home

rspund32.sys

RspUndex

Daniel Terhell

It runs as a Windows file system device driver named “rspUndeluxe”. This is installed with Undeluxe 1.03.
Publisher:
Resplendence Software Projects Sp.  (signed by Daniel Terhell)

Product:
RspUndex

Description:
Resplendence Undelete Minifilter

Version:
1.00 built by: WinDDK

MD5:
9b89029a4f4e4cd122ea1f15d281f921

SHA-1:
1bbaec5df6f0b59676b54e20c9190fce151f797e

SHA-256:
25f5fee821a9bd5292c7094cf160323b1b89b6b8dfa8ad3d1c16498d9b474ec0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:41:46 AM UTC  (today)

File size:
22.6 KB (23,096 bytes)

Product version:
1.00

Copyright:
Copyright (c)1997-2007 Resplendence Software Projects Sp.

Original file name:
undelete.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\rspund32.sys

Digital Signature
Signed by:
Daniel Terhell

Authority:
GlobalSign nv-sa

Valid from:
7/9/2008 7:15:45 PM

Valid to:
7/9/2011 7:15:45 PM

Subject:
E=daniel@resplendence.com, CN=Daniel Terhell, C=IT

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000011B0A1BE928

File PE Metadata
Compilation timestamp:
8/23/2010 12:12:04 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
384:I3v1EPGrZF+bOK+1Qh4Oxnx8zISdWYJLFReHNcdUb+iB:If1O+ZVCmOxx8zZdPLMiiB

Entry address:
0x60E2

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, E9, 0E, C9, FF, FF, CC, CC, 90, 61, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 4C, 64, 00, 00, 60, 40, 00, 00, 30, 61, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 90, 66, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 58, 66, 00, 00, 3A, 66, 00, 00, 1E, 66, 00, 00, 0A, 66, 00, 00, F8, 65, 00, 00, DC, 65, 00, 00, BE, 65, 00, 00, A4, 65, 00, 00, 84, 65, 00, 00, 6C, 65, 00, 00, 50, 65, 00, 00, 3A, 65, 00, 00, 20, 65...
 
[+]

Entropy:
6.5181

Code size:
11 KB (11,264 bytes)

Driver
Display name:
rspUndeluxe

Description:
rspUndeluxe filter

Type:
File system 'filter' driver (FileSystemDriver)

Group:
FSFilter Undelete

Depends on:
FltMgr


The file rspund32.sys has been discovered within the following program.

Undeluxe 1.03  by Resplendence Software Projects Sp.
Publisher's description - “Undeluxe is an advanced file protection and recovery utility for Windows. This program could be described as an undelete utility. It works similar to the standard recycle bin which is part of Windows Explorer but will catch files deleted by any application.”
www.resplendence.com
9% remove it
 
Powered by Should I Remove It?

Scan rspund32.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.