home

WiperSoft.exe

Romualdas Cukuras

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in.
Publisher:
WiperSoft  (signed by Romualdas Cukuras)

Product:
WiperSoft

Version:
1.1.1104.64

MD5:
299dfab16e1264f4e552475d7f6e628f

SHA-1:
a8f1a250c2166d4833c5b135715655c8cc55e34e

SHA-256:
600c590a2a192ea9c7e357e575504cfd70bcd75d5f1570a5ad22dd0d28a452f7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/15/2025 5:42:44 PM UTC  (today)

File size:
4.3 MB (4,512,624 bytes)

Product version:
1.1.1104.64

Copyright:
Copyright (C) 2013-2016.

Original file name:
WiperSoft.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\wipersoft\wipersoft.exe

Digital Signature
Signed by:
Romualdas Cukuras

Authority:
DigiCert Inc

Valid from:
1/18/2016 3:00:00 AM

Valid to:
1/31/2017 3:00:00 PM

Subject:
CN=Romualdas Cukuras, O=Romualdas Cukuras, L=Radikiai, S=Kaunas Apskritis, C=LT

Issuer:
CN=DigiCert SHA2 High Assurance Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0A522EBED0E19AE9841B0A7A2AF3FAE3

File PE Metadata
Compilation timestamp:
10/3/2016 6:00:40 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:fxw9PqdsvSZ/EA1LptV2lBgOp5bKjN2z2MHv+P9jNtT8E5bjBTt7nQkdtsfQLA/4:rVq5bKZ2zNcf04A7kAwQrw

Entry address:
0x258110

Entry point:
48, 83, EC, 28, E8, 57, 1D, 01, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, 40, 53, 48, 83, EC, 40, 83, 3D, 87, 2B, 19, 00, 00, 48, 63, D9, 75, 12, 48, 8B, 05, F3, AA, 17, 00, 0F, B7, 04, 58, 25, 03, 01, 00, 00, EB, 59, 48, 8D, 4C, 24, 20, 33, D2, E8, 44, EF, FF, FF, 48, 8B, 44, 24, 20, 83, B8, 0C, 01, 00, 00, 01, 7E, 16, 4C, 8D, 44, 24, 20, BA, 03, 01, 00, 00, 8B, CB, E8, 55, FB, 00, 00, 44, 8B, D8, EB, 13, 48, 8B, 80, 40, 01, 00, 00, 44, 0F, B7, 1C, 58, 41, 81, E3, 03, 01, 00, 00, 80, 7C, 24, 38, 00...
 
[+]

Entropy:
6.3638

Code size:
3 MB (3,116,544 bytes)

Scheduled Task
Task name:
WiperSoft Startup

Trigger:
Logon (Runs on logon)


Scan WiperSoft.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.