dsupport_old.exe

dSupport

John Shaw

Publisher:
Foolish IT  (signed by John Shaw)

Product:
dSupport

Version:
2.04.0020

MD5:
7070e15a91eb5daf4ba2dd7f67de8135

SHA-1:
850b8ebc355e607921cd0a34230d66d1222f27fb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 10:56:04 PM UTC  (today)

File size:
1.1 MB (1,182,592 bytes)

Product version:
2.04.0020

Copyright:
Foolish IT

Original file name:
dSupport.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\dsupport\dsupport_old.exe

Digital Signature
Signed by:

Authority:
StartCom Ltd.

Valid from:
2/16/2012 12:30:13 PM

Valid to:
2/17/2014 9:18:06 AM

Subject:
E=nick@obxcompguy.com, CN=John Shaw, L=Manteo NC, S=North Carolina, C=US, Description=Q060IjEkExVuy25F

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0545

File PE Metadata
Compilation timestamp:
3/18/2012 12:38:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:sC6PZwSrDEPAnx9G8CRLucDpzcL/RLhcPAGobG+/:sC6GSrDEPYCRLucDpzctVcPc

Entry address:
0xB00C

Entry point:
68, C0, B6, 40, 00, E8, F0, FF, FF, FF, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 9C, CB, E6, 87, FD, 28, 34, 4D, 99, 5D, AE, CA, 55, D5, 25, EE, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 64, 53, 75, 70, 70, 6F, 72, 74, 00, 00, 00, 00, 00, 00, 00, 00, 00, EA, 3D, 01, F0, AD, 3D, 01, 00, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 28, 00, 00, 00, FA, 66, 93, 47, FA, 11, 96, 49, AA, 7B, 5E, 32, 41, C2, BE, C3, 01, 00, 00, 00, A0, 00, 00, 00...
 
[+]

Entropy:
5.8551

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
996 KB (1,019,904 bytes)

The file dsupport_old.exe has been discovered within the following program.

GoK Support  by Gigs of Knowledge
Publisher's description - “Some computer problems can be fixed without needing to bring your computer in to our office. We can access your computer from its current location through a secure internet connection from our office.”
www.gigsofknowledge.com
22% remove it
 
Powered by Should I Remove It?

Scan dsupport_old.exe - Powered by Reason Core Security