home

security_cleaner.exe

SDPS Electronics Limited

The application security_cleaner.exe by SDPS Electronics Limited has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is also typically executed from an Internet Explorer cache folder.
Publisher:
SDPS Electronics Limited  (signed and verified)

MD5:
9f69a673fc7f58710f46980c0dbcdce9

SHA-1:
654091128b56a83b9c35797e2ceb3d09b53a9b9a

SHA-256:
8706a5a3092c31a953030bd03d7f33ef2b99f779d8324ffc0e05f40ff4b67dc6

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/20/2024 9:22:12 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.12.30.15

File size:
562.6 KB (576,064 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\security_cleaner.exe

Digital Signature
Signed by:
SDPS Electronics Limited

Authority:
DigiCert Inc

Valid from:
3/10/2013 5:00:00 PM

Valid to:
3/19/2014 5:00:00 AM

Subject:
CN=SDPS Electronics Limited, O=SDPS Electronics Limited, L=London, S=Greater London, C=GB

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0F84EEDC40817186D107C2543BB7155B

File PE Metadata
Compilation timestamp:
12/13/2013 12:32:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x7DAFA

Entry point:
55, 8B, EC, 6A, FF, 68, A8, 51, 48, 00, 68, 34, E7, 47, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 58, 50, 48, 00, 33, D2, 8A, D4, 89, 15, 20, 31, 4D, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 1C, 31, 4D, 00, C1, E1, 08, 03, CA, 89, 0D, 18, 31, 4D, 00, C1, E8, 10, A3, 14, 31, 4D, 00, 6A, 01, E8, A5, 0A, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, C5, 09, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.8830

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
526.5 KB (539,136 bytes)

Remove security_cleaner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.