home

spoonuninstall.exe

Illustrate Limited

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program dBpoweramp Music Converter by Illustrate. The file has been seen being downloaded from www.dbpoweramp.com and multiple other hosts.
Publisher:
Illustrate Limited  (signed and verified)

MD5:
4e443d5054e24128c4495a6f8b689b69

SHA-1:
cc46fb166351a7d3256ad42a94ec7ec4671747cd

SHA-256:
deef9c6f45002eb2c8b3b16581acb4676b98114929af196f2418136a41bce6f4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 9:09:21 AM UTC  (today)

File size:
6.5 MB (6,814,952 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\syswow64\spoonuninstall.exe

Digital Signature
Signed by:
Illustrate Limited

Authority:
The USERTRUST Network

Valid from:
1/23/2009 1:00:00 AM

Valid to:
1/24/2012 12:59:59 AM

Subject:
CN=Illustrate Limited, O=Illustrate Limited, STREET=Belvedere, STREET=Balafurt Road, L=Port Erin, S=Isle of Man, PostalCode=IM9 6HP, C=GB

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
7CA1808BBBFB8A5AED634132F57F6AD8

File PE Metadata
Compilation timestamp:
5/26/2009 4:53:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:UhFbTTZ5lugwKodixoKSiwkocu8nIYpQ1O+GwvS/dG:UhFjZrukOiuOwkS8nIWUOsvq0

Entry address:
0xC838

Entry point:
55, 8B, EC, 6A, FF, 68, F8, 52, 41, 00, 68, 74, EC, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, E0, 50, 41, 00, 33, D2, 8A, D4, 89, 15, 60, E6, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 5C, E6, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 58, E6, 41, 00, C1, E8, 10, A3, 54, E6, 41, 00, 6A, 01, E8, 77, 2C, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 74, 0B, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
79.5 KB (81,408 bytes)

Program Uninstaller
Program name:
dBpoweramp Music Converter

Display publisher:
Illustrate

Display version:
Release 14

Uninstall string:
"C:\Windows\system32\SpoonUninstall.exe" <uninstall>C:\Windows\system32\SpoonUninstall-dBpoweramp Music Converter.dat


The file spoonuninstall.exe has been seen being distributed by the following 2 URLs.

http://www.dbpoweramp.com/.../dMC-R14-Ref-Trial.exe

http://s10250.chomikuj.pl/File.aspx?e=A5SH3XcdO1u5GiCEla2bAyMEhlFKqVyQ7cKSZ5397YWjb8H90ft9jJij4S45tTEjMJYV8X6JlcSmbF7xPWzTQHcY7DvttHEmQay86vI5IE2PyjXnxUcSb5ZlRXao6WazYD3W8bqNHm_nkmE6AG3jiA&pv=2

Scan spoonuninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.