» stampremover.exe
Overview
Analysis
File Details

stampremover.exe

Photo Stamp Remover

SoftOrbits

File name:

stampremover.exe

Publisher:

SoftOrbits (signed and verified)

Product:

Photo Stamp Remover

Version:

2, 2, 0, 0

MD5:

0ad99f037e1457be6c3f2e0634406a0d

SHA-1:

c7279fd708515e2ae6f9ebc28560fb655873a123

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/25/2024 12:47:32 PM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/170.3

File size:

1.9 MB (2,037,048 bytes)

Product version:

2, 2, 0, 0

Original file name:

PhotoStampRemover.EXE

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\photo stamp remover\stampremover.exe

Digital Signature

Signed by:

SoftOrbits

Authority:

VeriSign, Inc.

Valid from:

1/15/2010 2:00:00 AM

Valid to:

1/16/2011 1:59:59 AM

Subject:

CN=SoftOrbits, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SoftOrbits, L=Smolensk, S=Smolenskaya, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

06344595FE375E5F9CE7E11C6A870479

File PE Metadata

Compilation timestamp:

1/18/2010 11:43:17 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:xywnLEa/h4vyU8dUvtaAXfvSqPN2+OeqAN52u2qVskEyqb:xvIaZ4V3NXnSFxeqAr2u24skE3

Entry address:

0x1000

Entry point:

68, 01, 10, 86, 00, E8, 01, 00, 00, 00, C3, C3, 76, C6, 8F, BC, 33, F0, E5, 71, B3, 16, 57, 5C, B5, 8B, 37, D9, 0A, D5, 4F, CB, 37, 38, 27, 1E, 86, B9, C7, D9, 66, 81, 3E, 63, 00, A2, EB, A2, 05, A1, 32, FC, CF, 5B, 30, 78, CD, BB, 51, CD, 0E, B6, 3F, FE, E9, CD, 2C, 2A, D6, BF, AF, 26, E0, 56, 09, 08, 95, 40, 38, 39, 40, 28, 9B, CF, F2, AB, 34, E0, F6, 99, F4, 4C, 83, DD, 70, 84, 4C, 01, A6, 92, 6C, 25, BA, B7, D2, 83, 5B, 0C, 36, BC, 28, 5E, 29, 13, 70, CC, 90, 90, 4C, D2, F1, 33, 57, 84, 75, 74, B7, A9... 
[+]

Entropy:

7.8212

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

3.1 MB (3,201,536 bytes)

Scan stampremover.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.