» pstrip.exe
Overview
Analysis
File Details

pstrip.exe

EnTech Taiwan

File name:

pstrip.exe

Publisher:

EnTech Taiwan (signed and verified)

Description:

PowerStrip for Windows

Version:

4.10.03.75

MD5:

44f9c4cb1c25b26f7e5a1f9a945373f7

SHA-1:

04faf67308cec6479f95c001e15ac4bf3a8dc7b9

SHA-256:

c67d916412380de831070a381fd01b1d4d32848789622bc0825571a931eba733

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 7:56:56 AM UTC (today)

File size:

709.7 KB (726,776 bytes)

Original file name:

pstrip.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\powerstrip\pstrip.exe

Digital Signature

Signed by:

EnTech Taiwan

Authority:

GlobalSign nv-sa

Valid from:

9/25/2006 10:13:42 PM

Valid to:

9/25/2007 10:13:42 PM

Subject:

E=support@entechtaiwan.com, CN=EnTech Taiwan, O=EnTech Taiwan, C=TW

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000010DE51C0971

File PE Metadata

Compilation timestamp:

6/20/1992 7:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:sNQnujqeQFubFKKV6+JPaD9lr/3sZs069SDiqkY6b7MP+Dd2s5A:rkqeQ4b4p+JPIlL3sF69SDijJ7MP+h2p

Entry address:

0x1000

Entry point:

68, 01, F0, 61, 00, E8, 01, 00, 00, 00, C3, C3, 9A, 08, CC, F0, CD, 36, CE, FA, A8, C4, CC, DD, 52, 11, A7, 58, 8B, BA, AA, 01, D8, 53, 5E, E3, 1A, 0D, BC, 2A, 20, C8, 3B, 31, ED, 54, EF, 2B, A9, 01, 15, E2, EF, DA, D6, 92, 37, 64, 9E, 21, DF, 07, D0, F6, 84, D4, AA, D7, D7, 8D, 14, E8, 7F, DD, 66, 5E, EB, D0, D4, F8, CC, 98, 03, E6, 7F, 7D, FD, A0, E3, 6D, 35, D0, BE, A4, 7F, C4, 0B, 16, F2, 51, 8A, A1, 0D, E7, 90, FC, 8B, 26, A8, 6B, 4A, F3, 71, 11, 97, 53, 29, A2, C3, AC, 7C, 7E, 59, 1C, 13, 17, 91, D8... 
[+]

Entropy:

7.9174

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.5 MB (1,557,504 bytes)

Scan pstrip.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.