» spremove_x64.exe
Overview
Analysis
File Details

spremove_x64.exe

Remove Application

Sunplus Innovation Technology Inc.

File name:

spremove_x64.exe

Publisher:

Sunplus Innovation Technology Inc. (signed and verified)

Product:

Remove Application

Description:

Remove Driver Application

Version:

1, 0, 0, 6

MD5:

b8735e74fd8915b4ce2f8691f3ce0b54

SHA-1:

d56b71e5e3cf7f81ef432489a7d962f33f096bed

SHA-256:

d7e338323b0d7fab6dfb0e6bde1423a930abe94cf1bea12dbe314b83c32c9bb6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 2:31:59 PM UTC (today)

File size:

1.2 MB (1,206,136 bytes)

Product version:

1, 0, 0, 6

Original file name:

Remove.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Sunplus Innovation Technology Inc.

Authority:

VeriSign, Inc.

Valid from:

11/17/2010 7:00:00 AM

Valid to:

12/7/2011 6:59:59 AM

Subject:

CN=Sunplus Innovation Technology Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Sunplus Innovation Technology Inc., L=Hsinchu, S=Taiwan, C=TW

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

7601821575608B4FA6D6A57BC69A811D

File PE Metadata

Compilation timestamp:

11/19/2010 3:18:55 PM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

1536:+6lJuLwjTJGJ8dEEFsXAHRpxVIpdtRvHevx4useAQbYykxD:+6PGwjT6xGsXcpQPtRv+v6ZQbo

Entry address:

0x3190

Entry point:

48, 83, EC, 28, E8, 47, 57, 00, 00, 48, 83, C4, 28, E9, 0E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 48, 8D, 59, 1C, 48, 8B, F1, BF, 01, 01, 00, 00, 48, 8B, CB, 4C, 8B, C7, 33, D2, E8, 88, FA, FF, FF, 45, 33, DB, 4C, 8D, 05, 8E, 0E, 01, 00, 44, 89, 5E, 04, 44, 89, 5E, 08, 44, 89, 5E, 0C, 4C, 89, 5E, 10, 4C, 2B, C6, 44, 89, 5E, 18, 66, 66, 90, 66, 66, 66, 90, 41, 0F, B6, 04, 18, 48, 83, C3, 01, 48, 83, EF, 01, 88, 43, FF... 
[+]

Entropy:

0.7019

Code size:

53 KB (54,272 bytes)

Scan spremove_x64.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.