home

spoonuninstall.exe

Illustrate Limited

This is the uninstaller utility registered in the Windows Control Panel for the program dBpoweramp CD Writer by Illustrate. The file has been seen being downloaded from www.dbpoweramp.com.
Publisher:
Illustrate Limited  (signed and verified)

MD5:
fb8993de379b6c4ae153c43eaad1b07d

SHA-1:
255119c50d0cf2e1d051507467110a4ee4b86f2b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 9:49:13 AM UTC  (today)

File size:
169.9 KB (173,944 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Windows\System32\spoonuninstall.exe

Digital Signature
Signed by:
Illustrate Limited

Authority:
The USERTRUST Network

Valid from:
1/2/2007 10:30:00 AM

Valid to:
1/2/2009 10:29:59 AM

Subject:
CN=Illustrate Limited, O=Illustrate Limited, STREET=Belvedere, STREET=Balafurt Road, L=Port Erin, S=Isle of Man, PostalCode=IM9 6HP, C=GB

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00BE97324DCC7DCA5F99344374FA8F3668

File PE Metadata
Compilation timestamp:
1/3/2007 9:40:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:GqXY1aXMPSgXeIyLvVD8Aao06lV+JbDwNDlEl47CPQA9V5raYi:loM2SPLvVDnDNktV5WYi

Entry address:
0xC5FE

Entry point:
55, 8B, EC, 6A, FF, 68, F8, 52, 41, 00, 68, 34, EA, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, DC, 50, 41, 00, 33, D2, 8A, D4, 89, 15, A0, E4, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 9C, E4, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 98, E4, 41, 00, C1, E8, 10, A3, 94, E4, 41, 00, 6A, 01, E8, 71, 2C, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 6E, 0B, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
6.8056

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
79 KB (80,896 bytes)

Program Uninstaller
Program name:
dBpoweramp CD Writer

Display publisher:
Illustrate

Display version:
Release 4

Uninstall string:
"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp CD Writer.dat


The file spoonuninstall.exe has been seen being distributed by the following URL.

http://www.dbpoweramp.com/.../dBpoweramp-CDWriter-LU-Service.exe

Scan spoonuninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.