home

sdinstall64.exe

Versoworks Pty Ltd

This is installed with Speckie.
Publisher:
Versoworks Pty Ltd  (signed and verified)

MD5:
f545f639c520767039fee87dc5c7f714

SHA-1:
27fff423e24390b249dc54da8e2d1ff302cbe908

SHA-256:
73d3b8cc16c46cedbcd486526fe53d1aee261747b743d2d65689ad4df0964460

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:34:31 PM UTC  (today)

File size:
179.8 KB (184,064 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\roaming\speckie\bin64\sdinstall64.exe

Digital Signature
Signed by:
Versoworks Pty Ltd

Authority:
The USERTRUST Network

Valid from:
5/10/2010 8:00:00 PM

Valid to:
5/10/2012 7:59:59 PM

Subject:
CN=Versoworks Pty Ltd, O=Versoworks Pty Ltd, STREET=Suite 4, STREET=74 Prospect Rd, L=Prospect, S=Adelaide, PostalCode=5082, C=AU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
5FDED22AD4E32541DCEABFE628C8BE45

File PE Metadata
Compilation timestamp:
9/21/2011 4:33:41 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:b+D9kjuRumjCtA3plFFVDIcOsYYXuyk1TBa+pJYO9aFiRocU:aD9kjSuh23dOsYYeX1TDuOT+T

Entry address:
0x8330

Entry point:
48, 83, EC, 28, E8, 8B, 04, 00, 00, 48, 83, C4, 28, E9, 26, FD, FF, FF, FF, 25, F0, 0E, 00, 00, 40, 53, 48, 83, EC, 20, 48, 8B, D9, 48, 8B, 0D, 90, 53, 00, 00, FF, 15, 9A, 0D, 00, 00, 48, 89, 44, 24, 38, 48, 83, F8, FF, 75, 0B, 48, 8B, CB, FF, 15, A6, 0E, 00, 00, EB, 7E, B9, 08, 00, 00, 00, E8, 06, 05, 00, 00, 90, 48, 8B, 0D, 62, 53, 00, 00, FF, 15, 6C, 0D, 00, 00, 48, 89, 44, 24, 38, 48, 8B, 0D, 48, 53, 00, 00, FF, 15, 5A, 0D, 00, 00, 48, 89, 44, 24, 40, 48, 8B, CB, FF, 15, 54, 0D, 00, 00, 48, 8B, C8, 4C...
 
[+]

Entropy:
5.2344

Code size:
31 KB (31,744 bytes)

The file sdinstall64.exe has been discovered within the following program.

Speckie  by Versoworks
Publisher's description - “Speckie is the first and only dedicated, real-time spell check solution for Internet Explorer.”
www.speckie.com
23% remove it
 
Powered by Should I Remove It?

Scan sdinstall64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.