» pstrip.exe
Overview
Analysis
File Details

pstrip.exe

EnTech Taiwan

File name:

pstrip.exe

Publisher:

EnTech Taiwan (signed and verified)

Description:

PowerStrip for Windows

Version:

4.10.03.77

MD5:

b32bc058ab2ed1d9475c5826b15937d0

SHA-1:

ea1ba1ce73bbea491904ccc03b29bcd347274fa9

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/25/2024 4:12:05 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/17411

Quick Heal

(Suspicious) - DNAScan

5.14.11.00

File size:

780.2 KB (798,968 bytes)

Original file name:

pstrip.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\powerstrip\pstrip.exe

Digital Signature

Signed by:

EnTech Taiwan

Authority:

GlobalSign nv-sa

Valid from:

9/24/2007 2:13:17 PM

Valid to:

9/25/2008 3:13:42 PM

Subject:

E=support@entechtaiwan.com, CN=EnTech Taiwan, O=EnTech Taiwan, C=TW

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

01000000000115376F8869

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:2zSXipolL0vQJsxK6QdDPD/QC+PMffnyD/7JdzkhFhWeHXI89+aEbIr/b6:2zSXiMkQ6NcDPLXf+kfhWe3obub6

Entry address:

0x1000

Entry point:

68, 01, 20, 62, 00, E8, 01, 00, 00, 00, C3, C3, E3, F0, A0, EE, 71, B4, B6, 20, 2B, 58, EC, 55, ED, 92, 8F, 3D, 9C, B6, 38, D0, C7, B9, 51, DB, C9, 5A, 87, 26, 72, 65, B6, B4, 2E, F1, 31, C3, 4F, 40, 3C, FD, 46, 0A, AD, 15, 25, 27, 27, 5A, 32, C7, 9B, C4, 3D, 72, FC, D6, 39, 86, 50, 64, F5, 9E, 7A, 48, 49, FF, 1E, 12, 3B, 46, F3, C9, 4D, A0, 2E, 78, 14, 37, 1F, D2, 52, 6C, E2, 5A, 29, 8B, 87, 22, 1E, 0F, CE, FD, 03, 9E, 4D, 1D, 84, 4F, 64, 52, 58, 93, 46, 16, A4, 87, 4A, 0F, 19, 15, 09, F8, 08, 15, E6, AD... 
[+]

Entropy:

7.9248

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.5 MB (1,570,304 bytes)

Scan pstrip.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.