Support_Doc.exe

Support_Doc

SparksGen Limited

The application Support_Doc.exe by SparksGen Limited has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a scheduled task under the Windows Task Scheduler triggered to automatically run when the computer boots.
Publisher:
SparksGen Limited  (signed and verified)

Product:
Support_Doc

Version:
1.0.0.0

MD5:
e64fccfb82b3a317e00cf2c7ad8230b8

SHA-1:
e33a548c40dd132df373d471ba482983a37b472a

SHA-256:
ed49b9a6ff29305b63974ee6cae4ae3846418096a2dd5e8e881a39982ff6aba2

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
1/13/2025 11:01:40 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.RegCleaner.Optional (L)
16.11.1.15

File size:
1.9 MB (1,995,448 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014

Original file name:
Support_Doc.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\support doc\support_doc.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
9/6/2015 5:00:00 PM

Valid to:
9/6/2017 4:59:59 PM

Subject:
CN=SparksGen Limited, O=SparksGen Limited, STREET=89 Urquhart Road, L=Aberdeen, S=Aberdeenshire, PostalCode=AB25 1BU, C=GB

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
533363EBA686E30282278C1492030BAA

File PE Metadata
Compilation timestamp:
10/17/2016 10:34:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:ZbFTue4/qQLDcrnFKa4MBulxqt5Xgafgt31C4yxp6Mtd7Cf6E3q69r10KMPG:Zz4yQLDEKxoJgafg/ExpHtK6P69r

Entry address:
0x1D611E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.7063

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.8 MB (1,917,440 bytes)

Scheduled Task
Task name:
Support Doc

Trigger:
Boot (Runs on boot)


Remove Support_Doc.exe - Powered by Reason Core Security