home

securesafe.exe

Secure Safe Bundle

Adlimbo LLC

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from pwdplz.com and multiple other hosts.
Publisher:
Secure Safe   (signed by Adlimbo LLC)

Product:
Secure Safe Bundle

Version:
1.0

MD5:
b719dfec4fa20c18fee060dca83dc113

SHA-1:
9e7606abdadb7eab287d4b35398c764d50afc870

SHA-256:
b2a8653fe840e271f46461414b5997ab66651aab842b68c40c653a34fa0f62ce

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/8/2024 2:22:39 AM UTC  (today)

File size:
10.1 MB (10,563,176 bytes)

Product version:
1.0

Copyright:
(c) 2015 - Secure Safe

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\securesafe.exe

Digital Signature
Signed by:
Adlimbo LLC

Authority:
DigiCert Inc

Valid from:
3/9/2016 4:00:00 PM

Valid to:
3/14/2017 5:00:00 AM

Subject:
CN=Adlimbo LLC, O=Adlimbo LLC, L=Winter Park, S=Florida, C=US

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0756F6370F8BAA0D2C55FA14EDD3CDE6

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:pND12J0Spuio5RiMP9A6xwDFitdvM/WEk1sBsb9wp27hyMvPrjfCr:pND1cM5RVO63dvxEkGOZBrrjf4

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9663

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file securesafe.exe has been seen being distributed by the following 3 URLs.

http://pwdplz.com/click?h=Ax722bagzrlDuPQ-PqZch1pAfai1mdGvIOnMRWyqKhcWkAODquMLgymk4gUwXKN2heV_ravzT1vha_icxeoH1GCTvhnd2eXVziL6DZkH61Rx9K9NdwcclCCTYaz8M1W1YMJ6y733975wyba0qg-8ipMilEiWrdX_SnK9vEQqvLsqBVuzL3qKx5ZRFOETOyoYBBItv2bhw6zcME8vZky3tpA_eOmsnC7P799S5AGn3fiyjjFNjcgvwObFLE9qnt0aZQzQk8X-Kv8Lk1zhncaYX2NiX8CsO9NLL1xTJ8ohj07cv6hbDUtEpmsi6tI8qzLRUPpaaEzTET5VslTFFd9NZj72L4bkc1LtWb8YaEs37uKGemwmW6JJeJ057LgSqIqySkD5JxMZ0eg-UpQmh2UKiOq-EQUEZGh1PPCCMc4DG9AucgDeGnTpZ9j8SWYvq2jTGxFTMtxIysgAXYp5jbga2REXFG2NJvZgwVaOxPhuFz0Qu3E68tb7SowZI3D-i_QO2jyBxB3ztda8RNgMWQcyWisUYf_hwHATwpSsr81DdXZgDnqs-0EWrg&subid=g-26997368-1af7b9c4a9854316ac9ca0a21f6c412e-&data_fb=yes&data_rtt=575&data_proto=http:&data_ic=false&data_ss=768x916&rt=72800&data_sid=1336c55c7abccef04fe65bc76c02bfc3

http://pwdplz.com/click?h=Ax722bagzrlwy05rC7xRQksQtrR8PDFf4LCIDQSqvCqxwmuoaqEgOuEMsj2Jt1OkdscSn7-qHQRcfiT8-zQy37MPiFCdt7cePVnGEdKY2NTv-Nz0wNcmnO5O_BMOY4tszM6cedurLsSV8N7fRb9U3MMiXPvzED2Q1rHdyK33Ao3SSt7bs_THTEYdN-dxJpnzvt_JaDkbyzYkOofVKkaJ-HAsLYvv0Aqn5ZHuAwvjg9Gam5nPBOLAaeDlthNI32TrVNpQDQ8vIs7lUbKzXqsP9PWutIAl9vrIzTsX7tIQX4Ei7pgWKlQi7oaNBtholBXkOtVJ7SastmzEKrgn9JqteJXIyVe25xud437SA8u8bchqrU57yUHWX2aczSMekWstp7flhF5NmKN-kJHnTx-fuWJUBOZ-Wtd2mgEXUovs8BKQnZzfRlj34D_1IyxcKeo2ZqCpxmap2F-UtY2_Znkr9HwM6AEa0pYGmFtLcwjN0JggWzBA1KcTYu3jlUZ7Ym43s7CrgZNPh-ilSG6b8zZ05A&subid=g-26997368-0eb2dc849966465699a8b0400f4b1f31-&data_fb=no&data_rtt=1014&data_proto=http:&data_ic=false&data_ss=870x1440&rt=17628&data_sid=140472521782290038c20da2f96d955d

http://309424f8e4e70f9c4ddb-0cec028d557344e39aed527e38ec465d.r85.cf5.rackcdn.com/securesafe.exe

Scan securesafe.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.