home

winsweeper.exe

Solvusoft Corporation

Publisher:
Solvusoft Corporation  (signed and verified)

MD5:
7d6783fe87305ee9b5a6af71b2553da4

SHA-1:
31aa234beb10d45e979e1c05b8e3f436541b795d

SHA-256:
7eb63a2f1e5b0eb9b4b443ac75727ff287adcd7edb11cda2794fd75116be1444

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/2/2024 6:59:16 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Suspicious
17682

File size:
1.3 MB (1,324,408 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\winsweeper\winsweeper.exe

Digital Signature
Signed by:
Solvusoft Corporation

Authority:
VeriSign, Inc.

Valid from:
7/14/2011 8:00:00 PM

Valid to:
7/13/2013 7:59:59 PM

Subject:
CN=Solvusoft Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Solvusoft Corporation, L=Las Vegas, S=Nevada, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4D1E69142E0E559ACB79A2C3EC3AA479

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Z3aIoAwEaM9aMYvAxyqLeA5e8GL0DtDhTTQLaK1hzI:ZzYgYvGXiWTTlf

Entry address:
0xDF440

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 28, F0, 4D, 00, E8, 57, 74, F2, FF, 8B, 1D, D8, 83, 4E, 00, 8B, 0B, B2, 01, A1, 38, EE, 4D, 00, E8, DF, 3D, F9, FF, 8B, 15, 0C, 83, 4E, 00, 89, 02, A1, 0C, 83, 4E, 00, 8B, 00, E8, 23, 81, F9, FF, 8B, 03, E8, 1C, B6, F9, FF, 8B, 03, C6, 40, 5B, 00, A1, 0C, 83, 4E, 00, 8B, 00, 8B, 10, FF, 92, 88, 00, 00, 00, 8B, 03, BA, 40, F5, 4D, 00, E8, F3, B1, F9, FF, 8B, 0D, A8, 80, 4E, 00, 8B, 03, 8B, 15, 78, A0, 4D, 00, E8, 00, B6, F9, FF, 8B, 0D, 34, 83, 4E, 00, 8B, 03, 8B, 15, EC, 66...
 
[+]

Entropy:
6.9160

Developed / compiled with:
Microsoft Visual C++

Code size:
889.5 KB (910,848 bytes)

Scan winsweeper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.