home

SURA.exe

Syracuse University Remote Access

Syracuse University

Publisher:
ITS Syracuse University  (signed by Syracuse University)

Product:
Syracuse University Remote Access

Version:
2.0.0.1

MD5:
32b0eada035309707d679a49374642ba

SHA-1:
b7ecee5cb533a671ce4cda4c7b73db76667d6d11

SHA-256:
331da66a09d20433b70492a75de75f322840201ee5ea30e5c9329647ea16cfad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:02:10 AM UTC  (today)

File size:
680.3 KB (696,624 bytes)

Product version:
2.0.0.1

Copyright:
Copyright © Syracuse University 2007

Original file name:
SURA.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
Syracuse University

Authority:
GoDaddy.com, Inc.

Valid from:
4/15/2011 2:01:44 AM

Valid to:
4/15/2014 2:01:44 AM

Subject:
CN=Syracuse University, OU=Information Technology and Services, O=Syracuse University, L=Syracuse, S=NY, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2B44B2EB241746

File PE Metadata
Compilation timestamp:
10/18/2011 10:01:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:hOtscZleMMM08OMGXZZC0mlqZkmyGDVPKD8OMGXqzvW6f+:QecZleMMMnO4cyQO4a

Entry address:
0xA5D0E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.5045

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
655.5 KB (671,232 bytes)

The file SURA.exe has been seen being distributed by the following 2 URLs.

https://its.syr.edu//downloads/all/.../sura.exe

https://its.syr.edu/downloads/all/.../sura.exe

Scan SURA.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.