» sign.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

sign.exe

Symprex Email Signature Manager

Symprex Limited

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Symprex Email Signature Manager Sign’. This is installed with Symprex Email Signature Manager Deployment Tool.

File name:

sign.exe

Publisher:

Symprex Limited (signed and verified)

Product:

Symprex Email Signature Manager

Description:

Symprex Email Signature Manager Sign

Version:

6.4.0.110

MD5:

4b597bf10463db402b60ce994b1bb436

SHA-1:

e5a4e61ec5a6079507fd4d4806ff4bf7e13192b7

SHA-256:

7f013427c7793c001bcc284ad687b88623d57d0c152774436908643342d2c664

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 3:42:55 AM UTC (today)

File size:

99.9 KB (102,280 bytes)

Product version:

6.4.0.110

Original file name:

sign.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\symprex\email signature manager sign\sign.exe

Digital Signature

Signed by:

Symprex Limited

Authority:

VeriSign, Inc.

Valid from:

7/25/2012 8:00:00 PM

Valid to:

7/21/2015 7:59:59 PM

Subject:

CN=Symprex Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Symprex Limited, L=Richmond, S=Surrey, C=GB

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

76B81185EF586F2FC4BDC0526422D07E

File PE Metadata

Compilation timestamp:

6/5/2015 5:35:55 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

1536:ky/s4fvApGM86AnRjKRH0tCZZPESbYGIOfnToIfVDTjLxNhcA2mIRuqjDZH47/:ky/s4Ap8oUQHvTBfVDTjLxNYri7/

Entry address:

0x2789

Entry point:

E8, A1, 1F, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 60, 20, 41, 00, 75, 02, F3, C3, E9, 28, 20, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 57, 85, F6, 74, 07, 8B, 7D, 0C, 85, FF, 75, 15, E8, F0, 22, 00, 00, 6A, 16, 5E, 89, 30, E8, 94, 22, 00, 00, 8B, C6, 5F, 5E, 5D, C3, 8B, 45, 10, 85, C0, 75, 05, 66, 89, 06, EB, DF, 8B, D6, 2B, D0, 0F, B7, 08, 66, 89, 0C, 02, 83, C0, 02, 66, 85, C9, 74, 03, 4F, 75, EE, 33, C0, 85, FF, 75, D4, 66, 89, 06, E8, B0, 22, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, BC, 6A, 0C, 68, 78... 
[+]

Entropy:

6.4540

Code size:

44 KB (45,056 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Symprex Email Signature Manager Sign

Command:

"C:\Program Files\symprex\email signature manager sign\sign.exe"

The file sign.exe has been discovered within the following program.

Symprex Email Signature Manager Deployment Tool by Symprex Limited

www.symprex.com/products/email-signature-disclaimer-manager

About 6% of users remove it

Scan sign.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.