home

SecureRoom.exe

비밀방 1.0 Free

Nadsoft Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SecureRoom’.
Publisher:
Nadsoft Inc.  (signed and verified)

Product:
비밀방 1.0 Free

Version:
12.326.1.1

MD5:
af74713549f04bea6caafa045ebd9287

SHA-1:
b2001a3903ccc929141e1a38b519fd0c959f65da

SHA-256:
359c372c092731c0f1bbd053d6b43fbd27e51b9adbb4418b9c11b3b5c4eccfa4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/30/2024 4:54:03 AM UTC  (today)

File size:
9.9 MB (10,359,168 bytes)

Product version:
12.326.1.1

Copyright:
Copyright(c) NADSOFT Inc. All rights reserved.

Original file name:
SecureRoom.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\rainbow security\secureroom\secureroom.exe

Digital Signature
Signed by:
Nadsoft Inc.

Authority:
VeriSign, Inc.

Valid from:
9/29/2011 9:00:00 AM

Valid to:
10/29/2012 8:59:59 AM

Subject:
CN=Nadsoft Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Nadsoft Inc., L="Haeundae-gu ", S=Busan, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
184E7C64B6A7DDB6917A0941CF832BC2

File PE Metadata
Compilation timestamp:
3/26/2012 10:54:43 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:5Bm13xoBEGU1DcBcL7qOz7sPaR7zytdFCLb9O:5BGNtyczytdFz

Entry address:
0x130032

Entry point:
E8, A1, 7D, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, C0, 0B, 5B, 00, 75, 02, F3, C3, E9, 28, 7E, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 85, F6, 75, 04, 33, C0, EB, 61, 83, 7D, 08, 00, 75, 13, E8, 49, 2D, 00, 00, 6A, 16, 5E, 89, 30, E8, 92, 80, 00, 00, 8B, C6, EB, 48, 83, 7D, 10, 00, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 74, 52, 00, 00, 83, C4, 0C, EB, C7, FF, 75, 0C, 6A, 00, FF, 75, 08, E8, B2, 30, 00, 00, 83, C4, 0C, 83, 7D, 10, 00, 74, BB, 39, 75, 0C, 73, 0E, E8, FF, 2C, 00, 00, 6A...
 
[+]

Entropy:
4.3559

Code size:
1.3 MB (1,412,096 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SecureRoom

Command:
"C:\Program Files\rainbow security\secureroom\secureroom.exe"


Scan SecureRoom.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.