home

sfrnetworkinstaller.exe

F-Secure Service Enabler

F-Secure Corporation

This is a setup and installation application. The file has been seen being downloaded from securite.sfr.fr and multiple other hosts.
Publisher:
F-Secure Corporation  (signed and verified)

Product:
F-Secure Service Enabler

Description:
F-Secure Network Installer

Version:
3.06.180.0

MD5:
f8018bcc558d18b932331998f73881b6

SHA-1:
06244aac854fe4bf823755f0481d661834a37b53

SHA-256:
8283a55375067884922df0906d996a71f0ed80bd6f636f2f8fae41f7c3c33b0f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 7:54:41 PM UTC  (today)

File size:
840 KB (860,128 bytes)

Product version:
3.06.180.0

Copyright:
Copyright © 2014-2016 F-Secure Corporation

Original file name:
NetworkInstaller.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\sfrnetworkinstaller.exe

Digital Signature
Signed by:
F-Secure Corporation

Authority:
DigiCert Inc

Valid from:
3/23/2016 1:00:00 AM

Valid to:
6/19/2019 2:00:00 PM

Subject:
CN=F-Secure Corporation, O=F-Secure Corporation, L=Helsinki, S=Southern Finland, C=FI, PostalCode=00180, STREET=Tammasaarenkatu 7, SERIALNUMBER=0705579-2, OID.1.3.6.1.4.1.311.60.2.1.3=FI, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
041BB945D9BF4EFB0CA0FD633751DB8A

File PE Metadata
Compilation timestamp:
2/3/2016 12:31:42 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12288:hwgt1mI57UVeAEFyyZIpiCL6bAJ6ZZWUe768eeWVmI:hwC1mGCerZHCGLZZNe765PmI

Entry address:
0x2A418

Entry point:
E8, 73, 7F, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 83, 7D, 08, 00, 75, 04, 33, C0, 5D, C3, 53, 57, FF, 75, 08, E8, A7, 1A, 00, 00, 8D, 78, 01, 57, E8, 5F, 01, 00, 00, 8B, D8, 59, 59, 85, DB, 74, 15, FF, 75, 08, 57, 53, E8, 13, 84, 00, 00, 83, C4, 0C, 85, C0, 75, 0A, 8B, C3, EB, 02, 33, C0, 5F, 5B, 5D, C3, 33, C0, 50, 50, 50, 50, 50, E8, 76, 20, 00, 00, CC, 55, 8B, EC, 8B, 55, 14, 8B, 4D, 08, 56, 85, D2, 75, 0D, 85, C9, 75, 0D, 39, 4D, 0C, 75, 21, 33, C0, EB, 2E, 85, C9, 74, 19, 8B, 45, 0C, 85, C0, 74, 12...
 
[+]

Code size:
266 KB (272,384 bytes)

The file sfrnetworkinstaller.exe has been seen being distributed by the following 9 URLs.

http://securite.sfr.fr/downloadpack.php?k=6e9ed9bbf1ba53492e012a4cefa2c2b21b7a08a97042e361f6a002b33617144fbdb6dd8075d3fb457c85ed6bdc16186da002c8fb5657da89418cae43acf966f3

http://securite.sfr.fr/downloadpack.php?k=ab327aefb068001d5f3b68f1967b945c7db51246d636713b53f1d448e9ed298104e394699dad89c557cee140828016ad26230eb65daa2b17431f17deec3957bb

http://securite.sfr.fr/downloadpack.php?k=29c3743e995aef126ced98d7e7540490f1ff8bd3b84783aa7c184a39d153e7a703a92e8b746694dce1d1ff48eae5f5b9d1313823daa71aae449befb3ff39f0f7

http://securite.sfr.fr/downloadpack.php?k=3a814d261aa4e73ea1430bacc43485da506e6399739e10bc507ffddc29e15038800d121816172ae536cc9086cdfd23a42f246e16baed1d27258659e6e4c13178

http://securite.sfr.fr/downloadpack.php?k=d0fcad30bf7a47c6ff4c9dd1053fb5c4fc86e24a1aeac016bc9c71a1c973c0c21383806fe6f1b8c0d2e68570c82d7a4f512747ef5a93a43376d0596fbf72f75a

http://securite.sfr.fr/downloadpack.php?k=efc8750b39b76366be6e6428d12385454eae9589d129d4c4b22ae2e24850634a590660d8e7c8e904983948653df33591a00b20665e2d150ea4f6716a55f9e37a

http://securite.sfr.fr/downloadpack.php?k=8c77b322fa140e6d4eeb93bd73e1eb18b6678498dc20f9d9415c47504f41ef97abda7a2929a999f5248b484176fc490da14fb548dac84071a9ee99a1d07812ee

http://securite.sfr.fr/downloadpack.php?k=648057dd8ed303b68d8a16bfd81f82905cab189c721098aec7d1f5d807cbcfb190ee657c4729c019b6d93d72c252b92a38ed73da4297cca9bcff91d551db0839

http://dl.sfr.fr/.../Win_SecuPSC11.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.