home

tsnp2uvc.exe

tsnp2uvc

Sonix Technology CO., LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘tsnp2uvc’.
Publisher:
Sonix Technology Co., Ltd.  (signed by Sonix Technology CO., LTD)

Product:
tsnp2uvc

Description:
tsnp2uvc Microsoft

Version:
1, 2, 3, 0

MD5:
3ac8332ce8d16582696387c32c711e6d

SHA-1:
1b02b2f7a82409b199a44975e571b5e7645a051d

SHA-256:
aa4f9ae473c344f8b59744784c1ee08cbf8a9471ddca2d9c3589c418ac466a2a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 7:20:29 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
W32/Sality.AT
7.11.30.172

File size:
250.3 KB (256,312 bytes)

Product version:
1, 2, 3, 0

Copyright:
Copyright (C) 2010

Original file name:
tsnp2uvc.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\common files\snp2uvc\tsnp2uvc.exe

Digital Signature
Signed by:
Sonix Technology CO., LTD

Authority:
VeriSign, Inc.

Valid from:
10/12/2012 8:00:00 AM

Valid to:
10/13/2015 7:59:59 AM

Subject:
CN="Sonix Technology CO., LTD", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Sonix Technology CO., LTD", L=Chupei, S=Hsinchu, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
322630E6FE89ADC3AA340330B1CD5441

File PE Metadata
Compilation timestamp:
5/4/2012 5:27:10 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:6EWhn8D4/aAsXPx+gTjMSJYGiowQgQCeRm7nJvF2kygQXSP5UznVyjoo8DJS9jnZ:BUn8Mw+gTjMktwFeRGnEpU9jnIto

Entry address:
0xFEB4

Entry point:
55, 8B, EC, 6A, FF, 68, 58, C5, 42, 00, 68, 1C, 3B, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, D4, 91, 42, 00, 33, D2, 8A, D4, 89, 15, A4, 73, 43, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, A0, 73, 43, 00, C1, E1, 08, 03, CA, 89, 0D, 9C, 73, 43, 00, C1, E8, 10, A3, 98, 73, 43, 00, 6A, 01, E8, C6, 3B, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, B8, 24, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
6.1675

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
160 KB (163,840 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
tsnp2uvc

Command:
C:\Program Files\common files\snp2uvc\tsnp2uvc.exe


Scan tsnp2uvc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.