F, B7, D7, F7, C5, AC, 3E, 0E, 6F, 59, 0F, BF, F6, FE, C7, 68, 3C, D2, CC, 00, 69, E8, E5, E0, E2, E4, F3, 2A, F9...
 
[+]

Code size:
37 KB (37,888 bytes)

The file safesignuserclient3087-32.exe has been seen being distributed by the following URL.

https://wwws.prodemge.gov.br/certificacaodigital/images/downloads/.../safesignuserclient3087-32.exe

Scan safesignuserclient3087-32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.